Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (59m)  pkgsrc-2024Q1 (15d)  pkgsrc-2023Q4 (43d)  pkgsrc-2023Q2 (75d)  pkgsrc-2023Q3 (154d) 

2024-05-13 15:53:04 UTC Now

2019-08-09 15:46:29 UTC MAIN commitmail json YAML

R-tensorA: initial commit

Provides convenience functions for advanced linear algebra with
tensors and computation with datasets of tensors on a higher level
abstraction. It includes Einstein and Riemann summing conventions,
dragging, co- and contravariate indices, parallel computations on
sequences of tensors.

(brook)

2019-08-09 15:43:48 UTC MAIN commitmail json YAML

R-DEoptimR: initial commit

Differential Evolution (DE) stochastic algorithms for global
optimization of problems with and without constraints. The aim is to
curate a collection of its state-of-the-art variants that (1) do not
sacrifice simplicity of design, (2) are essentially tuning-free, and
(3) can be efficiently implemented directly in the R language.
Currently, it only provides an implementation of the 'jDE' algorithm
by Brest et al. (2006) <doi:10.1109/TEVC.2006.872133>.

(brook)

2019-08-09 15:42:02 UTC MAIN commitmail json YAML

R-energy: initial commit

E-statistics (energy) tests and statistics for multivariate and
univariate inference, including distance correlation, one-sample,
two-sample, and multi-sample tests for comparing multivariate
distributions, are implemented. Measuring and testing multivariate
independence based on distance correlation, partial distance
correlation, multivariate goodness-of-fit tests, k-groups and
hierarchical clustering based on energy distance, testing for
multivariate normality, distance components (disco) for non-parametric
analysis of structured data, and other energy statistics/methods are
implemented.

(brook)

2019-08-09 15:39:05 UTC MAIN commitmail json YAML

R-bayesm: initial commit

Covers many important models used in marketing and micro-econometrics
applications. The package includes: Bayes Regression (univariate or
multivariate dep var), Bayes Seemingly Unrelated Regression (SUR),
Binary and Ordinal Probit, Multinomial Logit (MNL) and Multinomial
Probit (MNP), Multivariate Probit, Negative Binomial (Poisson)
Regression, Multivariate Mixtures of Normals (including clustering),
Dirichlet Process Prior Density Estimation with normal base,
Hierarchical Linear Models with normal prior and covariates,
Hierarchical Linear Models with a mixture of normals prior and
covariates, Hierarchical Multinomial Logits with a mixture of normals
prior and covariates, Hierarchical Multinomial Logits with a Dirichlet
Process prior and covariates, Hierarchical Negative Binomial
Regression Models, Bayesian analysis of choice-based conjoint data,
Bayesian treatment of linear instrumental variables models, Analysis
of Multivariate Ordinal survey data with scale usage heterogeneity (as
in Rossi et al, JASA (01)), Bayesian Analysis of Aggregate Random
Coefficient Logit Models as in BLP (see Jiang, Manchanda, Rossi 2009)
For further reference, consult our book, Bayesian Statistics and
Marketing by Rossi, Allenby and McCulloch (Wiley 2005) and Bayesian
Non- and Semi-Parametric Methods and Applications (Princeton U Press
2014).

(brook)

2019-08-09 15:20:31 UTC MAIN commitmail json YAML

R-latex2exp: initial commit.

Parses and converts LaTeX math formulas to R's plotmath expressions,
used to enter mathematical formulas and symbols to be rendered as
text, axis labels, etc. throughout R's plotting system.

(brook)

2019-08-09 13:37:33 UTC pkgsrc-2019Q2 commitmail json YAML

Pullup ticket #6017 - requested by leot
net/youtube-dl: update

Revisions pulled up:
- net/youtube-dl/Makefile                                      1.177-1.182
- net/youtube-dl/PLIST                                          1.88-1.90
- net/youtube-dl/distinfo                                      1.160-1.165

---
  Module Name:    pkgsrc
  Committed By:  leot
  Date:          Sun Jun 30 19:26:32 UTC 2019

  Modified Files:
          pkgsrc/net/youtube-dl: Makefile PLIST distinfo

  Log Message:
  youtube-dl: Update to 20190627

  Changes:
  20190627
  --------
  Extractors
  + [go] Add support for disneynow.com (#21528)
  * [mixer:vod] Relax URL regular expression (#21531, #21536)
  * [drtv] Relax URL regular expression
  * [fusion] Fix extraction (#17775, #21269)
  - [nfb] Remove extractor (#21518)
  + [beeg] Add support for api/v6 v2 URLs (#21511)
  + [brightcove:new] Add support for playlists (#21331)
  + [openload] Add support for oload.life (#21495)
  * [vimeo:channel,group] Make title extraction non fatal
  * [vimeo:likes] Implement extrator in terms of channel extractor (#21493)
  + [pornhub] Add support for more paged video sources
  + [pornhub] Add support for downloading single pages and search pages (#15570)
  * [pornhub] Rework extractors (#11922, #16078, #17454, #17936)
  + [youtube] Add another signature function pattern
  * [tf1] Fix extraction (#21365, #21372)
  * [crunchyroll] Move Accept-Language workaround to video extractor since
    it causes playlists not to list any videos
  * [crunchyroll:playlist] Fix and relax title extraction (#21291, #21443)

---
  Module Name:    pkgsrc
  Committed By:  leot
  Date:          Wed Jul  3 10:36:06 UTC 2019

  Modified Files:
          pkgsrc/net/youtube-dl: Makefile distinfo

  Log Message:
  youtube-dl: Update to 20190702

  Changes:
  2019.07.02
  ----------
  Core
  + [utils] Introduce random_user_agent and use as default User-Agent (#21546)

  Extractors
  + [vevo] Add support for embed.vevo.com URLs (#21565)
  + [openload] Add support for oload.biz (#21574)
  * [xiami] Update API base URL (#21575)
  * [yourporn] Fix extraction (#21585)
  + [acast] Add support for URLs with episode id (#21444)
  + [dailymotion] Add support for DM.player embeds
  * [soundcloud] Update client id

---
  Module Name:    pkgsrc
  Committed By:  leot
  Date:          Thu Jul 11 18:56:16 UTC 2019

  Modified Files:
          pkgsrc/net/youtube-dl: Makefile PLIST distinfo

  Log Message:
  youtube-dl: Update to 20190712

  Changes:
  2019.07.12
  ----------
  Core
  + [adobepass] Add support for AT&T U-verse (mso ATT) (#13938, #21016)

  Extractors
  + [mgtv] Pass Referer HTTP header for format URLs (#21726)
  + [beeg] Add support for api/v6 v2 URLs without t argument (#21701)
  * [voxmedia:volume] Improvevox embed extraction (#16846)
  * [funnyordie] Move extraction to VoxMedia extractor (#16846)
  * [gameinformer] Fix extraction (#8895, #15363, #17206)
  * [funk] Fix extraction (#17915)
  * [packtpub] Relax lesson URL regular expression (#21695)
  * [packtpub] Fix extraction (#21268)
  * [philharmoniedeparis] Relax URL regular expression (#21672)
  * [peertube] Detect embed URLs in generic extraction (#21666)
  * [mixer:vod] Relax URL regular expression (#21657, #21658)
  + [lecturio] Add support id based URLs (#21630)
  + [go] Add site info for disneynow (#21613)
  * [ted] Restrict info regular expression (#21631)
  * [twitch:vod] Actualize m3u8 URL (#21538, #21607)
  * [vzaar] Fix videos with empty title (#21606)
  * [tvland] Fix extraction (#21384)
  * [arte] Clean extractor (#15583, #21614)

---
  Module Name:    pkgsrc
  Committed By:  leot
  Date:          Wed Jul 17 09:55:56 UTC 2019

  Modified Files:
          pkgsrc/net/youtube-dl: Makefile PLIST distinfo

  Log Message:
  youtube-dl: Update to 20190716

  Changes:
  2019.07.16
  ----------
  Extractors
  + [asiancrush] Add support for yuyutv.com, midnightpulp.com and cocoro.tv
    (#21281, #21290)
  * [kaltura] Check source format URL (#21290)
  * [ctsnews] Fix YouTube embeds extraction (#21678)
  + [einthusan] Add support for einthusan.com (#21748, #21775)
  + [youtube] Add support for invidious.mastodon.host (#21777)
  + [gfycat] Extend URL regular expression (#21779, #21780)
  * [youtube] Restrict is_live extraction (#21782)

  2019.07.14
  ----------
  Extractors
  * [porn91] Fix extraction (#21312)
  + [yandexmusic] Extract track number and disk number (#21421)
  + [yandexmusic] Add support for multi disk albums (#21420, #21421)
  * [lynda] Handle missing subtitles (#20490, #20513)
  + [youtube] Add more invidious instances to URL regular expression (#21694)
  * [twitter] Improve uploader id extraction (#21705)
  * [spankbang] Fix and improve metadata extraction
  * [spankbang] Fix extraction (#21763, #21764)
  + [dlive] Add support for dlive.tv (#18080)
  + [livejournal] Add support for livejournal.com (#21526)
  * [roosterteeth] Fix free episode extraction (#16094)
  * [dbtv] Fix extraction
  * [bellator] Fix extraction
  - [rudo] Remove extractor (#18430, #18474)
  * [facebook] Fallback to twitter:image meta for thumbnail extraction (#21224)
  * [bleacherreport] Fix Bleacher Report CMS extraction
  * [espn] Fix fivethirtyeight.com extraction
  * [5tv] Relax video URL regular expression and support https URLs
  * [youtube] Fix is_live extraction (#21734)
  * [youtube] Fix authentication (#11270)

---
  Module Name:    pkgsrc
  Committed By:  leot
  Date:          Sat Jul 27 20:22:53 UTC 2019

  Modified Files:
          pkgsrc/net/youtube-dl: Makefile distinfo

  Log Message:
  youtube-dl: Update to 20190727

  Changes:
  20190727
  --------
  Extractors
  + [yahoo:japannews] Add support for yahoo.co.jp (#21698, #21265)
  + [discovery] Add support go.discovery.com URLs
  * [youtube:playlist] Relax video regular expression (#21844)
  * [generic] Restrict --default-search schemeless URLs detection pattern
    (#21842)
  * [vrv] Fix CMS signing query extraction (#21809)

---
  Module Name:    pkgsrc
  Committed By:  leot
  Date:          Wed Jul 31 13:51:52 UTC 2019

  Modified Files:
          pkgsrc/net/youtube-dl: Makefile distinfo

  Log Message:
  youtube-dl: Update to 20190730

  Changes:
  20190730
  --------
  Extractors
  * [youtube] Fix and improve title and description extraction (#21934)

(bsiegert)

2019-08-09 13:25:41 UTC pkgsrc-2019Q2 commitmail json YAML

Pullup ticket #6016 - requested by abs
mail/exim: security fix

Revisions pulled up:
- mail/exim/Makefile                                            1.168
- mail/exim/distinfo                                            1.71

---
  Module Name:    pkgsrc
  Committed By:  abs
  Date:          Sun Jul 28 21:17:28 UTC 2019

  Modified Files:
          pkgsrc/mail/exim: Makefile distinfo

  Log Message:
  Updated mail/exim to 4.92.1

  Exim version 4.92.1
  -------------------

  JH/31 Avoid re-expansion in ${sort } expansion.
  (CVE-2019-13917, OVE-20190718-0006)

(bsiegert)

2019-08-09 13:16:07 UTC pkgsrc-2019Q2 commitmail json YAML

Pullup ticket #6015 - requested by nia
audio/jack: build fix

Revisions pulled up:
- audio/jack/buildlink3.mk                                      1.11

---
  Module Name: pkgsrc
  Committed By: nia
  Date: Fri Jul 26 11:47:00 UTC 2019

  Modified Files:
  pkgsrc/audio/jack: buildlink3.mk

  Log Message:
  jack: Add BDB_ACCEPTED to buildlink3.mk

(bsiegert)

2019-08-09 13:11:05 UTC pkgsrc-2019Q2 commitmail json YAML

Pullup ticket #6014 - requested by nia
audio/mpg123: security fix

Revisions pulled up:
- audio/mpg123/Makefile                                        1.58
- audio/mpg123/Makefile.common                                  1.49
- audio/mpg123/distinfo                                        1.49

---
  Module Name: pkgsrc
  Committed By: nia
  Date: Sat Jul 27 15:14:40 UTC 2019

  Modified Files:
  pkgsrc/audio/mpg123: Makefile Makefile.common distinfo

  Log Message:
  mpg123: Update to 1.25.11

  libmpg123:
  * Fix out-of-bounds reads in ID3 parser for unsynced frames. (oss-fuzz-bug 15852)
  * Fix out-of-bounds read for RVA2 frames with non-delimited identifier. (oss-fuzz-bug 15852)
  * Fix implementation-defined parsing of RVA2 values. (oss-fuzz-bug 15862)
  * Fix undefined parsing of APE header for skipping. Also prevent endless loop on premature end of supposed APE header. (oss-fuzz-bug 15864)
  * Fix some syntax to make pedantic compiler happy.

  The serious bugs trigger Denial of Service either via the nasty endless
  loop in supposed APE tags or by crashes if the invalid reads hit a
  diagnostic by the OS or, more likely, a security mechanism like the
  sanitizer instrumentation that enabled finding the bugs.

  I do not have CVE numbers for these bugs.
  I rather fix the bugs than name them. Just update, will you?

(bsiegert)

2019-08-09 13:09:32 UTC pkgsrc-2019Q2 commitmail json YAML

Pullup ticket #6013 - requested by bacon
devel/subversion: build fix

Revisions pulled up:
- devel/subversion/distinfo                                    1.113
- devel/subversion/patches/patch-configure                      1.5
- devel/subversion/patches/patch-subversion_bindings_swig_python_libsvn_swig_py_swigutil_py.c 1.1

---
  Module Name:    pkgsrc
  Committed By:  markd
  Date:          Wed Jul  3 10:42:54 UTC 2019

  Modified Files:
          pkgsrc/devel/subversion: distinfo
          pkgsrc/devel/subversion/patches: patch-configure
  Added Files:
          pkgsrc/devel/subversion/patches:
              patch-subversion_bindings_swig_python_libsvn_swig_py_swigutil_py.c

  Log Message:
  subversion: more reliable fix for APR 1.7.0

  From: Stefan Sperling <stsp%apache.org@localhost>
  Date: Fri, 12 Apr 2019 09:27:33 +0000
  Subject: [PATCH] Get rid of apr_int64_t format string check in swig py
    configure.

  This check relied on APR implementation details and broke with APR 1.7.0.
  Rather than trying to guess a perfect format string to use, just use the
  largest possible format and cast the argument accordingly.

  Should fix build against APR 1.7.0 and later.

  Suggested by: brane

  * build/ac-macros/swig.m4: Remove code related to SVN_APR_INT64_T_PYCFMT.

  * subversion/bindings/swig/python/libsvn_swig_py/swigutil_py.c
    (svn_swig_py_client_blame_receiver_func): Stop relying on the
      SVN_APR_INT64_T_PYCFMT constant from configure. Use "L" and
      acast to PY_LONG_LONG instead.

(bsiegert)

2019-08-09 12:59:26 UTC MAIN commitmail json YAML

Updated graphics/libimagequant, graphics/pngquant

(adam)

2019-08-09 12:59:03 UTC MAIN commitmail json YAML

2019-08-09 12:38:43 UTC pkgsrc-2019Q2 commitmail json YAML

Pullup ticket #6012 - requested by taca
mail/squirrelmail: security fix

Revisions pulled up:
- mail/squirrelmail/Makefile                                    1.137
- mail/squirrelmail/PLIST                                      1.42
- mail/squirrelmail/distinfo                                    1.71

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Wed Jul 24 03:49:35 UTC 2019

  Modified Files:
  pkgsrc/mail/squirrelmail: Makefile PLIST distinfo

  Log Message:
  mail/squirrelmail: update to 1.4.23pre14832

  Update squirrelmail to 1.4.23pre14832.

  - Changed anti-CSRF security token lifetime to be session-based.
  - Added favicon and ability for admins to use their own by setting
    $head_tag_extra in config_local.php (see documented comments in,
    for example, src/webmail.php)
  - Altered hook types "do_hook_function" and "concat_hook_function"
    such that the ultimate hook return value (in its current state,
    as computed (or not) by the plugins that have executed previously)
    is both globalized and passed as an additional argument to each
    plugin.  This allows plugins to cooperate better and not overwrite
    each other's return values.
  - Updated SVG handling, closing several related vulnerabilities
    (#2831) [CVE-2018-14950] [CVE-2018-14951] [CVE-2018-14952]
    [CVE-2018-14953] [CVE-2018-14954] [CVE-2018-14955]
  - Added IMAP ID command (RFC2971), sent after every login - use
    by setting $imap_id_command_args in config/config_local.php
    (see notes in functions/imap_general.php for more details)
  - Fixed PHP7 warnings (#2847)
  - Added handling for RCDATA and RAWTEXT elements in HTML sanitizer
    [CVE-2019-12970]

(bsiegert)

2019-08-09 12:03:28 UTC MAIN commitmail json YAML

Updated net/zeromq, net/py-zmq

(adam)

2019-08-09 12:03:17 UTC MAIN commitmail json YAML

2019-08-09 12:03:06 UTC MAIN commitmail json YAML

py-zmq: updated to 18.1.0

18.1.0
- Compatibility with Python 3.8 release candidate by regenerating Cython courses with Cython 0.29.13
- bump bundled libzmq to 4.3.2
- handle cancelled futures in asyncio
- make :meth:`zmq.Context.instance` fork-safe
- fix errors in :meth:`zmq.Context.destroy` when opening and closing many sockets

(adam)

2019-08-09 12:01:34 UTC MAIN commitmail json YAML

zeromq: updated to 4.3.2

libzmq 4.3.2

CVE-2019-13132: a remote, unauthenticated client connecting to a
libzmq application, running with a socket listening with CURVE
encryption/authentication enabled, may cause a stack overflow and
overwrite the stack with arbitrary data, due to a buffer overflow in
the library. Users running public servers with the above configuration
are highly encouraged to upgrade as soon as possible, as there are no
known mitigations. All versions from 4.0.0 and upwards are affected.
Thank you Fang-Pen Lin for finding the issue and reporting it!

New DRAFT (see NEWS for 4.2.0) zmq_socket_monitor_versioned API that supports
a versioned monitoring events protocol as a parameter. Passing 1 results in
the same behaviour as zmq_socket_monitor.
Version 2 of the events protocol allows new events, new metadata, different
socket types for the monitors and more. It is described in details in
doc/zmq_socket_monitor_versioned.txt

New DRAFT (see NEWS for 4.2.0) zmq_socket_monitor_pipes_stats that triggers
a new ZMQ_EVENT_PIPES_STATS to be delivered via zmq_socket_monitor_versioned
v2 API, which contains the current status of all the queues owned by the
monitored socket. See doc/zmq_socket_monitor_versioned.txt for details.

New DRAFT (see NEWS for 4.2.0) zmq_poller_fd that returns the FD of a thread
safe socket. See doc/zmq_poller.txt for details.

New DRAFT (see NEWS for 4.2.0) socket options:

ZMQ_XPUB_MANUAL_LAST_VALUE is similar to ZMQ_XPUB_MANUAL but allows to avoid
duplicates when using last value caching.
ZMQ_SOCKS_USERNAME and ZMQ_SOCKS_PASSWORD that implement SOCKS5 proxy
authentication.
See doc/zmq_setsockopt.txt and doc/zmq_getsockopt.txt for details.
Implemented background thread names for Windows, when the Visual Studio
debugger is being used.

Fixed 3358 - test_security_zap failing due to SIGBUS on SPARC64, hard-coded
IPC socket binds in tests cause race conditions

Fixed 3361 - enabling GSSAPI support (when using autools) does not work due
to regression introduced in 4.2.3

Fixed 3362 - remove documentation for ZMQ_THREAD_PRIORITY context option
getter, it's not implemented

Fixed 3363 - tests fail to build due to stricter compiler printf validation
in new versions of GCC

Fixed 3367 - try to infer cacheline size at build time, first with
getconf LEVEL1_DCACHE_LINESIZE, and then by reading
/sys/devices/system/cpu/cpu0/cache/index0/coherency_line_size
(autoconf only), and only then falling back to the previous
default of 64 bytes. Avoids false sharing on POWER and s390x.
Import ax_func_posix_memalign.m4 as a more reliable check for
posix_memalign presence on some unix platforms.
Prefer c++11 atomic primitives to compiler intrinsics, when
both are available, as the former is more reliable.
Set test_pair_ipc and test_rebind_ipc to XFAIL on GNU/Hurd due
to non-functioning getsockname on AF_UNIX.

Fixed 3370 - Make queue length and HWM state observable

Fixed 3373 - performance regression in zmq_poll on CentOS 6/7

Fixed 3375 - assign names to all pthreads created by the library to ease
debugging

Fixed 3376 - assigned random TIPC port is not returned by ZMQ_LAST_ENDPOINT

Fixed 3385 - TCP port in ZMQ_LAST_ENDPOINT depends on global locale

Fixed 3404 - use std::condition_variable_any when possible

Fixed 3436 - reconnect interval exponential backoff and may lead to integer
overflows

Fixed 3440 - improve zmq_proxy performance by batching of up to 1000
consecutive messages (if any) and add perf/proxy_thr tool

Fixed 3451 - fix support of /dev/poll on Solaris

Fixed 3452 - strnlen may not be available

Fixed 1462 - test failure in test_filter_ipc due to invalid system groups

Fixed 3269 - Boost.ASIO integration stopped working with v4.3.0

Fixed 3479 - ZeroMQ does not build for QNX 6.6 with CMake

Fixed 3481 - add include to fix uClibc++ compilation

Fixed 3491 - build broken on Fedora 30

Fixed 3494 - ZeroMQConfig.cmake fails if shared libraries are not built

Fixed 3498 - syntax error on Windows related to socket descriptor type

Fixed 3500 - PLAIN HELLO message incorrectly uses WELCOME literal, regression
introduced in 4.3.0

Fixed 3517 - configure errors because of syntax errors in the use of test
shell command

Fixed 3521 - document how to achieve high performance with the PGM transport

Fixed 3526 - failure case behavior unclear in zmq_msg_send documentation

Fixed 3537 - fix build on z/OS by using pthread_equal instead of comparing
variables directly

Fixed 3546 - CMake links with librt on MinGW which is not available

Many coding style, duplication, testing and static analysis improvements.

(adam)

2019-08-09 09:07:00 UTC MAIN commitmail json YAML

Updated devel/protobuf, devel/py-protobuf

(adam)

2019-08-09 09:06:34 UTC MAIN commitmail json YAML

[py-]protobuf: updated to 3.9.1

Protocol Buffers v3.9.1
Python
Drop building wheel for python 3.4

(adam)

2019-08-09 07:46:54 UTC MAIN commitmail json YAML

Updated misc/py-tqdm, devel/py-execnet, devel/py-packaging, textproc/py-yaml

(adam)

2019-08-09 07:46:31 UTC MAIN commitmail json YAML

py-yaml: updated to 5.1.2

5.1.2:
* Re-release of 5.1 with regenerated Cython sources to build properly for Python 3.8b2+

(adam)

2019-08-09 07:42:59 UTC MAIN commitmail json YAML

py-packaging: updated to 19.1

19.1:
* Add the packaging.tags module.
* Correctly handle two-digit versions in python_version

(adam)

2019-08-09 07:37:38 UTC MAIN commitmail json YAML

py-execnet: updated to 1.7.0

1.7.0:
Show paths in stack traces generated by remote_exec().
Fix flaky hangs in workerpool.waitall.

(adam)

2019-08-09 07:35:15 UTC MAIN commitmail json YAML

py-tqdm: updated to 4.33.0

tqdm v4.33.0 stable
fix pandas==0.25 API change
add contributor badges
fix py26 travis CI
metadata fixes
.zenodo.json
CODEOWNERS
GitHub package registry docker deployment
minor linting
documentation updates

(adam)

2019-08-08 21:18:43 UTC MAIN commitmail json YAML

Use https for kcat.strangesoft.net

(nia)

2019-08-08 21:17:48 UTC MAIN commitmail json YAML

2019-08-08 20:57:23 UTC MAIN commitmail json YAML

doc: Updated graphics/p5-GraphicsMagick to 1.3.33

(nia)

2019-08-08 20:57:00 UTC MAIN commitmail json YAML

doc: Updated graphics/GraphicsMagick to 1.3.33

(nia)

2019-08-08 20:56:40 UTC MAIN commitmail json YAML

{p5-}GraphicsMagick: Update to 1.3.33

1.3.33 (July 20, 2019)
==========================

Special Issues:

* It has been discovered that the 'ICU' library (a perhaps 30MB C++
  library) which is now often a libxml2 dependendency causes huge
  process initialization overhead.  This is noticed as unexpected
  slowness when GraphicsMagick utilities are used to process small to
  medium sized files.  The time to initialize is often longer than the
  time to read the input file, process the image, and write the output
  file.  If the 'ICU' dependency can not be avoided, then make sure to
  use the modules build.  Please lobby the 'ICU' library developers to
  change their implementation to avoid long start-up times due to
  merely linking with the library.

Security Fixes:

* GraphicsMagick is now participating in Google's oss-fuzz project due
  to the contributions and assistance of Alex Gaynor. Since February 4
  2018, 353 issues have been opened by oss-fuzz and 338 of those
  issues have been resolved.  The issues list is available at
  https://bugs.chromium.org/p/oss-fuzz/issues/list under search term
  "graphicsmagick".  Issues are available for anyone to view and
  duplicate if they have been in "Verified" status for 30 days, or if
  they have been in "New" status for 90 days.  There are too many
  fixes to list here.  Please consult the GraphicsMagick ChangeLog
  file, Mercurial repository commit log, and the oss-fuzz issues list
  for details.

* Documentation has been added regarding security hazards due to
  commands which support a '@filename' syntax.

* MontageImages(): Fix wrong length argument to strlcat() when
  building montage directory, which could allow heap overwrite.

Bug fixes:

* PNG: Pass correct size value to strlcat() in module registration
  code.  This bug is noticed to cause problems for Apple's OS X and
  Linux Alpine with musl libc.  This fixes a regression introduced by
  the 1.3.32 release.

* Re-implement command-line utility `'@'` file inclusion support for
  `-comment`, `-draw`, `-format`, and `-label` which was removed for
  the 1.3.32 release.  The new implementation is isolated to
  command-line utility implementation code rather than being deeply
  embedded in the library and exposed in other usage contexts.  This
  fixes a regression introduced by the 1.3.32 release.

* CAPTION: The The CAPTION reader did not appear to work at all any
  more.  Now it works again, but still not very well.

* MagickXDisplayImage(): Fix heap overwrite of windows->image.name and
  windows->image.icon_name buffers.  This bug has surely existed since
  early GraphicsMagick releases.

* MagickXAnimateImages(): Fix memory leak of scene_info.pixels.

* AcquireTemporaryFileDescriptor(): Fix compilation under Cygwin. This
  fixes a regression introduced by the 1.3.32 release.

* PNG: Fix saving to palette when mage has an alpha channel but no
  color is marked as transparent.

* Compilation warnings in the Visual Studio WIN64 build due to the
  'long' type being only 32-bits have been addressed.

New Features:

* None

API Updates:

* None

Feature improvements:

* None

Windows Delegate Updates/Additions:

* None

Build Changes:

* None

Behavior Changes:

* Support for `'@'` file inclusion support for `-comment`, `-draw`,
  `-format`, and `-label` has been restored.

(nia)

2019-08-08 20:55:04 UTC MAIN commitmail json YAML

Update all R packages to canonical form.

The canonical form [1] of an R package Makefile includes the
following:

- The first stanza includes R_PKGNAME, R_PKGVER, PKGREVISION (as
  needed), and CATEGORIES.

- HOMEPAGE is not present but defined in math/R/Makefile.extension to
  refer to the CRAN web page describing the package.  Other relevant
  web pages are often linked from there via the URL field.

This updates all current R packages to this form, which will make
regular updates _much_ easier, especially using pkgtools/R2pkg.

[1] pkg/2019/08/02/msg021711.html">http://mail-index.netbsd.org/tech-pkg/2019/08/02/msg021711.html

(brook)

2019-08-08 20:51:25 UTC MAIN commitmail json YAML

doc: Updated audio/musicpd to 0.21.13

(nia)

2019-08-08 20:51:08 UTC MAIN commitmail json YAML

musicpd: Update to 0.21.13

ver 0.21.13 (2019/08/06)
* input
  - cdio_paranoia: require libcdio-paranoia 10.2+0.93+1
* decoder
  - mad: fix crackling sound (0.21.12 regression)
* output
  - jack: improved Windows compatibility

ver 0.21.12 (2019/08/03)
* decoder
  - mad: update bit rate after seeking
  - mad: fix several bugs preventing the plugin from decoding the last frame
  - opus: ignore case in replay gain tag names
  - opus, vorbis: decode the "end of stream" packet
* output
  - jack: fix mono-to-stereo conversion
* player
  - don't restart unseekable song after failed seek attempt
* Windows
  - support backslash in relative URIs loaded from playlists

(nia)

2019-08-08 20:39:15 UTC MAIN commitmail json YAML

doc: Updated graphics/libraw to 0.19.4

(nia)

2019-08-08 20:38:57 UTC MAIN commitmail json YAML

libraw: Update to 0.19.4

Changes:

* CRW/metadata loop prevention code is rolled back due to ABI incompatibility. To enable, use -DLIBRAW_METADATA_LOOP_PREVENTION=1 compile flag for LibRaw and ALL APPS.
* Fixed possible buffer underflow

(nia)

2019-08-08 20:23:49 UTC MAIN commitmail json YAML

doc: Updated x11/xfce4-terminal to 0.8.8

(nia)

2019-08-08 20:23:29 UTC MAIN commitmail json YAML

xfce4-terminal: Update to 0.8.8

Changelog mostly seems to contain translation updates.

(nia)

2019-08-08 20:18:03 UTC MAIN commitmail json YAML

doc: Updated sysutils/vifm to 0.10.1

(nia)

2019-08-08 20:17:48 UTC MAIN commitmail json YAML

vifm: Update to 0.10.1

Changes:

* Added file preview to miller mode
* Added preview macro to directly output to terminal, which enables use of Sixel graphics for previewing
* Added udisks2 backend to vifm-media script (bundled script for managing media) and version of the script for OS X
* Updated code to make use of large amount of color pairs when available
* Functionality of previously separate neovim-vifm plugin got merged into the main plugin
* Multiple improvements to :media menu
* Improved performance in several use cases (quickview, lots of unhighlighted files, unnecessary cursor updates and redraws)

(nia)

2019-08-08 20:14:27 UTC MAIN commitmail json YAML

Update to version 0.6.

Changes since version 0.5:

* Improve the canonical format of an R package Makefile:

  - Place R_PKGNAME, R_PKGVER, and CATEGORIES in the first stanza.
  - Simplify CATEGORIES by defining common ones in Makefile.extension.
  - Use the default value of HOMEPAGE defined in Makefile.extension.

* Annotate generated comments with [R2pkg] to make them easier to find.

(brook)

2019-08-08 19:53:58 UTC MAIN commitmail json YAML

Update all R packages to canonical form.

The canonical form [1] of an R package Makefile includes the
following:

- The first stanza includes R_PKGNAME, R_PKGVER, PKGREVISION (as
  needed), and CATEGORIES.

- HOMEPAGE is not present but defined in math/R/Makefile.extension to
  refer to the CRAN web page describing the package.  Other relevant
  web pages are often linked from there via the URL field.

This updates all current R packages to this form, which will make
regular updates _much_ easier, especially using pkgtools/R2pkg.

[1] pkg/2019/08/02/msg021711.html">http://mail-index.netbsd.org/tech-pkg/2019/08/02/msg021711.html

(brook)

2019-08-08 16:47:26 UTC MAIN commitmail json YAML

net/unifi: Store blog URL

The content that belongs in NEWS are often in a blog.  Thanks to
thorpej@ for pointing this out; perhaps in-lieu-of-upstream-NEWS
contents will be better in future commits.

(gdt)

2019-08-08 13:41:24 UTC MAIN commitmail json YAML

doc: Added games/stone-soup-sdl version 0.23.2

(nia)

2019-08-08 13:41:00 UTC MAIN commitmail json YAML

doc: Added games/stone-soup version 0.23.2

(nia)

2019-08-08 13:40:30 UTC MAIN commitmail json YAML

Add games/stone-soup and games/stone-soup-sdl.

Based partially on work by Yorick Hardy in pkgsrc-wip.

Dungeon Crawl Stone Soup is an open-source, single-player, role-playing
roguelike game of exploration and treasure-hunting in dungeons filled with
dangerous and unfriendly monsters in a quest to rescue the mystifyingly
fabulous Orb of Zot.

(nia)

2019-08-08 13:24:41 UTC MAIN commitmail json YAML

net/unif: Improve comments

(gdt)

2019-08-08 13:18:13 UTC MAIN commitmail json YAML

doc: Updated net/unifi to 5.10.26

(gdt)

2019-08-08 13:18:06 UTC MAIN commitmail json YAML

net/unifi: Update to 5.10.26

Upstream lacks a changelog, but this appears to be bugfixes.

(gdt)

2019-08-08 11:42:23 UTC MAIN commitmail json YAML

erlang: Restore SunOS -shared fix lost in previous update.

(jperkin)

2019-08-08 10:33:28 UTC MAIN commitmail json YAML

bullet: Disable -lcompat on Linux and SunOS to fix the build.

XXX I'm not sure which other operating systems actually have libcompat

(nia)

2019-08-08 07:22:02 UTC MAIN commitmail json YAML

Updated devel/cmake

(adam)

2019-08-08 07:04:17 UTC MAIN commitmail json YAML

cmake: updated to 3.15.2

CMake 3.15.2
* Swift: Restore support for enabling with INTERFACE libraries
* VS: Fix mapping of `-Qspectre-` flag
* source_group: Fix regression in relative FILES
* clang: Restore support for clang-cl on non-Windows hosts
* fileapi: Fix codemodel target install destination for cross-dir rules
* clang: Work around toolchain file use of internal CMake variables
* Help: Add 3.15.2 release notes
* FindGLEW: Fix macOS library suffix selection
* FindGLEW: Add required OpenGL dependency in macOS
* FindGLEW: Fix typo in verbose log message
* find_package: Fix prefer-config mode to not fail on missing optional package

(adam)

2019-08-08 06:01:17 UTC MAIN commitmail json YAML

2019-08-08 06:00:19 UTC MAIN commitmail json YAML

multimedia/Makefile: add movit

(wiz)

2019-08-08 05:59:44 UTC MAIN commitmail json YAML

print/Makefile: remove removed tex-bezos*

(wiz)

2019-08-08 03:10:50 UTC MAIN commitmail json YAML

doc: Updated www/cliqz to 1.28.1

(fox)

2019-08-08 03:08:58 UTC MAIN commitmail json YAML

cliqz: update to 1.28.1

Changes since 1.28.0:

Set of minor updates from Cliqz

(fox)

2019-08-07 23:49:02 UTC MAIN commitmail json YAML

din: Fixes builds in Linux.

1. Should fix builds in Ubuntu, LIBS are appended correctly during link.

2. Bumps PKGREVISION.

(fox)

2019-08-07 23:44:32 UTC MAIN commitmail json YAML

fasttracker2: Fixes builds in Linux.

1. Should fix builds in Ubuntu / CentOS.

2. Rewrites the build system to use cmake.

3. Adds ALSA support in Linux.

4. Bumps PKGREVISION.

Thanks to nia@ for helping re-write the build system.

(fox)

2019-08-07 21:54:34 UTC MAIN commitmail json YAML

Add 'R' to the cateogries for R packages.

The category 'R' is used to denote R packages, just as 'perl5' and 'python'
are used in other cases.  To ensure consistency, add that to CATEGORIES in
Makefile.extension rather than in each individual R package.  This was
discussed in pkg/2019/08/02/msg021711.html.">http://mail-index.netbsd.org/tech-pkg/2019/08/02/msg021711.html.

(brook)

2019-08-07 21:48:01 UTC MAIN commitmail json YAML

R-IRkernel: remove a needless GITHUB_PROJECT line.

(brook)

2019-08-07 18:11:05 UTC MAIN commitmail json YAML

2019-08-07 18:06:33 UTC MAIN commitmail json YAML

doc: Added games/cataclysm-dda-sdl version 0.D

(nia)

2019-08-07 18:06:09 UTC MAIN commitmail json YAML

doc: Added games/cataclysm-dda version 0.D

(nia)

2019-08-07 18:05:25 UTC MAIN commitmail json YAML

Add games/cataclysm-dda.

Based partially on work by Yorick Hardy in pkgsrc-wip.

Cataclysm: Dark Days Ahead is a turn-based survival game set in a
post-apocalyptic world.

Struggle to survive in a harsh, persistent, procedurally generated world.

Scavenge the remnants of a dead civilization for food, equipment, or, if
you are lucky, a vehicle with a full tank of gas to get you the hell out of
Dodge.

Fight to defeat or escape from a wide variety of powerful monstrosities,
from zombies to giant insects to killer robots and things far stranger and
deadlier, and against the others like yourself, that want what you have...

(nia)

2019-08-07 15:52:13 UTC MAIN commitmail json YAML

sane-backends: PLIST fix for Darwin, which apparently enables another backend
(it's unclear why it only gets enabled on OS X)

From clement bouvier in PR pkg/54444.

(maya)

2019-08-07 13:59:09 UTC MAIN commitmail json YAML

widelands: Improve COMMENT

(nia)

2019-08-07 13:52:44 UTC MAIN commitmail json YAML

unrealircd: Avoid building the internal copy of Argon2.

The pkgsrc version was being used, but not being detected properly
by configure. I'm guessing the configure script is assuming Debian
version numbers or something.

(nia)

2019-08-07 13:30:37 UTC MAIN commitmail json YAML

unrealircd: Install some examples to a more sensible location.

While here, we probably don't need to regenerate the configure script
any more. So don't do that.

Bump PKGREVISION.

(nia)

2019-08-07 13:14:33 UTC MAIN commitmail json YAML

doc: Updated chat/unrealircd to 4.2.4.1

(nia)

2019-08-07 13:14:16 UTC MAIN commitmail json YAML

unrealircd: Update to 4.2.4.1

This release fixes a crash issue if UnrealIRCd is configured to use utf8 or
chinese character sets in set::allowed-nickchars. We don't expect many users
to run their IRCd with this enabled, as the utf8 support was tagged as
experimental and the chinese/gbk implementation is incomplete.

This release also contains a number of other fixes and enhancements.
In particular the reputation and connthrottle modules are now working
better and there were some major Windows fixes.

(nia)

2019-08-07 12:59:07 UTC MAIN commitmail json YAML

doc: Updated security/argon2 to 20190702

(nia)

2019-08-07 12:58:49 UTC MAIN commitmail json YAML

2019-08-07 12:27:56 UTC MAIN commitmail json YAML

Updated www/py-asgiref, multimedia/py-m3u8

(adam)

2019-08-07 12:27:40 UTC MAIN commitmail json YAML

py-m3u8: updated to 0.3.11

0.3.11:
Add FRAME-RATE tag on dumps
Stop using outdated Python versions (3.3, 3.4)

(adam)

2019-08-07 12:26:04 UTC MAIN commitmail json YAML

py-asgiref: updated to 3.2.1

3.2.1:
* sys.exc_info() is now propagated across thread boundaries

3.2.0:
* New "thread_sensitive" argument to SyncToAsync allows for pinning of code into
  the same thread as other thread_sensitive code.
* Test collection on Python 3.7 fixed

(adam)

2019-08-07 12:15:06 UTC MAIN commitmail json YAML

unknown-horizons: Improve COMMENT

(nia)

2019-08-07 12:13:30 UTC MAIN commitmail json YAML

TODO: -unknown-horizons

(nia)

2019-08-07 12:13:17 UTC MAIN commitmail json YAML

doc: Updated print/pdf2djvu to 0.9.13

(nia)

2019-08-07 12:13:01 UTC MAIN commitmail json YAML

pdf2djvu: Update to 0.9.13

pdf2djvu (0.9.13) unstable; urgency=low

  [ Jakub Wilk ]
  * Fix build failure with Poppler ≥ 0.76.
  * Improve warning message for (unhandled) hide actions.
  * Windows: fix reading files with non-ASCII characters in names.
    https://github.com/jwilk/pdf2djvu/issues/138
  * Upgrade libraries bundled with the Windows package:
    - Poppler 0.77;
    - FreeType 2.10;
    - OpenJPEG 2.3.1.
  * Improve the test suite:
    + Don't enforce the C locale.
    + Make it easy to pass arguments to nose.
      (make test noseargs=...)
  * Update the Polish translation.
  * Use HTTPS for exiv2.org URLs.
  * Update poppler-data URL.
  * Add support for heap profiling using gperftools.

  [ Samy Mahmoudi ]
  * Improve build-time logging.

-- Jakub Wilk <jwilk@jwilk.net>  Mon, 10 Jun 2019 19:06:35 +0200

pdf2djvu (0.9.12) unstable; urgency=low

  * Fix build failure with Poppler ≥ 0.72.
  * Improve the test suite.
  * Improve typography in the manual page.
  * Upgrade libraries bundled with the Windows package:
    - Poppler 0.72;
    - poppler-data 0.4.9;
    - GraphicsMagick 1.3.31;
    - FreeType 2.9.1;
    - Expat 2.2.6.
  * Windows: fix GraphicsMagick configuration search path.
  * Windows: install miscellaneous documentation files.
    Regression introduced in 0.8.1.
  * Windows build system: don't download sources without explicit user's
    consent.

-- Jakub Wilk <jwilk@jwilk.net>  Wed, 02 Jan 2019 16:46:27 +0100

pdf2djvu (0.9.11) unstable; urgency=low

  * Fix build failure with Poppler ≥ 0.70.
  * Improve error handling.
  * Improve the build system:
    + Fix Poppler (≥ 0.69) headers detection with old compilers that require
      the -std option to enable C++11 mode.
    + Honor the CPPFLAGS environment variable only at configure time, not when
      running make. (This was already the case for other *FLAGS variables.)
  * Improve the test suite:
    + Make it easy to use custom Python interpreter.
      (make test PYTHON=/path/to/python)
    + Make it easy to test against installed version of pdf2djvu.
      (make test-installed)
  * Improve documentation:
    + Use HTTPS for leon.bottou.org URL.

-- Jakub Wilk <jwilk@jwilk.net>  Thu, 25 Oct 2018 23:07:15 +0200

(nia)

2019-08-07 12:12:12 UTC MAIN commitmail json YAML

doc: Added games/unknown-horizons version 2019.1

(nia)

2019-08-07 12:07:35 UTC MAIN commitmail json YAML

Add games/unknown-horizons.

Unknown Horizons is a 2D real time strategy simulation with an emphasis on
economy and city building. Expand your small settlement to a strong and
wealthy colony, collect taxes and supply your inhabitants with valuable
goods. Increase your power with a well balanced economy and with strategic
trade and diplomacy.

(nia)

2019-08-07 11:48:37 UTC MAIN commitmail json YAML

doc: Added devel/fifengine version 0.4.2

(nia)

2019-08-07 11:48:16 UTC MAIN commitmail json YAML

Add devel/fifengine.

Flexible Isometric Free Engine (FIFE) is a multi-platform isometric game
engine written in C++. It comes with Python bindings allowing users to create
games using Python as well as C++.

(nia)

2019-08-07 11:45:04 UTC MAIN commitmail json YAML

doc: Added devel/fifechan version 0.1.5

(nia)

2019-08-07 11:44:40 UTC MAIN commitmail json YAML

Add devel/fifechan.

Fifechan is a lightweight cross platform GUI library written in C++ specifically
designed for games. It has a small yet powerful built in set of extendable
GUI Widgets allowing users to create virtually unlimited types of widgets.

(nia)

2019-08-07 08:53:36 UTC MAIN commitmail json YAML

7kaa: Attempt to fix linking on SunOS

(nia)

2019-08-07 08:45:33 UTC MAIN commitmail json YAML

doc: Updated games/easyrpg-player to 0.6.1

(nia)

2019-08-07 08:45:03 UTC MAIN commitmail json YAML

doc: Updated games/liblcf to 0.6.1

(nia)

2019-08-07 08:44:50 UTC MAIN commitmail json YAML

2019-08-07 07:34:48 UTC MAIN commitmail json YAML

Updated lang/nodejs, lang/npm

(adam)

2019-08-07 07:34:32 UTC MAIN commitmail json YAML

npm: updated to 6.10.3

v6.10.3:
BUGFIXES
vulns → vulnerabilities in npm audit output
install, doctor: don't crash if registry unset
Handle unhandledRejections, tell user what to do when encountering an EACCES error in the cache.

(adam)

2019-08-07 07:33:25 UTC MAIN commitmail json YAML

nodejs: updated to 10.16.2

Version 10.16.2 'Dubnium' (LTS)

Notable changes

This release patches a regression in the OpenSSL upgrade to 1.1.1c that causes intermittent hangs in machines that have low entropy.

(adam)

2019-08-06 22:15:24 UTC MAIN commitmail json YAML

widelands: Correct MASTER_SITES

(nia)

2019-08-06 22:10:51 UTC MAIN commitmail json YAML

TODO: -xine-plugin, this type of plugin no longer works in firefox

(nia)

2019-08-06 20:58:48 UTC MAIN commitmail json YAML

more tex updates

(markd)

2019-08-06 20:55:22 UTC MAIN commitmail json YAML

2019-08-06 20:50:26 UTC MAIN commitmail json YAML

2019-08-06 20:38:25 UTC MAIN commitmail json YAML

TODO: -ManaPlus, +Shotcut

(nia)

2019-08-06 20:36:10 UTC MAIN commitmail json YAML

doc: Added games/manaplus version 1.9.3.23

(nia)

2019-08-06 20:35:48 UTC MAIN commitmail json YAML

Add games/manaplus.

ManaPlus is a free, open source 2D MMORPG client for Evol Online, The Mana
World, and similar servers.

Evol Online is a 2D fantasy-style game which aims to create a friendly
environment for interacting with others where people can escape reality and
enjoy themselves. The Mana World (TMW) is a serious effort to create an
innovative free and open source MMORPG. TMW uses 2D graphics and aims to
create a large and diverse interactive world.

(nia)

2019-08-06 20:01:04 UTC MAIN commitmail json YAML

Updated math/py-numba

(adam)

2019-08-06 20:00:42 UTC MAIN commitmail json YAML

py-numba: updated to 0.45.1

Version 0.45.1
This patch release addresses some regressions reported in the 0.45.0 release and adds support for NumPy 1.17:

* accept scalar/0d-arrays
* Fix. Parfors reduction vars not deleted.
* Use process level locks for fork() only.
* Try to fix.
* Fix np1.17 isnan, isinf, isfinite ufuncs
* Fix np.interp for np1.17 nan handling
* Fix nump1.17 random function non-aliasing

Version 0.45.0
In this release, Numba gained an experimental numba.typed.List container as a future replacement of the reflected list. In addition, functions decorated with parallel=True can now be cached to reduce compilation overhead associated with the auto-parallelization.

Enhancements from user contributed PRs (with thanks!):

James Bourbeau added the Numba version to reportable error messages, added the signature parameter to inspect_types, improved the docstring of normalize_signatur, and fixed by adding reference counting to register_dispatcher
Guilherme Leobas implemented the dominator tree and dominance frontier algorithms
Nick White fixed the issue with round in the CUDA target.
Joshua Adelman added support for determining if a value is in a range (i.e. x in range(...)), and added windowing functions (np.bartlett, np.hamming, np.blackman, np.hanning, np.kaiser) from NumPy.
Lucio Fernandez-Arjona added support for np.select
Rob Ennis added support for np.flatnonzero
Keith Kraus extended the __cuda_array_interface__ with an optional mask attribute.
Gregory R. Lee replaced deprecated use of inspect.getargspec

(adam)

2019-08-06 19:43:36 UTC MAIN commitmail json YAML

TODO: Remove widelands

(nia)

2019-08-06 19:43:02 UTC MAIN commitmail json YAML

doc: Added games/widelands version 20

(nia)

2019-08-06 19:42:20 UTC MAIN commitmail json YAML

Add games/widelands.

Widelands is a free, open source real-time strategy game with singleplayer
campaigns and a multiplayer mode. The game was inspired by Settlers II but
has significantly more variety and depth to it. Still, it is easy to get
started through playable tutorials.

(nia)

2019-08-06 14:13:25 UTC pkgsrc-2018Q3 commitmail json YAML

gcc7, gcc7-libs: revert previous change to wrong branch.
Suggested by joerg.

(maya)

2019-08-06 14:05:26 UTC MAIN commitmail json YAML

doc: Updated lang/gcc7 to 7.4.0nb1

(maya)

2019-08-06 14:05:05 UTC MAIN commitmail json YAML

gcc7: use system zlib, and declare a dependency on it.

this might be the cause of weird missing -lz on the latest SmartOS bulk
build, which appears to use this package (e.g. graphics/glitz).

Bump PKGREVISION.

(maya)

2019-08-06 13:56:20 UTC pkgsrc-2018Q3 commitmail json YAML

gcc7: declare dependency on zlib, and tell gcc to use the system zlib.
this might be the cause of weird missing -lz on the latest SmartOS bulk
build, which appears to use this package.

Bump PKGREVISION.
Make sure gcc7-libs PKGREVISION > gcc7 PKGREVISION
(This was not the case before)

(maya)

2019-08-06 11:31:37 UTC MAIN commitmail json YAML

2019-08-06 11:29:55 UTC MAIN commitmail json YAML

tex-opensans{,-doc}: upddate to 2.2

- Complete rewrite of the TeX metric file generation (otftotfm is now
  used instead of fontinst)
- Support for XeLaTeX and LuaLaTeX
- Add bold condensed font
- Improve support for figure variant selection
- Drop faked smallcaps support
- Fix kerning with uppercase Greek diacritics
- Add "scaled" alias option
- Fix NFSS shape for condensed fonts

- Fix ligatures for hyphens
- Fix font family definition with proportional numbers
- Fix font name in XeLaTeX/LuaLaTeX mode

(markd)

2019-08-06 11:18:16 UTC MAIN commitmail json YAML

2019-08-06 11:14:06 UTC MAIN commitmail json YAML

tex-lato{,-doc}: update to 3.3

- Fix OT1 encoding with italic shape
- Fix packaging according to CTAN guidelines
- Fix kerning with uppercase Greek diacritics
- Add "scaled" alias option

- Fix ligatures for hyphens

(markd)

2019-08-06 11:13:16 UTC MAIN commitmail json YAML

doc: Updated math/bc-gh to 2.1.0

(gdt)

2019-08-06 11:13:07 UTC MAIN commitmail json YAML

math/bc-gh: Update to 2.1.0

Upstream changes:

This release is a production release.

The following bugs were fixed:

    A dc bug that caused stack mishandling was fixed.

    A warning on OpenBSD was fixed.

    Bugs in ctrl+arrow operations in history were fixed.

    The ability to paste multiple lines in history was added.

    A bc bug, mishandling of array arguments to functions, was fixed.

    A crash caused by freeing the wrong pointer was fixed.

    A dc bug where strings, in a rare case, were mishandled in parsing was fixed.

In addition, the following changes were made:

    Division was slightly optimized.

    An option was added to the build to disable printing of prompts.

    The special case of empty arguments is now handled. This is to
    prevent errors in scripts that end up passing empty arguments.

    A harmless bug was fixed. This bug was that, with the pop
    instructions (mostly) removed (see below), bc would leave extra
    values on its stack for void functions and in a few other
    cases. These extra items would not affect anything put on the
    stack and would not cause any sort of crash or even buggy
    behavior, but they would cause bc to take more memory than it
    needed.

On top of the above changes, the following optimizations were added:

    The need for pop instructions in bc was removed.

    Extra tests on every iteration of the interpreter loop were removed.

    Updating function and code pointers on every iteration of the
    interpreter loop was changed to only updating them when necessary.

    Extra assignments to pointers were removed.

Altogether, these changes sped up the interpreter by around 2x.

NOTE: This is the last release with new features because this bc is
now considered complete. From now on, only bug fixes and new
translations will be added to this bc.

(gdt)

2019-08-06 11:09:17 UTC MAIN commitmail json YAML

2019-08-06 11:02:48 UTC MAIN commitmail json YAML

tex-cantarell{,-doc}: update to 3.2

- Fix OT1 encoding with slanted shape
- Fix packaging according to CTAN guidelines
- Update font files to version 0.111
- Complete rewrite of the TeX metric file generation (otftotfm is now
  used instead of fontinst)
- Support for XeLaTeX and LuaLaTeX
- Add support for figure variant selection
- Drop faked smallcaps support
- Add "scaled" alias option

- Fix ligatures for hyphens

(markd)

2019-08-06 10:56:37 UTC MAIN commitmail json YAML

tex-comfortaa{,-doc}: update to 3.2

- Update .ttf files to version 3.001
- Complete rewrite of the TeX metric file generation (otftotfm is now
  used instead of fontinst)
- Support for XeLaTeX and LuaLaTeX
- Drop faked smallcaps support
- Fix kerning with uppercase Greek diacritics
- Add "scaled" alias option

- Fix OT1 encoding with slanted shape
- Fix packaging according to CTAN guidelines

- Fix ligatures for hyphens

(markd)

2019-08-06 10:50:03 UTC MAIN commitmail json YAML

2019-08-06 10:45:44 UTC MAIN commitmail json YAML

tex-xskak{,-doc}: update to 1.5

- The source of the documentation has been added, so that
  it can now be included in TeX Live.

- A missing command has been added.

- A missing space in a style has been added.

- A few typos in the documentation have been corrected.

- Examples for the predefined styles have been added.

- References to older skak versions have been removed.

- The code is now on github.

(markd)

2019-08-06 10:38:22 UTC MAIN commitmail json YAML

2019-08-06 10:33:30 UTC MAIN commitmail json YAML

2019-08-06 10:25:59 UTC MAIN commitmail json YAML

2019-08-06 10:19:34 UTC MAIN commitmail json YAML

2019-08-06 10:11:21 UTC MAIN commitmail json YAML

2019-08-06 09:50:31 UTC MAIN commitmail json YAML

Updated www/py-pylint-django, devel/py-flaky

(adam)

2019-08-06 09:50:12 UTC MAIN commitmail json YAML

py-flaky: updated to 3.6.0

3.6.0:
Do not print an empty report if no tests marked 'flaky' were run at all. NOTE: This change could be breaking if you relied on the flaky report being printed.

(adam)

2019-08-06 09:47:24 UTC MAIN commitmail json YAML

py-pylint-django: updated to 2.0.11

Version 2.0.11:
- Use functools.wrap to preserve leave_module info

(adam)

2019-08-06 09:33:19 UTC MAIN commitmail json YAML

Updated www/py-django, www/py-django2

(adam)

2019-08-06 09:33:00 UTC MAIN commitmail json YAML

py-django2: updated to 2.2.4

Django 2.2.4:
* CVE-2019-14232: Denial-of-service possibility in django.utils.text.Truncator
* CVE-2019-14233: Denial-of-service possibility in strip_tags()
* CVE-2019-14234: SQL injection possibility in key and index lookups for JSONField/HStoreField
* CVE-2019-14235: Potential memory exhaustion in django.utils.encoding.uri_to_iri()
* Fixed a regression in Django 2.2 when ordering a QuerySet.union(), intersection(), or difference() by a field type present more than once results in the wrong ordering being used
* Fixed a migration crash on PostgreSQL when adding a check constraint with a contains lookup on DateRangeField or DateTimeRangeField, if the right hand side of an expression is the same type
* Fixed a regression in Django 2.2 where auto-reloader crashes if a file path contains nulls characters ('\x00')
* Fixed a regression in Django 2.2 where auto-reloader crashes if a translation directory cannot be resolved

(adam)

2019-08-06 09:30:46 UTC MAIN commitmail json YAML

py-django: updated to 1.11.23

Django 1.11.23:
* CVE-2019-14232: Denial-of-service possibility in django.utils.text.Truncator
* CVE-2019-14233: Denial-of-service possibility in strip_tags()
* CVE-2019-14234: SQL injection possibility in key and index lookups for JSONField/HStoreField
* CVE-2019-14235: Potential memory exhaustion in django.utils.encoding.uri_to_iri()

(adam)

2019-08-06 09:27:31 UTC MAIN commitmail json YAML

libusb: revert previous patch. this code is not doing unaligned access.

PR pkg/54441

(maya)

2019-08-06 09:12:36 UTC MAIN commitmail json YAML

doc: Updated devel/libusb to 0.1.12nb6

(maya)

2019-08-06 09:12:10 UTC MAIN commitmail json YAML

libusb: avoid unaligned access. Improve code consistency.
XXX does this package also need -O1 -fno-strict-aliasing on clang?

Noted by Shingo Nishioka in PR pkg/54441

(maya)

2019-08-06 08:50:49 UTC MAIN commitmail json YAML

doc: Updated devel/libusb1 to 1.0.22nb1

(maya)

2019-08-06 08:50:28 UTC MAIN commitmail json YAML

libusb1: patch some undefined behaviour, disable strict aliasing, change
-O2 to -O1 when building with clang.

This isn't in a separate hacks.mk file because I think that hides the
problem too much, it's an issue with the code in the package, not with
the compiler's choices.

Fixes functionality when built with clang.

From Shingo Nishioka in PR pkg/54441.

(maya)

2019-08-06 07:52:03 UTC MAIN commitmail json YAML

Updated devel/jemalloc, multimedia/ffmpeg4

(adam)

2019-08-06 07:51:33 UTC MAIN commitmail json YAML

ffmpeg4: updated to 4.2

version 4.2:
- tpad filter
- AV1 decoding support through libdav1d
- dedot filter
- chromashift and rgbashift filters
- freezedetect filter
- truehd_core bitstream filter
- dhav demuxer
- PCM-DVD encoder
- GIF parser
- vividas demuxer
- hymt decoder
- anlmdn filter
- maskfun filter
- hcom demuxer and decoder
- ARBC decoder
- libaribb24 based ARIB STD-B24 caption support (profiles A and C)
- Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
- removed libndi-newtek
- agm decoder
- KUX demuxer
- AV1 frame split bitstream filter
- lscr decoder
- lagfun filter
- asoftclip filter
- Support decoding of HEVC 4:4:4 content in vdpau
- colorhold filter
- xmedian filter
- asr filter
- showspatial multimedia filter
- VP4 video decoder
- IFV demuxer
- derain filter
- deesser filter
- mov muxer writes tracks with unspecified language instead of English by default
- add support for using clang to compile CUDA kernels

(adam)

2019-08-06 07:50:24 UTC MAIN commitmail json YAML

jemalloc: updated to 5.2.1

5.2.1

This release is primarily about Windows. A critical virtual memory leak is resolved on all Windows platforms. The regression was present in all releases since 5.0.0.

Bug fixes:

Fix a severe virtual memory leak on Windows. This regression was first released in 5.0.0.
Fix size 0 handling in posix_memalign(). This regression was first released in 5.2.0.
Fix the prof_log unit test which may observe unexpected backtraces from compiler optimizations. The test was first added in 5.2.0.
Fix the declaration of the extent_avail tree. This regression was first released in 5.1.0.
Fix an incorrect reference in jeprof. This functionality was first released in 3.0.0.
Fix an assertion on the deallocation fast-path. This regression was first released in 5.2.0.
Fix the TLS_MODEL attribute in headers. This regression was first released in 5.0.0.

Optimizations and refactors:

Implement opt.retain on Windows and enable by default on 64-bit.
Optimize away a branch on the operator delete path.
Add format annotation to the format generator function.
Refactor and improve the size class header generation.
Remove best fit.
Avoid blocking on background thread locks for stats.

(adam)

2019-08-06 06:57:30 UTC MAIN commitmail json YAML

Updated databases/mysql56-client, databases/mysql56-server, databases/mysql57-client, databases/mysql57-server

(adam)

2019-08-06 06:56:43 UTC MAIN commitmail json YAML

mysql57: updated to 5.7.27

Changes in MySQL 5.7.27:

Keyring Notes

The keyring_aws plugin has been updated to use the latest AWS SDK and so that it works with OpenSSL 1.1.

Packaging Notes

Binary packages that include curl rather than linking to the system curl library now use curl 7.64.0.

X Plugin Notes

On Windows, X Plugin logged some messages that were unnecessary or insufficiently informative. The messages have been removed or improved as appropriate.

Functionality Added or Changed

Microsoft Windows: A new warning message now reminds DBAs that connections made using the MySQL named pipe on Windows has limited the permissions a connector can request on the named pipe.

Previously, the named_pipe_full_access_group system variable was set to a value that maps to the built-in Windows Everyone group (SID S-1-1-0) by default. However, this group is not ideal and should be replaced with a group that restricts its membership for connectors that are unable to request fewer permissions on the MySQL named pipe.

The new warning is written to the error log at startup if the string value assigned to named_pipe_full_access_group is '*everyone*' (or the Windows System Language equivalent) and named pipes are enabled. In addition, the warning is written to the error log and raised to the client if the system variable is reset to the Everyone group at runtime.

Bugs Fixed

InnoDB: Insufficient memory barriers in the rw-lock implementation caused deadlocks on ARM.

Thanks to Yibo Cai from Arm Technology for the contribution.

InnoDB: Manually changing the system time while the MySQL server was running caused page cleaner thread delays.

InnoDB: During log application, after an OPTIMIZE TABLE operation, InnoDB did not populate virtual columns before checking for virtual column index updates.

InnoDB: An INSERT operation involving a generated virtual BLOB column resulted a secondary index being updated with an incorrect value.

InnoDB: A full-text cache lock taken when data is synchronized was not released if the full-text cache size exceeded the full-text cache size limit.

InnoDB: Client sessions using different auto_increment_increment values while performing concurrent insert operations could cause a duplicate key error.

Partitioning: ALTER TABLE ... EXCHANGE PARTITION failed with the error Non matching attribute 'ROW_FORMAT' between partition and table when the partitioned table had partitions using different row formats, even when the partition to be exchanged used the same row format as the non-partitioned table.

Replication: The error message that is issued for a discrepancy between the number of group members and the auto-increment interval incorrectly referred to the group_replication_auto_increment_increment system variable, instead of the auto_increment_increment system variable. The value of auto_increment_increment is changed to the value specified by group_replication_auto_increment_increment when Group Replication starts, but only if auto_increment_increment and auto_increment_offset have their default values, and from MySQL 8.0, only in multi-primary mode. The value of auto_increment_increment was always the value that was checked for the error message, and it has now been corrected to give the accurate system variable name.

Replication: When events generated by one MySQL server instance were written to the binary log of another instance, the second server implicitly assumed that the first server supported the same number of binary log event types as itself. Where this was not the case, the event header was handled incorrectly. The issue has now been fixed. Thanks to Facebook for the contribution.

Replication: In Group Replication, joining members could wrongly identify themselves as incompatible with an existing replication group even if there were members at the same version already in the group, because they checked against all other members, including the member at the highest version. Joining members also included their own version in the compatibility check. Now, joining members only compare themselves with the existing group member at the lowest version, and do not count their own version.

Replication: If a FLUSH LOGS statement was issued before the binary log file was initialized, the statement attempted to write a binary log rotation event to the uninitialized file. The server now checks first that a binary log file is available.

Replication: When a MEMORY table is implicitly deleted on a master following a server restart, the master writes a DELETE statement to the binary log so that slaves also empty the table. This generated event now includes a comment in the binary log so that the reason for the DELETE statement is easy to identify. Thanks to Daniè°·l van Eeden for the contribution.

Replication: With statement-based replication in use, if super_read_only was set to ON for a server at the point when a no-op transaction was between its UPDATE and COMMIT operations, the transaction was written to the binary log and assigned a GTID. The transaction is now blocked in this situation. From MySQL 8.0, the value of super_read_only cannot be changed while a transaction is in progress.

Replication: The group communication engine for Group Replication (XCom, a Paxos variant) did not handle out of memory errors in an appropriate way. If memory could not be allocated to make a copy of the payload for a message, an error was logged but the message was still sent, with a null payload. The Group Communication System (GCS) on the receiving member discarded the message as empty, and the XCom instance on the receiving member accepted this action and did not retry, resulting in the message effectively being skipped. This caused the GTID set on the receiving member to diverge from the group, leading to replication errors. XCom now terminates gracefully if it experiences an out of memory error, so that this situation cannot occur.

Replication: In query log events in the binary log, the thread ID used for the execution of DROP TABLE and DELETE statements was identified incorrectly or not at all. On a multi-threaded replication slave, where temporary tables were involved (which require the correct thread ID as they are session specific), this omission resulted in errors when using mysqlbinlog to replay the binary log for point-in-time recovery. The thread ID is now set correctly.

Replication: When a slave server logs master status and connection information to a table (master_info_repository=TABLE), which is the default in MySQL 8.0, the mysql.slave_master_info table was not being updated on shutdown if the server was in super read only mode (super_read_only=ON). No error was written to the error log at this time, but replication failed after server startup because the master log file and master log position information was out of date. The thread that updates the master info log at shutdown is now excluded from read-only checks like other replication threads are, so it can update the table even if the server is in super read only mode. Error handling for a slave that is shutting down has also been improved so that any failure to write to the slave status logs results in an error in the error log.

An overly strict assertion could be raised during sorting of stored program local objects.

Installing from RPM packages could result in an error log with incorrect permissions.

Enabling audit log encryption could cause a server exit.

On Debian and Ubuntu, MySQL packages did not enable mysql.service after upgrades from native MySQL packages.

The server did not properly close shared-memory connections when an error occurred, which could result in unexpected server behavior.

MySQL Installer did not install OpenSSL DLL dependencies if the Development component was not selected.

The parser could leak memory for certain multiple-statement queries.

CREATE USER and ALTER USER did not check the validity of a hashed authentication string when used with IDENTIFIED WITH auth_plugin AS 'hash_string' syntax.

For InnoDB tables that contained an index on a VARCHAR column and were created prior to MySQL 5.7.23, some simple ALTER TABLE statements that should have been done in place were performed with a table rebuild after an upgrade to MySQL 5.7.23 or higher.

HANDLER statements did not always work correctly with tables having generated columns.

Session-tracking information in the client/server protocol could be mishandled.

With the PAD_CHAR_TO_FULL_LENGTH SQL mode enabled, password changes failed, with no warning or error reported.

The audit_log plugin did not log UNINSTALL PLUGIN audit_log statements.

audit_log filtering operations could leak memory.

An index defined on a virtual generated column could fail to be updated if the column had a base column in a foreign key relationship.

Privileges for dropping some Performance Schema tables were checked incorrectly.

A query that employed a derived table which included an ORDER BY was not always handled correctly.

Base columns were not excluded from index-only access by a generated column.

A thread pool group could be blocked when a thread process tick time exceeded the maximum permitted value. The tick time now uses a larger data type to permit larger values.

MySQL does not support OpenSSL session tickets, but did not set the SSL_OP_NO_TICKET flag to inform OpenSSL of that. The flag is now set.

The audit_null plugin did not properly check for a null event record.

UpdateXML() did not always free memory properly in certain cases.

Empty values in the name column of the mysql.plugin system table caused the server to exit during startup.

With the thread_pool plugin enabled, the Performance Schema status_by_thread table contained no data.

If an INSTALL PLUGIN statement contained invalid UTF-8 characters in the shared library name, it caused the server to hang (or to raise an assertion in debug builds).

Inner tables of different semijoin nests were interleaved during materialization, which could lead to a different result for the same query when it used a different query plan. To keep this from occurring, a check is added to prevent such interleaving.

A query involving GROUP BY on a TIMESTAMP column resulted in a duplicate entry for key (ER_DUP_ENTRY) error. This problem arose when TIMESTAMP values were inserted into a table using a given setting for the time zone and these values were later fetched after the time zone setting had been changed, such that at least some of the inserted TIMESTAMP values occurred during the hour that the time changed from standard to daylight time (DST) in the new time zone, during which time the same TIMESTAMP value can exist twice. Now, when the server would otherwise return the error DUPLICATE ENTRY FOR KEY 'group_key', if the grouping involves a TIMESTAMP column, it instead raises the error Grouping on temporal is non-deterministic for time zones having DST. Please consider switching to UTC for this query.

In addition, it is suggested to set explicit_defaults_for_timestamp to ON as well as one or more of MODE_NO_ZERO_IN_DATE, MODE_NO_ZERO_DATE, or MODE_INVALID_DATES as part of the server SQL mode to help avoid this issue.

(adam)

2019-08-06 06:55:15 UTC MAIN commitmail json YAML

mysql56: updated to 5.6.45

Changes in MySQL 5.6.45:

Functionality Added or Changed

Microsoft Windows: A new warning message now reminds DBAs that connections made using the MySQL named pipe on Windows has limited the permissions a connector can request on the named pipe.

Previously, the named_pipe_full_access_group system variable was set to a value that maps to the built-in Windows Everyone group (SID S-1-1-0) by default. However, this group is not ideal and should be replaced with a group that restricts its membership for connectors that are unable to request fewer permissions on the MySQL named pipe.

The new warning is written to the error log at startup if the string value assigned to named_pipe_full_access_group is '*everyone*' (or the Windows System Language equivalent) and named pipes are enabled. In addition, the warning is written to the error log and raised to the client if the system variable is reset to the Everyone group at runtime.

Bugs Fixed

InnoDB: A query that scanned the primary key of a table did not return the expected result.

InnoDB: A full-text cache lock taken when data is synchronized was not released if the full-text cache size exceeded the full-text cache size limit.

InnoDB: Client sessions using different auto_increment_increment values while performing concurrent insert operations could cause a duplicate key error.

Replication: In query log events in the binary log, the thread ID used for the execution of DROP TABLE and DELETE statements was identified incorrectly or not at all. On a multi-threaded replication slave, where temporary tables were involved (which require the correct thread ID as they are session specific), this omission resulted in errors when using mysqlbinlog to replay the binary log for point-in-time recovery. The thread ID is now set correctly.

Installing from RPM packages could result in an error log with incorrect permissions.

Enabling audit log encryption could cause a server exit.

MySQL Installer did not install OpenSSL DLL dependencies if the Development component was not selected.

The parser could leak memory for certain multiple-statement queries.

MySQL does not support OpenSSL session tickets, but did not set the SSL_OP_NO_TICKET flag to inform OpenSSL of that. The flag is now set.

UpdateXML() did not always free memory properly in certain cases.

Empty values in the name column of the mysql.plugin system table caused the server to exit during startup.

Some PROXY grants were not replicated to slaves, causing incorrect replication.

If an INSTALL PLUGIN statement contained invalid UTF-8 characters in the shared library name, it caused the server to hang (or to raise an assertion in debug builds).

(adam)

2019-08-06 06:16:16 UTC MAIN commitmail json YAML

2019-08-05 21:16:39 UTC MAIN commitmail json YAML

gcc5-aux, gcc6-aux: patch fixincludes on netbsd.

This is based on an already upstreamed patched that exists in GCC>9.0.
GCC stddef.h relied on the include guards of headers, and those were
changed in netbsd 9.0, so these packages no longer build.

Since we are using a bootstrap GCC, we also need to patch the headers
in the bootstrap fixincludes, patching the package is not sufficient.

Ada part of PR toolchain/54362.

(maya)

2019-08-05 20:51:03 UTC MAIN commitmail json YAML

doc: Updated net/gallery-dl to 1.10.1

(leot)

2019-08-05 20:50:45 UTC MAIN commitmail json YAML

gallery-dl: Update to 1.10.1

Changes:
1.10.1
------
## Fixes
- Restore functionality of both domains for `exhentai` extractors

(leot)

2019-08-05 19:32:05 UTC MAIN commitmail json YAML

Updated devel/py-cython, devel/py-coverage

(adam)

2019-08-05 19:31:44 UTC MAIN commitmail json YAML

py-coverage: updated to 4.5.4

Version 4.5.4:
- Multiprocessing support in Python 3.8 was broken, but is now fixed.

(adam)

2019-08-05 19:25:03 UTC MAIN commitmail json YAML

py-cython: updated to 0.29.23

0.29.13:

Bugs fixed
* A reference leak for None was fixed when converting a memoryview
  to a Python object.
* The declaration of PyGILState_STATE in cpython.pystate was unusable.

(adam)

2019-08-05 19:21:12 UTC MAIN commitmail json YAML

hpack: use -std=gnu89 for older GNU inline semantics.
(Code requires expertise in C archaeology to understand...)

Fixes build on newer MacOS.
From Clement Bouvier in PR pkg/54358

(maya)

2019-08-05 19:09:22 UTC MAIN commitmail json YAML

Updated lang/llvm and friends

(adam)

2019-08-05 19:06:50 UTC MAIN commitmail json YAML

2019-08-05 17:03:59 UTC MAIN commitmail json YAML

2019-08-05 17:03:59 UTC MAIN commitmail json YAML

doc: Updated graphics/libgdiplus to 6.0.1

(nia)

2019-08-05 16:58:44 UTC MAIN commitmail json YAML

doc: Updated audio/fasttracker2 to 2.164

(fox)

2019-08-05 16:58:33 UTC MAIN commitmail json YAML

2019-08-05 16:57:36 UTC MAIN commitmail json YAML

fasttracker2: Update to b164

Local changes merged upstream.

Changes since b163

Beta #164 - 05.08.2019
- Applied some NetBSD/illumos/SmartOS code patches that got sent in (untested)
- Removed SSE macros to let the compiler optimize instead, and to make cross
  compiling even simpler. We don't really need them anymore since most of the
  speed-critical math in the clone is fixed-point these days.
- macOS: Fixed intensive CPU usage if another window is completely covering the
  FT2 clone window.
- macOS: The SDL2.framework file in the FT2 clone app was larger than it needed
  to be, which was fixed by the SDL team not long ago. It has been replaced.
- Small code cleanup

(fox)

2019-08-05 15:36:44 UTC MAIN commitmail json YAML

doxygen: lang/python/application.mk is not needed, use lang/python/pyversion.mk instead

(adam)

2019-08-05 15:35:36 UTC MAIN commitmail json YAML

Updated audio/flac

(adam)

2019-08-05 15:35:13 UTC MAIN commitmail json YAML

flac: updated to 1.3.3

FLAC 1.3.3:

General:
- Fix CPU detection
- Switch from unsigned types to uint32_t
- CppCheck fixes
- Improve SIMD decoding of 24 bit files
- POWER* amnd POWER9 improvements
- More tests.

flac:
- When converting to WAV, use WAVEFORMATEXTENSIBLE when bits per second is not 8 or 16
- Fix --output-prefix with input-files in sub-directories

build system:
- Cmake support
- Visual Studio updates
- Fix for MSVC when UNICODE is enabled
- Fix for OpenBSD/i386

(adam)

2019-08-05 14:49:58 UTC MAIN commitmail json YAML

doc: Updated security/clamav{,-doc} to 0.101.2

(prlw1)

2019-08-05 14:47:34 UTC MAIN commitmail json YAML

Update clam-doc to 0.101.2

pdf files have gone, and the html tree reorganised.

(prlw1)

2019-08-05 14:44:20 UTC MAIN commitmail json YAML

Update clamav to 0.101.2

Remove rar support to workaround PR pkg/54420

  This release includes 3 extra security related bug fixes that do not
  apply to prior versions. In addition, it includes a number of minor bug
  fixes and improvements.
    * Fixes for the following vulnerabilities affecting 0.101.1 and
      prior:
          + CVE-2019-1787: An out-of-bounds heap read condition may occur
            when scanning PDF documents. The defect is a failure to
            correctly keep track of the number of bytes remaining in a
            buffer when indexing file data.
          + CVE-2019-1789: An out-of-bounds heap read condition may occur
            when scanning PE files (i.e. Windows EXE and DLL files) that
            have been packed using Aspack as a result of inadequate
            bound-checking.
          + CVE-2019-1788: An out-of-bounds heap write condition may occur
            when scanning OLE2 files such as Microsoft Office 97-2003
            documents. The invalid write happens when an invalid pointer
            is mistakenly used to initialize a 32bit integer to zero. This
            is likely to crash the application.
    * Fixes for the following ClamAV vulnerabilities:
          + CVE-2018-15378: Vulnerability in ClamAV's MEW unpacking
            feature that could allow an unauthenticated, remote attacker
            to cause a denial of service (DoS) condition on an affected
            device. Reported by Secunia Research at Flexera.
          + Fix for a 2-byte buffer over-read bug in ClamAV's PDF parsing
            code. Reported by Alex Gaynor.
    * Fixes for the following vulnerabilities in bundled third-party
      libraries:
          + CVE-2018-14680: An issue was discovered in mspack/chmd.c in
            libmspack before 0.7alpha. It does not reject blank CHM
            filenames.
          + CVE-2018-14681: An issue was discovered in kwajd_read_headers
            in mspack/kwajd.c in libmspack before 0.7alpha. Bad KWAJ file
            header extensions could cause a one or two byte overwrite.
          + CVE-2018-14682: An issue was discovered in mspack/chmd.c in
            libmspack before 0.7alpha. There is an off-by-one error in the
            TOLOWER() macro for CHM decompression.
          + Additionally, 0.100.2 reverted 0.100.1's patch for
            CVE-2018-14679, and applied libmspack's version of the fix in
            its place.
    * Fixes for the following CVE's:
          + CVE-2017-16932: Vulnerability in libxml2 dependency (affects
            ClamAV on Windows only).
          + CVE-2018-0360: HWP integer overflow, infinite loop
            vulnerability. Reported by Secunia Research at Flexera.
          + CVE-2018-0361: ClamAV PDF object length check, unreasonably
            long time to parse relatively small file. Reported by aCaB.

For the full release notes, see:
https://github.com/Cisco-Talos/clamav-devel/blob/clamav-0.101.2/NEWS.md

(prlw1)

2019-08-05 13:39:51 UTC MAIN commitmail json YAML

doc: Updated archivers/libmspack to 0.10.1alpha

(prlw1)

2019-08-05 13:39:24 UTC MAIN commitmail json YAML

Update libmspack to 0.10.1alpha

2019-02-18  Stuart Caie <kyzer@cabextract.org.uk>

      * chmd_read_headers(): a CHM file name beginning "::" but shorter
      than 33 bytes will lead to reading past the freshly-allocated name
      buffer - checks for specific control filenames didn't take length
      into account. Thanks to ADLab of Venustech for the report and
      proof of concept.

2019-02-18  Stuart Caie <kyzer@cabextract.org.uk>

      * chmd_read_headers(): CHM files can declare their chunks are any
      size up to 4GB, and libmspack will attempt to allocate that to
      read the file.

      This is not a security issue; libmspack doesn't promise how much
      memory it'll use to unpack files. You can set your own limits by
      returning NULL in a custom mspack_system.alloc() implementation.

      However, it would be good to validate chunk size further. With no
      offical specification, only empirical data is available. All files
      created by hhc.exe have a chunk size of 4096 bytes, and this is
      matched by all the files I've found in the wild, except for one
      which has a chunk size of 8192 bytes, which was created by someone
      developing a CHM file creator 15 years ago, and they appear to
      have abandoned it, so it seems 4096 is a de-facto standard.

      I've changed the "chunk size is not a power of two" warning to
      "chunk size is not 4096", and now only allow chunk sizes between
      22 and 8192 bytes. If you have CHM files with a larger chunk size,
      please send them to me and I'll increase this upper limit.

      Thanks to ADLab of Venustech for the report.

2019-02-18  Stuart Caie <kyzer@cabextract.org.uk>

      * oabd.c: replaced one-shot copying of uncompressed blocks (which
      requires allocating a buffer of the size declared in the header,
      which can be 4GB) with a fixed-size buffer. The buffer size is
      user-controllable with the new msoab_decompressor::set_param()
      method (check you have version 2 of the OAB decompressor), and
      also controls the input buffer used for OAB's LZX decompression.

      Reminder: compression formats can dictate how much memory is
      needed to decompress them. If memory usage is a security concern
      to you, write a custom mspack_system.alloc() that returns NULL
      if "too much" memory is requested. Do not rely on libmspack adding
      special heuristics to know not to request "too much".

      Thanks to ADLab of Venustech for the report.

(prlw1)

2019-08-05 12:27:10 UTC MAIN commitmail json YAML

doc: Updated x11/py-Xlib to 0.25

(prlw1)

2019-08-05 12:26:15 UTC MAIN commitmail json YAML

Update python-xlib to 0.25

Take maintaintership

Version 0.25

Bug Fixes
    * fix increasing memory usage on display instantiation

NV-CONTROL extension

    * add first implementation by Roberto Leinardi (@leinardi)

    __________________________________________________________________

Version 0.24

Bug Fixes

    * fix protocol handling: correctly support explicit Unix connections
      and fix support fox macOS
    * improve Python 3 support: fix events sub-code handling and possible
      crashes when unpacking text data
    * add support for error handlers to the Composite extension

Misc

    * fix xfixes example
    * fix a bunch of typos in the code / documentation
    __________________________________________________________________

Version 0.23

Bug Fixes

    * fix strings decoding: use Latin-1
    __________________________________________________________________

Version 0.22

Bug Fixes

    * fix Display.change_pointer_control implementation
    * fix Drawable.put_pil_image implementation
    __________________________________________________________________

Version 0.21

Bug Fixes

    * fix use under Windows Subsystem for Linux: when DISPLAY does not
      specify a protocol, and the implicit Unix socket connection fails,
      fallback to TCP (mimicking XCB's behavior).

Misc

    * don't bundle a copy of texi2html to build the HTML documentation,
      but use the currently installed version instead.
    __________________________________________________________________

Version 0.20

Bug Fixes

    * fix unclosed file in Xauth implementation
    * fix support for Window.set_wm_transient_for
    * fix support for Drawable.put_image / Drawable.get_image
    * use ASCII for decoding strings in Python 3 (same as Python 2)
    * fix Python 3 warnings about array.tostring() (deprecated)

Misc

  Improve response processing performance: reduce the number of
  socket.recv calls needed to receive a full response.
    __________________________________________________________________

Version 0.19

Bug Fixes

    * don't throw an exception if $XAUTHFILE / ~/.Xauthority is missing
    * fix authentication work-around for SSH forwarding under Python 3
    * improve $DISPLAY handling: support optional protocol prefix, and
      correctly handle unix:0.0 as :0.0
    __________________________________________________________________

Version 0.18

Bug Fixes

    * fix Python 3 buffer abstraction
    * fix interrupted select handling for Python 3.3/3.4
    * fix Unix socket support when only an abstract address is available
    __________________________________________________________________

Version 0.17

Bug Fixes

    * fix Xauth handling when using Python 2 and DISPLAY contains a
      remote IP
    * fix String16 request field handling when using Python 3
    * fix RECORD extension and example when using Python 3
    * fix handling of properties: use byte strings for all X11 8-bits
      strings, as not all of them are text properties (the window
      getters/setters for wm_name, wm_icon_name, wm_class, and
      wm_client_machine still return/expect Unicode strings)

API Changes

  Core:
    * new window getter/setter for text properties:
      get_full_text_property and change_text_property; with automatic
      conversion to/from Unicode when the property type encoding is
      supported (STRING and UTF8_STRING)

  Composite extension:
    * support for GetOverlayWindow request
    __________________________________________________________________

Version 0.16
Licensing

  The project is now licensed under the GNU Lesser General Public License
  v2.1 or later (see the LICENSE file for details).

Compatibility

  Support for Python versions older than 2.7 has been dropped. Support
  for Python 3 (3.3, 3.4 and 3.5) has been added. Note that Python-Xlib
  now depends on the six package (>=1.10) for combined Python 2 / 3
  support.

API Changes

  With the change of license, and no way to contact the original author
  of the SHAPE extension, the code had to be rewritten from scratch. This
  resulted in a few minor API changes (see examples/shapewin.py).

  Partial support for the SECURITY. XInput, and XFIXES extensions has
  been added.

Bug Fixes

    * fix RECORD extension
    * fixed OS X socket path
    * fix handling of generic events
    * fix handling of KeymapNotify events
    * several fixes for the RandR extension
    __________________________________________________________________

Version 0.15rc1 - 14 Nov 2009

  Improved support for newer versions of Mac OS X, a couple of new
  extensions, and several bugfixes.

Composite extension

  Support for the composite extension, used to implement a composition
  manager (added for plcm work in plwm).

  By itself this extension is not very useful, it is intended to be used
  together with the DAMAGE and XFIXES extensions. Typically you would
  also need RENDER or glX or some similar method of creating fancy
  graphics.

XF86 special function keysyms

  Keysym definitions for special function keys found on modern keyboards,
  e.g. raise and lower volume, start specific applications, etc. Have a
  look in Xlib/keysymdef/xf86.py to see what there are and experiment
  with xev to see what your keyboard generates. These definitions aren't
  brought in by default, so you must do this after importing Xlib.XK:
Xlib.XK.load_keysym_group('xf86')

RANDR extension

  The RANDR extension complements XINERAMA as a way of getting data about
  the physical screens making up a virtual screen in X. An example of
  usage can be found in examples/xrandr.py.

(prlw1)

2019-08-05 11:49:24 UTC MAIN commitmail json YAML

2019-08-05 11:47:42 UTC MAIN commitmail json YAML

2019-08-05 11:43:02 UTC MAIN commitmail json YAML

2019-08-05 11:37:40 UTC MAIN commitmail json YAML

2019-08-05 11:33:55 UTC MAIN commitmail json YAML

tex-lwarp{,-doc}: update to 0.72

Fixed \multicolumn, xr, xr-hyper, soulutf8.
Updated for boxedminipage2e, zhlineskip.
Added fontaxes, slantsc, tabfigures.
Added nfssext-cfr, thus supporting cfr-lm and several other font
packages.
Added backnaur, hypbmsec, minibox, pdfcrypt, shapepar.

(markd)

2019-08-05 11:19:27 UTC MAIN commitmail json YAML

tex-fira{,-doc}: update to 4.3.51328

Added artificially-slanted oblique variants and disabled hyphenation
for the Mono family.

(markd)

2019-08-05 11:14:52 UTC MAIN commitmail json YAML

tex-doclicense{,-doc}: update to 1.10.0

Added Brazilian translation.
Update Chinese and Portuguese translation.
Do not use enumitem for list label customization (beamer compatibility).

(markd)

2019-08-05 11:09:53 UTC MAIN commitmail json YAML

tex-texinfo: update to 5.1.51312

changes unknown

(markd)

2019-08-05 11:05:52 UTC MAIN commitmail json YAML

tex-roboto{,-doc}: update to 2019.51315

Corrected spacing and disabled hyphenation in the Mono family.

(markd)

2019-08-05 11:01:28 UTC MAIN commitmail json YAML

tex-csplain: update to 2019.51317

May  2019  \table declarator () added.
Jun. 2019  \mspan improved.

(markd)

2019-08-05 10:57:00 UTC MAIN commitmail json YAML

2019-08-05 10:52:08 UTC MAIN commitmail json YAML

tex-babel{,-doc}: update to 3.32

- CJK line breaking is now disabled in verbatim (lua).
- New - \babelcharproperty, to change the direction, mirroring
  glyph and line break properties (lua).
- Basic support for the picture environment (with pict2e) and pgf
  (lua, somewhat experimental).
- Start support for harftex (just try - it may work).

(markd)

2019-08-05 10:47:20 UTC MAIN commitmail json YAML

2019-08-05 10:42:05 UTC MAIN commitmail json YAML

2019-08-05 10:34:33 UTC MAIN commitmail json YAML

tex-multirow{,-doc}: update to 2.5

Solve a clash with the colortbl package, when multirow uses
the longtable option. There was a clash with both packages
redefining \@cline.

(markd)

2019-08-05 10:32:46 UTC MAIN commitmail json YAML

tex-eplain{,-doc}: update to 3.9

This minor release fixes a btxmac.tex bug introduced in 3.8 which caused
\providecommand to fail. Also, the documentation now has a section
on creating PDF bookmarks (a.k.a. outlines), and url and other updates.

(markd)

2019-08-05 10:22:23 UTC MAIN commitmail json YAML

Updated www/py-werkzeug

(adam)

2019-08-05 10:21:32 UTC MAIN commitmail json YAML

py-werkzeug: updated to 0.15.5

Version 0.15.5
- Fix a TypeError due to changes to ast.Module in Python 3.8.
- Fix a C assertion failure in debug builds of some Python 2.7
  releases.
- :class:~exceptions.BadRequestKeyError adds the KeyError
  message to the description if e.show_exception is set to
  True. This is a more secure default than the original 0.15.0
  behavior and makes it easier to control without losing information.
- Upgrade the debugger to jQuery 3.4.1.
- Work around an issue in some external debuggers that caused the
  reloader to fail.
- Work around an issue where the reloader couldn't introspect a
  setuptools script installed as an egg.
- The reloader will use sys.executable even if the script is
  marked executable, reverting a behavior intended for NixOS
  introduced in 0.15. The reloader should no longer cause
  OSError: [Errno 8] Exec format error.
- SharedDataMiddleware safely handles paths with Windows drive
  names.

(adam)

2019-08-05 09:55:33 UTC MAIN commitmail json YAML

doc: Updated textproc/ruby-yard to 0.9.20

(taca)

2019-08-05 09:55:00 UTC MAIN commitmail json YAML

textproc/ruby-yard: update to 0.9.20

Update ruby-yard to 0.9.20, fixing CVE-2019-14369.

# 0.9.20 - June 27th, 2019

[0.9.20]: https://github.com/lsegal/yard/compare/v0.9.19...v0.9.20

- Fix parsing of stringified Symbols in Ruby source (#1256).
- Fix path traversal vulnerability in `yard server`. This bug would allow
unsanitized HTTP requests to access arbitrary files on the machine of a
`yard server` host under certain conditions. Thanks to CuongMX from
Viettel Cyber Security for discovering this vulnerability.

# 0.9.19 - April 2nd, 2019

[0.9.19]: https://github.com/lsegal/yard/compare/v0.9.16...v0.9.19

- Fixed bug in browser back button (#1071, #1228)
- Fixed handling of ArgumentError in ExtraFileObject (#1198)
- Fixed double return tag displaying on boolean methods (#1226)
- Removed unused `Module#namespace_name` function (#1229)
- Fixed parsing order of README files. YARD will now prefer README over
  README.md over README.x.md or README-x.md (and the like). READMEs will now
  also be ordered by filename; the first README is still chosen unless
  `--readme` is provided.
- Updated AsciiDoc markup support to use non-deprecated calls.

(taca)

2019-08-05 09:35:05 UTC MAIN commitmail json YAML

Add tex-hyphen-{belarusian,churchslavonic,occitan}

(markd)

2019-08-05 09:32:28 UTC MAIN commitmail json YAML

texlive-collection-langeuropean: Add tex-hyphen-occitan

(markd)

2019-08-05 09:30:24 UTC MAIN commitmail json YAML

texlive-collection-langcyrillic: add tex-hyphen-{belarusian,churchslavonic}

(markd)

2019-08-05 09:26:20 UTC MAIN commitmail json YAML

print: add tex-hyphen-{belarusian,churchslavonic,occitan}

(markd)

2019-08-05 09:23:43 UTC MAIN commitmail json YAML

tex-hyphen-occitan: Added version 2019

Hyphenation patterns for Occitan in T1/EC and UTF-8 encodings.
They are supposed to be valid for all the Occitan variants
spoken and written in the wide area called 'Occitanie' by the
French. It ranges from the Val d'Aran within Catalunya, to the
South Western Italian Alps encompassing the southern half of
the French pentagon.

(markd)

2019-08-05 09:22:33 UTC MAIN commitmail json YAML

2019-08-05 09:21:53 UTC MAIN commitmail json YAML

2019-08-05 09:14:07 UTC MAIN commitmail json YAML

tex-hyphen-chinese: enable hyphenation

(markd)

2019-08-05 07:59:45 UTC MAIN commitmail json YAML

Updated databases/py-peewee, www/py-flask-jwt-extended

(adam)

2019-08-05 07:59:22 UTC MAIN commitmail json YAML

py-flask-jwt-extended: updated to 3.21.0

3.21.0
Require flask 1.0 or greater
Move docs to pallets-sphinx-themes
Add a new JWT_DECODE_ISSUER option for use with other JWT providers
Gracefully handle errors for malformed tokens

(adam)

2019-08-05 07:56:42 UTC MAIN commitmail json YAML

py-peewee: updated to 3.10.0

3.10.0

Add a helper to playhouse.mysql_ext for creating Match full-text search expressions.
Added date-part properties to TimestampField for accessing the year, month, day, etc., within a SQL expression.
Added to_timestamp() helper for DateField and DateTimeField that produces an expression returning a unix timestamp.
Add autoconnect parameter to Database classes. This parameter defaults to True and is compatible with previous versions of Peewee, in which executing a query on a closed database would open a connection automatically. To make it easier to catch inconsistent use of the database connection, this behavior can now be disabled by specifying autoconnect=False, making an explicit call to Database.connect() needed before executing a query.
Added database-agnostic interface for obtaining a random value.
Allow isolation_level to be specified when initializing a Postgres db.
Allow hybrid properties to be used on model aliases.
Support aggregates with FILTER predicates on the latest Sqlite.

Changes
-------
More aggressively slot row values into the appropriate field when building objects from the database cursor (rather than using whatever cursor.description tells us, which is buggy in older Sqlite).
Be more permissive in what we accept in the insert_many() and insert() methods.
When implicitly joining a model with multiple foreign-keys, choose the foreign-key whose name matches that of the related model. Previously, this would have raised a ValueError stating that multiple FKs existed.
Improved date truncation logic for Sqlite and MySQL to make more compatible with Postgres' date_trunc() behavior. Previously, truncating a datetime to month resolution would return '2019-08' for example. As of 3.10.0, the Sqlite and MySQL date_trunc implementation returns a full datetime, e.g. '2019-08-01 00:00:00'.
Apply slightly different logic for casting JSON values with Postgres. Previously, Peewee just wrapped the value in the psycopg2 Json() helper. In this version, Peewee now dumps the json to a string and applies an explicit cast to the underlying JSON data-type (e.g. json or jsonb).

Bug fixes
---------
Save hooks can now be called for models without a primary key.
Fixed bug in the conversion of Python values to JSON when using Postgres.
Fix for differentiating empty values from NULL values in model_to_dict.
Fixed a bug referencing primary-key values that required some kind of conversion (e.g., a UUID).
Add small jitter to the pool connection timestamp to avoid issues when multiple connections are checked-out at the same exact time.

(adam)

2019-08-04 21:05:34 UTC MAIN commitmail json YAML

tex-hyphen-* updates

(markd)

2019-08-04 21:02:45 UTC MAIN commitmail json YAML