doc: Updated net/fehqlibs to 0.9.12.10

(schmonz)

.9.12 has a serious regression in dns_ipq.c: only AAAA records are
looked up, instead of AAAA and A. Revert to previous 0.9.10 (as
"0.9.12.10").

(schmonz)

Use https for openttd.org.

(nia)

Use https for swi-prolog.org.

(nia)

Use https for haskell.org.

(nia)

Updated multimedia/x265, security/gnupg2

(adam)

gnupg2: updated to 2.2.17

Noteworthy changes in version 2.2.17:
* gpg: Ignore all key-signatures received from keyservers.  This
  change is required to mitigate a DoS due to keys flooded with
  faked key-signatures.  The old behaviour can be achieved by adding
    keyserver-options no-self-sigs-only,no-import-clean
  to your gpg.conf.
* gpg: If an imported keyblocks is too large to be stored in the
  keybox (pubring.kbx) do not error out but fallback to an import
  using the options "self-sigs-only,import-clean".
* gpg: New command --locate-external-key which can be used to
  refresh keys from the Web Key Directory or via other methods
  configured with --auto-key-locate.
* gpg: New import option "self-sigs-only".
* gpg: In --auto-key-retrieve prefer WKD over keyservers.
* dirmngr: Support the "openpgpkey" subdomain feature from
  draft-koch-openpgp-webkey-service-07.
* dirmngr: Add an exception for the "openpgpkey" subdomain to the
  CSRF protection.
* dirmngr: Fix endless loop due to http errors 503 and 504.
* dirmngr: Fix TLS bug during redirection of HKP requests.
* gpgconf: Fix a race condition when killing components.

(adam)

x265: updated to 3.1.1

Version 3.1

New features
* x265 can invoke SVT-HEVC library for encoding through --svt.
* x265 can now accept interlaced inputs directly (no need to separate fields), and sends it to the encoder with proper fps and frame-size through --field.
* --fades can detect and handle fade-in regions. This option will force I-slice and initialize RC history for the brightest frame after fade-in.

API changes
* A new flag to signal MasterDisplayParams and maxCll/Fall separately

Encoder enhancements
* Improved the performance of inter-refine level 1 by skipping the evaluation of smaller CUs when the current block is decided as ���skip��� by the save mode.
* New AVX2 primitives to improve the performance of encodes that enable --ssim-rd.
* Improved performance in medium preset with negligible loss in quality.

Bug fixes
* Bug fixes for zones.
* Fixed wrap-around from MV structure overflow occurred around 8K pixels or over.
* Fixed issues in configuring cbQpOffset and crQpOffset for 444 input
* Fixed cutree offset computation in 2nd pass encodes.

Known issues
* AVX512 main12 asm disabling.
* Inconsistent output with 2-pass due to cutree offset sharing.

(adam)

Note update of devel/go-protobuf to 1.3.2.

(he)

Update to go-protobuf version 1.3.2.

Pkgsrc changes:
* Update PLIST

Upstream notable changes:
* #785: grpc code generation: add an UnimplementedServer type
  implementing each server interface, returning an unimplemented
  error for each method
* #851: convert prints to `os.Stderr` to use `log.Printf`
* #883: jsonpb: fix marshaling of Duration with negative nanoseconds

(he)

doc: Updated devel/librdkafka to 1.0.1

(minskim)

devel/librdkafka: Update to 1.0.1

Notable changes in 1.0:
- Idempotent producer - guaranteed ordering, exactly-once producing.
- Sparse/on-demand connections - connections are no longer maintained
  to all brokers in the cluster.
- KIP-62 - max.poll.interval.ms for high-level consumers.

(minskim)

Update the Python HOMEPAGEs that I missed earlier.

(nia)

Note update of lang/clisp to 2.49nb25.

(he)

Patterned after electric-fence, turn off builtins for calloc, malloc,
memalign, realloc, valloc and free.  Makes clisp work with modern compilers.
Bump PKGREVISION.

(he)

uncrustify: ... actually, PYTHON_VERSIONS_ACCEPTED is better here

(nia)

libsass: Seems to fail with gcc7 unless cmath is included

(nia)

uncrustify: Needs python to build, set PYTHON_FOR_BUILD_ONLY etc

(nia)

dolphin-emu: OpenAL support was removed.

(nia)

doc: Added mail/qconfirm version 0.14.3

(schmonz)

Add and enable qconfirm.

(schmonz)

Initial import of qconfirm, an implementation of a delivery confirmation
process for a mailing list or mail address. It is invoked by qmail-local
through a dot-qmail file, and can reduce the amount of junk mail hitting
a mailbox or the mailboxes of mailing list subscribers. qconfirm
performs this delivery confirmation process either sender based or
message based.

When used for a public mail address, not a mailing list, qconfirm is
capable of detecting follow-ups on mail messages originated from this
mail address, and doesn't request delivery confirmation is this case.
qconfirm also is able to identify delivery confirmation requests from
recipients of mail messages, and automatically confirms the delivery
if desired.

(schmonz)

doc: Updated multimedia/adobe-flash-player to 32.0.0.223

(tsutsui)

adobe-flash-player: update to 32.0.0.223.

Upstream announcement:

https://helpx.adobe.com/flash-player/release-note/fp_32_air_32_release_notes.html#fixed_issues

July 9, 2019
Flash Player
* Assorted functional fixes

(tsutsui)

TODO: remove lightspark.

(nia)

doc: Added multimedia/lightspark version 0.8.1

(nia)

Add lightspark.

Lightspark is an open source Flash player implementation for playing
files in SWF format.

(nia)

weechat: Turn on "python lua wide-curses perl ruby" by default.

Should enable users to run most scripts available on weechat.org.

If you're using pkgsrc you probably have python/perl/lua installed already,
and ruby apparently even works on VAX, so this shouldn't be much of a hard
requirement.

joyent has been building with these settings for a while.

(nia)

doc: Updated lang/spidermonkey52 to 52.7.4nb10

(maya)

spidermonkey52: pour a bucket over this wildfire and backport a security fix.

From https://bugs.chromium.org/p/project-zero/issues/detail?id=1823 / mozjs
upstream.

Bump PKGREVISION

(maya)

Teach procmail to cross-compile on NetBSD.

No revbump because this was not cross-compilable before.

(riastradh)

TOOL_DEPENDS, not BUILD_DEPENDS, for a tool we run at build-time.

(riastradh)

aarch64 has no compiler flag for ABI=64.

(riastradh)

Avoid passing _CC as cross-compiler to recursive makes.

This way we don't inadvertently tell a native dependency that it is
supposed to be compiled with the cross-compiler.

No functional change intended for USE_CROSS_COMPILE=no.

(riastradh)

Note that USE_CWRAPPERS=no is needed for now in cross-compiling.

This is a bug, just need to teach cwrappers about passing sysroot.

(riastradh)

Sync cross-libtool-base with libtool-base.  Eliminate CROSSBASE.

cross-libtool-base now installs into $PREFIX/cross-$TARGET_ARCH
unconditionally.

(riastradh)

grafx2: Needs pkg-config.

(nia)

vice: Needs bash.

(nia)

npm: Add bash to USE_TOOLS.

(nia)

Updated devel/quilt to 0.66

(ryoon)

Update to 0.66

Changelog:
0.66
User-visible changes since 0.65 are as follows:

- Add support for lzip archives and patches
- Document QUILT_PC as user-settable
- configure: Don't require md5sum
- Test suite: Allow keeping the working directory on failure
- Test suite: Fix regex for recent versions of perl ...

0.65
User-visible changes since 0.64 are as follows:

- Translation fixes
- Project settings have priority
- Reject binary files in patches
- Fix a race condition in diff_file
- Performance: Optimizations to the setup command
- Performance: Optimizations to the bash completion script ...

(ryoon)

py-dbfread: better Makefile

(adam)

Updated devel/py-flake8, graphics/py-graphviz

(adam)

py-graphviz: updated to 0.11.1

Version 0.11.1
Include stderr in str() of raised subprocess.CalledProcessError.

(adam)

cyrus-sasl: Remove patch that is now actively harmful.

(jperkin)

Use https for readthedocs.io.

(nia)

doc: Updated math/ltm to 1.1.0

(nia)

Use https for pythonhosted.org.

(nia)

devilutionx: Needs pkg-config to find libsodium.

(nia)

ltm: Update to 1.1.0

Jan 28th, 2019
v1.1.0
      -- Christoph Zurnieden contributed FIPS 186.4 compliant
          prime-checking (PR #113), several other fixes and a load of documentation
      -- Daniel Mendler provided two's-complement functions (PR #124)
          and mp_{set,get}_double() (PR #123)
      -- Francois Perrad took care of linting the sources, provided all fixes and
          a astylerc to auto-format the sources.
      -- A bunch of patches by Kevin B Kenny have been back-ported from TCL
      -- Jan Nijtmans provided the patches to `const`ify all API
          function arguments (also from TCL)
      -- mp_rand() has now several native random provider implementations
          and doesn't rely on `rand()` anymore
      -- Karel Miko provided fixes when building for MS Windows
          and re-worked the makefile generating process
      -- The entire environment and build logic has been extended and improved
          regarding auto-detection of platforms, libtool and a lot more
      -- Prevent some potential BOF cases
      -- Improved/fixed mp_lshd() and mp_invmod()
      -- A load more bugs were fixed by various contributors

(nia)

doc: Updated security/libtomcrypt to 1.18.2

(nia)

libtomcrypt: Update to 1.18.2

July 1st, 2018
v1.18.2
      -- Fix Side Channel Based ECDSA Key Extraction (CVE-2018-12437) (PR #408)
      -- Fix potential stack overflow when DER flexi-decoding (CVE-2018-0739) (PR #373)
      -- Fix two-key 3DES (PR #390)
      -- Fix accelerated CTR mode (PR #359)
      -- Fix Fortuna PRNG (PR #363)
      -- Fix compilation on platforms where cc doesn't point to gcc (PR #382)
      -- Fix using the wrong environment variable LT instead of LIBTOOL (PR #392)
      -- Fix build on platforms where the compiler provides __WCHAR_MAX__ but wchar.h is not available (PR #390)
      -- Fix & re-factor crypt_list_all_sizes() and crypt_list_all_constants() (PR #414)
      -- Minor fixes (PR's #350 #351 #375 #377 #378 #379)

January 22nd, 2018
v1.18.1
      -- Fix wrong SHA3 blocksizes, thanks to Claus Fischer for reporting this via Mail (PR #329)
      -- Fix NULL-pointer dereference in `ccm_memory()` with LTC_CLEAN_STACK enabled (PR #327)
      -- Fix `ccm_process()` being unable to process input buffers longer than 256 bytes (PR #326)
      -- Fix the `register_all_{ciphers,hashes,prngs}()` return values (PR #316)
      -- Fix some typos, warnings and duplicate prototypes in code & doc (PR's #310 #320 #321 #335)
      -- Fix possible undefined behavior with LTC_PTHREAD (PR #337)
      -- Fix some DER bugs (PR #339)
      -- Fix CTR-mode when accelerator is used (OP-TEE/optee_os #2086)
      -- Fix installation procedure (Issue #340)

October 10th, 2017
v1.18.0
      -- Bugfix multi2
      -- Bugfix Noekeon
      -- Bugfix XTEA
      -- Bugfix rng_get_bytes() on windows where we could read from c:\dev\random
      -- Fixed the Bleichbacher Signature attack in PKCS#1 v1.5 EMSA, thanks to Alex Dent
      -- Fixed a potential cache-based timing attack in CCM, thanks to Sebastian Verschoor
      -- Fix GCM counter reuse and potential timing attacks in EAX, OCB and OCBv3,
        thanks to Rapha谷l Jamet
      -- Implement hardened RSA operations when CRT is used
      -- Enabled timing resistant calculations of ECC and RSA operations per default
      -- Applied some patches from the OLPC project regarding PKCS#1 and preventing
        the hash algorithms from overflowing
      -- Larry Bugbee contributed the necessary stuff to more easily call libtomcrypt
        from a dynamic language like Python, as shown in his pyTomCrypt
      -- Nikos Mavrogiannopoulos contributed RSA blinding and export of RSA and DSA keys
        in OpenSSL/GnuTLS compatible format
      -- Patrick Pelletier contributed a smart volley of patches
      -- Christopher Brown contributed some patches and additions to ASN.1/DER
      -- Pascal Brand of STMicroelectronics contributed patches regarding CCM, the
        XTS mode and RSA private key operations with keys without CRT parameters
      -- RC2 now also works with smaller key-sizes
      -- Improved/extended several tests & demos
      -- Hardened DSA and RSA by testing (through Karel's perl-CryptX)
        against Google's "Wycheproof" and Kudelski Security's "CDF"
      -- Fixed all compiler warnings
      -- Fixed several build issues on FreeBSD, NetBSD, Linux x32 ABI, HP-UX/IA64,
        Mac OS X, Windows (32&64bit, Cygwin, MingW & MSVC) ...
      -- Re-worked all makefiles
      -- Re-worked most PRNG's
      -- The code is now verified by a linter, thanks to Francois Perrad
      -- Documentation (crypt.pdf) is now built deterministically, thanks to Michael Stapelberg
      -- Add Adler32 and CRC32 checksum algorithms
      -- Add Base64-URL de-/encoding and some strict variants
      -- Add Blake2b & Blake2s (hash & mac), thanks to Kelvin Sherlock
      -- Add Camellia block cipher
      -- Add ChaCha (stream cipher), Poly1305 (mac), ChaCha20Poly1305 (encauth)
      -- Add constant-time mem-compare mem_neq()
      -- Add DER GeneralizedTime de-/encoding
      -- Add DSA and ECC key generation FIPS-186-4 compliance
      -- Add HKDF, thanks to RyanC (especially for also providing documentation :-) )
      -- Add OCBv3
      -- Add PKCS#1 v1.5 mode of SSL3.0
      -- Add PKCS#1 testvectors from RSA
      -- Add PKCS#8 & X.509 import for RSA keys
      -- Add stream cipher API
      -- Add SHA3 & SHAKE
      -- Add SHA512/256 and SHA512/224
      -- Add Triple-DES 2-key mode, thanks to Paul Howarth
      -- Brought back Diffie-Hellman

(nia)

py-flake8: updated to 3.7.8

3.7.8:
Bugs Fixed
- Fix handling of Application.parse_preliminary_options_and_args when
  argv is an empty list
- Fix crash when a file parses but fails to tokenize
- Log the full traceback on plugin exceptions
- Fix # noqa: ... comments with multi-letter codes

(adam)

doc: Updated security/libssh2 to 1.9.0

(nia)

libssh2: Update to 1.9.0

Changes:
- adds ECDSA keys and host key support when using OpenSSL
- adds ED25519 key and host key support when using OpenSSL 1.1.1
- adds OpenSSH style key file reading
- adds AES CTR mode support when using WinCNG
- adds PEM passphrase protected file support for Libgcrypt and WinCNG
- adds SHA256 hostkey fingerprint
- adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
- adds explicit zeroing of sensitive data in memory
- adds additional bounds checks to network buffer reads
- adds the ability to use the server default permissions when creating sftp directories
- adds support for building with OpenSSL no engine flag
- adds support for building with LibreSSL
- increased sftp packet size to 256k
- fixed oversized packet handling in sftp
- fixed building with OpenSSL 1.1
- fixed a possible crash if sftp stat gets an unexpected response
- fixed incorrect parsing of the KEX preference string value
- fixed conditional RSA and AES-CTR support
- fixed a small memory leak during the key exchange process
- fixed a possible memory leak of the ssh banner string
- fixed various small memory leaks in the backends
- fixed possible out of bounds read when parsing public keys from the server
- fixed possible out of bounds read when parsing invalid PEM files
- no longer null terminates the scp remote exec command
- now handle errors when diffie hellman key pair generation fails
- fixed compiling on Windows with the flag STDCALL=ON
- improved building instructions
- improved unit tests

(nia)

hexchat: Remove libsexy option, it isn't used any more.

(nia)

Need strnlen(3), obtain it from libnbcompat if not provided by host OS

(sevan)

Use the correct prototype - thanks <gutteridge>

(sevan)

Updated lang/python37, lang/py37-html-docs

(adam)

python37: updated to 3.7.4

Python 3.7.4 final

Core and Builtins
bpo-37500: Due to unintended side effects, revert the change introduced by bpo-1875 in 3.7.4rc1 to check for syntax errors in dead conditional code blocks.
Documentation
bpo-37149: Replace the dead link to the Tkinter 8.5 reference by John Shipman, New Mexico Tech, with a link to the archive.org copy.

Python 3.7.4 release candidate 2

Security
bpo-37463: ssl.match_hostname() no longer accepts IPv4 addresses with additional text after the address and only quad-dotted notation without trailing whitespaces. Some inet_aton() implementations ignore whitespace and all data after whitespace, e.g. ‘127.0.0.1 whatever’.

Core and Builtins
bpo-24214: Improved support of the surrogatepass error handler in the UTF-8 and UTF-16 incremental decoders.

Library
bpo-37440: http.client now enables TLS 1.3 post-handshake authentication for default context or if a cert_file is passed to HTTPSConnection.
bpo-37437: Update vendorized expat version to 2.2.7.
bpo-37428: SSLContext.post_handshake_auth = True no longer sets SSL_VERIFY_POST_HANDSHAKE verify flag for client connections. Although the option is documented as ignored for clients, OpenSSL implicitly enables cert chain validation when the flag is set.
bpo-32627: Fix compile error when _uuid headers conflicting included.

Windows
bpo-37369: Fixes path for sys.executable when running from the Microsoft Store.
bpo-35360: Update Windows builds to use SQLite 3.28.0.

macOS
bpo-34602: Avoid test suite failures on macOS by no longer calling resource.setrlimit to increase the process stack size limit at runtime. The runtime change is no longer needed since the interpreter is being built with a larger default stack size.

(adam)

Updated multimedia/ffmpeg4, databases/mongodb3

(adam)

mongodb3: ..and remove unused patch

(adam)

mongodb3: updated to 3.4.21

3.4.21:
Issues fixed:
SERVER-39820: Add the client IP address to the successful authentication log message
SERVER-41213: Unique background index builds may produce inconsistent keys
SERVER-37765: Platform Support: Remove Ubuntu 14.04
SERVER-37774: Platform Support: Remove Enterprise Ubuntu 16.04 PPCLE
WT-4615: Sync backup file before returning backup cursor

3.4.20:
Issues fixed:
SERVER-39166: $graphLookup should force a pipeline to split in sharded cluster
SERVER-39723: Change listIndexes command behavior to show in-progress index builds
TOOLS-2158: mongodump failing on Windows with 窶彳rror opening system CA store: Access is denied.窶�

3.4.19:
Issues fixed:
SERVER-18985: setParameter should log at level 0
SERVER-22766: Dynamic oplog sizing for WiredTiger nodes
SERVER-33469: Make syslog log lines consistent with mongod log lines
SERVER-37132: Negation of $in with regex can incorrectly plan from the cache, leading to missing query results
SERVER-37182: Different values when referencing whole object vs. a field of that object after $arrayToObject
SERVER-37616: Implement tuneable batch size for the rangedeleter

3.4.18:
Issues fixed:
SERVER-25175: listIndexes shouldn窶冲 include in-progress background indexes
SERVER-35418: Allow specifying CAs for incoming and outgoing connections separately.
SERVER-36944: applyOps does not permit unknown field names when creating a v:1 index.
SERVER-37058: Update with numeric field names inside an array can cause validation to fail.

3.4.17:
Issues fixed:
SERVER-33857 Missing log redaction due to confusion with Command::redactForLogging().
SERVER-34846 Covered index with collated field returns incorrect result when collation not involved in match or sort.
SERVER-36010 Change log messages for Windows stacktraces to use error() or severe() rather than log().
SERVER-34558: Add SSL_version to client metadata logging.

3.4.16:
Issues fixed:
SERVER-32999: Platform Support: Remove Debian 7 builds.
SERVER-29301: Upgrade MozJS to ESR 45.9.0
SERVER-5461: Add syncSourceHost field to replSetGetStatus output.

3.4.15:
Issues fixed:
SERVER-31535: Platform Support: remove Ubuntu 12.04 builds.
SERVER-32923: Platform Support: remove SLES11 builds.
SERVER-20056: Log a startup warning if wiredTigerCacheSizeGB is > 80% of RAM.
SERVER-28981: Sharding balancer prefers shards in a specific order when moving chunks.

3.4.14:
Issues fixed:
SERVER-28151: Authentication database should be synced first during an initial sync.
SERVER-32886: Unnecessary sleeps during chunk migration.
SERVER-32933: Allow mongod to start when unable to reach LDAP server.

3.4.13:
Issues fixed:
SERVER-33238: Prevent WiredTiger read ticket count from going negative.

3.4.12:
Issues fixed:
SERVER-31437: Fix parsing of mongo host/db connect string.
SERVER-32875: Don窶冲 stall ftdc due to running out of tickets.
SERVER-33089: Unable to start queryable mongod because it failed to regenerate index for admin.system.users.

3.4.11:
Issues fixed:
SERVER-19605: Oplog timeout should be configurable.
SERVER-19919: Chunks that exceed 250000 docs but are under half chunk size get marked as jumbo.
SERVER-29293: Recipient shard fails to abort migration on stepdown.
SERVER-32001: unindexing a key in a partial unique index may cause server crash

3.4.10:
Issues fixed:
SERVER-15723: Avoid G_X lock for rename_collection within database
SERVER-31049: View with collation doesn窶冲 work as expected in sharded cluster
SERVER-29287: Upgrade pcre to 8.41
SERVER-31204: Calling shardCollection after enableSharding may fail if executed against different mongos

3.4.9:
Issues fixed:
SERVER-20392: Sharding an existing small collection results in large number of chunks
SERVER-30189: Reduce calls to allocator for large $in expressions
SERVER-30487: RangeDeleter holds WT transaction open while waiting for majority
SERVER-30636: Range deleter assert failed because of replication lag

3.4.7:
Issues fixed:
SERVER-29282: BSON Document Size can be exceeded when grouping inserts on SECONDARY nodes
SERVER-29568: Enable configuration of OpenSSL cipher suite via setParameter
SERVER-29817: Optimize incremental update performance of ChunkManager and CollectionMetadata

3.4.6:
Issues fixed:
SERVER-27347: Only close idle cached cursors on the WiredTiger ident that is busy.
SERVER-29618: $geoWithin in aggregation pipeline after $lookup and $unwind returns incorrect results.
WT-3362: Cursor opens should never block for the duration of a checkpoint.

3.4.5:
Issues fixed:
SERVER-28952: Multikey indexes should not be eligible for DISTINCT_SCAN if distinct key is an array component.
SERVER-28427: GlobalLock with timeout can still block indefinitely.
SERVER-29018 mongos can segfault in getMore on views with find batchSize of 0.

(adam)

ffmpeg4: updated to 4.1.4

version 4.1.4:
avcodec/ilbcdec: Simplify use of unsigned and fix more undefined overflows
avcodec/golomb: Correct the doxy about get_ue_golomb() and errors
avformat/utils: Check timebase before use in estimate_timings()
avcodec/hq_hqa: Use ff_set_dimensions()
avcodec/rv10: Fix integer overflow in aspect ratio compare
avcodec/4xm: Fix signed integer overflows in idct()
avcodec/qdm2: Check checksum_size for 0
avcodec/qdm2: error out of qdm2_fft_decode_tones() before entering endless loop
avcodec/qdm2: Do not read out of array in fix_coding_method_array()
avcodec/svq3: Use ff_set_dimension()
avcodec/iff: Check ham vs bpp
avcodec/ffwavesynth: use uint32_t to compute difference, it is enough
avcodec/ffwavesynth: Simplify lcg_seek(), avoid negative case
avcodec/ffwavesynth: Fix backward lcg_seek()
avcodec/flicvideo: Fix off by 1 error in flic_decode_frame_24BPP()
avcodec/vc1_block: Check for vlc error in vc1_decode_ac_coeff()
avcodec/alac: Check lpc_quant
avcodec/dxv: Initialize tex_funct to NULL
avcodec/alsdec: Add FF_CODEC_CAP_INIT_CLEANUP
avcodec/alsdec: Fix integer overflow with buffer number
avcodec/alsdec: Fixes signed integer overflow in LSB addition
avcodec/alsdec: Check opt_order / sb_length in ra_block handling
avcodec/alsdec: Fix integer overflow with shifting samples
avcodec/alsdec: Fix undefined behavior in decode_rice()
avcodec/alsdec: Fixes invalid shifts in read_var_block_data() and INTERLEAVE_OUTPUT()
avcodec/hevc_ps: Change num_tile_rows/columns checks to sps->ctb_height/weight
avcodec/hevc_ps: Fix integer overflow with num_tile_rows and num_tile_columns
avcodec/apedec: Add k < 24 check to the only k++ case which lacks such a check
avformat/aviobuf: Delay buffer downsizing until asserts are met
avcodec/fitsdec: Check data_min/max
avcodec/m101: Fix off be 2 error
avcodec/qdm2: Move fft_order check up
avcodec/libvorbisdec: Check extradata size
avformat/vqf: Check header_size
avcodec/atrac9dec: Check q_unit_cnt in parse_band_ext()
avcodec/atrac9dec: Check that the reused block has succeeded initilization
avcodec/utils: Check bits_per_coded_sample
avcodec/videodsp_template: Fix overflow of addition
avcodec/alsdec: Fix invalid shift in multiply()
avcodec/ffwavesynth: Check ts_end - ts_start for overflow
avcodec/vc1dsp: Avoid undefined shifts in vc1_v_s_overlap_c / vc1_h_s_overlap_c
avcodec/tta: Fix undefined shift
avcodec/qdmc: Fix integer overflows in PRNG
avcodec/bintext: Check font height
avcodec/binkdsp: Fix integer overflows in idct
avcodec/bink: Fix integer overflow in unquantize_dct_coeffs()
avcodec/motionpixels: Check for vlc error in mp_get_vlc()
avcodec/loco: Limit lossy parameter so it is sane and does not overflow
avformat/mov: Set fragment.found_tfhd only after TFHD has been parsed
avcodec/xpmdec: Do not use context dimensions as temporary variables
avcodec/fitsdec: Fix division by 0 in size check
avcodec/aacpsdsp_template: Fix integer overflow in ps_hybrid_analysis_c()
avcodec/truemotion2: Fix integer overflow in last loop in tm2_update_block()
avcodec/iff: finetune the palette size check in the mask case
avcodec/iff: Fix mask_buf / mask_palbuf leak
avformat/icodec: Free ico->images on error paths
avformat/wsddec: Fix undefined shift
avcodec/fmvc: Check if header fields are available before allocating the image
avcodec/bink: Reorder operations in init to avoid memleak on error
avformat/wtvdec: Avoid (32bit signed) sectors
avcodec/bitstream: Check for more conflicting codes in build_table()
avcodec/bitstream: Check for integer code truncation in build_table()
avformat/sbgdec: Fixes integer overflow in str_to_time() with hours
avformat/vpk: Check offset for validity
avformat/vpk: Fix integer overflow in samples_per_block computation
avcodec/mjpegdec: Check for non ls PAL8
avcodec/interplayvideo: check decoding_map_size with video_data_size
avcodec/h264_parse: Use 64bit for expectedpoc and expected_delta_per_poc_cycle
avcodec/mss4: Check input size against skip bits
avcodec/dxv: Check op_offset in dxv_decompress_cocg()
avcodec/diracdec: Fix integer overflow in global_mv()
avcodec/vmnc: Check available space against chunks before reget_buffer()
avcodec/aacdec_template: skip apply_tns() if max_sfb is 0 (from previous header decode failure)
avcodec/aacdec_fixed: Handle more extreem cases in noise_scale()
avcodec/aacdec_template: Merge 3 #ifs related to noise handling
avcodec/aacdec_fixed: ssign seems always -1 in noise_scale(), simplify
avformat/mp3enc: Avoid SEEK_END as it is unsupported
avcodec/truemotion2: Fix several integer overflows in tm2_update_block()
avformat/webm_chunk: Specify expected argument length of get_chunk_filename()
avformat/webm_chunk: Check header filename length
avcodec/cpia: Check input size also against linesizes and EOL
swscale/tests/swscale: Lengthen pixfmt name buffer to 21 bytes
libswcale: Fix possible string overflow in test.
avcodec/hq_hqa: Check available space before reading slice offsets
lavf/webm_chunk: Respect buffer size
avcodec/fits: Check bitpix
avcodec/jvdec: Use ff_get_buffer() when the content is not reused
avcodec/truemotion2: Fix 2 integer overflows in tm2_update_block()
avcodec/gdv: Check input palette size before rescale()
avcodec/jpeg2000: Check stepsize before using it
avcodec/aacdec_fixed: Fix undefined shift in noise_scale()
avutil/avstring: Fix bug and undefined behavior in av_strncasecmp()
avformat/mov: Skip stsd adjustment without chunks
avformat/aadec: Check for scanf() failure
avcodec/ccaption_dec: Add a blank like at the end to avoid rollup reading from outside
avcodec/ivi: Move buffer/block end check to caller of ivi_dc_transform()
avcodec/diracdec: Use 64bit in intermediate of global motion vector field generation
avcodec/truemotion2: Fix integer overflow in tm2_decode_blocks()
movsub_bsf: Fix mov2textsub regression
lavc/libaomenc: Add a maximum constraint of 64 encoder threads.
avformat/aacdec: fix demuxing of small frames
avcodec/cuviddec: improve progressive frame detection
avformat/matroskaenc: fix leak on error
avformat/av1: Initialize padding in ff_isom_write_av1c
avcodec/cbs_av1: fix parsing spatial_id

(adam)

Fix operation mistake

(ryoon)

Add an entry for www/php-nextcloud

Do not update www/php-nextcloud to 16.0.2.
A patch below should be included in future release:
https://patch-diff.githubusercontent.com/raw/nextcloud/server/pull/15992.patch

(ryoon)

doc: Updated wm/marco to 1.22.2

(gutteridge)

marco: update to 1.22.2

Change log:

### marco 1.22.2

    tx: sync with transifex
    bump LT_VERSION_INFO
    libmarco-private: add version information
    add support for invisible borders
    frames: avoid deprecated 'gtk_widget_set_double_buffered'
    window: avoid clang warning: garbage value
    ui: always set the frame background to None
    libmetacity: use cairo to render gradient
    gradient: sync code with mutter before it was removed

(gutteridge)

doc: Updated graphics/mate-themes to 3.22.20

(gutteridge)

mate-themes: update to 3.22.20

Change log:

### 3.22.20 (GTK 3.22)

  * Translations update
  * GreenLaguna: add selectable metacity theme with borders
  * BlackMATE: Restore 1px border metacity theme for the composited case
  * BlackMATE: add selectable metacity theme with borders
  * Submarine: add metacity themes with huge borders
  * Menta: add selectable metacity theme with borders
  * Change url project's website
  * GreenSubmarine: use menta icon theme
  * BlackMATE: provide enough border to resize windows with recent changes elsewhere
  * GreenLaguna: add metacity-theme-3.xml version back
  * include GtkStock icons directly in HCI
  * all themes: adjustments for headerbars
  * Update mate-desktop icon for ContrastHigh theme
  * Remove unused icons
  * Menta: metacity-3, rounded corners for modal-dialogs
  * Menta: improve GtkSwitch
  * Menta: improve metacity-theme-3
  * menta: GtkSwich, disable on/off characters
  * Rename gnome-power-manager.png to mate-power-manager.png

(gutteridge)

doc: Updated net/unifi to 5.10.25

(gdt)

net/unifi: Update to 5.10.25

(Upstream splash screen weakly indicates changes are only bugfixes.)

(gdt)

Obtain strnlen implementation via libnbcompat using USE_FEATURES, instead of
patching in an implementation.

(sevan)

need strnlen() - resolves build on OS X Tiger

(sevan)

Support USE_FEATURES=strnlen to provide an implementation of strnlen(3) via libnbcompat, should the host OS lack support

(sevan)

Updated net/arping to 2.19

(schwarz)

Updated www/micro_httpd to 20140814

(no change documentation found)

(schwarz)

libnbcompat

(sevan)

Include strnlen(3) - Needed on Tiger and more recent Intel only Darwin releases.

(sevan)

Updated devel/py-typing, devel/py-typing-extensions

(adam)

py-typing-extensions: updated to 3.7.4

3.7.4:
Match with Python 3.7.4

(adam)

libarchive no longer has a without-lzmadec option

(sevan)

py-typing: updated to 3.7.4

3.7.4:
Match with Python 3.7.4.

(adam)

doc: Updated sysutils/salt to 2019.2.0nb2

(jperkin)

salt: Limit to python27.

There are reports of some modules failing with Python 3.x so best to be more
compatible for now.  Bump PKGREVISION.

(jperkin)

Updated graphics/tesseract, textproc/jsoncpp

(adam)

jsoncpp: ...and the patch

(adam)

jsoncpp: updated to 1.9.0

1.9.0:
It's been ~2 years since the last release, so this has quite a few changes. Some highlights:
Build optimizations and updates. Now needs at least Meson 0.50.0, bot support for VS 2013 dropped in favor of VS 2017
Lots of bug fixes
Lots of enhancements
Lots of cleanup

(adam)

tesseract: updated to 4.1.0

4.1.0 Release
Added new renders Alto, LSTMBox, WordStrBox.
Added character boxes in hOCR output.
Added python training scripts (experimental) as alternative shell scripts.
Better support AVX / AVX2 / SSE.
Disable OpenMP support by default.
Fix for bounding box problem.
Implemented support for whitelist/blacklist in LSTM engine.
Improved cmake configuration.
Code modernization and improvements.
A lot of bug fixes...

(adam)

Updated misc/libreoffice to 6.2.5.2

(ryoon)

Update to 6.2.5.2

Changelog:
6.2.5.2
List of fixed bugs

Bugs fixed compared to 6.2.5 rc1:

    tdf#121486 Text in Thai for some font go right to left [Khaled Hosny]
    tdf#124251 Basic script error after update from LO 6.1.X to LO 6.2.X, when "URI" to open from a hyperlink is vnd.sun.star.script:... [Eike Rathke]
    tdf#125660 COMPARE DOCUMENTS: Crash in swlo!SwRedlineData::SetSeqNo [Michael Stahl]
    tdf#125670 Crash in: OutputDevice::InitClipRegion on Slide show [Jan-Marek Glogowski]
    tdf#125754 Crash swlo!SwAnchoredDrawObject::IsValidPos [Michael Stahl]
    tdf#125777 Toolbar icons not displayed in gen [Jan-Marek Glogowski]
    tdf#125983 CRASH: Updating link to external files [Noel Grandin]
    tdf#126000 Crash deleting template [Noel Grandin]

6.2.5.1
List of fixed bugs

Bugs fixed compared to 6.2.4 (rc2):

    rhbz#1712823 libreoffice dies if I try to modify the backgound pattern of some paragraph [Caolán McNamara]
    rhbz#1713827 [abrt] libreoffice-core: (anonymous namespace)::signalHandlerFunction(): soffice.bin killed by SIGABRT [Caolán McNamara]
    rhbz#1719378 crash in Draw after starting a drag [Caolán McNamara]
    tdf#40457 Place captions above tables by default [Caolán McNamara]
    tdf#41996 EDITING: Drag and Drop Slides impossible with KDE [Katarina Behrens]
    tdf#42873 Videos playback misplaced in Presenter Console display [Mark Hung]
    tdf#51023 EDITING: Drag-and-drop slide always moves slide to first position, leading to data corruption and sometimes CRASH [Katarina Behrens]
    tdf#54819 EDITING: with "track changes" the paragraph following a deleted paragraph changes its style [László Németh]
    tdf#56738 Wrong encoding in comments for file edited by Mac OS MS Word [Julien Nabet]
    tdf#80853 Calc freezes while filtering large data [Luboš Luňák]
    tdf#92079 Basic Dialog image background not set [Miklos Vajna]
    tdf#92577 Rendering artifacts on pressing Page Down multiple times on multi-page document [Miklos Vajna]
    tdf#96961 Hide whitespace mode: whitespace is hidden even on the last page [Miklos Vajna]
    tdf#100836 [PATCH] Proposed update for "Starting the LibreOffice Software With Parameters" help page [Jan-Marek Glogowski]
    tdf#100986 Rotated text does not work with on Windows (old layout: Graphite only, new layout:all fonts) [Miklos Vajna]
    tdf#101473 [EDITING] Function wizard crashes LibO when evaluating addin that implement XVolatileResult [Eike Rathke]
    tdf#103831 Horizontal text scaling doesn't work correctly when OpenGL is enabled on Windows [Miklos Vajna]
    tdf#105998 right/bottom borders of export shape to png (etc) missing [Xisco Fauli]
    tdf#107487 Unicode ExtB+ chars do not use fallback font correctly in Writer [Mark Hung]
    tdf#108687 Form option buttons not reachable with tab key [Justin Luth]
    tdf#111522 SdrUndoMoveObj::Undo() Crash When multi windows [Miklos Vajna]
    tdf#113241 Options for Number recognition in Writer tables deserve better default: turned on (only functioning when 'Number Recognition' is on!) [Cor Nouws]
    tdf#113541 EDITING - Link to external documents is not created correctly - incorrect URL formation when path contains upper case, spaces and '!', '#' or '$' characters [Eike Rathke]
    tdf#113714 Flicker when hovering over main menu with default rendering [Miklos Vajna]
    tdf#114209 Problems with rendering vertical text in charts - no anti-aliasing when OpenGL is enabled [Miklos Vajna]
    tdf#114596 External forms for a database doesn't save data - closing form with dataloss ( see comment 30 ) [Xisco Fauli]
    tdf#115032 AutoCaption preference in options dialog should show Above as default position of table captions [Caolán McNamara]
    tdf#117347 All labels disappear in Base Form if a selected field is not within visual display area [Miklos Vajna]
    tdf#118150 FILEOPEN XLSX Chart width gets compressed [Tamás Zolnai]
    tdf#118719 Whitespace is not Hidden in Cases with Page and Column Breaks [Miklos Vajna]
    tdf#119109 Embedded table position off after switching from webview to normal view & back [Michael Stahl]
    tdf#119856 kde5: Java extension "WollMux" not working properly [Michael Stahl]
    tdf#120338 FILEOPEN DOCX The paragraph formatting changes are not undone / freeze LO [Henry Castro]
    tdf#120343 Export to PDF opens PDF before the properties have been edited and the PDF is created [Caolán McNamara]
    tdf#120423 LibreOffice Base -> can't insert special character in a form [Caolán McNamara]
    tdf#120774 kde5: Rearranging Impress slides via drag'n'drop not always working as expected [Katarina Behrens]
    tdf#120836 KDE5: LO Calc slow at 'Select all' [Luboš Luňák]
    tdf#121241 MacOS: table borders aren't black but grayish ( zoom level < 150% ) [Xisco Fauli]
    tdf#122056 kde5: Impress crashes when at presentation end when Orca is enabled [Katarina Behrens]
    tdf#122198 The data source connected by "exchange database" is disconnected after the file is closed. [Szymon Kłos]
    tdf#122200 kde5: Crash when navigating tree in accerciser (Accessibility Explorer) [Michael Weghorn]
    tdf#122538 EDITING Table - Index Design: Index isn't sortable any more [Julien Nabet]
    tdf#122668 LibO 6.2.x KDE5 VCL regression: lines not appearing in presentation [Jan-Marek Glogowski]
    tdf#122765 Legend interferes with pie chart after pptx import [Tamás Zolnai]
    tdf#122789 Writer html image widths messed up when in percentages when opening file [Miklos Vajna]
    tdf#123011 KDE5: on wayland the gnome UI is selected [Michael Weghorn]
    tdf#123106 FILESAVE PPTX Shape changes its color back to default [Miklos Vajna]
    tdf#123460 EDITING DOCX Paragraph move with track changes leaves empty paragraph [László Németh]
    tdf#123549 the "close document" button is missing to return to welcome start window [Michael Weghorn, Jan-Marek Glogowski]
    tdf#123654 kde5: Writer crashes when text selected on close (Wayland only) [Michael Weghorn]
    tdf#123750 KDE5/ Plasma: LO Filedialog isn't showing removable devices [Michael Weghorn]
    tdf#123793 Can't step with keyboard to/between favorite special characters on group button [Jim Raykowski]
    tdf#123956 KDE5: a text caret does not move inside a preedit area [Jan-Marek Glogowski]
    tdf#123957 KDE5: Selected text in preedit area is not shown [Jan-Marek Glogowski]
    tdf#124027 LO Impress: Unnecessary grey rectangle on the screen while demonstration (slide with video) [Mark Hung, Katarina Behrens]
    tdf#124279 Function wizard structure tab shows inconsistent intermediate results [Katarina Behrens]
    tdf#124315 Old "Enter pastes clipboard" can still be executed after inserting current date or time. [Eike Rathke]
    tdf#124398 FILEOPEN DOCX Chart is missing from a document with charts and grouped texboxes [Miklos Vajna]
    tdf#124467 cannot disable wrap text [Caolán McNamara]
    tdf#124484 Impress crashes on slide show using "All displays" [Katarina Behrens]
    tdf#124565 FILESAVE: Pasted row height is reset by after saving and reopen [Vasily Melenchuk]
    tdf#124594 FILEOPEN DOCX Additional top and bottom margin on shape breaks layout [Miklos Vajna]
    tdf#124694 Video passing slide boundaries causes weird zoom in or shift (gtk2/gtk3) [Caolán McNamara]
    tdf#124754 FILEOPEN DOCX Hyperlink in text box does not get blue color [Serge Krot]
    tdf#124936 Help->About LibreOffice dialog does ]
    tdf#125062 Export as PNG with transparency changes shape of objects radically [Xisco Fauli]
    tdf#125099 Rounding of durations displayed as wall clock time. [Eike Rathke]
    tdf#125104 Changing page numbering to "1st, 2nd, 3rd,..." causes crashesand month of edited dates if the format's DMY order does not match the locale's MDY order and date acceptance patterns match both. [Eike Rathke]
    tdf#125128 Option's AutoCaption preference should show Above as default position of table captions (again)able causes freezing in 6.2.x [Caolán McNamara]
    tdf#125266 Hang when selecting Read Online Help (GTK2) [Caolán McNamara]
    tdf#125267 KDE5: Base 'Database Wizard' open existing database_file fails [Katarina Behrens]
    tdf#125271 Inserting this .mp4 file in impress leads to a CRASH [Caolán McNamara]
    tdf#125279 Custom properties with "_x005F_" keep growing escapements when roundtripping as OOXML formats [Eike Rathke]
    tdf#125281 Fileopen: EMF images in prix-immobilier-friggit.doc shrunk so not correct width [Miklos Vajna]
    tdf#125285 NB sd modules wrong usage of ObjectForwardOne, ObjectBackOne [andreas kainz]
    tdf#125310 DOCX Change tracking: deleting paragraph end mark inserts a page break [László Németh]
    tdf#125324 FILESAVE: DOCX: floating table changes position after RT [Patrick Jaap]
    tdf#125346 PPTX export: Shape has wrong fill color comming from theme [Tamás Zolnai]
    tdf#125348 autocorrect replacement table default width is increased by long autocorrect entries and you can't resize it [Caolán McNamara]
    tdf#125360 PPTX: Shape fill transparency is not exported if the original shape fill is defined with a theme [Tamás Zolnai]
    tdf#125371 Calculation in table destroys left alignment [Cor Nouws]
    tdf#125381 Index don't appear in management dialog for odb linked to dBase file (in Windows and in Linux with all renderings except gtk3) [Julien Nabet]
    tdf#125387 Fit to text checkboxes always disabled (gtk3) [Caolán McNamara]
    tdf#125413 Menu is black (gen) [Miklos Vajna]
    tdf#125415 Flicker when hovering over submenus with default rendering [Miklos Vajna]
    tdf#125447 Tooltip displayed by Redo button changes from 'Redo' to 'Re~do' when the button is sensitive in Draw, Calc and Impress [Caolán McNamara]
    tdf#125506 Helplines and snap guides no longer visible on macOS (antialising) [Xisco Fauli]
    tdf#125548 When using kde5 vcl, tab first inserts a tab, and then the document loses focus [Jan-Marek Glogowski]
    tdf#125550 The color of the menu changes when opening a change tracked DOCX document saved by MS Word (OpenGL) [Miklos Vajna]
    tdf#125556 FILEOPEN: URL fragment leaked from one object to another when importing Powerpoint ppt file [Noel Grandin]
    tdf#125576 Empty recent characters in special characters dialog for bullet customization. [Tamás Zolnai]
    tdf#125578 Safari sandboxing on macOS 10.14 blocks opening help [Christian Lohmaier]
    tdf#125591 FILEOPEN: DOC: performance regression opening a file with EMF images [Miklos Vajna]
    tdf#125609 radiobutton receives item status changed event after listbox value selection [Justin Luth]
    tdf#125624 CRASH working with file with lots of hints [Mike Kaganski]
    tdf#125673 KDE5: Calc sheet tab's context menu has unexpected highlighting [Jan-Marek Glogowski]
    tdf#125685 crash in layout after paste on particular document [Michael Stahl]
    tdf#125692 kde5: Impress crashes when closing after using presentation minimizer [Jan-Marek Glogowski]
    tdf#125761 Assert when opening paragraph dialog (gtk3 only) [Caolán McNamara]
    tdf#125808 A pivot table cannot be created from a registered data source [Caolán McNamara]
    tdf#125821 Crash on insertion of video [Jan-Marek Glogowski]
    tdf#125840 Crash when trying to customize Base Data View toolbar [Muhammet Kara]
    tdf#125875 UI: in the dlg Insert Hyperlink it is impossible to select the target (Internet/Mail/Document..) by keyboard [Caolán McNamara]
    tdf#125878 Dates imported incorrectly from dbf file [Eike Rathke]

(ryoon)

Try to fix build with boost-1.70.0

* boost-1.69.0 has "(Deprecated: Use get_executor().)" for get_io_context
  in boost/asio/basic_socket.hpp. So use get_executor().context().

(ryoon)

suse131_libdrm: install the hardware-specific libdrm bits.

(maya)

This version uses C++11. Set c++11 to USE_LANGUAGES

Noticed by leot@. Thank you.

(ryoon)

doc: Added mixxx

(nia)

Add audio/mixxx.

Mixxx integrates the tools DJs need to perform creative live mixes with
digital music files.

(nia)

doc: Updated math/glpk to 4.65

(leot)

glpk: Update to 4.65

Changes:
4.65
----
- The following new API routines for LP/MIP preprocessing were
  added:
    glp_npp_alloc_wksp    allocate the preprocessor workspace
    glp_npp_load_prob    load original problem instance
    glp_npp_preprocess1  perform basic LP/MIP preprocessing
    glp_npp_build_prob    build resultant problem instance
    glp_npp_postprocess  postprocess solution to resultant problem
    glp_npp_obtain_sol    obtain solution to original problem
    glp_npp_free_wksp    free the preprocessor workspace
  See doc/npp.txt for detailed description of these API routines.
- A new, more robust implementation of locally valid simple cover
  cuts was included in the MIP solver.
- The API routine glp_init_iocp was changed to enable long-step
  option of the dual simplex by default.

4.64
----
- The dual simplex solver routine was changed to perform more
  aggressive perturbation to prevent dual degeneracy and avoid
  stalling even if the current dual basic solution is strongly
  feasible (mainly if the objective is zero). Thanks to David
  Monniaux <David.Monniaux@univ-grenoble-alpes.fr> for bug report
  and example model.
- The exact simplex solver routine was changed to perform
  terminal output according to the verbosity level (specified by
  the control parameter smcp.msg_lev). Thanks to Jeroen Demeyer
  <jdemeyer@cage.ugent.be> for bug report.
- A minor bug (related to MS Windows version) was fixed. Thanks
  to Heinrich Schuchardt <xypron.glpk@gmx.de> for bug report.
- An example model (Graceful Tree Labeling Problem) in MathProg
  was added. Thanks to Mike Appleby <mike@app.leby.org> for
  contribution.
- Three example models (Power plant LP scheduler, Neumann CA
  grid emulator generator) in MathProg and one in Cplex LP format
  were added. Thanks to Peter Naszvadi <vuk@cs.elte.hu> for
  contribution.

Discussed with <adam>, thanks!

(leot)

Remove -Werror, so this has a chance to compile on newer gcc versions

(martin)

ruby-net-http-persistent: Adjust ruby-connection_pool dependency pattern

Match the semantic of `~>' in the gem.

(leot)

doc: Updated www/ruby-net-http-persistent to 3.0.1

(leot)

ruby-net-http-persistent: Update to 3.0.1

pkgsrc changes:
- Add missing dependency to ruby-connection_pool

Changes:
No changelog available, mostly documentation improvements and misc bug
fixes according commits.

(leot)