Updated time/p5-Time-HiRes to 1.9760

(wen)

Update to 1.9760

Upstream changes:
1.9760 [2019-02-18]
- make utime() available only if we have both fd and name setting
  [RT #133030]
- Adjutst Makefile.PL for windows: the DEFINE() in Makefile.PL
  can't be be in sub init() because that sub isn't called on windows
- t/itimer.t: avoid race condition.
- don't truncate nanosec utime
- fallback/const-c.inc: Avoid compiler warning showing up on darwin.

1.9759 [2018-03-23]
- This version reverts the changes on CPAN that were included in 1.9754 - 1.9758.
  Several of these changes caused instability on some windows platforms. We can
  revisit these fixes if necessary in Perl 5.29.0

(wen)

doc: Updated mail/notmuch to 0.28.2

(wiz)

notmuch: update to 0.28.2.

Notmuch 0.28.2 (2019-02-17)
===========================

Emacs
-----

Invoke gpg with --batch and --no-tty.

Python Bindings
---------------

Fix documentation build with Python 3.7. Note that Python >= 3.3 is
now needed to build this documentation.

(wiz)

doc: Updated audio/icecast to 2.4.4

(wiz)

icecast: update to 2.4.4.

Icecast 2.4.4
-----------------------------------------------------------------------------
We are releasing Icecast 2.4.4, an important bugfix-only release.
We recommend upgrading for increased stability and compatibility!

## Fixes

- Fix: Fixed segfault in htpasswd auth if no filename is set
- Fix: Do not report hashed user passworts in user list.
- Fix two mistakes in the default config's comments
- Add log message for succesful streamlist requests
- Fix: update_from_master() for receiving HTTP/1.1
- Fix: Spelling, thanks to Ukikie
- Fix: Fixed a segfault when xsltApplyStylesheet() returns error
- Fix: Do not segfaul on bad Opus streams
- Fix: Corrected response and fixed TLS for 416 Request Range Not Satisfiable
  responses
- Fix: TLS for ICECAST_PROTOCOL_SHOUTCAST source clients
  and investigating the bug.
- Fix: global listener count could be negative under certain circumstances
  Thanks a lot to Simeon V旦lkel (0xBD4E031CDB4043C9) for reporting
  and investigating the bug.
- Fix: Send "Content-Length: 0" on 100-continue
- Fix: Do not send 100-continue in plain text over TLS sockets
- Fix: Added needed code to announce Opus streams as such to yp.
- Fix: Avoid invalid locking in signal handlers.
- Workaround: avoid libspeex printing warnings on Opus streams.
- Fix: Fixed regression introduced by r19250.
  The fix checks if the source client is actually
  known before printing it's IP-Address.
- Fix: do not allow unescaped strings in XML output.

## Known issues

-  HTTP PUT implementation currently doesn't support chunked encoding yet.
-  HTTP PUT with "Expect: 100-Continue" receives first a "100" and soon
    after a "200", instead of the "200" at the end of transmission.
-  Caution should be exercised when using `<on-connect>` or
    `<on-disconnect>`, as there is a small chance of stream file descriptors
    being mixed up with script file descriptors, if the FD numbers go above
    1024. This will be further addressed in the next Icecast release.
-  Don't use comments inside `<http-headers>` as it will
    prevent processing of further `<header>` tags.
-  Webinterface shows Login when using just `stream_auth`.

(wiz)

doc: Updated sysutils/spice-protocol to 0.12.15

(wiz)

spice-protocol: update to 0.12.15.

Major changes in 0.12.15
========================
* Add support for h265 video codec
* qxl_dev: Align QXLRam to 4 bytes
* meson: fix spice-protocol as subproject

(wiz)

doc/TODO: add some

+ ImageMagick-7.0.8.28, gtar-base-1.32, libxkbcommon-0.8.4,
musicpd-0.21.5, notmuch-0.28.2, pcre-8.43.
- cbindgen-0.8.0

(wiz)

*: recursive bump for libgit2 0.28

(wiz)

doc: Updated devel/libgit2 to 0.28.1

(wiz)

libgit2: update to 0.28.1.

v0.28.1
-------

This is a bugfix release with the following change:

* The deprecated functions (`git_buf_free` and the `giterr_` family of
  functions) are now exported properly.  In the v0.28 release, they were
  not given the correct external attributes and they did not have the
  correct linkage visibility in the v0.28 library.

v0.28
-----

### Changes or improvements

* The library is now always built with cdecl calling conventions on
  Windows; the ability to build a stdcall library has been removed.

* Reference log creation now honors `core.logallrefupdates=always`.

* Fix some issues with the error-reporting in the OpenSSL backend.

* HTTP proxy support is now builtin; libcurl is no longer used to support
  proxies and is removed as a dependency.

* Certificate and credential callbacks can now return `GIT_PASSTHROUGH`
  to decline to act; libgit2 will behave as if there was no callback set
  in the first place.

* The line-ending filtering logic - when checking out files - has been
  updated to match newer git (>= git 2.9) for proper interoperability.

* Symbolic links are now supported on Windows when `core.symlinks` is set
  to `true`.

* Submodules with names which attempt to perform path traversal now have their
  configuration ignored. Such names were blindly appended to the
  `$GIT_DIR/modules` and a malicious name could lead to an attacker writing to
  an arbitrary location. This matches git's handling of CVE-2018-11235.

* Object validation is now performed during tree creation in the
  `git_index_write_tree_to` API.

* Configuration variable may now be specified on the same line as a section
  header; previously this was erroneously a parser error.

* When an HTTP server supports both NTLM and Negotiate authentication
  mechanisms, we would previously fail to authenticate with any mechanism.

* The `GIT_OPT_SET_PACK_MAX_OBJECTS` option can now set the maximum
  number of objects allowed in a packfile being downloaded; this can help
  limit the maximum memory used when fetching from an untrusted remote.

* Line numbers in diffs loaded from patch files were not being populated;
  they are now included in the results.

* The repository's index is reloaded from disk at the beginning of
  `git_merge` operations to ensure that it is up-to-date.

* Mailmap handling APIs have been introduced, and the new commit APIs
  `git_commit_committer_with_mailmap` and `git_commit_author_with_mailmap`
  will use the mailmap to resolve the committer and author information.
  In addition, blame will use the mailmap given when the
  `GIT_BLAME_USE_MAILMAP` option.

* Ignore handling for files in ignored folders would be ignored.

* Worktrees can now be backed by bare repositories.

* Trailing spaces are supported in `.gitignore` files, these spaces were
  previously (and erroneously) treated as part of the pattern.

* The library can now be built with mbedTLS support for HTTPS.

* The diff status character 'T' will now be presented by the
  `git_diff_status_char` API for diff entries that change type.

* Revision walks previously would sometimes include commits that should
  have been ignored; this is corrected.

* Revision walks are now more efficient when the output is unsorted;
  we now avoid walking all the way to the beginning of history unnecessarily.

* Error-handling around index extension loading has been fixed. We were
  previously always misreporting a truncated index (#4858).

### API additions

* The index may now be iterated atomically using `git_index_iterator`.

* Remote objects can now be created with extended options using the
  `git_remote_create_with_opts` API.

* Diff objects can now be applied as changes to the working directory,
  index or both, emulating the `git apply` command.  Additionally,
  `git_apply_to_tree` can apply those changes to a tree object as a
  fully in-memory operation.

* You can now swap out memory allocators via the
  `GIT_OPT_SET_ALLOCATOR` option with `git_libgit2_opts()`.

* You can now ensure that functions do not discard unwritten changes to the
  index via the `GIT_OPT_ENABLE_UNSAVED_INDEX_SAFETY` option to
  `git_libgit2_opts()`.  This will cause functions that implicitly re-read
  the index (eg, `git_checkout`) to fail if you have staged changes to the
  index but you have not written the index to disk.  (Unless the checkout
  has the FORCE flag specified.)

  At present, this defaults to off, but we intend to enable this more
  broadly in the future, as a warning or error.  We encourage you to
  examine your code to ensure that you are not relying on the current
  behavior that implicitly removes staged changes.

* Reference specifications can be parsed from an arbitrary string with
  the `git_refspec_parse` API.

* You can now get the name and path of worktrees using the
  `git_worktree_name` and `git_worktree_path` APIs, respectively.

* The `ref` field has been added to `git_worktree_add_options` to enable
  the creation of a worktree from a pre-existing branch.

* It's now possible to analyze merge relationships between any two
  references, not just against `HEAD`, using `git_merge_analysis_for_ref`.

### API removals

* The `git_buf_free` API is deprecated; it has been renamed to
  `git_buf_dispose` for consistency.  The `git_buf_free` API will be
  retained for backward compatibility for the foreseeable future.

* The `git_otype` enumeration and its members are deprecated and have
  been renamed for consistency.  The `GIT_OBJ_` enumeration values are
  now prefixed with `GIT_OBJECT_`.  The old enumerations and macros
  will be retained for backward compatibility for the foreseeable future.

* Several index-related APIs have been renamed for consistency.  The
  `GIT_IDXENTRY_` enumeration values and macros have been renamed to
  be prefixed with `GIT_INDEX_ENTRY_`.  The `GIT_INDEXCAP` enumeration
  values are now prefixed with `GIT_INDEX_CAPABILITY_`.  The old
  enumerations and macros will be retained for backward compatibility
  for the foreseeable future.

* The error functions and enumeration values have been renamed for
  consistency.  The `giterr_` functions and values prefix have been
  renamed to be prefixed with `git_error_`; similarly, the `GITERR_`
  constants have been renamed to be prefixed with `GIT_ERROR_`.
  The old enumerations and macros will be retained for backward
  compatibility for the foreseeable future.

### Breaking API changes

* The default checkout strategy changed from `DRY_RUN` to `SAFE` (#4531).

* Adding a symlink as .gitmodules into the index from the workdir or checking
  out such files is not allowed as this can make a Git implementation write
  outside of the repository and bypass the fsck checks for CVE-2018-11235.

(wiz)

doc: Updated graphics/p5-GD-SecurityImage to 1.75

(mef)

Updated graphics/p5-GD-SecurityImage to 1.75

(pkgsrc) Drop patch-Makefile.PL (which was said necessary to perl 5.26,
        this version may be packged with perl 5.26 without this patch)
(upstream)
1.75 2018-12-24 BURAK
    - Drop legacy workarounds and documentation about those as well.
    - In relation to that, we now depend on relatively new versions
        of both GD & PerlMagick.
    - These methods are now also removed a from the backends as well:
        _versiongt
        _versionlt
    - Distro fix.

1.74 2018-12-24 BURAK
    - Migrate to dzil.

(mef)

Added mail/p5-Mail-Box-POP3 version 3.004

(wen)

Add p5-Mail-Box-POP3

(wen)

Import Mail-Box-POP3-3.004 as mail/p5-Mail-Box-POP3.

Maintain a folder which has its messages stored on a remote server. The
communication between the client application and the server is implemented using
the POP3 protocol. This class uses Mail::Transport::POP3 to hide the transport
of information, and focusses solely on the correct handling of messages within a
POP3 folder.

(wen)

Added mail/p5-Mail-Box-IMPAP4 version 3.003

(wen)

Add p5-Mail-Box-IMPAP4

(wen)

Import Mail-Box-IMAP4-3.003 as mail/p5-Mail-Box-IMAP4.

Maintain a folder which has its messages stored on a remote server. The
communication between the client application and the server is implemented using
the IMAP4 protocol. This class uses Mail::Transport::IMAP4 to hide the transport
of information, and focusses solely on the correct handling of messages within a
IMAP4 folder. More than one IMAP4 folder can be handled by one single IMAP4
connection.

(wen)

Added mail/p5-Mail-Transport version 3.003

(wen)

Add p5-Mail-Transport

(wen)

Import Mail-Transport-3.003 as mail/p5-Mail-Transport.

Mail::Transport extends Mail::Transport implement sending and/or receiving of
messages, using various protocols.

Mail::Transport::Send extends this class, and offers general functionality for
send protocols, like SMTP. Mail::Transport::Receive also extends this class, and
offers receive method. Some transport protocols will implement both sending and
receiving.

(wen)

Updated mail/p5-Mail-Box to 3.006

(wen)

Update to 3.006

Upstream changes:
version 3.006: Fri 15 Feb 09:01:51 CET 2019

        Fixes:
        - MailDir warns about repeat count, since last release added 'use
          warnings' to the file.  [Keita Jamadam] github issue #2
        - mbox parsing failed on changing handling of blank lines by Mail::Message
          rt.cpan.org#128513 [Gregor Herrmann] + [cpantesters]

(wen)

audio/freeswitch-music: add missing SHA512 hashes to distinfo

(rillig)

emulators/compat12: add missing SHA512 sums to distinfo

(rillig)

Updated mail/p5-Mail-Message to 3.008

(wen)

Update to 3.008

Upstream changes:
version 3.008: Mon 11 Feb 12:30:40 CET 2019

        Fixes:
        - test with windows path [cpantesters]
        - when a message gets coerced, its components should not be delayed [fany]
        - date fields recognizing 2-digit years [Andrew Beverley]

        Improvements:
        - failing AUTOLOAD on ::Body gives unclear error
        - dates after 2030 for message separator in mbox

(wen)

devel/ruby-ronn: add missing SHA512 checksum to distinfo

(rillig)

doc: Updated graphics/p5-GD to 2.71

(mef)

graphics/p5-GD updated to 2.71

2.71    * skip Test::Fork on freebsd (GH #25)
2.70    * fixes for hardened CCFLAGS with -Werror (RT #128167)

(mef)

kitty: add USE_LANGUAGES variable

(gutteridge)

samba4: Needs socket libraries on SunOS.

(jperkin)

tevent: Fix build on SunOS.

(jperkin)

doc: Added security/py-certbot-dns-luadns version 0.31.0

(triaxx)

py-certbot-dns-luadns: add version 0.31.0

LuaDNS Authenticator plugin for Certbot

(triaxx)

doc: Added security/py-certbot-dns-nsone version 0.31.0

(triaxx)

py-certbot-dns-nsone: add version 0.31.0

NS1 DNS Authenticator plugin for Certbot

(triaxx)

doc: Updated mail/mblaze to 0.5

(wiz)

mblaze: update to 0.5.

* New tool msearch to wrap several mail indexers.
* New zsh completion _mblaze.
* mnext/mprev were removed (you can call `mless +`/`mless -`).
* The GnuPG tools in contrib/ now use gpg2.
* mshow exits with error if it could not extract all attachments
* mrep: add -noquote to disable quoting the message replied to
* mdeliver: keep permissions of messages
* mcom: aborting the editor is now more like delete than cancel
* mcom: add -send to send directly without editing
* mcom: check if mail is formatted sensibly
* mpick: new flag -v for statistics
* mscan: new flag -v for statistics
* magrep: add -h, which is like -p but doesn't print the file name
* mscan: prioritize displaying trashed mail over other markers
* mpick: fix off-by-one in expression parsing
* Many bug fixes

(wiz)

p5-Module-Build: remove duplicated variable definition

(gutteridge)

tor-browser: comment out non-existing URL (MASTER_SITES)

(wiz)

doc: Updated ham/fldigi to 4.1.01

(mef)

Updated ham/fldigi 4.0.16 to 4.1.01

- (pkgsrc) drop  patch-src_rigcontrol_hamlib.cxx, it is now included)
- (upstream) below

=Version 4.1.01=

2019-02-18  David Freese  <w1hkj@bellsouth.net>

1d4798c: CW h/w ptt
ca3e777: nanoIO
a943ae3: NAVTEX abort
ce586b8: dup-check
57cc6ea: ADIF submode
96e1f05: WF only bug fix
06c56b3: LotW
c5af7e0: Pedantic warnings
892336b: SD counties
044dd29: QRZ.com
aeed471: SV1GRB test report

=Version 4.1.0=

39a76e8: po update
79c67d3: WWV doc
04e53b5: Winkeyer FSK
b8ca88e: Contests
b197c75: arq-override
8572f35: flmsg-dir
02c66eb: contest-docs
9d85169: fldigi_def.xml
20e2c02: socket_mods
e1c2d80: Fltk 1.4 mod
5ffd6f5: wefax
fb1fd67: nanoIO
7d604b8: CW SOM table
4eec8f2: flrig: macro
99b0a01: Audio adjust docs
146bd7e: feldhell
6b5c93a: C-11 fixes
ccbd52f: nano FSK
ed6a7db: Mint-19/Mate
e9c0f2d: Signal Browser documentation
fbb0654: flrig seg fault

=Version 4.0.18=

2fef9cb: CPS testing
aa757af: ipv6 addressing
c62662c: MT63 centering
9460c00: fsq mods
5a7377f: IFKP/THOR greyscale image
51e2829: Hamlib bug fix
58c6362: Tooltip
47d2c6c: nanoIO
a253603: THROB adif
f46cb9b: RigCAT dialog

=Version 4.0.17=

a2b9172: flarq idtimer
d58b0b7: Greek language update
4c3ca8f: tmpfile
87cb7e1: xmlrpc cat string
4f72635: Modem start frequency
dc68d02: Serial port discovery
55aa627: Log entries
2fea354: flarq appdir
c480982: rx/tx
56553fa: RTTY Quick pick
79aa5d6: quick pick rtty baud
d1f91ea: Documentation Update
e4a5cec: CW/FSK I/O on start
a9df13f: WinKey PTT
6de7360: Navigator
fa8e53e: nanoIO
202ad12: Default Lighted Button
dfd1b0b: ST/PR macro tags
490f683: K2/K3/KX3 data modes
c39a88b: Logbook read
6cb1e5a: 8pskF
89ff7c8: fsq/ifkp audit logs
cd7e502: RTTY browser decode

(mef)

exiv2: drop MAKE_JOBS_SAFE=no

(tnn)

xkbcomp: add buildlink3.mk file for pc file linking.

Requested in PR 54007 by David Shao.

(wiz)

doc: Updated ham/xlog to 2.0.17

(mef)

Updated ham/xlog 2.0.15 to 2.0.17

- Changes for xlog version 2.0.17 - 2019-jan-14
  * Suppress GCC warning "stringop-truncation" in editest.c
    which occurs with GCC >= 8.1.
  * Updated cty.dat 20190114

- Changes for xlog version 2.0.16 - 2019-jan-13
  * added JS8 support and updated to ADIF 3.0.9
  * Updated cty.dat 20181210

(mef)

Ballance buildlink tree

(martin)

Oops, fix install path

(martin)

doc: Added sysutils/arm-trusted-firmware-sun50i_a64 version 2.0

(martin)

Add arm-trusted-firmware-sun50i_a64

(martin)

ARM trusted firmware, mainline version, build for the sun50i_a64
platform (e.g. Pinebook).

(martin)

doc: Updated net/mikutter to 3.8.6

(tsutsui)

mikutter: update to 3.8.6.

Upstream changes:

mikutter 3.8.6

* backport yield_self for Ruby 2.4 and prior
* possible crash on too fast reply as @seibe
* extract pixiv images from OGP
* thanks Shibafu Midorino

(tsutsui)

doc: Updated cad/gtkwave to 3.3.99

(mef)

Updated cad/gtkwave to 3.3.99

3.3.99  09feb19 Added visible single bit glitches as a yellow dot (if enabled
                with --rcvar 'vcd_preserve_glitches on').
                Fixed print routine broken by bsearch_trunc() optimization in
                version 3.3.96.

(mef)

doc: Updated mail/getmail to 5.13

(schmonz)

Update to 5.13. From the changelog:

- second attempt at fixing SNI change with Python < 2.7.  Thanks: "Cimbal".

(schmonz)

Reset maintainership.

(alnsn)

doc: Added www/tscrape version 0.1

(leot)

www: Add tscrape

(leot)

tscrape: Import tscrape-0.1 as www/tscrape

tscrape reads the Twitter HTML page and scrapes the data into a
TAB-separated format to stdout.

(leot)

librsvg: drop MAKE_JOBS_SAFE=NO

(tnn)

doc: note mesa 18 update

(tnn)

mesa: update to 18.3.4

Bug fixes
  Bug 109107 - gallium/st/va: change va max_profiles when using Radeon VCN Hardware
  Bug 109401 - [DXVK] Project Cars rendering problems
  Bug 109543 - After upgrade mesa to 19.0.0~rc1 all vulkan based application stop working ["vulkan-cube" received SIGSEGV in radv_pipeline_init_blend_state at ../src/amd/vulkan/radv_pipeline.c:699]
  Bug 109603 - nir_instr_as_deref: Assertion `parent && parent->type == nir_instr_type_deref' failed.

Changes
  gallium-xlib: query MIT-SHM before using it.
  radv: Only look at pImmutableSamples if the descriptor has a sampler.
  amd/common: Use correct writemask for shared memory stores.
  get-pick-list: Add --pretty=medium to the arguments for Cc patches
  meson: Add dependency on genxml to anvil
  docs: add sha256 checksums for 18.3.3
  cherry-ignore: nv50,nvc0: add explicit settings for recent caps
  cherry-ignore: add more 19.0 only nominations from Ilia
  cherry-ignore: radv: fix using LOAD_CONTEXT_REG with old GFX ME firmwares on GFX8
  Update version to 18.3.4
  vc4: Fix copy-and-paste fail in backport of NEON asm fixes.
  xvmc: fix string comparison
  xvmc: fix string comparison
  vc4: Fix leak in HW queries error path
  v3d: Fix leak in resource setup error path
  intel/compiler: do not copy-propagate strided regions to ddx/ddy arguments
  nvc0: we have 16k-sized framebuffers, fix default scissors
  intel/fs: Handle IMAGE_SIZE in size_read() and is_send_from_grf()
  intel/fs: Do the grf127 hack on SIMD8 instructions in SIMD16 mode
  nir/deref: Rematerialize parents in rematerialize_derefs_in_use_blocks
  anv/cmd_buffer: check for NULL framebuffer
  st/mesa: Limit GL_MAX_[NATIVE_]PROGRAM_PARAMETERS_ARB to 2048
  freedreno/a6xx: Emit blitter dst with OUT_RELOCW
  st/va: fix the incorrect max profiles report
  st/va/vp9: set max reference as default of VP9 reference number
  meson: drop the xcb-xrandr version requirement
  gallium/u_threaded: fix EXPLICIT_FLUSH for flush offsets > 0
  radeonsi: fix EXPLICIT_FLUSH for flush offsets > 0
  winsys/amdgpu: don't drop manually added fence dependencies
  egl/wayland: Allow client->server format conversion for PRIME offload. (v2)
  egl/wayland-drm: Only announce formats via wl_drm which the driver supports.
  radeonsi: Fix guardband computation for large render targets
  freedreno: stop frob'ing pipe_resource::nr_samples
  intel: Add more PCI Device IDs for Coffee Lake and Ice Lake.
  radv: fix compiler issues with GCC 9
  radv: always export gl_SampleMask when the fragment shader uses it

(tnn)

doc: Updated mail/getmail to 5.12

(schmonz)

Update to 5.12. From the changelog:

- bugfix: the SNI change broke something else with Python 2.6 and earlier;
  fixed.  Thanks: "Cimbal".

(schmonz)

Updated mail/p5-Email-Address-List to 0.06

(wen)

Update to 0.06

Upstream changes:
0.06 2019-01-02

- Changes to address CVE-2018-18898 which could allow DDoS-type attacks.
  Thanks to Lukas Kramer for reporting the issue and Alex Vandiver for
  contributing fixes.
  - Fix pathological backtracking for unkown regex
  - Fix pathological backtracking in obs-phrase(i.e. obs-display-name)
  - Fix pathological backtracking in cfws, quoted strings

(wen)

doc: Updated devel/doxygen to 1.8.15nb1

(wiz)

Updated geography/p5-Geo-ShapeFile to 2.66

(wen)

doxygen: disable latex support for now

A recent change in latex3/latex2e broke the tabu package that doxygen uses,
causing a doxygen build failure. See e.g.
https://github.com/doxygen/doxygen/issues/6837

Bump PKGREVISION.

(wiz)

Update to 2.66

Upstream changes:
2.66 2019-02-11
    - Full release of 2.65_001, with one additional definedness check (pajlpajl++)

2.65_001 2019-02-11
    - fix file_version method (it was calling the wrong key) (GH #23)
    - avoid repeated loading of files when getting headers
      and incorrect undef returns (GH #22)
    - both reported by pajlpajl

(wen)

doc: Updated audio/fasttracker2 to version 2.137

(fox)

fasttracker2: update to b137

Changes since b135:

Beta #137 - 14.02.2019
- Mouse scaling was 100% broken on Macs with retina displays (high-DPI).
  Sorry! This is fixed now.

Beta #136 - 14.02.2019
- French keyboard layout users can now enter numbers in the pattern data
  with the left SHIFT key (like normal for the FR layout).
- You can now toggle extended pattern editor mode with the print screen key
  (like in real FT2. You can also use CTRL+Z as always).

(fox)

Updated net/tor, net/py-apache-libcloud

(adam)

py-apache-libcloud: updated to 2.4.0

Changes in Apache Libcloud 2.4.0

- Refuse installation with Python 2.6 and Python 3.3 (support was
  already dropped in Libcloud 2.3.0)
- Support Python 3.7
- Cleanup various Python files
- Allow running tests with http_proxy set

Common
- [OpenStack] Document openstack_connection_kwargs method
- [OpenStack] Handle missing user email in OpenStackIdentityUser

Compute
- [ARM] Support OS disk size definition on node creation
- [Digital Ocean] Support floating IPs
- [Digital Ocean] Support attach/detach for floating IPs
- [Digital Ocean] Add ex_get_node_details
- [Digital Ocean] Add tags extra attribute to create_node
- [Dimension Data] Fix IndexError in list_images
- [EC2] Add AWS eu-west-3 (Paris) region
- [EC2] Add description to ex_authorize_security_group_ingress
- [EC2] Added script to automatically get EC2 instance sizes
- [EC2] Update instance sizes
- [EC2] Accept tags when create a snapshot
- [GCE] Expand Firewall options coverage
- [GCE] Expand network and subnetwork options coverage
- [GCE] Extend ex_create_address to allow internal ip creation
- [GCE] Allow shared VPC in managed instance group creation
- [GCE] Support disk_size parameter for boot disk when creating instance

- [GCE] Update public image projects list
- [GCE] Fix _find_zone_or_region for >500 instances
- [GCE] Allow routing_mode=None in ex_create_network
- [OpenStack] Implement Glance Image API v2
- [OpenStack] Fix spelling in ex_files description
- [OpenStack v2] Allow listing image members
- [OpenStack v2] Allow creating and accepting image members
- [OpenStack v2] Fix image members methods
- [OpenStack] Fix API doc for delete_floating_ip
- [OpenStack] Implement port attaching/detaching
- [OpenStack] Add methods for getting and creating ports
- [OpenStack] Add get_user method
- [OpenStack] Add ex_list_subnets to OpenStack_2_NodeDriver
- [OpenStack] The OpenStack_2_NodeDriver uses two connections
- [OpenStack] The OpenStack_2_NodeDriver /v2.0/networks instead of /os-networks
- [Scaleway] New Scaleway driver
- [Scaleway] Update Scaleway default API host

DNS
- [Google Cloud DNS] Document driver instantiation

Storage
- Update docstring for storage provider class
- [Azure Blob Storage] Allow filtering lists by prefix
- [Azure Blob Storage] Update driver documentation
- [Azure Blob Storage] Fix upload/download streams
- [Azure Blob Storage] Fix PageBlob headers
- [S3] Guess s3 upload content type
- [S3] Add Amazon S3 (cn-northwest-1) Storage Driver

Other
- Fixed spelling in 2.0 changes documentation

Changes in Apache Libcloud 2.3.0
- Drop support for Python 2.6 and Python 3.3
  They're no longer supported, and the Python ecosystem is starting to
  drop support: two of our test dependencies no longer support them.
- Made pytest-runner optional

Common
- Improve warning when CA_CERTS_PATH is incorrectly passed as a list
- Cleaned up and corrected third-party drivers documentation
- Modernized a few Python examples
- [OpenStack] Authentify with updated Identity API

Compute
- Fix "wait_until_running() method so it also works correctly and doesn't
  append "None" to the addresses list if node has no IP address.
- [ARM] Fix checking for "location is None" in several functions
- [ARM] Fix error when using SSH key auth with Python 3
- [ARM] Fix API call on powerOff, understand PAUSED state
- [ARM] Delete VHDs more reliably in destroy_node(), raise exception on unhandled errors
- [ARM] Fix api version used to list and delete NICs
- [ARM] Allow faster list_nodes() with ex_fetch_power_state=False
- [ARM] Fix delete_old_vhd
- [ARM] Limit number of retries in destroy_node
- [ARM] Fix Retry-After header handling
- [CloudStack] Handle NICs without addresses
- [CloudStack] Add change size and restore
- [Digital Ocean] Add ex_enable_ipv6 in DigitalOcean_v2 driver
- [Digital Ocean] Add support for tags in list_nodes()
- [Digital Ocean] Add rebuild and resize commands
- [EC2] Add new x1.16xlarge and x1e.32xlarge instance type.
- [EC2] Add AWS EC2 c5 series
- [EC2] Add AWS EC2 M5 sizes
- [EC2] Update pricing information for EC2 instances.
- [EC2] Allow cn-north-1 even without pricing information
- [EC2] Fix EBS volume encryption
- [ECS Aliyun] Support modify_security_group_attributes
- [GCE] Allow adding labels to images
- [GCE] Allow adding license strings to images
- [GCE] Support GCE node labels.
- [GCE] Fix GCEList pagination.
- [GCE] Allow setting service account in instance templates
- [GCE] Add support for private IP addresses in GCE instance creation
- [GCE] Allow for use of shared network (VPC) and subnetwork
- [GCE] Add support for accelerators
- [ProfitBricks] Update driver and add support for the new API v4.
- [ProfitBricks] Fix list_snapshots() method
- [UpCloud] New driver for UpCloud
- [UpCloud] Use disk size and storage tier also when creating node from template
- [UpCloud] Allow to define hostname and username
- [UpCloud] Add pricing information to list_sizes

Storage
- Added Digital Ocean Spaces driver
- [Digital Ocean Spaces] Add support for AMS3 region
- [Digital Ocean Spaces] Add support for SGP1 region
- Fix a bug / regression which resulted in increased memory consumption when
  using download_object method. This method would store whole object
  content in memory even though there was no need for that.
  This regression was introduced in 2.0.0 when we moved to using requests
  library.
- Fix a regression with hash computation performance and memory usage on object
  upload inadvertently introduced in 2.0.0 and make it more efficient.

(adam)

tor: updated to 0.3.5.8

Changes in version 0.3.5.8:

Tor 0.3.5.8 backports serveral fixes from later releases, including fixes
for an annoying SOCKS-parsing bug that affected users in earlier 0.3.5.x
releases.

It also includes a fix for a medium-severity security bug affecting Tor
0.3.2.1-alpha and later. All Tor instances running an affected release
should upgrade to 0.3.3.12, 0.3.4.11, 0.3.5.8, or 0.4.0.2-alpha.

o Major bugfixes (cell scheduler, KIST, security):
  - Make KIST consider the outbuf length when computing what it can
    put in the outbuf. Previously, KIST acted as though the outbuf
    were empty, which could lead to the outbuf becoming too full. It
    is possible that an attacker could exploit this bug to cause a Tor
    client or relay to run out of memory and crash. Fixes bug 29168;
    bugfix on 0.3.2.1-alpha. This issue is also being tracked as
    TROVE-2019-001 and CVE-2019-8955.

o Major bugfixes (networking, backport from 0.4.0.2-alpha):
  - Gracefully handle empty username/password fields in SOCKS5
    username/password auth messsage and allow SOCKS5 handshake to
    continue. Previously, we had rejected these handshakes, breaking
    certain applications. Fixes bug 29175; bugfix on 0.3.5.1-alpha.

o Minor features (compilation, backport from 0.4.0.2-alpha):
  - Compile correctly when OpenSSL is built with engine support
    disabled, or with deprecated APIs disabled. Closes ticket 29026.
    Patches from "Mangix".

o Minor features (geoip):
  - Update geoip and geoip6 to the February 5 2019 Maxmind GeoLite2
    Country database. Closes ticket 29478.

o Minor features (testing, backport from 0.4.0.2-alpha):
  - Treat all unexpected ERR and BUG messages as test failures. Closes
    ticket 28668.

o Minor bugfixes (onion service v3, client, backport from 0.4.0.1-alpha):
  - Stop logging a "BUG()" warning and stacktrace when we find a SOCKS
    connection waiting for a descriptor that we actually have in the
    cache. It turns out that this can actually happen, though it is
    rare. Now, tor will recover and retry the descriptor. Fixes bug
    28669; bugfix on 0.3.2.4-alpha.

o Minor bugfixes (IPv6, backport from 0.4.0.1-alpha):
  - Fix tor_ersatz_socketpair on IPv6-only systems. Previously, the
    IPv6 socket was bound using an address family of AF_INET instead
    of AF_INET6. Fixes bug 28995; bugfix on 0.3.5.1-alpha. Patch from
    Kris Katterjohn.

o Minor bugfixes (build, compatibility, rust, backport from 0.4.0.2-alpha):
  - Update Cargo.lock file to match the version made by the latest
    version of Rust, so that "make distcheck" will pass again. Fixes
    bug 29244; bugfix on 0.3.3.4-alpha.

o Minor bugfixes (client, clock skew, backport from 0.4.0.1-alpha):
  - Select guards even if the consensus has expired, as long as the
    consensus is still reasonably live. Fixes bug 24661; bugfix
    on 0.3.0.1-alpha.

o Minor bugfixes (compilation, backport from 0.4.0.1-alpha):
  - Compile correctly on OpenBSD; previously, we were missing some
    headers required in order to detect it properly. Fixes bug 28938;
    bugfix on 0.3.5.1-alpha. Patch from Kris Katterjohn.

o Minor bugfixes (documentation, backport from 0.4.0.2-alpha):
  - Describe the contents of the v3 onion service client authorization
    files correctly: They hold public keys, not private keys. Fixes
    bug 28979; bugfix on 0.3.5.1-alpha. Spotted by "Felixix".

o Minor bugfixes (logging, backport from 0.4.0.1-alpha):
  - Rework rep_hist_log_link_protocol_counts() to iterate through all
    link protocol versions when logging incoming/outgoing connection
    counts. Tor no longer skips version 5, and we won't have to
    remember to update this function when new link protocol version is
    developed. Fixes bug 28920; bugfix on 0.2.6.10.

o Minor bugfixes (logging, backport from 0.4.0.2-alpha):
  - Log more information at "warning" level when unable to read a
    private key; log more information at "info" level when unable to
    read a public key. We had warnings here before, but they were lost
    during our NSS work. Fixes bug 29042; bugfix on 0.3.5.1-alpha.

o Minor bugfixes (misc, backport from 0.4.0.2-alpha):
  - The amount of total available physical memory is now determined
    using the sysctl identifier HW_PHYSMEM (rather than HW_USERMEM)
    when it is defined and a 64-bit variant is not available. Fixes
    bug 28981; bugfix on 0.2.5.4-alpha. Patch from Kris Katterjohn.

o Minor bugfixes (onion services, backport from 0.4.0.2-alpha):
  - Avoid crashing if ClientOnionAuthDir (incorrectly) contains more
    than one private key for a hidden service. Fixes bug 29040; bugfix
    on 0.3.5.1-alpha.
  - In hs_cache_store_as_client() log an HSDesc we failed to parse at
    "debug" level. Tor used to log it as a warning, which caused very
    long log lines to appear for some users. Fixes bug 29135; bugfix
    on 0.3.2.1-alpha.
  - Stop logging "Tried to establish rendezvous on non-OR circuit..."
    as a warning. Instead, log it as a protocol warning, because there
    is nothing that relay operators can do to fix it. Fixes bug 29029;
    bugfix on 0.2.5.7-rc.

o Minor bugfixes (tests, directory clients, backport from 0.4.0.1-alpha):
  - Mark outdated dirservers when Tor only has a reasonably live
    consensus. Fixes bug 28569; bugfix on 0.3.2.5-alpha.

o Minor bugfixes (tests, backport from 0.4.0.2-alpha):
  - Detect and suppress "bug" warnings from the util/time test on
    Windows. Fixes bug 29161; bugfix on 0.2.9.3-alpha.
  - Do not log an error-level message if we fail to find an IPv6
    network interface from the unit tests. Fixes bug 29160; bugfix
    on 0.2.7.3-rc.

o Minor bugfixes (usability, backport from 0.4.0.1-alpha):
  - Stop saying "Your Guard ..." in pathbias_measure_{use,close}_rate().
    Some users took this phrasing to mean that the mentioned guard was
    under their control or responsibility, which it is not. Fixes bug
    28895; bugfix on Tor 0.3.0.1-alpha.

(adam)

orcus: bump dependency version in buildlink3.mk

libreoffice, the sole package that presently depends on orcus, requires a
minimum version of 0.14 now. (And, for that matter, the orcus change log
indicates that there have been incompatible API changes.) Bump
accordingly here. (If an older version of orcus was present, the
current version of libreoffice would simply have failed to build.)

(gutteridge)

libixion: bump dependency version in buildlink3.mk

orcus, the sole package that presently depends on libixion, requires a
minimum version of 0.14 now. Bump accordingly here.

(gutteridge)

doc: Updated net/bind912 to 9.12.3pl4

(taca)

net/bind912: update to 9.12.3pl4

Update bind912 to 9.12.3pl4 (BIND 9.12.3-P4).

--- 9.12.3-P4 released ---

--- 9.12.3-P3 released (withdrawn) ---

5141. [security] Zone transfer controls for writable DLZ zones were
not effective as the allowzonexfr method was not being
called for such zones. (CVE-2019-6465) [GL #790]

--- 9.12.3-P2 released (withdrawn) ---

5118. [security] Named could crash if it is managing a key with
`managed-keys` and the authoritative zone is rolling
the key to an unsupported algorithm. (CVE-2018-5745)
[GL #780]

5110. [security] Named leaked memory if there were multiple Key Tag
EDNS options present. (CVE-2018-5744) [GL #772]

(taca)

doc: Updated net/bind911 to 9.11.5pl4

(taca)

net/bind911: update to 9.11.5pl4

Update bind911 to 9.11.5pl4 (BIND 9.11.5-P4).

--- 9.11.5-P4 released ---

--- 9.11.5-P3 released (withdrawn) ---

5141. [security] Zone transfer controls for writable DLZ zones were
not effective as the allowzonexfr method was not being
called for such zones. (CVE-2019-6465) [GL #790]

--- 9.11.5-P2 released (withdrawn) ---

5118. [security] Named could crash if it is managing a key with
`managed-keys` and the authoritative zone is rolling
the key to an unsupported algorithm. (CVE-2018-5745)
[GL #780]

5110. [security] Named leaked memory if there were multiple Key Tag
EDNS options present. (CVE-2018-5744) [GL #772]

(taca)

mk/compiler.mk: replace empty lines with empty comments

This is necessary for "bmake help" to interpret the whole comment as a
single block.

(rillig)

firefox: libwebp >= 1.0.1 is now explicitly required

Note explicit dependency on libwebp >= 1.0.1. (libwebp itself doesn't
merit a general bump in its buildlink3.mk file, since according to its
change log, there are no incompatibilities added.) No PKGREVISION bump,
since either this previously built with the newer version of libwebp in
the current pkgsrc tree, or it failed to meet the dependency.

(gutteridge)

doc: Updated pkgtools/pkglint to 5.7.1

(rillig)

pkgtools/pkglint: update to 5.7.1

Changes since 5.7.0:

* Removed a line of code that was meant only for development, not for
  production use, from util.go.

(rillig)

doc: Updated pkgtools/pkglint to 5.7.0

(rillig)

pkgtools/pkglint: update to 5.7.0

Changes since 5.6.12:

* Many of the -C and -W command line options have been removed since
  they are not used in practice. The -Wall and -Call options continue
  to work though; these are the only options mentioned in the pkgsrc
  guide.

* When a PLIST file contains redundant libtool libraries (.la and the
  corresponding .so), there is only a single warning per file.

* Warnings about the package COMMENT are now strictly ordered from left
  to right.

* The hashes for all distfiles must now contain the SHA512 hash. This
  hash has been added to many distfiles in 2015. It's time now to
  enforce it on all other distfiles as well.

* Makefile fragments that are included inside an .elif exists(...)
  are not reported as missing.

* The check for redundant variables and accidentally overwritten
  variables has been improved. Now the warning occurs at the later
  definition. This especially applies to cases where a file is included
  and after that, some of its variables are overridden. Variables in
  unrelated files are no longer marked as redundant.

* When a package contains multiple definitions of a single variable
  (typical for Makefile.common), the later definition overrides the
  earlier definition. That way, the location of DISTINFO_FILE and
  PATCHDIR is resolved correctly.

(rillig)

doc: Updated www/webkit-gtk to 2.22.6nb1

(maya)

webkit-gtk: backport upstream patch. security fix.

Subject: [PATCH] Fix DFG doesGC() for CompareEq/Less/LessEq/Greater/GreaterEq
and CompareStrictEq nodes. https://bugs.webkit.org/show_bug.cgi?id=194800
<rdar://problem/48183773>

Reviewed by Yusuke Suzuki.

Fix doesGC() for the following nodes:

    CompareEq:
    CompareLess:
    CompareLessEq:
    CompareGreater:
    CompareGreaterEq:
    CompareStrictEq:
        Only return false (i.e. does not GC) for child node use kinds that have
        been vetted to not do anything that can GC.  For all other use kinds
        (including StringUse and BigIntUse), we return true (i.e. does GC).

* dfg/DFGDoesGC.cpp:
(JSC::DFG::doesGC):

This was published alongside with exploit code claiming it is remote
code execution, but I don't understand what the exploit is doing.

bump PKGREVISION

(maya)

Updated net/openvpn, www/py-django-js-asset

(adam)

py-django-js-asset: updated to 1.2.2

1.2.2:
Unknown changes

(adam)

openvpn: updated to 2.4.7

OpenVPN 2.4.7
- Fix subnet topology on NetBSD (2.4).
- add support for %lu in argv_printf and prevent ASSERT
- buffer_list: add functions documentation
- ifconfig-ipv6(-push): allow using hostnames
- Properly free tuntap struct on android when emulating persist-tun
- Add OpenSSL compat definition for RSA_meth_set_sign
- Add support for tls-ciphersuites for TLS 1.3
- Add better support for showing TLS 1.3 ciphersuites in --show-tls
- Use right function to set TLS1.3 restrictions in show-tls
- Add message explaining early TLS client hello failure
- Fallback to password authentication when auth-token fails
- systemd: extend CapabilityBoundingSet for auth_pam
- plugin: Export base64 encode and decode functions
- Add %d, %u and %lu tests to test_argv unit tests.
- Fix combination of --dev tap and --topology subnet across multiple platforms.
- Add 'printing of port number' to mroute_addr_print_ex() for v4-mapped v6.
- preparing release v2.4.7 (ChangeLog, version.m4, Changes.rst)
- Minor reliability layer documentation fixes
- Resolves small IV_GUI_VER typo in the documentation.
- Clarify and expand management interface documentation
- Refactor NCP-negotiable options handling
- init.c: refine functions names and description
- interactive.c: fix usage of potentially uninitialized variable
- options.c: fix broken unary minus usage
- Remove extra token after #endif
- Fix error message when using RHEL init script
- man: correct a --redirection-gateway option flag
- Replace M_DEBUG with D_LOW as the former is too verbose
- Correct the declaration of handle in 'struct openvpn_plugin_args_open_return'
- Bump version of openvpn plugin argument structs to 5
- Move get system directory to a separate function
- Enable dhcp on tap adapter using interactive service
- Pass the hash without the DigestInfo header to NCryptSignHash()
- White-list pull-filter and script-security in interactive service
- Add Interactive Service developer documentation
- Detect TAP interfaces with root-enumerated hardware ID
- man: add security considerations to --compress section
- mbedtls: print warning if random personalisation fails
- Fix memory leak after sighup
- travis: add OpenSSL 1.1 Windows build
- Fix --disable-crypto build
- Don't print OCC warnings about 'key-method', 'keydir' and 'tls-auth'
- buffer_list_aggregate_separator(): simplify code

(adam)