Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (6m)  pkgsrc-2024Q1 (9d)  pkgsrc-2023Q4 (55d)  pkgsrc-2023Q2 (88d)  pkgsrc-2023Q3 (167d) 

2024-05-26 13:55:52 UTC Now

2019-09-06 14:52:39 UTC MAIN commitmail json YAML

PR/54520: greywolf, our TIOCREMOTE seems to be broken, disable it.
Also make the openpty use NetBSD only (Jonathan Perkin)

(christos)

2019-09-06 14:51:42 UTC MAIN commitmail json YAML

PR/54528: greywolf: fix fortify issue with stack overwrites.

(christos)

2019-09-06 14:04:37 UTC MAIN commitmail json YAML

talloc: switch master site to https due to unconditional redirect

XXX the master site still responds with some RFC8297 code that ftp(1) does
not understand ...

(tnn)

2019-09-06 13:46:03 UTC MAIN commitmail json YAML

Updated devel/py-virtualenv, devel/py-libmc

(adam)

2019-09-06 13:45:36 UTC MAIN commitmail json YAML

py-libmc: updated to 1.6.1

1.6.1:
Boomerino 1.6.1

(adam)

2019-09-06 13:42:25 UTC MAIN commitmail json YAML

py-virtualenv: updated to 16.7.5

v16.7.5:
Bugfixes
- upgrade pip from 19.2.2 to 19.2.3

v16.7.4:
Bugfixes
- * fix powershell activation when sourced
- * upgrade wheel from 0.33.4 to 0.33.6 and setuptools from 41.1.0 to 41.2.0

v16.7.3:
Bugfixes
- upgrade pip from 19.1.1 to 19.2.2 and setuptools from 41.0.1 to 41.1.0

v16.7.2:
Bugfixes
- fix regression - sh activation script not working under sh (only bash)

v16.7.1:
Features
- pip bumped to 19.2.1

v16.7.0:
Features
- activate.ps1 syntax and style updated to follow PSStyleAnalyzer rules
- Allow creating virtual environments for 3.xy.
- Report error when running activate scripts directly, instead of sourcing. By reporting an error instead of running silently, the user get immediate feedback that the script was not used correctly. Only Bash and PowerShell are supported for now.
- * add pip 19.2 (19.1.1 is kept to still support python 3.4 dropped by latest pip)

(adam)

2019-09-06 13:37:35 UTC MAIN commitmail json YAML

Updated textproc/py-dominate, time/py-arrow

(adam)

2019-09-06 13:37:14 UTC MAIN commitmail json YAML

py-arrow: updated to 0.14.7

0.14.7

- [CHANGE] `ArrowParseWarning` will no longer be printed on every call to `arrow.get()` with a datetime string. The purpose of the warning was to start a conversation about the upcoming 0.15.0 changes and we appreciate all the feedback that the community has given us!

0.14.6

- [NEW] Added support for `week` granularity in `Arrow.humanize()`. For example, `arrow.utcnow().shift(weeks=-1).humanize(granularity="week")` outputs "a week ago". This change introduced two new untranslated words, `week` and `weeks`, to all locale dictionaries, so locale contributions are welcome!
- [NEW] Fully translated the Brazilian Portugese locale.
- [CHANGE] Updated the Macedonian locale to inherit from a Slavic base.
- [FIX] Fixed a bug that caused `arrow.get()` to ignore tzinfo arguments of type string (e.g. `arrow.get(tzinfo="Europe/Paris")`).
- [FIX] Fixed a bug that occurred when `arrow.Arrow()` was instantiated with a `pytz` tzinfo object.
- [FIX] Fixed a bug that caused Arrow to fail when passed a sub-second token, that when rounded, had a value greater than 999999 (e.g. `arrow.get("2015-01-12T01:13:15.9999995")`). Arrow should now accurately propagate the rounding for large sub-second tokens.

(adam)

2019-09-06 13:34:21 UTC MAIN commitmail json YAML

2019-09-06 13:21:52 UTC MAIN commitmail json YAML

Updated mail/exim-html

(adam)

2019-09-06 13:21:35 UTC MAIN commitmail json YAML

2019-09-06 12:58:11 UTC MAIN commitmail json YAML

doc: Updated mail/exim to 4.92.2

(wiedi)

2019-09-06 12:57:33 UTC MAIN commitmail json YAML

exim: update to 4.92.2

Exim version 4.92.2
-------------------

HS/01 Handle trailing backslash gracefully. (CVE-2019-15846)

(wiedi)

2019-09-06 10:01:44 UTC MAIN commitmail json YAML

2019-09-06 09:58:36 UTC MAIN commitmail json YAML

doc: Updated mail/postgrey to 1.36nb5

(jperkin)

2019-09-06 09:58:26 UTC MAIN commitmail json YAML

postgrey: Backport dedupe fix.

Requested in joyent/pkgsrc#214.  We can't yet upgrade to postgrey 1.37 as there
is no working distribution patch for the postgrey-targrey option, hence the
backport rather than upgrade.  Bump PKGREVISION.

(jperkin)

2019-09-06 09:42:56 UTC MAIN commitmail json YAML

tor: Provide SMF manifest.

Submitted by kayront in joyent/pkgsrc#218.

(jperkin)

2019-09-06 09:22:49 UTC MAIN commitmail json YAML

clamav: Disable mapfile on SunOS.

There are a couple of functions that aren't defined, and this is easier than
patching (and doesn't impact other OS).

(jperkin)

2019-09-06 09:10:59 UTC MAIN commitmail json YAML

doc: Updated databases/couchdb to 2.3.1

(jperkin)

2019-09-06 09:10:48 UTC MAIN commitmail json YAML

couchdb: Upgrade to 2.3.1.  Now works with current Erlang.

Summary of changes between 2.1.x and 2.3.x are listed below.  For a more
readable version please see the following URLs:

  http://docs.couchdb.org/en/latest/whatsnew/2.3.html
  http://docs.couchdb.org/en/latest/whatsnew/2.2.html
  http://docs.couchdb.org/en/latest/whatsnew/2.1.html

2.3.x Branch Upgrade Notes

#1602: To improve security, there have been major changes in the configuration
of query servers, SSL support, and HTTP global handlers:

Query servers are NO LONGER DEFINED in the .ini files, and can no longer be
altered at run-time.

The JavaScript and CoffeeScript query servers continue to be enabled by
default. Setup differences have been moved from default.ini to the couchdb and
couchdb.cmd start scripts respectively.

Additional query servers can now be configured using environment variables:

export COUCHDB_QUERY_SERVER_PYTHON="/path/to/python/query/server.py with args"
couchdb

where the last segment in the environment variable (_PYTHON) matches the usual
lowercase(!) query language in the design doc language field (here, python.)

Multiple query servers can be configured by using more environment variables.

You can also override the default servers if you need to set command- line
options (such as couchjs stack size):

export COUCHDB_QUERY_SERVER_JAVASCRIPT="/path/to/couchjs /path/to/main.js -S <STACKSIZE>"
couchdb

The mango query server continues to be enabled by default. The Erlang query
server continues to be disabled by default. This change adds a
[native_query_servers] enable_erlang_query_server = BOOL setting (defaults to
false) to enable the Erlang query server.

If the legacy configuration for enabling the query server is detected, that is
counted as a true setting as well, so existing configurations continue to work
just fine.

SSL Support
Enabling SSL support in the ini file is now easier:

[ssl]
enable = true

If the legacy httpsd configuration is found in your ini file, this will still
enable SSL support, so existing configurations do not need to be changed.

HTTP global handlers
These are no longer defined in the default.ini file, but have been moved to the
couch.app context. If you need to customize your handlers, you can modify the
app context using a couchdb.config file as usual.

#1602: Also to improve security, the deprecated os_daemons and
couch_httpd_proxy functionality has been completely removed ahead of the
planned CouchDB 3.0 release. We recommend the use of OS-level daemons such as
runit, sysvinit, systemd, upstart, etc. to launch and maintain OS daemons
instead, and the use of a reverse proxy server in front of CouchDB (such as
haproxy) to proxy access to other services or domains alongside CouchDB.

#1543: The node-local (default port 5986) /_restart endpoint has been replaced
by the clustered (default port 5984) endpoint /_node/$node/_restart and
/_node/_local/_restart endpoints. The node-local endpoint has been removed.

#1764: All python scripts shipped with CouchDB, including couchup and the
dev/run development cluster script, now specify and require Python 3.x.

#1396: CouchDB is now compatible with Erlang 21.x.

#1680: The embedded version of rebar used to build CouchDB has been updated to
the last version of rebar2 available. This assists in building on non-x86
platforms.

#1857: Refuse building with known bad versions of Erlang.

2.2.x Branch Upgrade Notes

The minimum supported version of Erlang is now 17, not R16B03. Support for
Erlang 21 is still ongoing and will be provided in a future release.

The CouchDB replication client can now use the /_session endpoint when
authenticating against remote CouchDB instances, improving performance since
re-authorization does not have to be performed with every request. Because of
this performance improvement, it is recommended to increase the PBKDF2 work
factor beyond the default 10 to a modern default such as 10000. This is done
via the local ini file setting [couch_httpd_auth] iterations = 10000.

Do not do this if an older version of CouchDB is replicating TO this instance
or cluster regularly, since CouchDB < 2.2.0 must perform authentication on
every request and replication performance will suffer.

A future version will make this increased number of iterations a default.

#820, #1032: Multiple queries can now be made at the POST
/{db}/_all_docs/queries, POST /{db}/_design_docs/queries and POST
/{db}/_local_docs/queries endpoints. Also, a new endpoint POST
/{db}/_design/{ddoc}/_view/{view}/queries has been introduced to replace the
?queries parameter formerly provided for making multiple queries to a view. The
old ?queries parameter is now deprecated and will be removed in a future
release of CouchDB.

The maximum http request limit, which had been lowered in 2.1.0, has been
re-raised to a 4GB limit for now. (#1446). Ongoing discussion about the path
forward for future releases is available in #1200 and #1253.

#1118: The least recently used (LRU) cache of databases is now only updated on
database write, not read. This has lead to significant performance enhancements
on very busy clusters. To restore the previous behaviour, your local ini file
can contain the block [couchdb] update_lru_on_read = true.

#1153: The CouchDB replicator can now make use of the /_session endpoint rather
than relying entirely on HTTP basic authentication headers. This can greatly
improve replication performance. We encourage you to upgrade any nodes or
clusters that regularly act as replication clients to use this new feature,
which is enabled by default (#1462).

#1283: The [couchdb] enable_database_recovery feature, which only soft-deletes
databases in response to a DELETE /{db} call, is now documented in default.ini.

#1330: CouchDB externals and OS daemons are now officially deprecated and no
longer documented. Support for these features will be completely removed in a
future release of CouchDB (probably 3.0.0).

#1436: CouchDB proxy authentication now uses a proper chttpd_auth module,
simplifying configuration in local ini files. While this is not a backward-
compatible breaking change, it is best to update your local ini files to
reference the new {chttpd_auth, proxy_authentication_handler} handler rather
than the couch_httpd_auth version, as couch_httpd is in the process of being
deprecated completely.

#1476, #1477: The obsolete update_notification feature, which was replaced by
/{db}/_changes feeds c. CouchDB 1.2, has been completely removed. This feature
never worked in 2.0 for databases, only for shards, making it effectively
useless.

(jperkin)

2019-09-06 09:03:00 UTC MAIN commitmail json YAML

Add legacymodsz option to allow short (insecure) RSA keys

This may be required in order to access old, non-upgradable, devices for
which modulus size is less than 1024 bits (frequently 768 bits).

(manu)

2019-09-06 09:00:35 UTC MAIN commitmail json YAML

mk: Skip CTF_FILES_SKIP before anything else.

(jperkin)

2019-09-06 08:51:57 UTC MAIN commitmail json YAML

Revbump due to XmHTML update

(nros)

2019-09-06 08:47:29 UTC MAIN commitmail json YAML

doc: Updated x11/XmHTML to 1.1.10

(nros)

2019-09-06 08:46:26 UTC MAIN commitmail json YAML

Updated xmhtml to version 1.1.0

This version has a real master site
and homepage at sourceforge.
Includes updates for buildling with
the latest png api and fixes to
debug.c (patch-ai).
Removed the patches for this.
Removed patch-ab, patch-ac and patch-ae
because we only build the lib.

Other updates upstream:
Support for utf-8 text and xft.
Function XmHTMLScrollToYPos added.
Fixes for crashes and various memory
leaks.

(nros)

2019-09-06 06:04:38 UTC MAIN commitmail json YAML

Updated databases/py-ldap3, devel/py-xopen

(adam)

2019-09-06 06:04:17 UTC MAIN commitmail json YAML

py-xopen: updated to 0.8.2

v0.8.2
Skip newly introduced test on Python 2.7
io.TextIOWrapper(PipedGZipReader(...)) does not work, which is needed
for the test.

(adam)

2019-09-06 06:02:54 UTC MAIN commitmail json YAML

py-ldap3: updated to 2.6.1

2.6.1:
- tested against pyasn1 0.4.7
- added eDirectory 9.1.4 (EDIR_9_1_4) to offline schemas
- added json converter for timedelta
- strip parameter defaults to False in utils.dn.parse_dn()
- escaped space is allowed as trailing character in attribute_value in utils.dn.parse_dn()
- connection.extend.standard.paged_search doesn't raise exceptions when raise_exceptions is False
- the Search operation returns the entries fetched by the server when size or time limits are reached even if raise_exceptions is set to True
- Handle the minimum value that can be stored in an Int64 in format_ad_timedelta
- EntryState: `entry_raw_attributes` is populated instead of `raw_attributes`
- Removed restriction to perform rename and move simultaneously in modify_dn
- fixed checking for hexdigits in parse_dn
- fixed escaping when multiple backslashes are present in parse_dn
- fixed multiple NoneType exceptions in entry_to_json()
- allowing Microsoft specific syntax (<WKGUID=xxx>) for WellKnownObjects in DN
- connection.extend.standard.paged_search() now follows referrals when auto_referrals=True
- fixed a bug in decoding replica list in connection.extend.novell.list_replicas()
- fixed a bug when adding duplicate alias in CaseInsensitiveWithAliasDict()
- added ignore_duplicates=False in set_aliases in CaseInsensitiveWithAliasDict() to ignore a duplicate alias (either in aliases or in keys)
- Schema info now uses CaseInsensitiveWithAlias dict as default so object and attributes can also be referentiated with OID
- added block mode and timeout parameters to next() method of persistent_search
- when using the pyasn1 decoder raw_dn is not returned as a pyasn1 object anymore but as bytes
- Return offset timezone aware datetime for max AD timestamp

(adam)

2019-09-06 03:52:55 UTC MAIN commitmail json YAML

NetBSD 9 or later has bsdtar as /bin/tar

(ryoon)

2019-09-06 03:03:20 UTC MAIN commitmail json YAML

Updated www/firefox-l10n to 69.0

(ryoon)

2019-09-06 03:02:36 UTC MAIN commitmail json YAML

2019-09-06 03:01:32 UTC MAIN commitmail json YAML

Updated www/firefox to 69.0

(ryoon)

2019-09-06 03:00:24 UTC MAIN commitmail json YAML

Update to 69.0

* Use clang to compile all files. Mix of gcc and clang causes some errors in
  Rust c++ command invocation (C++ header mismatches).

Changelog:
New

    Enhanced Tracking Protection (ETP) rolls out stronger privacy protections:
        The default standard setting for this feature now blocks third-party tracking cookies and cryptominers.
        The optional strict setting blocks fingerprinters as well as the items blocked in the standard setting.

    The Block Autoplay feature is enhanced to give users the option to block any video that automatically starts playing, not just those that automatically play with sound.

    For our users in the US or using the en-US browser, we are shipping a new 窶廸ew Tab窶� page experience that connects you to the best of Pocket窶冱 content.

    Support for the Web Authentication HmacSecret extension via Windows Hello now comes with this release, for versions of Windows 10 May 2019 or newer, enabling more passwordless experiences on the web.

    Support for receiving multiple video codecs with this release makes it easier for WebRTC conferencing services to mix video from different clients.

    For our users on Windows 10, you窶冤l see performance and UI improvements:
        Firefox will give Windows hints to appropriately set content process priority levels, meaning more processor time spent on the tasks you're actively working on, and less processor time spent on things in the background (with the exception of video and audio playback).
        For our existing Windows 10 users, you can easily find and launch Firefox from a shortcut on the Win10 taskbar.

    For our users on macOS, battery life and download UI are both improved:
        macOS users on dual-graphics-card machines (like MacBook Pro) will switch back to the low-power GPU more aggressively, saving battery life.
        Finder on macOS now displays download progress for files being downloaded.

    JIT support comes to ARM64 for improved performance of our JavaScript Optimizing JIT compiler.

Fixed

    Various security fixes

Changed

    As previously announced in the Plugin Roadmap for Firefox, the "Always Activate" option for Flash plugin content has been removed. Firefox will now always ask for user permission before activating Flash content on a website.

    With the deprecation of Adobe Flash Player, there is no longer a need to identify users on 32-bit version of the Firefox browser on 64-bit version operating systems reducing user agent fingerprinting factors providing greater level of privacy to our users as well as improving the experience of downloading other apps.

    Firefox no longer loads userChrome.css or userContent.css by default improving start-up performance. Users who wish to customize Firefox by using these files can set the toolkit.legacyUserProfileCustomizations.stylesheets preference to true to restore this ability.

Enterprise

    For Enterprise system administrators that manage macOS computers, we begin shipping a Mozilla signed PKG installer to simplify your deployments.

Developer

    For our mobile web developers, we have migrated remote debugging from the old WebIDE into a re-designed about:debugging, making debugging GeckoView on remote devices via USB rock solid.

    The network panel will now show blocked resources to allow developers to best understand the impact of content blocking and ad blocking extensions given our ongoing expansion of Enhanced Tracking Protection to all users with this release.

    The new event listener breakpoint feature allows developers to pause on a host of different event types, whether it be related to animations, DOM, media, mouse, touch, worker, and many other event types.

    Firefox Developer Tools now offers an audit for the presence of text alternatives for non-text content, the a11y panel checks toolbar has been augmented to better help developers adhere to WCAG Guideline 1.1.

Security fixes:
#CVE-2019-11751: Malicious code execution through command line parameters
#CVE-2019-11746: Use-after-free while manipulating video
#CVE-2019-11744: XSS by breaking out of title and textarea elements using innerHTML
#CVE-2019-11742: Same-origin policy violation with SVG filters and canvas to steal cross-origin images
#CVE-2019-11736: File manipulation and privilege escalation in Mozilla Maintenance Service
#CVE-2019-11753: Privilege escalation with Mozilla Maintenance Service in custom Firefox installation location
#CVE-2019-11752: Use-after-free while extracting a key value in IndexedDB
#CVE-2019-9812: Sandbox escape through Firefox Sync
#CVE-2019-11741: Isolate addons.mozilla.org and accounts.firefox.com
#CVE-2019-11743: Cross-origin access to unload event attributes
#CVE-2019-11749: Camera information available without prompting using getUserMedia
#CVE-2019-5849: Out-of-bounds read in Skia
#CVE-2019-11750: Type confusion in Spidermonkey
#CVE-2019-11737: Content security policy directives ignore port and path if host is a wildcard
#CVE-2019-11738: Content security policy bypass through hash-based sources in directives
#CVE-2019-11747: 'Forget about this site' removes sites from pre-loaded HSTS list
#CVE-2019-11734: Memory safety bugs fixed in Firefox 69
#CVE-2019-11735: Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
#CVE-2019-11740: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, and Firefox ESR 60.9

(ryoon)

2019-09-06 02:55:18 UTC MAIN commitmail json YAML

Updated devel/nss to 3.46

(ryoon)

2019-09-06 02:54:47 UTC MAIN commitmail json YAML

Update to 3.46

Changelog:
Notable Changes:
* The following CA certificates were Removed:
  - 1574670 - Remove expired Class 2 Primary root certificate
  - 1574670 - Remove expired UTN-USERFirst-Client root certificat
  - 1574670 - Remove expired Deutsche Telekom Root CA 2 root certificate
  - 1566569 - Remove Swisscom Root CA 2 root certificate
* Significant improvements to AES-GCM performance on ARM

Bugs fixed in NSS 3.46:

* 1572164 - Don't unnecessarily free session in NSC_WrapKey
* 1574220 - Improve controls after errors in tstcln, selfserv and vfyserv
cmds
* 1550636 - Upgrade SQLite in NSS to a 2019 version
* 1572593 - Reset advertised extensions in ssl_ConstructExtensions
* 1415118 - NSS build with ./build.sh --enable-libpkix fails
* 1539788 - Add length checks for cryptographic primitives
* 1542077 - mp_set_ulong and mp_set_int should return errors on bad values
* 1572791 - Read out-of-bounds in DER_DecodeTimeChoice_Util from
SSLExp_DelegateCredential
* 1560593 - Cleanup.sh script does not set error exit code for tests that
"Failed with core"
* 1566601 - Add Wycheproof test vectors for AES-KW
* 1571316 - curve25519_32.c:280: undefined reference to `PR_Assert' when
building NSS 3.45 on armhf-linux
* 1516593 - Client to generate new random during renegotiation
* 1563258 - fips.sh fails due to non-existent "resp" directories
* 1561598 - Remove -Wmaybe-uninitialized warning in pqg.c
* 1560806 - Increase softoken password max size to 500 characters
* 1568776 - Output paths relative to repository in NSS coverity
* 1453408 - modutil -changepw fails in FIPS mode if password is an empty
string
* 1564727 - Use a PSS SPKI when possible for delegated credentials
* 1493916 - fix ppc64 inline assembler for clang
* 1561588 - Remove -Wmaybe-uninitialized warning in p7env.c
* 1561548 - Remove -Wmaybe-uninitialized warning in
pkix_pl_ldapdefaultclient.c
* 1512605 - Incorrect alert description after unencrypted Finished msg
* 1564715 - Read /proc/cpuinfo when AT_HWCAP2 returns 0
* 1532194 - Remove or fix -DDEBUG_$USER from make builds
* 1565577 - Visual Studio's cl.exe -? hangs on Windows x64 when building nss
since changeset 9162c654d06915f0f15948fbf67d4103a229226f
* 1564875 - Improve rebuilding with build.sh
* 1565243 - Support TC_OWNER without email address in nss taskgraph
* 1563778 - Increase maxRunTime on Mac taskcluster Tools, SSL tests
* 1561591 - Remove -Wmaybe-uninitialized warning in tstclnt.c
* 1561587 - Remove -Wmaybe-uninitialized warning in lgattr.c
* 1561558 - Remove -Wmaybe-uninitialized warning in httpserv.c
* 1561556 - Remove -Wmaybe-uninitialized warning in tls13esni.c
* 1561332 - ec.c:28 warning: comparison of integers of different signs: 'int'
and 'unsigned long'
* 1564714 - Print certutil commands during setup
* 1565013 - HACL image builder times out while fetching gpg key
* 1563786 - Update hacl-star docker image to pull specific commit
* 1559012 - Improve GCM perfomance using PMULL2
* 1528666 - Correct resumption validation checks
* 1568803 - More tests for client certificate authentication
* 1564284 - Support profile mobility across Windows and Linux
* 1573942 - Gtest for pkcs11.txt with different breaking line formats
* 1575968 - Add strsclnt option to enforce the use of either IPv4 or IPv6
* 1549847 - Fix NSS builds on iOS
* 1485533 - Enable NSS_SSL_TESTS on taskcluster

(ryoon)

2019-09-06 02:53:54 UTC MAIN commitmail json YAML

Updated devel/cbindgen to 0.9.1

(ryoon)

2019-09-06 02:53:19 UTC MAIN commitmail json YAML

Update to 0.9.1

Changelog:
## 0.9.1
    * Various improvements to comment output. https://github.com/eqrion/cbindgen/pull/370 / https://github.com/eqrion/cbindgen/pull/375.
    * Fixed expand when ran from build.rs. https://github.com/eqrion/cbindgen/pull/371
    * More debugging output for expansion. https://github.com/eqrion/cbindgen/pull/383
    * New option to add a default private constructor in C++ tagged enums. https://github.com/eqrion/cbindgen/pull/377
    * Syn and related dependencies updated to 1.0. https://github.com/eqrion/cbindgen/pull/379

(ryoon)

2019-09-05 18:55:19 UTC MAIN commitmail json YAML

doc: Updated devel/lua-bitlib to 5.3.0nb1

(maya)

2019-09-05 18:54:37 UTC MAIN commitmail json YAML

lua-bitlib: fix build on OS X by using libtool.

it will use the portable variants of arguments for us.
bump PKGREVISION.

From clement bouvier in PR pkg/54501

(maya)

2019-09-05 16:09:09 UTC MAIN commitmail json YAML

Newer lime2-emmc boards have a SPI NOR flash as they can't boot directly from
the emmc. So add CONFIG_SPL_SPI_SUNXI=yes to the
A20-OLinuXino-Lime2-eMMC_defconfig file.
Bump PKGREVISION for u-boot-a20-olinuxino-lime2-emmc.

(bouyer)

2019-09-05 15:24:00 UTC MAIN commitmail json YAML

Abandon maintainership of teamspeak-client - apologies

(abs)

2019-09-05 13:43:42 UTC MAIN commitmail json YAML

doc: Updated www/gitea to 1.9.2

(nia)

2019-09-05 13:43:33 UTC MAIN commitmail json YAML

gitea: Update to 1.9.2.

* BUGFIXES
  * Fix wrong sender when send slack webhook (#7918) (#7924)
  * Upload support text/plain; charset=utf8 (#7899)
  * Lfs/lock: round locked_at timestamp to second (#7872) (#7875)
  * Fix non existent milestone with 500 error (#7867) (#7873)
* SECURITY
  * Fix No PGP signature on 1.9.1 tag (#7874)
  * Release built with go 1.12.9 to fix security fixes in golang std lib, ref: https://groups.google.com/forum/#!msg/golang-announce/oeMaeUnkvVE/a49yvTLqAAAJ
* ENHANCEMENT
  * Fix pull creation with empty changes (#7920) (#7926)
* BUILD
  * Drone/docker: prepare multi-arch release + provide arm64 image (#7571) (#7884)

(nia)

2019-09-05 13:39:10 UTC MAIN commitmail json YAML

2019-09-05 13:27:23 UTC MAIN commitmail json YAML

doc: Updated audio/fasttracker2 to 2.168

(fox)

2019-09-05 13:19:08 UTC MAIN commitmail json YAML

fasttracker2: Update to b168

Changes since b167:

Beta #168 - 04.09.2019
- Forgot to remove some Nibbles test code that resulted in your score being
  set to 1234567 whenever you lost a life.

(fox)

2019-09-05 13:04:55 UTC MAIN commitmail json YAML

MesaLib is buildlinked indirectly from libepoxy now. Remove it

(ryoon)

2019-09-05 12:39:57 UTC MAIN commitmail json YAML

Solarish pthreads expect mutex datastructures to be properly zeroed
out, unlike the Linux implementation, which upstream mainly
targets. This leads to "tdb_open_ex: tdb_mutex_init failed for
/var/samba/lock/gencache.tdb: Device busy" errors, described in
<https://illumos.topicbox.com/groups/developer/T28dcabf2f69cac04>.

Illumos kernel code attempted to mitigate the problem as of
<https://www.illumos.org/issues/9959>, but the changes have yet to
show up in releases.

The patches originate from
<https://github.com/oposs/pkg.oetiker.ch-build/blob/master/build/samba4/patches/pthread_mutex_init>,
modified appropriately.

Tested on omniosce r151030.

(hauke)

2019-09-05 10:43:50 UTC MAIN commitmail json YAML

Updated math/py-ephem, textproc/py-precis-i18n

(adam)

2019-09-05 10:43:10 UTC MAIN commitmail json YAML

py-precis-i18n: updated to 1.0.1

1.0.1
- Fixed a dict/set syntax typo that has no runtime effect.
- Test forward compatibility of derived props test files as Unicode version increases.
- Test Unicode 11.0 (Python 3.7).
- Update copyright year (2019).

(adam)

2019-09-05 10:39:50 UTC MAIN commitmail json YAML

py-ephem: updated to 3.7.7.0

Version 3.7.7.0:
Upgraded libastro to 3.7.7.
The internal star catalog now includes all 57 navigational stars.
The rise, culminate, and set returned by next_pass() are now consecutive values for a single pass. Pass singlepass=False to return the original next_rise, next_culminate, next_set even if next_set < next_rise (the satellite is already up).
ephem.delta_t('0') now returns the correct value, instead of misbehaving for that particular input.

(adam)

2019-09-05 09:35:11 UTC MAIN commitmail json YAML

Updated devel/tevent, devel/memcached

(adam)

2019-09-05 09:34:51 UTC MAIN commitmail json YAML

memcached: updated to 1.5.17

1.5.17:
Fixes
fix strncpy call in stats conns to avoid ASAN violation
extstore: fix indentation
add error handling when calling dup function
add unlock when item_cachedump malloc failed
extstore: emulate pread(v) for macOS
fix off-by-one in logger to allow CAS commands to be logged.
use strdup for explicitly configured slab sizes
move mem_requested from slabs.c to items.c (internal cleanup)

New Features
add server address to the "stats conns" output
log client connection id with fetchers and mutations
Add a handler for seccomp crashes

(adam)

2019-09-05 09:26:47 UTC MAIN commitmail json YAML

tevent: updated to 0.10.1

0.10.1:
Unknown changes

(adam)

2019-09-05 09:02:33 UTC MAIN commitmail json YAML

Updated devel/cmake, devel/talloc

(adam)

2019-09-05 09:02:11 UTC MAIN commitmail json YAML

talloc: updated to 2.3.0

2.3.0:
Unknown changes

(adam)

2019-09-05 08:39:09 UTC MAIN commitmail json YAML

cmake: updated to 3.15.3

CMake 3.15.3
* Flang: Implement MSVC runtime library abstraction
* CTest: Fix --show-only=json-v1 output with REQUIRED_FILES property
* cmGlobalGenerator: Fix CheckCompilerIdCompatibility local var lifetime
* cmAffinity: Add include for CPU_ZERO on Alpine Linux
* find_path: Fix crash on empty old-style list of names
* fileapi: Fix codemodel v2 target file name for CMP0037 OLD behavior
* FindBoost: Simplify conditional block for last known version
* FindBoost: Remove incorrect 1.70 timer dependency
* FindBoost: Unwrap compatibility INTERFACE targets for legacy variables
* FindBoost: Add support for Boost 1.71
* FindBoost: Clarify role of legacy variables in warning message
* FindBoost: Tolerate future Boost INTERFACE libraries
* CrayPrgEnv: Change default linking mode based on PE version
* ccmake: handle cache entries with empty STRINGS property
* libarchive: We now require at least version 3.3.3
* FindMPI: Restore MPI__COMPILE_FLAGS and MPI__COMPILE_OPTIONS
* Ninja: Add support for ADDITIONAL_CLEAN_FILES in custom targets
* Tests: Extend MakeClean test to test various target types
* Autogen: Fix AUTOUIC segfault, when file includes colliding ui_*.h file

(adam)

2019-09-05 08:08:21 UTC MAIN commitmail json YAML

doc: Updated editors/texmaker to 5.0.3

(nros)

2019-09-05 08:07:25 UTC MAIN commitmail json YAML

Update texmaker to version 5.0.3 .

Removed poppler-qt5 dependecy since it uses pdfium instead.

version 5.0.2 -> 5.0.3 :
- the bug about the bad highlighting on misspelled text before a \cite{} or
  \label{} command has been fixed
- if no text is selected the "(un)comment" command will (un)comment the
  current line
- the default size of the configuration dialog has been reduced (users request)
- Fold/Unfold/Fold All/Unfold All menu options has been added
  (thanks to Robin Watts)
- a bug about completion when citing references that contain numbers has
  been fixed
- a trouble in the "recent files" menu with names including an ampersand
  has been fixed
- a typo in the documentation has been fixed
- a typo in the de translation has been fixed (thanks to St辿phane YVON)
version 5.0.1 -> 5.0.2 :
- a memory leak has been fixed in the internal pdf viewer
- the trouble about the "open terminal" command on windows has been fixed
version 5.0 -> 5.0.1 :
- a trouble with the MikTex's ps2pdf command has been fixed
- the "-dpiscale x" option has been added to the Texmaker command line : with
  this option the environment variable QT_SCALE_FACTOR will be set to x before
  building the GUI (same behavior than adding "export QT_SCALE_FACTOR=x" to
  the environment variables). Can be used to adjust the interface if the
  monitor dpi is not well detected.
- the cs translation has been updated
version 4.5 -> 5.0 :
- new and more modern interface look
- highdpi is now supported on windows and linux
- a spellcheck annoying trouble on kde5 has been fixed
- new pdf engine
- synctex updated to 1.18
- Qt4 support has been removed : Qt5 (>=5.7) is now required
- de, es, hu, pl, and zh_CN translations have been updated
note : Texmaker depends now only from the Qt toolkit to be compiled

(nros)

2019-09-05 06:46:46 UTC MAIN commitmail json YAML

add and enable chocolate-doom

(jnemeth)

2019-09-05 06:45:12 UTC MAIN commitmail json YAML

Updated archivers/unrar

(adam)

2019-09-05 06:44:55 UTC MAIN commitmail json YAML

2019-09-04 22:39:40 UTC MAIN commitmail json YAML

doc: Removed chat/ircservices

(nia)

2019-09-04 22:38:26 UTC MAIN commitmail json YAML

Remove chat/ircservices - successors chat/atheme, chat/anope

This services package is very old and unmaintained.
Supposedly it doesn't work without -fno-stack-protector. Not a good sign.

If I have my IRC history right, chat/anope is a fork of epona, which was a
fork of this.

PR pkg/49014

(nia)

2019-09-04 20:08:03 UTC MAIN commitmail json YAML

doc: Updated www/seamonkey to 2.49.5

(nia)

2019-09-04 20:07:53 UTC MAIN commitmail json YAML

seamonkey: Update to 2.49.5

SeaMonkey 2.49.5 contains (among other changes) the following major changes relative to SeaMonkey 2.49.4:

SeaMonkey 2.49.5 uses the same backend as Firefox and contains the relevant Firefox 52.9.0 ESR security fixes.

SeaMonkey 2.49.5 shares most parts of the mail and news code with Thunderbird. Please read the Thunderbird 52.9.1 release notes for specific changes and security fixes in this release.

Additional security fixes up to ESR 60.2 and a few enhancements have been backported.

SeaMonkey-specific changes
==========================

* Among the general platform and mail fixes this release contains backported fixes from Thunderbird for the EFAIL security vulnerability.

(nia)

2019-09-04 17:43:26 UTC MAIN commitmail json YAML

doc: Updated games/lbreakout2 to 2.6.5

(nia)

2019-09-04 17:43:16 UTC MAIN commitmail json YAML

lbreakout2: Update to 2.6.5

Changes:

- in kids mode brick regeneration is four times slower (2015/10/17 MS)
- in kids mode bonuses last four times longer (2015/10/17 MS)
- division by zero crash fixed in server (2014/02/03 Colin Tuckley)
- added danish translation (2013/07/29 Joe Dalton)
- updated a number of levelsets from OFT (2013/03/20 MS)
- use $docdir for document path in configure (2012/08/15 MS)
- added a bunch of new levelsets, removed OldGames (2012/08/15 MS)

(nia)

2019-09-04 17:35:57 UTC MAIN commitmail json YAML

doc: Updated sysutils/gentoo to 0.20.7

(nia)

2019-09-04 17:35:45 UTC MAIN commitmail json YAML

gentoo: Update to 0.20.7

note: this now uses GTK3.

0.20.7
* Fixed bug that prevented setting the colors for a command button's
  secondary (right-click) function. Reported by RickTee.
* Tiny rewrite to how list entries are stored when reading directories
  which on my system improved speed by around 30X. Suggested by RickTee.
* Updated the GNU gettext machinery. Now requires gettext on your system
  to support internationalization, instead of including the code in a
  intl/ subdir in gentoo's code. Makes sense?
* Fixed a bug that made gentoo's progress-reporting dialogs lack a
  parent window, whch in turn made GTK+ emit warnings.

(nia)

2019-09-04 16:39:22 UTC MAIN commitmail json YAML

doc: Updated net/get_iplayer to 3.22

(nia)

2019-09-04 16:39:13 UTC MAIN commitmail json YAML

get_iplayer: Update to 3.22

Changes:

- Fixed schedule page parsing used for cache updates. This was broken by BBC changes and manifested as a series of ���WARNING: Got 0 programmes...��� messages during cache updates. Your cache will not update without this fix. If you find that some programmes are still missing from your cache, use `--cache-rebuild` to perform a full rebuild.
- get_iplayer now recognises previously-unknown programme versions (e.g., "legal") when the "default" pseudo-version is specified in the value of the `--versionlist` option.
- The `--pid-recursive-type` option is now applied when only downloading auxiliary resources (e.g., `--subtitles-only`).
- Fixed programme title extraction with `--pid-recursive` to prevent unwanted extra text being appended to title in episode listing (e.g., for Proms programmes).

(nia)

2019-09-04 16:38:06 UTC MAIN commitmail json YAML

libepoxy: add mesa to buildlink3

(nia)

2019-09-04 15:14:04 UTC MAIN commitmail json YAML

Reduce per-package inclusion of x11/libXdamage

And graphics/MesaLib includes x11/libXdamage/buildlink3.mk
and remove it from editors/emacs26.

(ryoon)

2019-09-04 14:00:21 UTC MAIN commitmail json YAML

Fix build with gtk2 or gtk3 options

(ryoon)

2019-09-04 13:32:50 UTC MAIN commitmail json YAML

doc: Updated net/dhcpcd to 8.0.4

(roy)

2019-09-04 13:32:40 UTC MAIN commitmail json YAML

Import dhcpcd-8.0.4 with the following changes:

* BSD: Fixed router reachability tests
* inet6: If router unreachable, just solicit a new one
* inet6: Fon't install a default route if only lladdresses
* build: New make target import-src, only imports the bare essentials
* inet6: Stop listening to NA messages
* BSD: Listen to RTM_MISS messages
* DHCP: Fix in_cksum for Big Endian
* DHCP{,6}: Don't log an error if the lease file is truncated
* Solaris: Now fully supported!

(roy)

2019-09-04 13:19:33 UTC MAIN commitmail json YAML

cairo: remove MesaLib from buildlink3

(nia)

2019-09-04 13:17:33 UTC MAIN commitmail json YAML

cairo: Mesa and libXt don't seem to be needed.

GL support is explicitly disabled unconditionally.

(nia)

2019-09-04 12:00:26 UTC MAIN commitmail json YAML

doc: Updated net/synergy to 1.10.3

(tnn)

2019-09-04 11:58:55 UTC MAIN commitmail json YAML

synergy: update to 1.10.3

Bug fixes:
6546 Filtered out self assigned ip addresses from being displayed
6541 Fixed connected info text to include without TLS encryption
6527 Config app renders incorrectly on high DPI screens
6526 New TLS/SSL socket handled when no socket
6525 Race condition on disconnecting TLS/SSL socket
6521 Access violation in TLS/SSL socket close
6409 Server freezes when clipboard contains an image
3705 Hotkeys not working on Mac server
Enhancements:
6535 Version URL and added stage check to version check
6529 Cleaner redistributable use in Windows installer
6528 More verbose message for Linux display errors
6524 Minimize config app to system tray
6523 Restore auto hide on startup for config app
6522 Double click Windows tray icon to show and hide
6520 Support for 32-bit Linux for legacy users
6519 Support for Ubuntu 14.04 LTS for legacy users
6390 Support for OpenSSL 1.1.1 for better security

(tnn)

2019-09-04 11:31:34 UTC MAIN commitmail json YAML

MesaDemos: Install missing EGL demos and fix building without gles/x11.

Bump PKGREVISION.

(nia)

2019-09-04 10:56:50 UTC MAIN commitmail json YAML

MesaLib: glesv2 detection

(nia)

2019-09-04 08:32:16 UTC MAIN commitmail json YAML

Updated www/py-django, www/py-django2

(adam)

2019-09-04 08:31:45 UTC MAIN commitmail json YAML

py-django2: updated to 2.2.5

Django 2.2.5 fixes several bugs in 2.2.4.

Bugfixes

Relaxed the system check added in Django 2.2 for models to reallow use of the same db_table by multiple models when database routers are installed.
Fixed crash of KeyTransform() for JSONField and HStoreField when using on expressions with params.
Fixed a regression in Django 2.2 where ModelAdmin.list_filter choices to foreign objects don窶冲 respect a model窶冱 Meta.ordering.
Fixed a race condition in loading URLconf module that could cause a crash of auto-reloader on Python 3.5 and below

(adam)

2019-09-04 08:31:06 UTC MAIN commitmail json YAML

py-django: updated to 1.11.24

Django 1.11.24 fixes a regression in 1.11.23.

Bugfixes
Fixed crash of KeyTransform() for JSONField and HStoreField when using on expressions with params

(adam)

2019-09-04 08:15:33 UTC MAIN commitmail json YAML

net/samba4: update MASTER_SITES

Update MASTER_SITES switching to https URL.  And remove extra empty line.

(taca)

2019-09-04 07:57:48 UTC MAIN commitmail json YAML

Updated devel/py-setuptools, devel/py-test-shutil

(adam)

2019-09-04 07:57:08 UTC MAIN commitmail json YAML

py-test-shutil: updated to 1.7.0

1.7.0
* All: Support pytest >= 4.0.0
* All: Support Python 3.7
* pytest-server-fixtures: if host not defined on your machine, default to localhost
* pytest-server-fixture: Pin to rethinkdb < 2.4.0 due to upstream API changes
* pytest-verbose-parametrize: Add support for revamped marker infrastructure
* pytest-verbose-parametrize: Fix integration tests to support pytest >= 4.1.0
* pytest-virtualenv: Add virtualenv as install requirement.
* pytest-webdriver: Fix RemovedInPytest4Warning using getfixturevalue
* circleci: Fix checks by skipping coverall submission for developer without push access
* wheels: Generate universal wheels installable with both python 2.x and 3.x
* dist: Remove support for building and distributing *.egg files
* VagrantFile: Install python 3.7 and initialize python 3.7 by default
* Fix DeprecationWarning warnings using "logger.warning()" function

1.6.2:
* pytest-server-fixtures: suppress stacktrace if kill() is called
* pytest-server-fixtures: fix random port logic in TestServerV2

1.6.1:
* pytest-server-fixtures: fix exception when attempting to access hostname while server is not started

1.6.0:
* pytest-server-fixtures: added previously removed TestServerV2.kill() function
* pytest-profiling: pin more-itertools==5.0.0 in integration tests, as that's a PY3 only release

1.5.1:
* pytest-verbose-parametrize: fixed unicode parameters when using `@pytest.mark.parametrize`

1.5.0:
* pytest-server-fixtures: made postgres fixtures and its tests optional, like all other fixtures
* pytest-server-fixtures: reverted a fix for pymongo deprecation warning, as this will break compatibility with pymongo 3.6.0
* pytest-server-fixtures: dropped RHEL5 support in httpd

1.4.1:
* pytest-server-fixtures: server fixture binary path specified in ENV now only affect server class 'thread'

(adam)

2019-09-04 07:55:43 UTC MAIN commitmail json YAML

py-setuptools: updated to 41.2.0

v41.2.0
Remove some usage of the deprecated imp module.
Changed html_sidebars from string to list of string as per https://www.sphinx-doc.org/en/master/changes.html#id58

(adam)

2019-09-03 20:27:03 UTC MAIN commitmail json YAML

2019-09-03 19:12:25 UTC MAIN commitmail json YAML

Updated net/samba4

(adam)

2019-09-03 19:11:58 UTC MAIN commitmail json YAML

samba4: updated to 4.10.8

Samba 4.10.8:

This is a security release in order to address the following defect:

o  CVE-2019-10197: Combination of parameters and permissions can allow user
                  to escape from the share path definition.

(adam)

2019-09-03 16:35:54 UTC MAIN commitmail json YAML

emacs26: Drop svg from default options

svg requires librsvg, which either requires rust, which has been the
cause of failures on pkgbuild and is very large, or results in using
unmaintained software (librsvg-c).

On pkgsrc-users, no one reported actually using svg support in emacs.

(gdt)

2019-09-03 15:13:09 UTC MAIN commitmail json YAML

doc: Updated textproc/bat to 0.12.1

(fox)

2019-09-03 15:12:23 UTC MAIN commitmail json YAML

bat: Update to 0.12.1

Changes since 0.12.0:

Bugfixes

  * Fixes a bug for older Windows versions ("The procedure entry point
    CreateFile2 could not be located")

(fox)

2019-09-03 13:29:53 UTC MAIN commitmail json YAML

dspdfviewer: strip -Werror

(nia)

2019-09-03 13:21:04 UTC MAIN commitmail json YAML

doc: Updated lang/guile22 to 2.2.6nb1

(gutteridge)

2019-09-03 13:20:06 UTC MAIN commitmail json YAML

guile22: build fix for most Linux distributions and Darwin

The file charset.alias is not defined as part of the installation
target if this is being built on Linux+glibc or Darwin, handle
accordingly.

(gutteridge)

2019-09-03 13:19:12 UTC MAIN commitmail json YAML

pgadmin3: Needs c++11 to build

(nia)

2019-09-03 12:53:25 UTC MAIN commitmail json YAML

bossa: Strip -Werror

(nia)

2019-09-03 12:51:56 UTC MAIN commitmail json YAML

synce-rra: Strip -Werror

(nia)

2019-09-03 12:11:48 UTC MAIN commitmail json YAML

doc: Updated fonts/spleen to 1.1.0

(fcambus)

2019-09-03 12:10:50 UTC MAIN commitmail json YAML

spleen: update to 1.1.0.

ChangeLog:

- Add full support for the Latin Extended-A Unicode block
- Add euro symbol
- Character at position CB is 'E' with diaeresis, not with tilde (12x24 version)
- Character at position D6 is 'O' with diaeresis, not with tilde (12x24 version)
- Character at position DC is 'U' with diaeresis, not with tilde (12x24 version)
- Fix tilde alignment in the 'o' with tilde character (32x64 version)
- Fix middle bar thickness in the upper case 'eth' character (12x24 version)
- Fix ring alignment for the 'A' and 'a' characters (16x32 and 32x64 versions)
- Remove strain pixel on the '3' and 'k' characters (32x64 version)
- Remove fillers for characters other than ISO 8859-1 ones (5x8 version)

OK kamil@

(fcambus)

2019-09-03 12:02:48 UTC MAIN commitmail json YAML

nostromo: Strip out -Werror

(nia)

2019-09-03 09:37:17 UTC MAIN commitmail json YAML

MesaLib: another merge request link, for why we need to disable some of
-Werror.

(maya)

2019-09-03 09:35:18 UTC MAIN commitmail json YAML

simh: needs -lrt on linux (for shm_open)

(maya)

2019-09-03 08:58:39 UTC MAIN commitmail json YAML

MesaLib: add link to upstream merge request so we know when the
workaroudn can be removed.

(maya)

2019-09-03 01:43:10 UTC MAIN commitmail json YAML

revert 1.123.  wasn't finished testing and doesn't work right..

(mrg)

2019-09-03 01:26:07 UTC MAIN commitmail json YAML

only pull in audio/alsa-lib/buildlink3.mk on linux, the only OPSYS
that enables alsa here.  avoids building an unused alsa-lib.

(mrg)

2019-09-02 22:16:53 UTC MAIN commitmail json YAML

Add Capstone module.

(rjs)

2019-09-02 21:41:40 UTC MAIN commitmail json YAML

mg2a: make this prehistoric C not fail with modern compilers

don't define our own strncpy/strncat, include the header instead.

(nia)

2019-09-02 20:28:34 UTC MAIN commitmail json YAML

MesaLib: build-id is a linker arg so needs -Wl, oops

(nia)

2019-09-02 19:43:06 UTC MAIN commitmail json YAML

MesaLib: remove --build-id=sha1 linker arg on SunOS

(nia)

2019-09-02 18:20:50 UTC MAIN commitmail json YAML

2019-09-02 17:50:33 UTC MAIN commitmail json YAML

2019-09-02 16:41:01 UTC MAIN commitmail json YAML

2019-09-02 16:10:47 UTC MAIN commitmail json YAML

tits: strip -Werror

(nia)

2019-09-02 16:08:33 UTC MAIN commitmail json YAML

xfce4-xarchiver: TOOL_DEPENDS+=  libxslt

(nia)

2019-09-02 14:45:49 UTC MAIN commitmail json YAML

doc: Updated fonts/fontforge to 20190801

(nia)

2019-09-02 14:45:37 UTC MAIN commitmail json YAML

fontforge: Update to 20190801

Along with the usual bugfixes, there have been a couple of new features worth calling out:

    Added Croatian translation
    Added user decompositions
    New graphic for the splash/about screen
    Images embedded in SFDs are now serialised as PNGs
        This is enabled by default, but may be turned off with the 'WritePNGInSFD' option.
        A new tag is used to identify this mode; 'Image2', instead of 'Image'
        This requires FontForge to be compiled with libpng support. If not compiled with libpng, FontForge will revert to the old method of serialising RLE encoded raw images.

As part of an ongoing effort to clean up the code base, there have additionally been multiple build system changes:

    Python 2 support is deprecated. It is strongly recommended to build with Python 3 support. Python 2 support will be removed in a future release.
    Both the Windows and Mac builds are now built with Python 3 instead of Python 2.
    The minimum supported version for the Mac build is now MacOS Sierra (10.12)
    FontForge no longer uses gnulib
    collab support has been removed
    The build system now expects libuninameslist to be present, and will fail if it is not found. Building without libuninameslist must be explcititly specified using --without-libuninameslist

(nia)

2019-09-02 13:40:18 UTC MAIN commitmail json YAML

doc: Added textproc/libuninameslist version 20190701

(nia)

2019-09-02 13:40:05 UTC MAIN commitmail json YAML

Add textproc/libuninameslist

The Unicode consortium provides a file containing annotations on many unicode
characters. This library contains a compiled version of this file so that
programs can access this data quickly and easily.

(nia)

2019-09-02 13:33:23 UTC MAIN commitmail json YAML

2019-09-02 13:26:40 UTC MAIN commitmail json YAML

Python 2.6 is long gone

(adam)

2019-09-02 13:25:49 UTC MAIN commitmail json YAML

Changed PYTHON_VERSIONS_INCOMPATIBLE to PYTHON_VERSIONS_ACCEPTED; needed for future Python 3.8

(adam)

2019-09-02 13:24:32 UTC MAIN commitmail json YAML

Remove PYTHON_VERSIONS_INCOMPATIBLE from options

(adam)

2019-09-02 13:20:22 UTC MAIN commitmail json YAML

2019-09-02 12:59:04 UTC MAIN commitmail json YAML

doc: Updated net/libupnp to 1.8.4

(nia)

2019-09-02 12:58:54 UTC MAIN commitmail json YAML

libupnp: Update to 1.8.4.

*******************************************************************************
Version 1.8.4
*******************************************************************************

2017-11-17 Marcelo Jimenez <mroberto(at)users.sourceforge.net>

GitHub #57 - 1.8.3 broke ABI without changing SONAME
Opened by jcowgill

This change in 1.8.3 broke the ABI and therefore the SONAME should have
been changed (ie: age reset to 0):

EXPORT_SPEC int UpnpAddVirtualDir(
        /*! [in] The name of the new directory mapping to add. */
-      const char *dirName);
+      const char *dirName,
+      /*! [in] The cookie to associated with this virtual directory */
+      const void *cookie,
+      /*! [out] The cookie previously associated, if mapping is already present */
+      const void **oldcookie);

If only the cookie argument was added, you could probably get away with
this because all that would happen is that a garbage value is passed
around without being used. With the addition of oldcookie, any old
programs will not initialise this value and will probably segfault when
libupnp tries to write to it.

*******************************************************************************
Version 1.8.3
*******************************************************************************

2017-09-07 Dave Overton <david(at)insomniavisions.com>

Add userdata/cookie to virtualDir callbacks

As with the main Device APIs (UpnpRegisterRootDevice etc), it is useful
to have a userdata/cookie pointer returned with each callback.

This patch allows one cookie per registered path which enables a variety
of functionality in client apps.

2017-09-03 Uwe Kleine-Kæ—¦nig <uwe@kleine-koenig.org>

Fix large file system support

libupnp uses large file support (if available). If a program linking to
libupnp does not however it creates mismatches in callframes. See
Issue #51 for the results.

This simplifies LFS support by using AC_SYS_LARGEFILE_SENSITIVE instead of
manually defining _LARGE_FILE_SOURCE and _FILE_OFFSET_BITS (which is
useless on architectures where the size of off_t is fixed).

Furthermore additional logic is introduced to catch a library user without
64 bit wide off_t on such a platform.

upnp.h also makes use of off_t, but as this file includes FileInfo.h, the
latter is the single right place for this check.

This fixes #52 which is a generalized variant of #51.

2017-08-19 Uwe Kleine-Kæ—¦nig <uwe@kleine-koenig.org>

configure.ac: Drop copying of include files

The comment suggests this is for windows compilation. It should be easily
possible to add the source directory as an include path to the windows
compiler, too, so drop this. (Otherwise this should better be done using
AC_CONFIG_COMMANDS.)

2017-09-03 Uwe Kleine-Kæ—¦nig <uwe@kleine-koenig.org>

Let source code use autoconfig.h not the public upnpconfig.h

The former is the one supposed to be used for internal code. upnpconfig.h is only
for public stuff.

2017-08-19 Uwe Kleine-Kæ—¦nig <uwe@kleine-koenig.org>

configure.ac: Fix typo s/optionnal/optional/

2017-08-08 Marcelo Jimenez <mroberto(at)users.sourceforge.net>

Fix broken samples when configured with --disable-ipv6.

*******************************************************************************
Version 1.8.2
*******************************************************************************

2017-07-24 Michael Osipov

Initialize in_addr and in6_addr to avoid garbage output if never written

If any of the address families isn't available in UpnpGetIfInfo(),
especially IPv6, always init both structs with zero to avoid garbage
output with inet_ntop() to gIF_IPV4 and gIF_IPV6.

See v00d00/gerbera#112 (https://github.com/v00d00/gerbera/issues/112)
for consequences: bind for IPv6 will fail.

2013-10-28 Vladimir Fedoseev <va-dos(at)users.sourceforge.net>

Attached patch allows to register multiple clients from single app.

2014-11-14 Philippe <philippe44ca(at)users.sourceforge.net>

Hi - I recently compiled libupnp on C++ Builder XE7 and had to do a few
changes to make it work. In thase this helps, I've generated a small
patch file.

2015-04-30 Hugo Beauz辿e-Luyssen <chouquette(at)users.sourceforge.net>

When building using a strict mode (-std=c++11 instead of -std=gnu++11,
for instance), the WIN32 macro isn't defined. The attached patch fixes
it by using _WIN32 instead.

2015-02-06 Jean-Francois Dockes <jf@dockes.org>

Queue events on their subscription object instead of adding them to the
thread pool immediately.

Events destined for a non-responding control point would flood the
thread pool and prevent correct dispatching to other clients, sometimes
to the point of disabling the device. Events are now queued without
allocating thread resources and properly discarded when a client is not
accepting them.

2015-02-03 Jean-Francois Dockes <jf@dockes.org>

genaInitNotify()/genaInitNotifyExt() and
genaNotifyAll()/genaNotifyAllExt() are relatively complicated methods
which only differ by the format of an input parameter. This update
extracts the common code for easier maintenance, esp. relating to the
queueing modifications to follow.

*******************************************************************************
Version 1.8.1
*******************************************************************************

2017-04-26 Marcelo Jimenez <mroberto(at)users.sourceforge.net>

Fix some compiler warning messages on md5.c

2017-03-07 Fabrice Fontaine <fontaine.fabrice(at)gmail.com>

Enable IPv6 by default

2017-03-07 Fabrice Fontaine <fontaine.fabrice(at)gmail.com>

Move threadutil source code to libupnp

With this patch, threadutil library is removed as the only public
header that has been kept in 1.8.x is ithread.h which is mainly a
wrapper to pthread with inline functions.
threadutil source code will now be a part of libupnp library.

*******************************************************************************
Version 1.8.0
*******************************************************************************

2014-01-15 Peng <howtofly(at)gmail.com>

Fix memory leaks.

2013-04-27 Thijs Schreijer <thijs(at)thijsschreijer.nl>

Renamed SCRIPTSUPPORT to IXML_HAVE_SCRIPTSUPPORT for consistency. Also
updated autoconfig and automake files, so it also works on non-windows.
Option is enabled by default, because it adds an element to the node
structure. Not using an available field is better than accidentally
using an unavailable field.

2012-07-11 Thijs Schreijer <thijs(at)thijsschreijer.nl>

Changed param to const UpnpAcceptSubscriptionExt() for consistency

2012-06-07 Thijs Schreijer <thijs(at)thijsschreijer.nl>

updated ixmlDocument_createAttributeEx() and ixmlDocument_createAttribute()
to use parameter DOMString instead of char * (same but now consistent)

2012-05-06 Thijs Schreijer <thijs(at)thijsschreijer.nl>

Added script support (directive SCRIPTSUPPORT) for better support of
garbage collected script languages. The node element gets a custom tag
through ixmlNode_setCTag() and ixmlNode_getCTag(). And a callback upon
releasing the node resources can be set using ixmlSetBeforeFree()
See updated readme for usage.

2012-03-24 Fabrice Fontaine <fabrice.fontaine(at)orange.com>

SF Bug Tracker id 3510595 - UpnpDownloadXmlDoc : can't get the file

Submitted: Marco Virgulti ( mvirg83 ) - 2012-03-23 10:08:08 PDT

There is a problem, perhaps, during downloading a document by
UpnpDownloadXmlDoc. During debugging i've found that in an not exported
api (unfortunately i forgot the code line...) where it is setted a
local variable "int timeout" to -1 then passed directly to another
function for sending data through tcp socket. I patched this setting it
to 0 (there is an IF section that exits if timeout < 0). It is normal
behavior or it is a bug?

2012-03-08 Fabrice Fontaine <fabrice.fontaine(at)orange-ftgroup.com>

Check for NULL pointer in TemplateSource.h

calloc can return NULL so check for NULL pointer in CLASS##_new and
CLASS##_dup.

2012-03-08 Fabrice Fontaine <fabrice.fontaine(at)orange-ftgroup.com>

Replace strcpy with strncpy in get_hoststr

Replace strcpy with strncpy to avoid buffer overflow.

2012-03-08 Fabrice Fontaine <fabrice.fontaine(at)orange-ftgroup.com>

Memory leak fix in handle_query_variable

variable was never freed.

2011-02-07 Chandra Penke <chandrapenke(at)mcntech.com>

Add HTTPS support using OpenSSL. HTTPS support is optional and can
be enabled by passing the --enable-open-ssl argument to the
configure script.

The following methods are introduced to the public API:
UpnpInitOpenSslContext

When enabled, HTTPS can be used by using "https://" instead of
"http://" when passing URLs to the HTTP Client API.

2011-02-07 Chandra Penke <chandrapenke(at)mcntech.com>

Refactor HTTP Client API to be more generic.

The following features are added:

- Support for persistent HTTP connections (reusing HTTP
  connections). Tthis is still a work in progress and relies on
  applications to interpret the 'Connection' header
  appropriately.

- Support for specifying request headers when making
  requests. Useful for interacting with web services that require
  custom headers.

- Support for retrieving response headers (this is a API only
  change, some more work needs to be done to implement the actual
  functionality. Specifically copy_msg_headers in httpreadwrite.c
  needs to be implemented)

- Common API for all HTTP methods.

- Support for PUT, and DELETE methods.

The following methods are introduced to the public HTTP Client API

UpnpOpenHttpConnection, UpnpCloseHttpConnection, UpnpMakeHttpRequest,
UpnpWriteHttpRequest, UpnpEndHttpRequest, UpnpGetHttpResponse,
UpnpReadHttpResponse.

Removed a lot of duplicate code in httpreadwrite.c

2011-01-17 Chandra Penke <chandrapenke(at)mcntech.com>

Include upnpconfig.h in FileInfo.h to automatically include large
file macros

2011-01-17 Chandra Penke <chandrapenke(at)mcntech.com>

Fix for warnings Apple systems related to macros defined in list.h.

In list.h, in apple systems, undefine the macros prior to defining them.

2011-01-16 Marcelo Jimenez <mroberto(at)users.sourceforge.net>

Fix for UpnpFileInfo_get_LastModified() in http_MakeMessage().

UpnpFileInfo_get_LastModified() returns time_t, and http_MakeMessage()
takes a "time_t *". Thanks to Chandra Penke for pointing the bug.

2010-11-22 Marcelo Jimenez <mroberto(at)users.sourceforge.net>

Template object for ssdp_ResultData.

2010-11-10 Fabrice Fontaine <fabrice.fontaine(at)orange-ftgroup.com>

Support for "polling" select in sock_read_write.

Currently, in sock_read_write function, if the timeout is 0, pupnp
realizes a "blocking" select (with an infinite timeout). With this
patch, if timeout is set to 0, pupnp will realize a "polling" select
and returns immediately if it can not read or write on the socket. This
is very useful for GENA notifications when pupnp is trying to send
events to a disconnected Control Point. "Blocking" select can now be
done by putting a negative timeout value.

2010-09-18 Chandra Penke <chandrapenke(at)mcntech.com>

This is a minor build fix. The new Template*.h files added in the latest
code need to be exported. Patch against the latest sources is attached.

2010-08-22 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* upnp/src/api/Discovery.c: Fix a serious bug and memory leak in
UpnpDiscovery_strcpy_DeviceType(). Thanks to David Blanchet for the
patch.

2010-04-25 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
Separation of the ClientSubscription object.

2010-04-24 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
Protect the object destructors agains null pointers on deletion, which
should be something valid.

2010-03-27 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
SF Patch Tracker [ 2987390 ] upnp_debug vs. ixml_debug
Thanks for the load of updates, I'm still assimilating them ! Could I make
a suggestion though? The addition of printNodes(IXML_Node) to upnpdebug a
dds a new dependency on ixml.h for anything using upnpdebug.h. I'm making
quite a bit of use of upnpdebug in porting things to version 1.8.0, and I'd
prefer it if printNodes could be added to ixmldebug.h instead. I'm attach
ing a patch, what do you think ?

Nick

2010-03-27 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Forward port of svn revision 505:
SF Patch Tracker [ 2836704 ] Patch for Solaris10 compilation and usage.
Submitted By: zephyrus ( zephyrus00jp )

2010-03-20 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Patch Tracker [ 2969188 ] 1.8.0: patch for FreeBSD compilation
Submitted By: Nick Leverton (leveret)
Fix the order of header inclusion for FreeBSD.

2010-03-20 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Forward port of svn revision 502:
SF Patch Tracker [ 2836704 ] Search for nested serviceList (not
stopping at the first lis
Submitted By: zephyrus ( zephyrus00jp )

Internet Gateway Device description contains nested serviceList (rootdevice
-> servicelist, subdevice
and subdevice has the lower-level serviceList, etc..)

Unfrotunately, the sample code sample_util.c used by tv_device sample,
etc.
has a code that looks for only the first top-level serviceList.
This results in the failure to read all the services of an IGD xml
description.

Attached patch modifies this behavior and looks for the service by
visiting all the serviceList in xml document in turn.

With the modified patch (ad additional modification), I could
simulate an IGD device and created a modified control program for that.

Patch against 1.6.6

TIA.

2010-03-20 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Patch Tracker [ 2973319 ] Problem in commit 499
Submitted By: Nick Leverton (leveret)
Afraid that this doesn't compile, it seems retval should be retVal in two
places.

2010-03-16 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Fix for the ithread_mutex_unlock() logic in UpnpInit().
Thanks for Nicholas Kraft.

2010-03-15 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Patch Tracker [ 2962606 ] Autorenewal errors: invalid SID,
too-short renewal interval
Submitted By: Nick Leverton (leveret)

Auto-renewals send an invalid SID due to a missing UpnpString_get_String
call. They also send a renewal interval of 0 instead of copying it from
the original subscription.

2010-03-15 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Patch Tracker [ 2964685 ] patch for avoiding inet_ntoa (1.8.0)
Submitted By: Nick Leverton (leveret)

Seems like SF's tracker won't let me add a patch to someone else's issue ?!
This refers to https://sourceforge.net/support/tracker.php?aid=2724578

The calls to inet_ntoa are in getlocalhostname(), which is called from
UpnpInit when it is returning the bound IP address.
UpnpInit/getlocalhostname hasn't been updated to IPv6, I presume this is
deliberate so that it doesn't start returning IPv6 addresses and
overwriting the caller's IPv4-sized allocation.

The attached patch just updates getlocalhostname to use inet_ntop instead
of inet_ntoa, and also documents the fact that UpnpInit is IPv4 only whilst
UpnpInnit2 is both IPv4 and IPv6.

A fuller solution might be to change UpnpInit to use some variant on
UpnpGetIfInfo. UpnpInit could still be left as IPv4 only if desired -
perhaps UpnpGetIfInfo could take an option for the desired address family.
getlocalhostname and its own copy of the interface scanning code would then
be redundant. I don't have IPv6 capability here though so I'm reluctant to
change the IPv6 code, as I have no way to test it.

2010-03-15 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Patch Tracker [ 2724578 ] patch for avoiding memory leaks when
add devices

each time a device been added, UpnpInit() is called, on exit, UpnpFinish()
is called, but the memories allocated by ThreadPoolInit() may lost because
there's no code to call ThreadPoolShutdown() to release the memories. And
inet_ntoa() is not thread safe, so in my patch, I substitute inet_ntoa()
with inet_ntop().

2010-03-14 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Patch Tracker [ 2964687 ] Add new string based accessors to upnp
object API

As per email to pupnp-devel, this is the patch to add the _strget_
accessors for string-like objects in the interface.

Will add a further patch shortly to udpate the sample programs.

2008-06-27 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Nicholas Kraft's patch to fix some IPv6 copy/paste issues. He
reported to be getting infinite loops with the svn code.

2008-06-13 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Bug Tracker [ 1984541 ]
ixmlDocumenttoString does not render the namespace tag.
Submitted By: Beliveau - belivo

Undoing the patch that fixed this problem. In fact, there was no
problem and the patch was wrong.

2008-06-11 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Ingo Hofmann's patch for "Content-Type in Subscription responses".
Adds charset="utf-8" attribute to the CONTENT-TYPE header line.

Hi,

I have found an inconsistency regarding the text/xml content-type
returned by libupnp. It looks like only subscription responses send
"text/xml" where all other messages contain "text/xml; charset="utf-8"".
Since I'm working on an DLNA device the latter behaviour is mandatory.
I changed the according lines in gena_device.c (see attached patch).
I'm not sure if it would be ok for other device to have the charset
field but it would help me a lot :)

Best regards,
Ingo

2008-06-04 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* SF Bug Tracker [ 1984541 ]
ixmlDocumenttoString does not render the namespace tag.
Submitted By: Beliveau - belivo

The problem occurs when converting a xml document using
ixmlDocumenttoString containing a namespace tag created with
ixmlDocument_createElementNS. The namespace tag doesn't get rendered.

example: The following code fragment prints:

<?xml version="1.0"?>
<root></root>

instead of:
<?xml version="1.0"?>
<root xmlns="urn:schemas-upnp-org:device-1-0"></root>

Code:

#include <stdlib.h>
#include <upnp/ixml.h>

int main()
{
IXML_Document* wDoc = ixmlDocument_createDocument();
IXML_Element* wRoot = ixmlDocument_createElementNS(wDoc,
"urn:schemas-upnp-org:device-1-0", "root");
ixmlNode_appendChild((IXML_Node *)wDoc,(IXML_Node *)wRoot);
DOMString wString = ixmlDocumenttoString(wDoc);
printf(wString);
free(wString);
ixmlDocument_free(wDoc);

return 0;
}

The problem was in the printing routine, not in the library data
structure.

2008-05-31 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Charles Nepveu's suggestion of not allocating a thread for
MiniServer when it is not compiled.

2008-05-24 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Ported Peter Hartley's patch to compile with mingw.

2008-05-24 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Added some debug capability to ixml.

2008-05-02 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Merged Charles Nepveu's IPv6 work. libupnp now is IPv6 enabled.

2008-02-06 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Breaking API so that we now hide internal data structures.

2008-02-06 Marcelo Jimenez <mroberto(at)users.sourceforge.net>
* Rewrote Peter Hartley's patch to include a new extra header field in
FileInfo.

*******************************************************************************
Version 1.6.22
*******************************************************************************

2017-07-07 James Cowgill <james410(at)cowgill.org.uk>

Replace MD5 impmplementation with public-domain version

Currently the RSA MD5 implementation is used. Unfortunately the license
has some potential issues:
* The license does not explicitly allow distributing derivative works.
This was the original argument used in
[Debian #459516](https://bugs.debian.org/459516).
* The license contains an advertising clause similar to the BSD 4-clause
license. This is incompatible with the GPL and if it were enforced,
would require RSA to be mentioned by pretty much everyone who uses pupnp.

The simple solution is to replace it with a public domain
implementation. I've taken OpenBSDs implementation and tweaked it
slightly for use by pupnp by:
- Adjusting the includes.
- Removing the __bounded__ attributes which are specific to OpenBSD.
- Using the standard integer types from stdint.h.
- Using memset instead of explicit_bzero.

2016-12-16 Peter Pramberger <peterpramb(at)users.sf.net>

ixml/test/test_document.c is missing the string.h include, therefore
the compiler complains about an implicit declaration.

*******************************************************************************
Version 1.6.21
*******************************************************************************

2016-12-16 Gabriel Burca <gburca(at)github>

If the error or info log files can not be created, use stderr and
stdout instead.

2016-12-08 Uwe Kleine-Kæ—¦nig <uwe(at)kleine-koenig.org>

Fix out-of-bound access in create_url_list() (CVE-2016-8863)

If there is an invalid URL in URLS->buf after a valid one, uri_parse is
called with out pointing after the allocated memory. As uri_parse writes
to *out before returning an error the loop in create_url_list must be
stopped early to prevent an out-of-bound access

Bug: https://sourceforge.net/p/pupnp/bugs/133/
Bug-CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8863
Bug-Debian: https://bugs.debian.org/842093
Bug-Redhat: https://bugzilla.redhat.com/show_bug.cgi?id=1388771

2016-11-30 Uwe Kleine-Kæ—¦nig <uwe(at)kleine-koenig.org>

miniserver: fix binding to ipv6 link-local addresses

Linux requires to have sin6_scope_id hold the interface id when binding to
link-local addresses. This is already in use in other parts of upnp, so
portability shouldn't be in the way here. Without this bind(2) fails with
errno=EINVAL (although ipv6(7) from manpages 4.08 specifies ENODEV in this
case).

Fixes: https://bugs.debian.org/813249

2016-09-15 Mathew Garret <(at)mjg59 (twitter)>

SF Bug Tracker #132 CVE-2016-6255: write files via POST

Submitted by: Balint Reczey in 2016-08-02

From Debian's BTS https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831857 :
From: Salvatore Bonaccorso carnil@debian.org
To: Debian Bug Tracking System submit@bugs.debian.org
Subject: libupnp: write files via POST
Date: Wed, 20 Jul 2016 11:03:34 +0200
Source: libupnp
Version: 1:1.6.17-1
Severity: grave
Tags: security upstream
Justification: user security hole
Hi
See http://www.openwall.com/lists/oss-security/2016/07/18/13 and
https://twitter.com/mjg59/status/755062278513319936 .
Proposed fix:
https://github.com/mjg59/pupnp-code/commit/be0a01bdb83395d9f3a5ea09c1308a4f1a972cbd
Regards,
Salvatore

From Mathew Garret's commit: Don't allow unhandled POSTs to write to the filesystem by default

*******************************************************************************
Version 1.6.20
*******************************************************************************

2016-02-22 Jean-Francois Dockes <medoc(at)users.sf.net>

SF Bugs #131, Creator: Jean-Francois Dockes

I know it sounds crazy that nobody ever saw this, but the CONTENT-LENGTH
value in GENA NOTIFY messages is too small by one.

It appears that most current control points don't notice the extra
character (an LF, which is validly there but not included in
Content-Length), probably because their protocol handler is reasonably
lenient, and because the missing body LF does not prevent parsing the
XML. But there is a least one anal CP (Linn Kazoo) which barfs, because
it reads all data until connection close and the size mismatch triggers
a bug.

"Proof":
In gena_device.c:217 (notify_send_and_recv())

ret_code = http_SendMessage(&info, &timeout,
    "bbb",
    start_msg.buf, start_msg.length,
    propertySet, strlen(propertySet),
    CRLF, strlen(CRLF));

start_msg has all the headers, including the empty line.
Content-length should be strlen(propertySet) + strlen(CRLF) (2)
In gena_device.c:433 (AllocGenaHeaders())

rc = snprintf(headers, headers_size, "%s%s%"PRIzu"%s%s%s",
    HEADER_LINE_1,
    HEADER_LINE_2A,
    strlen(propertySet) + 1,
    HEADER_LINE_2B,
    HEADER_LINE_3,
    HEADER_LINE_4);

HEADER_LINE_2A is "CONTENT-LENGTH: ".
The following value should be strlen(propertySet) + 2

2016-01-07 Marcelo Roberto Jimenez <mroberto(at)users.sourceforge.net>

Fix for a reported integer overflow

2016-01-07 Jean-Francois Dockes <medoc(at)users.sf.net>
2016-01-07 Nick Leverton <nick(at)leverton.org>
SF Patches #60, Creator: Jean-Francois Dockes

When libupnp is configured with --enable-ipv6 but ipv6 is not available
on the system (for example because the ipv6 code is not loaded in a Linux
kernel as is the case by default on Raspbian), the ipv6 socket creation
call will fail in miniserver.c and the library init will fail, even if
the ipv4 initialisation would have succeeded.

Let a library configured with --enable-ipv6 initialize in ipv4-only
mode if ipv6 is not available instead of failing. This can happen
if no ipv6 code is configured or loaded in the kernel.

Don't fail if IPv6 is unavailable.
We might be an IPv6 enabled distro build running on an IPv4-only custom kernel.

2016-01-07 Nick Leverton <nick(at)leverton.org>

SF Bug Tracker #128, Creator: Nick Leverton
redefining strndup causes "error: expected identifier or '(' before '__extension__'"

Fix redefinition of strnlen and strndup
These are available when HAVE_STRNDUP and HAVE_STRNLEN are defined, but
libupnp provides an extern prototype anyway.  Recent versions of glibc
define this prototype differently, causing the following compile error:

src/api/UpnpString.c:47:15: error: expected identifier or '(' before  '__extension__'
extern char *strndup(__const char *__string, size_t __n);

2016-01-07 Nick Leverton <nick(at)leverton.org>

SF Bug Tracker #129, Creator: Nick Leverton
shutdown() on UDP sockets logs ENOTCONN message.
https://sourceforge.net/p/pupnp/bugs/129/

Fix ENOTCONN "Error in shutdown: Transport endpoint is not connected"

When logging is enabled, ssdpserver logs bursts of
"Error in shutdown: Transport endpoint is not connected"
This is because shutdown() is not supported for UDP sockets and under
recent UNIX specifications it returns ENOTCONN if used.

2016-01-07 Nick Leverton <nick(at)leverton.org>

SF Bug Tracker #127, Creator: Klaus Fischer
Miniserver uses INADDR_ANY instead of HostIP
https://sourceforge.net/p/pupnp/bugs/127/

The internal miniserver.c uses INADDR_ANY instead of the HostIP/IfName
provided when initializing libupnp. But, this HostIP/IfName gets used
for the UDP socket when multicasting SSDP messages.  Because of this,
miniserver may end up sending from different IP address than ssdpserver.
This patch causes miniserver to use the already known interface address.

2016-01-07 Marcelo Roberto Jimenez <mroberto(at)users.sourceforge.net>

SF Bug Tracker #130, Creator: Shaddy Baddah
infinite loop in UpnpGetIfInfo() under WIN32

Original code makes no sense. This patch should fix it.

2015-02-04 Shaun Marko <semarko@users.sf.net>

Bug tracker #124 Build fails with --enable-debug

Build environment
Fedora 21
X86-64
* gcc 4.9.2

How to repeat
$ ./configure --enable debug
$ make
libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -I../upnp/inc -I./inc -I../threadutil/inc
-I../ixml/inc -I./src/inc -pthread -g -O2 -Wall -MT src/api/libupnp_la-UpnpString.lo
-MD -MP -MF src/api/.deps/libupnp_la-UpnpString.Tpo -c src/api/UpnpString.c
-fPIC -DPIC -o src/api .libs/libupnp_la-UpnpString.o src/api/UpnpString.c:47:16:
error: expected identifier or '(' before 'extension'
extern char *strndup(const char *string, size_t __n);
^
Makefile:1016: recipe for target 'src/api/libupnp_la-UpnpString.lo' failed

Reason for failure
Build enables -O2 optimization flags which causes the inclusion of a
macro implementation of strndup from include/bits/string2.h.

Workarounds
Disable optimization when configuring or making:
$ configure CFLAGS='-g -pthread -O0' --enable-debug
$ make
or
$ configure --enable-debug
$ make CFLAGS='-g -pthread -O0' Define NO_STRING_INLINES
$ export CFLAGS="-DNO_STRING_INLINES -O2"
$ ./configure --enagble-debug
$ make

Fix
* Don't declare strndup in src/api/UpnpString.c if it exists

2015-02-01 Jean-Francois Dockes <medoc@users.sf.net>

Out-of-tree builds seem to be currently broken, because ixml and
threadutil files need an include path to include UpnpGlobal.h, and
configure tries to copy files into a directory which it does not create.
The patch fixes both issues.

2014-01-03 Peng <howtofly(at)gmail.com>

rewrite soap_device.c

1) separate HTTP handling from SOAP handling
2) remove repeated validity check, each check is performed exactly once
3) fix HTTP status code per UPnP spec, SOAP spec and RFC 2774

(nia)

2019-09-02 12:54:16 UTC MAIN commitmail json YAML

vlc: drop mad and faad plugins

both of these are unmaintained upstream and neither are necessary for
mp3/m4a playback which is handled by other libraries.

bump PKGREVISION

(nia)

2019-09-02 12:45:34 UTC MAIN commitmail json YAML

doc: Updated devel/p5-Test-BDD-Cucumber to 0.60

(schmonz)

2019-09-02 12:45:26 UTC MAIN commitmail json YAML

Update to 0.60. From the changelog:

- Added flag to make `pherkin` check for duplicate matching step
  functions to help debugging
- Added option to specify meta data to step functions and use it in
  extensions; minimally available meta data identifies the file name
  and line where the step function has been defined
- Cleaned up release procedure: 0.58 and 0.59 were sloppy, including
  additional files from the working directory
- Increase minimum Perl version to 5.10
- Updated languge support from Cucumber upstream repository, adding
  support for: Armenian, Aragonese, Asturian, Azerbaijani, Bosnian,
  Emoji, Irish, Gujarati, Georgian, Macedonian (Cyrilic),
  Macedonian (Latin), Mongolian and Tamil
- Documentation updates and (hopefully) clarification

(schmonz)

2019-09-02 12:41:14 UTC MAIN commitmail json YAML

p5-IPC-Cache: remove PLIST since PERL5_PACKLIST is in use

(adam)

2019-09-02 12:39:25 UTC MAIN commitmail json YAML

p5-Mojo-IOLoop-ForkCall: remove PLIST since PERL5_PACKLIST is in use

(adam)

2019-09-02 12:36:50 UTC MAIN commitmail json YAML

p5-Python-Serialise-Marshal: remove PLIST since PERL5_PACKLIST is in use

(adam)

2019-09-02 12:34:28 UTC MAIN commitmail json YAML

p5-Class-DBI-BaseDSN: remove PLIST since PERL5_PACKLIST is in use

(adam)

2019-09-02 12:29:55 UTC MAIN commitmail json YAML

p5-Danga-Socket: remove empty PLIST; add perl5 to CATEGORIES

(adam)

2019-09-02 12:27:18 UTC MAIN commitmail json YAML

p5-Crypt-DH-GMP: remove empty PLIST

(adam)

2019-09-02 12:26:09 UTC MAIN commitmail json YAML

p5-Mail-Message: remove PLIST since PERL5_PACKLIST is in use

(adam)

2019-09-02 12:22:15 UTC MAIN commitmail json YAML

p5-Apache-Session-SharedMem: remove PLIST since PERL5_PACKLIST is in use

(adam)

2019-09-02 12:19:15 UTC MAIN commitmail json YAML

p5-Lingua-EN-Fathom: remove PLIST since PERL5_PACKLIST is in use

(adam)

2019-09-02 12:17:05 UTC MAIN commitmail json YAML

p5-Lingua-EN-Syllable: remove PLIST since PERL5_PACKLIST is in use; update HOMEPAGE

(adam)

2019-09-02 12:13:31 UTC MAIN commitmail json YAML

p5-HTML-FormatText-WithLinks: remove PLIST since PERL5_PACKLIST is in use

(adam)

2019-09-02 12:11:57 UTC MAIN commitmail json YAML

doc: Updated security/libgcrypt to 1.8.5

(nia)

2019-09-02 12:10:54 UTC MAIN commitmail json YAML

libgcrypt: Update to 1.8.5

Noteworthy changes in version 1.8.5 (2019-08-29)  [C22/A2/R5]
------------------------------------------------

* Bug fixes:

  - Add mitigation against an ECDSA timing attack.
    [#4626,CVE-2019-13627]

  - Improve ECDSA unblinding.

* Other features:

  - Provide a pkg-config file for libgcrypt.

Release-info: https://dev.gnupg.org/T4683

(nia)

2019-09-02 12:09:56 UTC MAIN commitmail json YAML

p5-Math-Calc-Units: remove PLIST since PERL5_PACKLIST is in use

(adam)

2019-09-02 12:06:58 UTC MAIN commitmail json YAML

p5-Config-File: remove PLIST since PERL5_PACKLIST is in use

(adam)

2019-09-02 12:04:10 UTC MAIN commitmail json YAML

p5-File-DesktopEntry: remove PLIST since PERL5_PACKLIST is in use

(adam)

2019-09-02 11:45:35 UTC MAIN commitmail json YAML

p5-File-Binary: remove PLIST since PERL5_PACKLIST is used; added perl5 to CATEGORIES

(adam)

2019-09-02 10:24:36 UTC MAIN commitmail json YAML

Updated security/py-keyring, mail/py-authres

(adam)

2019-09-02 10:24:14 UTC MAIN commitmail json YAML

py-authres: updated to 1.2.0

1.2.0:
+ Added ability to include DMARC policy in DMARC results
* Updated references for new RFCs, ARC no longer experimental
* Converted http references to https

(adam)

2019-09-02 10:20:57 UTC MAIN commitmail json YAML

py-keyring: updated to 19.1.0

19.1.0
* macOS Keyring now honors a ``KEYCHAIN_PATH``
  environment variable. If set, Keyring will use that
  keychain instead of the default.

19.0.2
* Refresh package skeleton.
* Adopt `black <https://pypi.org/project/black>`_ code style.

19.0.1
* Merge with 18.0.1.

18.0.1
* ExceptionInfo no longer retains a reference to the
  traceback.

(adam)

2019-09-02 09:59:37 UTC MAIN commitmail json YAML

Updated net/py-amqp, net/py-kombu

(adam)

2019-09-02 09:59:15 UTC MAIN commitmail json YAML

py-kombu: updated to 4.6.4

4.6.4
- Use importlib-metadata instead of pkg_resources for better performance
- Allow users to switch URLs while omitting the resource identifier
- Don't stop receiving tasks on 503 SQS error.
- Fix maybe declare
- Revert "Revert "Use SIMEMBERS instead of SMEMBERS to check for queue (Redis Broker)
- Fix MongoDB backend to work properly with TTL
- Make sure that max_retries=0 is treated differently than None
- Bump py-amqp to 2.5.1

(adam)

2019-09-02 09:55:50 UTC MAIN commitmail json YAML

py-amqp: updated to 2.5.1

2.5.1
- Ignore all methods except Close and Close-OK when channel/connection is closing
- Fix faulty ssl sni intiation parameters
- Undeprecate auto_delete flag for exchanges.
- Improved tests and testing environments

(adam)

2019-09-02 09:53:56 UTC MAIN commitmail json YAML

py-test-rerunfailures: added version 7.0

pytest-rerunfailures is a plugin for py.test that re-runs tests to eliminate
intermittent failures.

(adam)

2019-09-02 09:46:40 UTC MAIN commitmail json YAML

Updated devel/py-test-testmon, security/py-cryptodome

(adam)

2019-09-02 09:46:19 UTC MAIN commitmail json YAML

py-cryptodome: updated to 3.9.0

3.9.0:

New features
* Add support for loading PEM files encrypted with AES256-CBC.
* Add support for XChaCha20 and XChaCha20-Poly1305 ciphers.
* Add support for bcrypt key derivation function (`Crypto.Protocol.KDF.bcrypt`).
* Add support for left multiplication of an EC point by a scalar.
* Add support for importing ECC and RSA keys in the new OpenSSH format.

Resolved issues
* it was not possible to invert an EC point anymore.
* fix printing of DSA keys.
* `DSA.generate()` was not always using the `randfunc` input.
* the MD2 hash had block size of 64 bytes instead of 16; as result the HMAC construction gave incorrect results.

(adam)

2019-09-02 09:40:15 UTC MAIN commitmail json YAML

qt5: depend on qt5-qtspeech

(adam)

2019-09-02 09:38:59 UTC MAIN commitmail json YAML

qt5-qtspeech: add PLIST.Darwin; sort PLIST

(adam)

2019-09-02 09:20:42 UTC MAIN commitmail json YAML

py-test-testmon: updated to 0.9.18

v0.9.18:
Support for pytest 5.x

(adam)

2019-09-02 09:05:11 UTC MAIN commitmail json YAML

Updated multimedia/libogg, databases/slony1

(adam)

2019-09-02 09:04:05 UTC MAIN commitmail json YAML

slony1: updated to 2.2.8

Slony 2.2.8:
* Fixes for PG 12
* Makefile changes (vpath support)
* Win32 fixes to compile + removal of default HAVE_PGPORT from win32.mak
* Documentation fixes

(adam)

2019-09-02 08:58:57 UTC MAIN commitmail json YAML

libogg: updated to 1.3.4

Version 1.3.4:
* Faster slice-by-8 CRC32 implementation.
  see https://lwn.net/Articles/453931/ for motivation.
* Add CMake build.
* Deprecate Visual Studio project files in favor of CMake.
* configure --disable-crc option for fuzzing.
* Various build fixes.
* Documentation and example code fixes.

(adam)

2019-09-02 08:57:57 UTC MAIN commitmail json YAML

2019-09-02 08:55:08 UTC MAIN commitmail json YAML

2019-09-02 08:53:32 UTC MAIN commitmail json YAML

PR/54519: Greywolf: jove crashes on redraw or time update (include <time.h>)

(christos)

2019-09-02 08:51:29 UTC MAIN commitmail json YAML

PR/54520: Greywolf: jove 'shell' fails with [Out of ptys!], use openpty(3).

(christos)

2019-09-02 08:33:47 UTC MAIN commitmail json YAML

Updated archivers/py-zipp, misc/py-tqdm

(adam)

2019-09-02 08:33:29 UTC MAIN commitmail json YAML

py-tqdm: updated to 4.35.0

tqdm v4.35.0:
* add {bar} format specifier
* add tests and documentation
* update performance tests

(adam)

2019-09-02 08:31:17 UTC MAIN commitmail json YAML

py-zipp: updated to 0.6.0

v0.6.0

When adding implicit dirs, ensure that ancestral directories
are added and that duplicates are excluded.

The library now relies on more_itertools

(adam)

2019-09-02 07:56:45 UTC MAIN commitmail json YAML

Updated www/py-furl, devel/py-ipython

(adam)

2019-09-02 07:55:53 UTC MAIN commitmail json YAML

py-ipython: updated to 7.8.0

IPython 7.8.0 contain a few bugfix and 2 new APIs:
- Enable changing the font color for LaTeX rendering
- and Re-Expose some PDB API

(adam)

2019-09-02 07:52:49 UTC MAIN commitmail json YAML

py-furl: updated to 2.0.0

Furl v2.0.0

Added: All URL components (scheme, host, path, etc) to furl()'s constructor as
keyword arguments. E.g. f = furl(scheme='http', host='host', path='/lolsup').

Changed: furl.truediv() and Path.truediv() now mirror Pathlib.truediv()'s
behavior and return a new instance. The original instance is no longer modified.
Old behavior: f = furl('1'); f / '2' -> str(f) == '1'. New behavior:
f = furl('1'); f /= '2' -> str(f) == '1/2'.

Fixed: Path.load() now accepts Path instances, e.g. f.path.load(Path('hi')).

Removed: Support for Python 2.6, which reached EOL on 2013-10-29.

(adam)

2019-09-02 07:47:40 UTC MAIN commitmail json YAML

Added www/py-purl; Updated devel/py-requests-mock

(adam)

2019-09-02 07:34:54 UTC MAIN commitmail json YAML

py-requests-mock: updated to 1.7.0

1.7.0
* Keep blank values query string values on request history
* Add release notes for requests version pin
* Keep blank values
* Pin requests version to <3
* Add known issue for cookies in Sessions
* logger added to adapter.py

(adam)

2019-09-02 07:33:24 UTC MAIN commitmail json YAML

py-purl: added version 1.5

A simple, immutable URL class with a clean API for interrogation and
manipulation.

(adam)

2019-09-02 07:04:18 UTC MAIN commitmail json YAML

Updated security/py-asn1, textproc/py-text-unidecode

(adam)

2019-09-02 07:03:48 UTC MAIN commitmail json YAML

py-text-unidecode: updated to 1.3

1.3:
text-unidecode is now dual-licensed under Artistic License and GPL 1 / GPL 2+, to cause less problems for distributions. Choose license which fits better.
Declare Python 3.7 support, don't declare Python 3.3 support

(adam)

2019-09-02 07:00:39 UTC MAIN commitmail json YAML

py-asn1: updated to 0.4.7

Revision 0.4.7:

- Added `isInconsistent` property to all constructed types. This property
  conceptually replaces `verifySizeSpec` method to serve a more general
  purpose e.g. ensuring all required fields are in a good shape. By default
  this check invokes subtype constraints verification and is run by codecs
  on value de/serialisation.
- Deprecate `subtypeSpec` attributes and keyword argument. It is now
  recommended to pass `ValueSizeConstraint`, as well as all other constraints,
  to `subtypeSpec`.
- Fixed a design bug in a way of how the items assigned to constructed
  types are verified. Now if `Asn1Type`-based object is assigned, its
  compatibility is verified based on having all tags and constraint
  objects as the type in field definition. When a bare Python value is
  assigned, then field type object is cloned and initialized with the
  bare value (constraints verificaton would run at this moment).
- Added `WithComponentsConstraint` along with related
  `ComponentPresentConstraint` and `ComponentAbsentConstraint` classes
  to be used with `Sequence`/`Set` types representing
  `SET ... WITH COMPONENTS ...` like ASN.1 constructs.

(adam)

2019-09-02 02:59:48 UTC MAIN commitmail json YAML

mk/build: in build-env, output BUILD_DIRS relative to WRKSRC

(rillig)

2019-09-02 02:54:57 UTC MAIN commitmail json YAML

mk/build: for build-env, show the BUILD_DIRS

(rillig)

2019-09-02 02:36:46 UTC MAIN commitmail json YAML

doc: Updated textproc/bat to 0.12.0

(fox)

2019-09-02 02:36:22 UTC MAIN commitmail json YAML

bat: Update to 0.12.0

Changes since 0.11.0:

Features

  * Binary file content can now be viewed with bat -A
  * bat can now be used as a man pager.
  * Add new style component to separate multiple --line-ranges
  * Added -L as an alias for --list-languages

Bugfixes

  * Output looks unbalanced when using '--style=grid,numbers' without 'header'
  * issues with filenames starting with "cache"
  * Can't build cache with new theme without creating cache dir
  * --terminal-width -10 is parsed incorrectly

Other

  * Added fish completions to DEB package

New syntaxes

  * Emacs Org mode
  * requirements.txt
  * DotENV .env
  * SSH config syntax (-l ssh_config)
  * /etc/hosts
  * GraphQL
  * Verilog
  * SCSS and Sass
  * strace syntax

Packaging

  * bat is now in the official Gentoo repositories
  * bat is now in the official Alpine Linux repositories
  * bat is in the official Fedora repositories

(fox)

2019-09-02 02:23:03 UTC MAIN commitmail json YAML

2019-09-02 02:14:58 UTC MAIN commitmail json YAML

mk/mysql.buildlink3.mk: add missing BUILD_DEFS

(rillig)

2019-09-01 20:38:34 UTC MAIN commitmail json YAML

Explicitly disable EGL if MESALIB_SUPPORTS_EGL isn't yes.

Otherwise, the build fails.

(dholland)

2019-09-01 14:03:09 UTC MAIN commitmail json YAML

Added multimedia/dvd-vr version 0.9.7

(ryoon)

2019-09-01 14:02:26 UTC MAIN commitmail json YAML

2019-09-01 14:01:39 UTC MAIN commitmail json YAML

multimedia/dvd-vr: import dvd-vr-0.9.7

dvd-vr is a utility to identify and optionally copy recordings
from a DVD-VR format disc, which can be created by devices like
DVD recorders and camcorders.

(ryoon)

2019-09-01 13:13:14 UTC MAIN commitmail json YAML

doc: note update of mail/roundcube* packages to 1.3.10

mail/roundcube
mail/roundcube-plugin-enigma
mail/roundcube-plugin-password
mail/roundcube-plugin-zipdownload

(taca)

2019-09-01 13:11:47 UTC MAIN commitmail json YAML

mail/roundcube-plugin-zipdownload: update to 1.3.10

Update roundcube-plugin-password to 1.3.10.  No changes except version.

pkgsrc change: remove duplicated setting PLUGIN.

(taca)

2019-09-01 13:10:39 UTC MAIN commitmail json YAML

mail/roundcube-plugin-password: update to 1.3.10

Update roundcube-plugin-password to 1.3.10.  No changes except version.

pkgsrc change: remove duplicated setting PLUGIN.

(taca)

2019-09-01 13:08:56 UTC MAIN commitmail json YAML

mail/roundcube-plugin-enigma: update to 1.3.10

RELEASE 1.3.10
--------------
- Enigma: Fix bug where revoked users/keys were not greyed out in key info
- Enigma: Fix error message when trying to encrypt with a revoked key (#6607)
- Enigma: Fix "decryption oracle" bug [CVE-2019-10740] (#6638)

(taca)

2019-09-01 13:08:09 UTC MAIN commitmail json YAML

mail/roundcube: update to 1.3.10

RELEASE 1.3.10
--------------
- Managesieve: Fix so "Create filter" option does not show up when Filters menu is disabled (#6723)
- Fix compatibility with kolab/net_ldap3 > 1.0.7 (#6785)
- Fix bug where bmp images couldn't be displayed on some systems (#6728)
- Fix bug in parsing vCard data using PHP 7.3 due to an invalid regexp (#6744)
- Fix bug where bold/strong text was converted to upper-case on html-to-text conversion (6758)
- Fix bug in rcube_utils::parse_hosts() where %t, %d, %z could return only tld (#6746)
- Fix bug where Next/Prev button in mail view didn't work with multi-folder search result (#6793)
- Fix bug where selection of columns on messages list wasn't working
- Fix bug in converting multi-page Tiff images to Jpeg (#6824)
- Fix wrong messages order after returning to a multi-folder search result (#6836)
- Fix PHP 7.4 deprecation: implode() wrong parameter order (#6866)
- Fix bug where it was possible to bypass the position:fixed CSS check in received messages (#6898)
- Fix bug where some strict remote URIs in url() style were unintentionally blocked (#6899)
- Fix bug where it was possible to bypass the CSS jail in HTML messages using :root pseudo-class (#6897)
- Fix bug where it was possible to bypass href URI check with data:application/xhtml+xml URIs (#6896)

(taca)

2019-09-01 13:06:57 UTC MAIN commitmail json YAML

doc: php has updated

- php71-7.1.32, php72-7.2.22, php73-7.3.9.

Actually, these were php-{7.1.32,7.2.22,7.3.9}.

(taca)

2019-09-01 13:06:25 UTC MAIN commitmail json YAML

smalltalk: switch from removed glut to freeglut.

Bump PKGREVISION.

Untested.

(wiz)

2019-09-01 13:05:27 UTC MAIN commitmail json YAML

doc: note update of php languages

lang/php72 7.2.22
lang/php73 7.3.9
lang/php71 7.1.32

(taca)

2019-09-01 13:04:13 UTC MAIN commitmail json YAML

lang/php71: update to 7.1.32

29 Aug 2019, PHP 7.1.32

- mbstring:
  . Fixed CVE-2019-13224 (don't allow different encodings for onig_new_deluxe) (stas)

(taca)