Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (4m)  pkgsrc-2024Q1 (14d)  pkgsrc-2023Q4 (42d)  pkgsrc-2023Q2 (74d)  pkgsrc-2023Q3 (154d) 

2024-05-12 19:11:49 UTC Now

2018-09-15 12:26:23 UTC pkgsrc-2018Q2 commitmail json YAML

2018-09-15 12:25:47 UTC pkgsrc-2018Q2 commitmail json YAML

Pullup ticket #5830 - requested by maya
net/rtorrent: security fix (remote code execution)

Revisions pulled up:
- net/rtorrent/Makefile                                        1.72
- net/rtorrent/options.mk                                      1.3

---
  Module Name: pkgsrc
  Committed By: maya
  Date: Fri Sep 14 21:06:42 UTC 2018

  Modified Files:
  pkgsrc/net/rtorrent: Makefile options.mk

  Log Message:
  rtorrent: disable xmlrpc option by default, it is too insecure.

  bump PKGREVISION.

(bsiegert)

2018-09-15 11:38:45 UTC MAIN commitmail json YAML

Regen distinfo to include correct tarball

From Marc Baudoin. Thank you.

(ryoon)

2018-09-15 10:54:18 UTC MAIN commitmail json YAML

doc: Added net/py-rt version 1.0.11

(leot)

2018-09-15 10:53:59 UTC MAIN commitmail json YAML

net/Makefile: Add py-rt

(leot)

2018-09-15 10:53:31 UTC MAIN commitmail json YAML

py-rt: Import py-rt-1.0.11 as wip/py-rt

Python implementation of Request Tracker REST API.

(leot)

2018-09-15 10:22:19 UTC MAIN commitmail json YAML

doc: Updated devel/ncurses to 6.1nb1

(maya)

2018-09-15 10:21:53 UTC MAIN commitmail json YAML

ncurses: provide pkgconfig files.

requested by bastian germann in PR pkg/53604.
bump PKGREVISION.

(maya)

2018-09-15 06:07:00 UTC MAIN commitmail json YAML

Updated www/firefox60-l10n to 60.2.0

(ryoon)

2018-09-15 06:06:32 UTC MAIN commitmail json YAML

Update to 60.2.0

* Sync with www/firefox-60.2.0

(ryoon)

2018-09-15 06:05:22 UTC MAIN commitmail json YAML

Updated www/firefox60 to 60.2.0

(ryoon)

2018-09-15 06:04:04 UTC MAIN commitmail json YAML

Update to 60.2.0

Changelog:
#CVE-2018-12377: Use-after-free in refresh driver timers
#CVE-2018-12378: Use-after-free in IndexedDB
#CVE-2018-12379: Out-of-bounds write with malicious MAR file
#CVE-2017-16541: Proxy bypass using automount and autofs
#CVE-2018-12381: Dragging and dropping Outlook email message results in page navigation
#CVE-2018-12376: Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2

(ryoon)

2018-09-15 03:23:35 UTC MAIN commitmail json YAML

Updated misc/libreoffice to 6.1.1.2

(ryoon)

2018-09-15 03:22:51 UTC MAIN commitmail json YAML

Update to 6.1.1.2

Changelog:
Bugs fixed compared to 6.1.1 RC 1

    fdo#73165 inline spellchecking waits for typing pauses before redlining errors [Jan-Marek Glogowski]
    tdf#116117 No Longer Honoring Umask [Miklos Vajna]
    tdf#116370 Printing doesn't start in particular documents until you show first pages [Jan-Marek Glogowski]
    tdf#118800 HOUR, MINUTE and SECOND function return value that is 1 too high, when seconds value of time >= 59.5 (HOUR, MINUTE) or >= xx.5 (SECOND) [Eike Rathke]
    tdf#119050 Second Export To PDF Does Not Honor Umask [Miklos Vajna]
    tdf#119381 6.1 overwrites Symbolic Links with files [Miklos Vajna]
    tdf#119454 text gets garbled printing with postscript [Jan-Marek Glogowski]
    tdf#119458 Spell checker doesn't start automatically on file open. Needs user interaction [Jan-Marek Glogowski]
    tdf#119533 calculation of MINUTE() wrong in LibreOffice 6.1 [Eike Rathke]
    tdf#119572 Envelopes: Font for Addressee and Sender are reversed. [Caolán McNamara]
    tdf#119694 HSQLDB driver not loading causes BASE error in embedded hsqldb database [Julien Nabet]

Bugs fixed compared to 6.1.0

    coverity#1438224 dereference null return value [Caolán McNamara]
    deb#905442 apparmor: fix saving files in enforced mode [Vincas Dargis]
    i#66963 Excel file with large graphic crashes calc for memory usage [Caolán McNamara]
    i#71244 new chart: Updates of charts in writer [Caolán McNamara]
    ofz#9603 infinite recursion [Caolán McNamara]
    ofz#9689 outer loop unrelated to inner loop [Caolán McNamara]
    ofz#9856 outer loop unrelated to inner loop [Caolán McNamara]
    ofz#9892 null-dereference [Caolán McNamara]
    ofz#9908 validate no negative editengine selection positions [Caolán McNamara]
    ofz#9917 use a WW8SprmIter to find the sprm [Caolán McNamara]
    ofz#9934 null deref [Caolán McNamara]
    rhbz#1610692 [fix available] (soffice:13740): Gtk-CRITICAL **: 10:28:04.861: gtk_widget_queue_draw_area: assertion 'height >= 0' failed [Caolán McNamara]
    tdf#37223 Direct copy & paste from Calc into existing Writer table, places all in one cell (work around: paste-special in new table first) [László Németh]
    tdf#41425 FILESAVE: Formatting and/or data validation, positioned after last non-empty cell, is lost when saving to XLS or XLSX [László Németh]
    tdf#63561 FILESAVE: Removed tab stop returns on roundtrip [Justin Luth]
    tdf#81943 FILEOPEN: RTF - Image should be placed behind table (wrap through-in background) [Miklos Vajna]
    tdf#91502 The functions FORMULA and ISFORMULA do not return the correct array under "iterative evaluation" condition (array-evaluation) [Eike Rathke]
    tdf#94502 FILESAVE: Distorted and unusable export of stacked bar chart to Excel .XLSX [Balazs Varga]
    tdf#96275 FILEOPEN RTF: Incorrect basic shape position [Miklos Vajna]
    tdf#96469 FILESAVE: Data Point Color in Charts lost on DOCX/XLSX export [Balazs Varga]
    tdf#98074 FILESAVE: Cell formatting lost / corrupted style.xml (reported by Excel) when saving file to XLSX [Markus Mohrhard]
    tdf#98558 FILEOPEN: CRASH: ODS with large chart out of memory 'Bad Allocation' on 32-bit LO since LO 4.0 [Caolán McNamara]
    tdf#101254 Arrowheads in sidebar are disabled, although object can carry arrowheads. [Xisco Fauli]
    tdf#101534 EDITING: paragraph in specific document (content from external source?) changes indent when copying and pasting from and to same paragraph [Miklos Vajna]
    tdf#107012 date with custom format macro and locale other than English don't produce desired result [Eike Rathke]
    tdf#108078 [FILESAVE DOCX] Chart title area fill property lost when saved as DOCX [Balazs Varga]
    tdf#108608 EDITING: Draw file be unresponsive if a large text is pasted into a textbox [Noel Grandin]
    tdf#109077 FILEOPEN: Word text boxes with background, become two in LO [Miklos Vajna]
    tdf#109137 FILESAVE: ODT: when reopened with LO, the graphic moves to page 2 [Miklos Vajna]
    tdf#111306 EDITING: The master slide loses the background when changing page format of orientation using the sidebar [Xisco Fauli]
    tdf#112447 Image not visible if other image hidden by unused Page style [Michael Stahl]
    tdf#112563 'Random' number displayed on style organizer page [Caolán McNamara]
    tdf#112975 LibO is maxing out one core for a long time (since LibO 6.0) [Jan-Marek Glogowski]
    tdf#113889 [FILESAVE]: changes format of date in cell from DD.MM.YY to MM.DD.YY with save file to .XLSX [Eike Rathke]
    tdf#114427 LibreOffice crashes on disposing a frame with a basic macro [Caolán McNamara]
    tdf#115086 Crash in: sc::PivotTableDataProvider::assignLabelsToDataSequence(unsigned int) [Caolán McNamara]
    tdf#115254 [NEWHELP] Some branch bookmarks are not working [Olivier Hallot]
    tdf#115438 Pasting unformatted text over selected text causing LibreOffice Impress not to respond [Paul Trojahn]
    tdf#115937 FILEOPEN: crash when opening this .odp file [Caolán McNamara]
    tdf#116350 PPTX: Missing font effect "transformation" support [Szymon KÅ‚os]
    tdf#116370 Printing doesn't start in particular documents until you show first pages [Jan-Marek Glogowski]
    tdf#116856 Update Appdata screenshots [Xisco Fauli]
    tdf#117017 Text formatting .uno:Subscript, .uno:Superscript work from menu and Sidebar deck, but not completed with assigned keyboard shortcut [Maxim Monastirsky]
    tdf#117069 Crash when double-clicking in an empty chart that was saved as XLS [Caolán McNamara]
    tdf#117081 cannot create Firebird embedded database unless experimental features is turned on [Xisco Faulí]
    tdf#117086 Writer crashes when opening odt from the attached document [Caolán McNamara]
    tdf#117127 error when reading the value of a variable in the IDE (crash) [Caolán McNamara]
    tdf#117426 CRASH: Print Preview crashes on signed document without infobar [Caolán McNamara]
    tdf#117553 Footnote navigation when in footnote text is inconsistent [Jim Raykowski]
    tdf#117707 Fontwork border line increases from 0,02inch to 0,03 inch when copy/pasting a fontwork between two sessions [Armin Le Grand]
    tdf#117795 Base crashes when selecting all controls on a Report and trying to change the font [Julien Nabet]
    tdf#117797 Crash / assert when resaving a specific PPT [Tomaž Vajngerl]
    tdf#117892 Area tab: Bitmap preview is not shown [Jim Raykowski]
    tdf#117972 Incorrect source string for UI in Pootle - Libreoffice 6aster [heiko tietze]
    tdf#118058 Writer 6.0.4.2 hangs opening ODT document created in Writer 5 [Miklos Vajna]
    tdf#118107 Assertion failure when playing Fade in and Swivel animation (with OpenGL) [Miklos Vajna]
    tdf#118150 FILEOPEN XLSX Chart wid[Christian Lohmaier]
    tdf#118281 Form control information for Text Box use 'cm' for units, not units as selected in other dialogs. [Caolán McNamara]
    tdf#118377 CRASH: Writer crashes inserting a section [Armin Le Grand]
    tdf#118381 Inaccurate sytain document. [Szymon KÅ‚os]
    tdf#118453 Navigator drag mode doesn't work [SalimHabchi]
    tdf#118457 [UI] Help button should be on the left of dialog (iv) [Olivier Hallot]
    tdf#118528 FILEOPEN ODT Table rendered in wrong position. Position changeen entering wrong password [Julien Nabet]
    tdf#118593 Opening first document pauses for 6-7 s, drops to 2 s by inserting a smart card into reader [Miklos Vajna]
    tdf#118609 [CRASH] [Basic] [Calc] on closing a file if open hidden and if a particular subroutine is used before closing [Caolán McNamara]
    tdf#118659 FILEOPEN: Read Error in .EPS images inserted in LibreOffice 6.0 beta1 or older [Caolán McNamara]
    tdf#118730 Label in report builder doesn't have text [Armin Le Grand]
    tdf#118751 FIREBIRD: Firebird support is available by default with version 6.1RC [Xisco Faulí]
    tdf#118786 Crash deleting a table using the floating table toolbar [Jan-Marek Glogowski]
    tdf#118844 [NEWHELP] Colibre icons missing in several help pages. [Olivier Hallot]
    tdf#118859 Crash when two Fields are empty, on same line and inside a table and hide paragraphs of empty fields active [Mike Kaganski]
    tdf#118860 Impress opengl: hang when switching to slide where graphic is loaded async [Miklos Vajna]
    tdf#118976 Area tab: Pattern preview is not shown [Jim Raykowski]
    tdf#118983 inserting columns or rows changes global named ranges on different sheets if expand references is on and insertion touches the edge (ignoring sheet) [Eike Rathke]
    tdf#118990 VLOOKUP in XLSX with external reference to Windows share saved incorrectly [Mike Kaganski]
    tdf#118994 JAWS has no access to accessibility objects [Ilhan Yesil]
    tdf#119013 Date Format MM/DD/YY not Preserved When reading XLSX or XLS [Eike Rathke]
    tdf#119015 A .PPTX has table in wrong position (at the top), with one cell blue without text [Mike Kaganski]
    tdf#119029 Saving presentations with charts to PPTX looses data labels rotation [Mike Kaganski]
    tdf#119034 ADDRESS function >> R1C1 style is used instead of A1 style, if "A1" argument is floating-point number with zero integer [Eike Rathke]
    tdf#119052 Two "Edit Style" buttons on the "Character Style" dialog [Xisco Fauli]
    tdf#119117 German sort algorithm "phone book" does not work [Julien Nabet]
    tdf#119128 CALC: toggle INSERT/OVERWRITE is broken since 6.1 [Maxim Monastirsky]
    tdf#119130 Menu items opening with a delay in a document containing a large amount of comments ( not gtk3) [Caolán McNamara]
    tdf#119133 QT5 integration Save As or PDF Export dialog has and empty file name and always home directory [Katarina Behrens]
    tdf#119136 FILEOPEN: DOCX from TextMaker freezes Writer due to a style with a blank name [Justin Luth]
    tdf#119137 MAXIFS, MINIFS, SUMIFS, AVERAGEIFS: error in parameters list (Err:504) for scalar value (non-reference, non-array) as main range [Eike Rathke]
    tdf#119141 This version is unable to retrieve data from a webpage (link external data) [Justin Luth]
    tdf#119155 Freeze after command format->text->Capitalize Every Word [Julien Nabet]
    tdf#119160 PPTX: Font effect 'transformation' save with shape filling [Szymon KÅ‚os]
    tdf#119162 Format > Text > Cycle Case on attached example file hangs Calc reproducibly [Julien Nabet]
    tdf#119169 Impress 6.1 CRASH when editing bulleted list ( steps in comment 4) [Noel Grandin]
    tdf#119194 Deprecation warning mentions wrong command line parameter when -convert-to used [Mike Kaganski]
    tdf#119212 List of character sets in ASCII Filter Options is mixed up [Caolán McNamara]
    tdf#119224 Crash scrolling formatted 2007 DOCX with revision, comments and images (SfxListener::~SfxListener() EXCEPTION_ACCESS_VIOLATION_WRITE) ( steps in comment 8 ) [Caolán McNamara]
    tdf#119231 Help button in "Sign Signature Line" dialogue [Xisco Fauli]
    tdf#119234 filter import of OOXML Shapes from Word fail to render in LibreOffice [Noel Grandin]
    tdf#119245 Base form opens over top of query parameter replacement dialog opened by query form is based off. [Maxim Monastirsky]
    tdf#119251 Indents & Spacing doesn't accept non-default units [Caolán McNamara]
    tdf#119252 Fileopen: Table opens a width of 115.60 cm (since LibO6.1) in webview [Stephan Bergmann]
    tdf#119276 Sidebar Deck icon is not set through extension [Tomaž Vajngerl]
    tdf#119282 Area tab: Pattern color change results in pattern shown in Bitmap tab page [Noel Grandin]
    tdf#119294 Intermittent crash when Frame and document have blank database fields and "Hide paragraphs" option on [Mike Kaganski]
    tdf#119325 Tooltip not shown in colour palette [Caolán McNamara]
    tdf#119326 The application crashes when you add the "Windows Share" File Services resource [Noel Grandin]
    tdf#119357 No text printed since upgrade to 6.1 Linux - no font-information in postscript file [Jan-Marek Glogowski]
    tdf#119399 Add new Venezuela currency bolívar soberano (VES) [Eike Rathke]
    tdf#119402 Wrong result of Conditional formatting with type Date: condition "This week" shows 9 days in week instead 7 days [Eike Rathke]
    tdf#119425 Use Ctrl+Tab to switch between sheets on macOS [heiko tietze]
    tdf#119427 The selectionChanged event of the com.sun.star.awt.grid.XGridSelectionListener interface does not work with mouse clicks. [Julien Nabet]

(ryoon)

2018-09-15 03:09:24 UTC MAIN commitmail json YAML

Added lang/gcc8-libs version 8.2.0nb1

(ryoon)

2018-09-15 03:08:55 UTC MAIN commitmail json YAML

Add gcc8-libs

(ryoon)

2018-09-15 03:08:16 UTC MAIN commitmail json YAML

lang/gcc8-libs: import gcc8-libs-8.2.0nb1

The GNU Compiler Collection (GCC) includes front ends for C, C++, Objective-C,
Fortran, and Go, as well as libraries for these languages (libstdc++,
libgfortran, ...).

This packages provides GCC support libraries in a specific location and allows
packages to depend on just the libraries rather than having to pull in the full
GCC package.

(ryoon)

2018-09-15 03:07:21 UTC MAIN commitmail json YAML

2018-09-15 03:06:15 UTC MAIN commitmail json YAML

Update to 8.2.0

Changelog:
This is the list of problem reports (PRs) from GCC's bug tracking system
that are known to be fixed in the 8.2 release. This list might not be
complete (that is, it is possible that some PRs that have been fixed are
not listed here).

General Improvements
    Fixed LTO link-time performance problems caused by an overflow in the
      partitioning algorithm while building large binaries.

Language Specific Changes
C++
GCC 8.2 fixed a bug introduced in GCC 8.1 affecting passing or returning
of classes with a deleted copy constructor and defaulted trivial move
constructor (bug c++/86094). GCC 8.2 introduces -fabi-version=13 and makes
it the default, ABI incompatibilities between GCC 8.1 and 8.2 can be
reported with -Wabi=12. See C++ changes for more details.

Target Specific Changes
IA-32/x86-64
    -mtune=native performance regression bug84413 on Intel Skylake
      processors has been fixed.

(ryoon)

2018-09-15 02:51:53 UTC MAIN commitmail json YAML

Updated lang/openjdk8 to 1.8.181

(ryoon)

2018-09-15 02:51:02 UTC MAIN commitmail json YAML

2018-09-15 00:31:11 UTC MAIN commitmail json YAML

lang/go: Improve PRINT_PLIST_AWK for Go packages

Go packages create ${PREFIX}/bin and ${PREFIX}/gopkg even when they
don't install anything in them. This change sets PRINT_PLIST_AWK to
ignore such empty directories.

(minskim)

2018-09-15 00:12:17 UTC MAIN commitmail json YAML

doc: Updated sysutils/ncdu to 1.13

(maya)

2018-09-15 00:11:57 UTC MAIN commitmail json YAML

ncdu: update to 1.13

Requested by Marko Kaznovac in PR pkg/53602

- Add "extended information" mode and -e flag
- Add file mode, modification time and uid/gid to info window with -e
- Add experimental color support and --color flag
- Add -rr option to disable shell spawning
- Remove directory nesting limit on file import
- Fix handling of interrupts during file import
- Fix undefined behavior that triggered crash on OS X

(maya)

2018-09-14 21:07:01 UTC MAIN commitmail json YAML

doc: Updated net/rtorrent to 0.9.7nb2

(maya)

2018-09-14 21:06:42 UTC MAIN commitmail json YAML

rtorrent: disable xmlrpc option by default, it is too insecure.

bump PKGREVISION.

(maya)

2018-09-14 19:02:38 UTC MAIN commitmail json YAML

Remove fontconfig files from x11-links, they can confuse ld later on.

(joerg)

2018-09-14 17:55:21 UTC MAIN commitmail json YAML

doc: Updated net/gallery-dl to 1.5.3

(leot)

2018-09-14 17:55:07 UTC MAIN commitmail json YAML

gallery-dl: Update net/gallery-dl to 1.5.3

Changes:
1.5.3
-----
- Added support for:
  + hentaicafe - https://hentai.cafe/ (#101)
  + bobx - http://www.bobx.com/dark/
- Added black-/whitelist options for post-processor modules
- Added support for tumblr inline videos (#102)
- Fixed extraction of smugmug albums without owner (#100)
- Fixed issues when using default config values with reddit extractors (#104)
- Fixed pagination for user favorites on sankaku (#106)
• Fixed a crash when processing deviantart journals (#108)

(leot)

2018-09-14 16:44:09 UTC MAIN commitmail json YAML

Actually generate the promised key sizes. Ride previous bump.

(schmonz)

2018-09-14 16:37:41 UTC MAIN commitmail json YAML

Remove decade-old warning that stunnel moved from sbin to bin.

(schmonz)

2018-09-14 16:31:28 UTC MAIN commitmail json YAML

pkgclean: Properly replace @SH@ in pkgclean

Most of the times setting NO_CONFIGURE is not needed and can badly
interact with SUBST framework like in this case as pointed out by
PR pkg/53606.

Fixes PR pkg/53606.

(leot)

2018-09-14 16:01:05 UTC MAIN commitmail json YAML

mk: enable Java on NetBSD-*-aarch64

(tnn)

2018-09-14 15:53:46 UTC MAIN commitmail json YAML

2018-09-14 15:43:32 UTC MAIN commitmail json YAML

doc: Updated sysutils/ansible2 to 2.6.4

(jperkin)

2018-09-14 15:43:23 UTC MAIN commitmail json YAML

2018-09-14 14:54:19 UTC MAIN commitmail json YAML

2018-09-14 11:04:20 UTC MAIN commitmail json YAML

mongodb: Mark as unavailable on i386 platforms.

MongoDB since 3.4 has explicitly not supported 32-bit x86 platforms.
As the current package fails to build, let's acknowledge that up front.

(gavan)

2018-09-14 10:04:54 UTC MAIN commitmail json YAML

doc: Updated lang/rust to 1.29.0

(jperkin)

2018-09-14 10:04:43 UTC MAIN commitmail json YAML

rust: Update to 1.29.0.

Version 1.29.0 (2018-09-13)
==========================

Compiler
--------
- [Bumped minimum LLVM version to 5.0.][51899]
- [Added `powerpc64le-unknown-linux-musl` target.][51619]
- [Added `aarch64-unknown-hermit` and `x86_64-unknown-hermit` targets.][52861]

Libraries
---------
- [`Once::call_once` now no longer requires `Once` to be `'static`.][52239]
- [`BuildHasherDefault` now implements `PartialEq` and `Eq`.][52402]
- [`Box<CStr>`, `Box<OsStr>`, and `Box<Path>` now implement `Clone`.][51912]
- [Implemented `PartialEq<&str>` for `OsString` and `PartialEq<OsString>`
  for `&str`.][51178]
- [`Cell<T>` now allows `T` to be unsized.][50494]
- [`SocketAddr` is now stable on Redox.][52656]

Stabilized APIs
---------------
- [`Arc::downcast`]
- [`Iterator::flatten`]
- [`Rc::downcast`]

Cargo
-----
- [Cargo can silently fix some bad lockfiles ][cargo/5831] You can use
  `--locked` to disable this behaviour.
- [`cargo-install` will now allow you to cross compile an install
  using `--target`][cargo/5614]
- [Added the `cargo-fix` subcommand to automatically move project code from
  2015 edition to 2018.][cargo/5723]

Misc
----
- [`rustdoc` now has the `--cap-lints` option which demotes all lints above
  the specified level to that level.][52354] For example `--cap-lints warn`
  will demote `deny` and `forbid` lints to `warn`.
- [`rustc` and `rustdoc` will now have the exit code of `1` if compilation
  fails, and `101` if there is a panic.][52197]
- [A preview of clippy has been made available through rustup.][51122]
  You can install the preview with `rustup component add clippy-preview`

Compatibility Notes
-------------------
- [`str::{slice_unchecked, slice_unchecked_mut}` are now deprecated.][51807]
  Use `str::get_unchecked(begin..end)` instead.
- [`std::env::home_dir` is now deprecated for its unintuitive behaviour.][51656]
  Consider using the `home_dir` function from
  https://crates.io/crates/dirs instead.
- [`rustc` will no longer silently ignore invalid data in target spec.][52330]

[52861]: https://github.com/rust-lang/rust/pull/52861/
[52656]: https://github.com/rust-lang/rust/pull/52656/
[52239]: https://github.com/rust-lang/rust/pull/52239/
[52330]: https://github.com/rust-lang/rust/pull/52330/
[52354]: https://github.com/rust-lang/rust/pull/52354/
[52402]: https://github.com/rust-lang/rust/pull/52402/
[52103]: https://github.com/rust-lang/rust/pull/52103/
[52197]: https://github.com/rust-lang/rust/pull/52197/
[51807]: https://github.com/rust-lang/rust/pull/51807/
[51899]: https://github.com/rust-lang/rust/pull/51899/
[51912]: https://github.com/rust-lang/rust/pull/51912/
[51511]: https://github.com/rust-lang/rust/pull/51511/
[51619]: https://github.com/rust-lang/rust/pull/51619/
[51656]: https://github.com/rust-lang/rust/pull/51656/
[51178]: https://github.com/rust-lang/rust/pull/51178/
[51122]: https://github.com/rust-lang/rust/pull/51122
[50494]: https://github.com/rust-lang/rust/pull/50494/
[cargo/5614]: https://github.com/rust-lang/cargo/pull/5614/
[cargo/5723]: https://github.com/rust-lang/cargo/pull/5723/
[cargo/5831]: https://github.com/rust-lang/cargo/pull/5831/
[`Arc::downcast`]: https://doc.rust-lang.org/std/sync/struct.Arc.html#method.downcast
[`Iterator::flatten`]: https://doc.rust-lang.org/std/iter/trait.Iterator.html#method.flatten
[`Rc::downcast`]: https://doc.rust-lang.org/std/rc/struct.Rc.html#method.downcast

(jperkin)

2018-09-14 09:53:33 UTC MAIN commitmail json YAML

doc: Updated sysutils/consul to 1.2.3

(fhajny)

2018-09-14 09:53:25 UTC MAIN commitmail json YAML

sysutils/consul: Update to 1.2.3.

FEATURES:

- agent: New Cloud Auto-join provider: Kubernetes (K8S)
- http: Added support for "Authorization: Bearer" head in addition to
  the X-Consul-Token header.
- dns: Added a way to specify SRV weights for each service instance to
  allow weighted DNS load-balancing.
- dns: Include EDNS-ECS options in EDNS responses where appropriate:
  see RFC 7871
- ui: Add markers/icons for external sources

IMPROVEMENTS:

- ui: Switch to fullscreen layout for lists and detail, left aligned
  forms
- connect: TLS certificate readiness now performs x509 certificate
  verification to determine whether the cert is usable.
- ui: The syntax highlighting/code editor is now on by default
- ui: Fallback to showing `Node.Address` if `Service.Address` is not
  set
- gossip: Improvements to Serf and memberlist improving gossip
  stability on very large clusters (over 35k tested)

BUG FIXES:
- agent: Avoid returning empty data on startup of a non-leader server
- agent: Fixed a panic when serf_wan port was -1 but a
  reconnect_timeout_wan value was set.
- agent: Fixed a problem where errors regarding DNS server creation
  where never shown.
- agent: Start with invalid http configuration again, even though the
  build-in proxy for connect won't start in that case.
- catalog: Allow renaming nodes with IDs.
- dns: Fixes a bug with the DNS recursor, where we would not move onto
  the next provided recursor if we encounter a SERVFAIL or REFUSED
  status.
- server: Fixed a memory leak in blocking queries against /event/list.
- snapshot: Fixed a bug where node metadata wasn't being included in
  or restored from the snapshots.
- connect: Fixed a bug where managed proxy instances registered for
  instances with different name and ID and with restrictive ACL would
  not be allowed.
- connect: Fixed a bug where built-in CA state was not correctly
  restored from a snapshot
- connect: Fixed a bug where Checks with
  `deregister_critical_service_after` would deregister the service but
  not remove the managed proxy
- connect: Fixed a bug that would output an error about pruning CAs
  every hour on the leader and might cause some CA configurations not
  to be pruned correctly
- raft: Update raft vendoring to pull in a fix for a potential memory
  leak.
- license: (Consul Enterprise) Fix an issue with the license not being
  reloaded from snapshots.
- license: (Consul Enterprise) Fix an issue with encoding/decoding of
  the license package type from the /v1/operator/license endpoint.
- cli: Correctly exit with error code 1 when failing to list DCs with
  the catalog command
- ui: Improve layout on screens of a large portrait orientation
- ui: Various browser layout bugs for various vendors/setups

(fhajny)

2018-09-14 09:49:05 UTC MAIN commitmail json YAML

doc: Updated archivers/lz4 to 1.8.3

(fhajny)

2018-09-14 09:48:56 UTC MAIN commitmail json YAML

archivers/lz4: Update to 1.8.3.

- perf: minor decompression speed improvement (~+2%) with gcc
- fix : corruption in v1.8.2 at level 9 for files > 64KB under rare
  conditions (#560)
- cli : new command --fast, by @jennifermliu
- api : LZ4_decompress_safe_partial() now decodes exactly the nb of
  bytes requested (feature request #566)
- build : added Haiku target, by @fbrosson, and MidnightBSD, by @laffer1
- doc : updated documentation regarding dictionary compression

(fhajny)

2018-09-14 09:26:18 UTC MAIN commitmail json YAML

2018-09-14 09:24:30 UTC MAIN commitmail json YAML

2018-09-14 09:02:12 UTC MAIN commitmail json YAML

doc: Updated mail/qmail to 1.03nb37

(schmonz)

2018-09-14 09:01:53 UTC MAIN commitmail json YAML

The latest upstream TLS patch (netqmail-1.06-tls-20160918.patch, not yet
in pkgsrc) has bumped key sizes to 2048 bits. Do likewise. Bump PKGREVISION.

(schmonz)

2018-09-14 08:43:02 UTC MAIN commitmail json YAML

textproc/link-grammar: Force disable the optional Java bindings. Needs c99.

(fhajny)

2018-09-14 07:58:12 UTC MAIN commitmail json YAML

Mention the spamassassin and rspamd wrapper scripts.

(schmonz)

2018-09-14 07:37:04 UTC MAIN commitmail json YAML

Updated devel/py-faker, www/py-sanic

(adam)

2018-09-14 07:36:46 UTC MAIN commitmail json YAML

py-sanic: updated to 0.8.3

0.8.3:
Bug fixes.

(adam)

2018-09-14 07:28:54 UTC MAIN commitmail json YAML

py-faker: updated to 0.9.1

0.9.1:
Fix missing and misplaced comma's in many providers.
Refactor IPv4 address generation to leverage ipaddress module.
An en_NZ provider for addresses, phone numbers and email addresses.
Add unique argument to words() for returning unique words.
Allow US territories to be excluded from state_abbr() for en_US provider.
Add support for Python 3.7.

(adam)

2018-09-14 05:12:22 UTC MAIN commitmail json YAML

doc/TODO: add some

+ calibre-3.31.0, dosbox-0.74.2, nano-3.0, ncdu-1.13, syncthing-0.14.50.

(wiz)

2018-09-14 03:38:49 UTC MAIN commitmail json YAML

Updated shells/zsh to 5.6.1

(ryoon)

2018-09-14 03:36:51 UTC MAIN commitmail json YAML

Update to 5.6.1

Changelog:
Changes from 5.6 to 5.6.1
-------------------------

Fix packaging issue that broke runhelp.

Fix a regression with pipelines getting backgrounded and emitting SIGTTOU.

(ryoon)

2018-09-14 02:08:46 UTC MAIN commitmail json YAML

doc: Updated sysutils/entr to 4.1

(schmonz)

2018-09-14 02:08:28 UTC MAIN commitmail json YAML

Update to 4.1. From the changelog:

- New '-n' non-interactive option disables keyboard input
- EV_TRACE environment variable enables file system event tracing
- Track changes to the inode number as a workaround for missing delete
  events on the Linux kernel
- Warn instead of error if kqueue fails to register on STDIN
- Close STDIN before running the utility when the restart option is used
- Restore terminal settings if terminated by a signal

(schmonz)

2018-09-13 21:14:45 UTC MAIN commitmail json YAML

2018-09-13 19:34:34 UTC MAIN commitmail json YAML

nano: pull in keybinding fix from upstream

When curses gives no code for Ctrl+Shift+Delete, do not fall back
to KEY_BACKSPACE, because then ^H and/or <Backspace> get bound to
'cutwordleft'.

This fixes https://savannah.gnu.org/bugs/?54642

(wiedi)

2018-09-13 15:49:26 UTC MAIN commitmail json YAML

doc: Note update of lang/php* packages

lang/php71 7.1.22
lang/php72 7.2.10
lang/php70 7.0.32
lang/php56 5.6.38

(taca)

2018-09-13 15:48:37 UTC MAIN commitmail json YAML

www/php-curl: Reset PKGREVISION

Reset PKGREVISION after all lang/php* are updated.

(taca)

2018-09-13 15:47:46 UTC MAIN commitmail json YAML

lang/php56: Update to 5.6.38

13 Sep 2018, PHP 5.6.38

- Apache2
  . Fixed bug #76582 (XSS due to the header Transfer-Encoding: chunked). (Stas)

(taca)

2018-09-13 15:46:38 UTC MAIN commitmail json YAML

lang/php70: Update to 7.0.32

13 Sep 2018 PHP 7.0.32

- Apache2
  . Fixed bug #76582 (XSS due to the header Transfer-Encoding: chunked). (Stas)

(taca)

2018-09-13 15:45:33 UTC MAIN commitmail json YAML

lang/php72: Update to 7.2.10

13 Sep 2018, PHP 7.2.10

- Core:
  . Fixed bug #76754 (parent private constant in extends class memory leak).
    (Laruence)
  . Fixed bug #72443 (Generate enabled extension). (petk)
  . Fixed bug #75797 (Memory leak when using class_alias() in non-debug mode).
    (Massimiliano Braglia)

- Apache2:
  . Fixed bug #76582 (Apache bucket brigade sometimes becomes invalid). (stas)

- Bz2:
  . Fixed arginfo for bzcompress. (Tyson Andre)

- gettext:
  . Fixed bug #76517 (incorrect restoring of LDFLAGS). (sji)

- iconv:
  . Fixed bug #68180 (iconv_mime_decode can return extra characters in a
    header). (cmb)
  . Fixed bug #63839 (iconv_mime_decode_headers function is skipping headers).
    (cmb)
  . Fixed bug #60494 (iconv_mime_decode does ignore special characters). (cmb)
  . Fixed bug #55146 (iconv_mime_decode_headers() skips some headers). (cmb)

- intl:
  . Fixed bug #74484 (MessageFormatter::formatMessage memory corruption with
    11+ named placeholders). (Anatol)

- libxml:
  . Fixed bug #76777 ("public id" parameter of libxml_set_external_entity_loader
    callback undefined). (Ville Hukkamè¾°ki)

- mbstring:
  . Fixed bug #76704 (mb_detect_order return value varies based on argument
    type). (cmb)

- Opcache:
  . Fixed bug #76747 (Opcache treats path containing "test.pharma.tld" as a phar
    file). (Laruence)

- OpenSSL:
  . Fixed bug #76705 (unusable ssl => peer_fingerprint in
    stream_context_create()). (Jakub Zelenka)

- phpdbg:
  . Fixed bug #76595 (phpdbg man page contains outdated information).
    (Kevin Abel)

- SPL:
  . Fixed bug #68825 (Exception in DirectoryIterator::getLinkTarget()). (cmb)
  . Fixed bug #68175 (RegexIterator pregFlags are NULL instead of 0). (Tim
    Siebels)

- Standard:
  . Fixed bug #76778 (array_reduce leaks memory if callback throws exception).
    (cmb)

- zlib:
  . Fixed bug #65988 (Zlib version check fails when an include/zlib/ style dir
    is passed to the --with-zlib configure option). (Jay Bonci)
  . Fixed bug #76709 (Minimal required zlib library is 1.2.0.4). (petk)

(taca)

2018-09-13 15:44:06 UTC MAIN commitmail json YAML

lang/php71: Update to 7.1.22

13 Sep 2018, PHP 7.1.22

- Core:
  . Fixed bug #76754 (parent private constant in extends class memory leak).
    (Laruence)
  . Fixed bug #72443 (Generate enabled extension). (petk)

- Apache2:
  . Fixed bug #76582 (Apache bucket brigade sometimes becomes invalid). (stas)

- Bz2:
  . Fixed arginfo for bzcompress. (Tyson Andre)

- gettext:
  . Fixed bug #76517 (incorrect restoring of LDFLAGS). (sji)

- iconv:
  . Fixed bug #68180 (iconv_mime_decode can return extra characters in a
    header). (cmb)
  . Fixed bug #63839 (iconv_mime_decode_headers function is skipping headers).
    (cmb)
  . Fixed bug #60494 (iconv_mime_decode does ignore special characters). (cmb)
  . Fixed bug #55146 (iconv_mime_decode_headers() skips some headers). (cmb)

- intl:
  . Fixed bug #74484 (MessageFormatter::formatMessage memory corruption with
    11+ named placeholders). (Anatol)

- libxml:
  . Fixed bug #76777 ("public id" parameter of libxml_set_external_entity_loader
    callback undefined). (Ville Hukkamè¾°ki)

- mbstring:
  . Fixed bug #76704 (mb_detect_order return value varies based on argument
    type). (cmb)

- Opcache:
  . Fixed bug #76747 (Opcache treats path containing "test.pharma.tld" as a phar
    file). (Laruence)

- OpenSSL:
  . Fixed bug #76705 (unusable ssl => peer_fingerprint in
    stream_context_create()). (Jakub Zelenka)

- phpdbg:
  . Fixed bug #76595 (phpdbg man page contains outdated information).
    (Kevin Abel)

- SPL:
  . Fixed bug #68825 (Exception in DirectoryIterator::getLinkTarget()). (cmb)
  . Fixed bug #68175 (RegexIterator pregFlags are NULL instead of 0). (Tim
    Siebels)

- Standard:
  . Fixed bug #76778 (array_reduce leaks memory if callback throws exception).
    (cmb)

- zlib:
  . Fixed bug #65988 (Zlib version check fails when an include/zlib/ style dir
    is passed to the --with-zlib configure option). (Jay Bonci)
  . Fixed bug #76709 (Minimal required zlib library is 1.2.0.4). (petk)

16 Aug 2018, PHP 7.1.21

- Calendar:
  . Fixed bug #52974 (jewish.c: compile error under Windows with GBK charset).
    (cmb)

- Filter:
  . Fixed bug #76366 (References in sub-array for filtering breaks the filter).
    (ZiHang Gao)

- PDO_Firebird:
  . Fixed bug #76488 (Memory leak when fetching a BLOB field). (Simonov Denis)

- PDO_PgSQL:
  . Fixed bug #75402 (Possible Memory Leak using PDO::CURSOR_SCROLL option).
    (Anatol)

- SQLite3:
  . Fixed #76665 (SQLite3Stmt::bindValue() with SQLITE3_FLOAT doesn't juggle).
    (cmb)

- Standard:
  . Fixed bug #68553 (array_column: null values in $index_key become incrementing
    keys in result). (Laruence)
  . Fixed bug #73817 (Incorrect entries in get_html_translation_table). (cmb)
  . Fixed bug #76643 (Segmentation fault when using `output_add_rewrite_var`).
    (cmb)

- Zip:
  . Fixed bug #76524 (ZipArchive memory leak (OVERWRITE flag and empty archive)).
    (Timur Ibragimov)

07 Jul 2018, PHP 7.1.20

- Core:
  . Fixed bug #76534 (PHP hangs on 'illegal string offset on string references
    with an error handler). (Laruence)
  . Fixed bug #76502 (Chain of mixed exceptions and errors does not serialize
    properly). (Nikita)

- Date:
  . Fixed bug #76462 (Undefined property: DateInterval::$f). (Anatol)

- FPM:
  . Fixed bug #73342 (Vulnerability in php-fpm by changing stdin to
    non-blocking). (Nikita)

- GMP:
  . Fixed bug #74670 (Integer Underflow when unserializing GMP and possible
    other classes). (Nikita)

- intl:
  . Fixed bug #76556 (get_debug_info handler for BreakIterator shows wrong
    type). (cmb)

- mbstring:
  . Fixed bug #76532 (Integer overflow and excessive memory usage
    in mb_strimwidth). (MarcusSchwarz)

- PGSQL:
  . Fixed bug #76548 (pg_fetch_result did not fetch the next row). (Anatol)

- phpdbg:
  . Fix arginfo wrt. optional/required parameters. (cmb)

- Reflection:
  . Fixed bug #76536 (PHP crashes with core dump when throwing exception in
    error handler). (Laruence)
  . Fixed bug #75231 (ReflectionProperty#getValue() incorrectly works with
    inherited classes). (Nikita)

- Standard:
  . Fixed bug #76505 (array_merge_recursive() is duplicating sub-array keys).
    (Laruence)
  . Fixed bug #71848 (getimagesize with $imageinfo returns false). (cmb)

22 Jun 2018, PHP 7.1.19

- CLI Server:
  . Fixed bug #76333 (PHP built-in server does not find files if root path
    contains special characters). (Anatol)

- OpenSSL:
  . Fixed bug #76296 (openssl_pkey_get_public does not respect open_basedir).
    (Erik Lax, Jakub Zelenka)
  . Fixed bug #76174 (openssl extension fails to build with LibreSSL 2.7).
    (Jakub Zelenka)

- SPL:
  . Fixed bug #76367 (NoRewindIterator segfault 11). (Laruence)

- Standard:
  . Fixed bug #76335 ("link(): Bad file descriptor" with non-ASCII path).
    (Anatol)
  . Fixed bug #76383 (array_map on $GLOBALS returns IS_INDIRECT). (Bob)

24 May 2018, PHP 7.1.18

- FPM:
  . Fixed bug #76075 --with-fpm-acl wrongly tries to find libacl on FreeBSD.
    (mgorny)

- intl:
  . Fixed bug #74385 (Locale::parseLocale() broken with some arguments).
    (Anatol)

- Opcache:
  . Fixed bug #76205 (PHP-FPM sporadic crash when running Infinitewp). (Dmitry)
  . Fixed bug #76275 (Assertion failure in file cache when unserializing empty
    try_catch_array). (Nikita)
  . Fixed bug #76281 (Opcache causes incorrect "undefined variable" errors).
    (Nikita)

- Reflection:
  . Fixed arginfo for array_replace(_recursive) and array_merge(_recursive).
    (carusogabriel)

26 Apr 2018, PHP 7.1.17

- Date:
  . Fixed bug #76131 (mismatch arginfo for date_create). (carusogabriel)

- FPM:
  . Fixed bug #68440 (ERROR: failed to reload: execvp() failed: Argument list
    too long). (Jacob Hipps)
  . Fixed incorrect write to getenv result in FPM reload. (Jakub Zelenka)

- GD:
  . Fixed bug #52070 (imagedashedline() - dashed line sometimes is not visible).
    (cmb)

- intl:
  . Fixed bug #76153 (Intl compilation fails with icu4c 61.1). (Anatol)

- mbstring:
  . Fixed bug #75944 (Wrong cp1251 detection). (dmk001)
  . Fixed bug #76113 (mbstring does not build with Oniguruma 6.8.1).
    (chrullrich, cmb)

- phpdbg:
  . Fixed bug #76143 (Memory corruption: arbitrary NUL overwrite). (Laruence)

- SPL:
  . Fixed bug #76131 (mismatch arginfo for splarray constructor).
    (carusogabriel)

- standard:
  . Fixed bug #75996 (incorrect url in header for mt_rand). (tatarbj)

29 Mar 2018, PHP 7.1.16

- Core:
  . Fixed bug #76025 (Segfault while throwing exception in error_handler).
    (Dmitry, Laruence)
  . Fixed bug #76044 ('date: illegal option -- -' in ./configure on FreeBSD).
    (Anatol)

- FPM:
  . Fixed bug #75605 (Dumpable FPM child processes allow bypassing opcache
    access controls). (Jakub Zelenka)

- GD:
  . Fixed bug #73957 (signed integer conversion in imagescale()). (cmb)

- ODBC:
  . Fixed bug #76088 (ODBC functions are not available by default on Windows).
    (cmb)

- Opcache:
  . Fixed bug #76074 (opcache corrupts variable in for-loop). (Bob)

- Phar:
  . Fixed bug #76085 (Segmentation fault in buildFromIterator when directory
    name contains a \n). (Laruence)

- Standard:
  . Fixed bug #74139 (mail.add_x_header default inconsistent with docs). (cmb)
  . Fixed bug #76068 (parse_ini_string fails to parse "[foo]\nbar=1|>baz" with
    segfault). (Anatol)

01 Mar 2018, PHP 7.1.15

- Apache2Handler:
  . Fixed bug #75882 (a simple way for segfaults in threadsafe php just with
    configuration). (Anatol)

- Date:
  . Fixed bug #75857 (Timezone gets truncated when formatted). (carusogabriel)
  . Fixed bug #75928 (Argument 2 for `DateTimeZone::listIdentifiers()` should
    accept `null`). (Pedro Lacerda)
  . Fixed bug #68406 (calling var_dump on a DateTimeZone object modifies it).
    (jhdxr)

- FTP:
  . Fixed ftp_pasv arginfo. (carusogabriel)

-GD:
  . Fixed imagesetinterpolation arginfo. (Gabriel Caruso)

- iconv:
  . Fixed bug #75867 (Freeing uninitialized pointer). (Philip Prindeville)

- LDAP:
  . Fixed bug #49876 (Fix LDAP path lookup on 64-bit distros). (dzuelke)

- libxml2:
  . Fixed bug #75871 (use pkg-config where available). (pmmaga)

- mysqlnd
  . Fixed negotiation of MySQL authenticaton plugin. (Johannes)
  . Fixed a memleak with SSL connections. (Johannes)

- ODBC:
  . Fixed bug #73725 (Unable to retrieve value of varchar(max) type). (Anatol)

- Opcache:
  . Fixed bug #75969 (Assertion failure in live range DCE due to block pass
    misoptimization). (Nikita)

- OpenSSL:
  . Fixed openssl_* arginfos. (carusogabriel)

- PCNTL:
  . Fixed bug #75873 (pcntl_wexitstatus returns incorrect on Big_Endian platform
    (s390x)). (Sam Ding)

- PGSQL:
  . Fixed #75838 (Memory leak in pg_escape_bytea()). (ard_1 at mail dot ru)

- Phar:
  . Fixed bug #65414 (deal with leading slash when adding files correctly).
    (bishopb)

- SPL:
  . Fixed bug #74519 (strange behavior of AppendIterator). (jhdxr)

- Standard:
  . Fixed bug #75961 (Strange references behavior). (Laruence)
  . Fixed bug #75916 (DNS_CAA record results contain garbage). (Mike,
    Philip Sharp)
  . Fixed some arginfos. (carusogabriel)
  . Fixed bug #75981 (stack-buffer-overflow while parsing HTTP response). (Stas)

01 Feb 2018, PHP 7.1.14

- Core:
  . Fixed bug #75679 (Path 260 character problem). (Anatol)
  . Fixed bug #75786 (segfault when using spread operator on generator passed
    by reference). (Nikita)
  . Fixed bug #75799 (arg of get_defined_functions is optional). (carusogabriel)
  . Fixed bug #75396 (Exit inside generator finally results in fatal error).
    (Nikita)
  . Fixed bug #75079 (self keyword leads to incorrectly generated TypeError when
    in closure in trait). (Nikita)

- FCGI:
  . Fixed bug #75794 (getenv() crashes on Windows 7.2.1 when second parameter is
    false). (Anatol)

- IMAP:
  . Fixed bug #75774 (imap_append HeapCorruction). (Anatol)

- Mbstring:
  . Fixed bug #62545 (wrong unicode mapping in some charsets). (cmb)

- Opcache:
  . Fixed bug #75720 (File cache not populated after SHM runs full). (Dmitry)
  . Fixed bug #75579 (Interned strings buffer overflow may cause crash).
    (Dmitry)

- PGSQL:
  . Fixed bug #75671 (pg_version() crashes when called on a connection to
    cockroach). (magicaltux at gmail dot com)

- Readline:
  . Fixed bug #75775 (readline_read_history segfaults with empty file).
    (Anatol)

- SAPI:
  . Fixed bug #75735 ([embed SAPI] Segmentation fault in
    sapi_register_post_entry). (Laruence)

- SOAP:
  . Fixed bug #70469 (SoapClient generates E_ERROR even if exceptions=1 is
    used). (Anton Artamonov)
  . Fixed bug #75502 (Segmentation fault in zend_string_release). (Nikita)

- SPL:
  . Fixed bug #75717 (RecursiveArrayIterator does not traverse arrays by
    reference). (Nikita)
  . Fixed bug #75242 (RecursiveArrayIterator doesn't have constants from parent
    class). (Nikita)
  . Fixed bug #73209 (RecursiveArrayIterator does not iterate object
    properties). (Nikita)

- Standard:
  . Fixed bug #75781 (substr_count incorrect result). (Laruence)

04 Jan 2018, PHP 7.1.13

- Core:
  . Fixed bug #75573 (Segmentation fault in 7.1.12 and 7.0.26). (Laruence)
  . Fixed bug #75384 (PHP seems incompatible with OneDrive files on demand).
    (Anatol)
  . Fixed bug #74862 (Unable to clone instance when private __clone defined).
    (Daniel Ciochiu)
  . Fixed bug #75074 (php-process crash when is_file() is used with strings
    longer 260 chars). (Anatol)
  . Fixed bug #69727 (Remove timestamps from build to make it reproducible).
    (jelle van der Waa)

- CLI Server:
  . Fixed bug #60471 (Random "Invalid request (unexpected EOF)" using a router
    script). (SammyK)
  . Fixed bug #73830 (Directory does not exist). (Anatol)

- FPM:
  . Fixed bug #64938 (libxml_disable_entity_loader setting is shared between
    requests). (Remi)

- GD:
  . Fixed bug #75571 (Potential infinite loop in gdImageCreateFromGifCtx).
    (Christoph)

- Opcache:
  . Fixed bug #75608 ("Narrowing occurred during type inference" error).
    (Laruence, Dmitry)
  . Fixed bug #75570 ("Narrowing occurred during type inference" error).
    (Dmitry)
  . Fixed bug #75579 (Interned strings buffer overflow may cause crash).
    (Dmitry)

- PCRE:
  . Fixed bug #74183 (preg_last_error not returning error code after error).
    (Andrew Nester)

- Phar:
  . Fixed bug #74782 (remove file name from output to avoid XSS). (stas)

- Standard:
  . Fixed bug #75511 (fread not free unused buffer). (Laruence)
  . Fixed bug #75514 (mt_rand returns value outside [$min,$max]+ on 32-bit)
    (Remi)
  . Fixed bug #75535 (Inappropriately parsing HTTP response leads to PHP
    segment fault). (Nikita)
  . Fixed bug #75409 (accept EFAULT in addition to ENOSYS as indicator
    that getrandom() is missing). (sarciszewski)
  . Fixed bug #73124 (php_ini_scanned_files() not reporting correctly).
    (John Stevenson)
  . Fixed bug #75574 (putenv does not work properly if parameter contains
    non-ASCII unicode character). (Anatol)

- Zip:
  . Fixed bug #75540 (Segfault with libzip 1.3.1). (Remi)

23 Nov 2017, PHP 7.1.12

- Core:
  . Fixed bug #75420 (Crash when modifing property name in __isset for
    BP_VAR_IS). (Laruence)
  . Fixed bug #75368 (mmap/munmap trashing on unlucky allocations). (Nikita,
    Dmitry)

- CLI:
  . Fixed bug #75287 (Builtin webserver crash after chdir in a shutdown
    function). (Laruence)

- Enchant:
  . Fixed bug #53070 (enchant_broker_get_path crashes if no path is set). (jelle
    van der Waa, cmb)
  . Fixed bug #75365 (Enchant still reports version 1.1.0). (cmb)

- Exif:
  . Fixed bug #75301 (Exif extension has built in revision version). (Peter
    Kokot)

- GD:
  . Fixed bug #65148 (imagerotate may alter image dimensions). (cmb)
  . Fixed bug #75437 (Wrong reflection on imagewebp). (Fabien Villepinte)

- intl:
  . Fixed bug #75317 (UConverter::setDestinationEncoding changes source instead
    of destination). (andrewnester)

- interbase:
  . Fixed bug #75453 (Incorrect reflection for ibase_[p]connect). (villfa)

- Mysqli:
  . Fixed bug #75434 (Wrong reflection for mysqli_fetch_all function). (Fabien
    Villepinte)

- OCI8:
  . Fixed valgrind issue. (Tianfang Yang)

- OpenSSL:
  . Fixed bug #75363 (openssl_x509_parse leaks memory). (Bob, Jakub Zelenka)
  . Fixed bug #75307 (Wrong reflection for openssl_open function). (villfa)

- Opcache:
  . Fixed bug #75373 (Warning Internal error: wrong size calculation). (Laruence, Dmitry)

- PGSQL:
  . Fixed bug #75419 (Default link incorrectly cleared/linked by pg_close()). (Sara)

- SOAP:
  . Fixed bug #75464 (Wrong reflection on SoapClient::__setSoapHeaders). (villfa)

- Zlib:
  . Fixed bug #75299 (Wrong reflection on inflate_init and inflate_add). (Fabien
    Villepinte)

(taca)

2018-09-13 14:57:01 UTC MAIN commitmail json YAML

doc: Added devel/rebar3 version 3.6.1

(fhajny)

2018-09-13 14:56:43 UTC MAIN commitmail json YAML

devel/rebar3: Import rebar 3.6.1 as devel/rebar3.

Rebar3 is an Erlang tool that makes it easy to create, develop,
and release Erlang libraries, applications, and systems in
a repeatable manner.

(fhajny)

2018-09-13 14:26:07 UTC MAIN commitmail json YAML

watchman: Don't set BROKEN for normal build issues.

(jperkin)

2018-09-13 14:21:22 UTC MAIN commitmail json YAML

bbdb: Support emacs26.

(jperkin)

2018-09-13 14:16:04 UTC MAIN commitmail json YAML

mailcrypt: Support emacs26.  Improve grep-ability.

(jperkin)

2018-09-13 12:56:36 UTC MAIN commitmail json YAML

js2-mode: Support emacs26.

(jperkin)

2018-09-13 12:33:29 UTC MAIN commitmail json YAML

libwww: unbreak on linux.

GNU coreutils errors out if you have install(1) the same file twice in
the same command.

(maya)

2018-09-13 12:15:14 UTC MAIN commitmail json YAML

screen: Include compiler.mk before testing variables.

(jperkin)

2018-09-13 12:10:15 UTC MAIN commitmail json YAML

doc: Updated net/ortp to 0.16.1nb7

(jperkin)

2018-09-13 12:10:04 UTC MAIN commitmail json YAML

ortp: Use C99 and additional defines to fix SunOS.

Also add dependency on OpenSSL.  The package checks for it and will use it
if found, but has build issues if not available via bl3.  Bump PKGREVISION.

(jperkin)

2018-09-13 10:58:58 UTC MAIN commitmail json YAML

Updated devel/git, www/py-cherrypy

(adam)

2018-09-13 10:57:47 UTC MAIN commitmail json YAML

py-cherrypy: updated to 18.0.1

v18.0.1
Restore support for ���bytes��� in response headers.
Substantial removal of Python 2 compatibility code.

(adam)

2018-09-13 10:56:42 UTC MAIN commitmail json YAML

git: updated to 2.19.0

Git 2.19 Release Notes

Updates since v2.18
-------------------

UI, Workflows & Features

* "git diff" compares the index and the working tree.  For paths
  added with intent-to-add bit, the command shows the full contents
  of them as added, but the paths themselves were not marked as new
  files.  They are now shown as new by default.

  "git apply" learned the "--intent-to-add" option so that an
  otherwise working-tree-only application of a patch will add new
  paths to the index marked with the "intent-to-add" bit.

* "git grep" learned the "--column" option that gives not just the
  line number but the column number of the hit.

* The "-l" option in "git branch -l" is an unfortunate short-hand for
  "--create-reflog", but many users, both old and new, somehow expect
  it to be something else, perhaps "--list".  This step warns when "-l"
  is used as a short-hand for "--create-reflog" and warns about the
  future repurposing of the it when it is used.

* The userdiff pattern for .php has been updated.

* The content-transfer-encoding of the message "git send-email" sends
  out by default was 8bit, which can cause trouble when there is an
  overlong line to bust RFC 5322/2822 limit.  A new option 'auto' to
  automatically switch to quoted-printable when there is such a line
  in the payload has been introduced and is made the default.

* "git checkout" and "git worktree add" learned to honor
  checkout.defaultRemote when auto-vivifying a local branch out of a
  remote tracking branch in a repository with multiple remotes that
  have tracking branches that share the same names.
  (merge 8d7b558bae ab/checkout-default-remote later to maint).

* "git grep" learned the "--only-matching" option.

* "git rebase --rebase-merges" mode now handles octopus merges as
  well.

* Add a server-side knob to skip commits in exponential/fibbonacci
  stride in an attempt to cover wider swath of history with a smaller
  number of iterations, potentially accepting a larger packfile
  transfer, instead of going back one commit a time during common
  ancestor discovery during the "git fetch" transaction.
  (merge 42cc7485a2 jt/fetch-negotiator-skipping later to maint).

* A new configuration variable core.usereplacerefs has been added,
  primarily to help server installations that want to ignore the
  replace mechanism altogether.

* Teach "git tag -s" etc. a few configuration variables (gpg.format
  that can be set to "openpgp" or "x509", and gpg.<format>.program
  that is used to specify what program to use to deal with the format)
  to allow x.509 certs with CMS via "gpgsm" to be used instead of
  openpgp via "gnupg".

* Many more strings are prepared for l10n.

* "git p4 submit" learns to ask its own pre-submit hook if it should
  continue with submitting.

* The test performed at the receiving end of "git push" to prevent
  bad objects from entering repository can be customized via
  receive.fsck.* configuration variables; we now have gained a
  counterpart to do the same on the "git fetch" side, with
  fetch.fsck.* configuration variables.

* "git pull --rebase=interactive" learned "i" as a short-hand for
  "interactive".

* "git instaweb" has been adjusted to run better with newer Apache on
  RedHat based distros.

* "git range-diff" is a reimplementation of "git tbdiff" that lets us
  compare individual patches in two iterations of a topic.

* The sideband code learned to optionally paint selected keywords at
  the beginning of incoming lines on the receiving end.

* "git branch --list" learned to take the default sort order from the
  'branch.sort' configuration variable, just like "git tag --list"
  pays attention to 'tag.sort'.

* "git worktree" command learned "--quiet" option to make it less
  verbose.

Performance, Internal Implementation, Development Support etc.

* The bulk of "git submodule foreach" has been rewritten in C.

* The in-core "commit" object had an all-purpose "void *util" field,
  which was tricky to use especially in library-ish part of the
  code.  All of the existing uses of the field has been migrated to a
  more dedicated "commit-slab" mechanism and the field is eliminated.

* A less often used command "git show-index" has been modernized.
  (merge fb3010c31f jk/show-index later to maint).

* The conversion to pass "the_repository" and then "a_repository"
  throughout the object access API continues.

* Continuing with the idea to programatically enumerate various
  pieces of data required for command line completion, teach the
  codebase to report the list of configuration variables
  subcommands care about to help complete them.

* Separate "rebase -p" codepath out of "rebase -i" implementation to
  slim down the latter and make it easier to manage.

* Make refspec parsing codepath more robust.

* Some flaky tests have been fixed.

* Continuing with the idea to programmatically enumerate various
  pieces of data required for command line completion, the codebase
  has been taught to enumerate options prefixed with "--no-" to
  negate them.

* Build and test procedure for netrc credential helper (in contrib/)
  has been updated.

* Remove unused function definitions and declarations from ewah
  bitmap subsystem.

* Code preparation to make "git p4" closer to be usable with Python 3.

* Tighten the API to make it harder to misuse in-tree .gitmodules
  file, even though it shares the same syntax with configuration
  files, to read random configuration items from it.

* "git fast-import" has been updated to avoid attempting to create
  delta against a zero-byte-long string, which is pointless.

* The codebase has been updated to compile cleanly with -pedantic
  option.
  (merge 2b647a05d7 bb/pedantic later to maint).

* The character display width table has been updated to match the
  latest Unicode standard.
  (merge 570951eea2 bb/unicode-11-width later to maint).

* test-lint now looks for broken use of "VAR=VAL shell_func" in test
  scripts.

* Conversion from uchar[40] to struct object_id continues.

* Recent "security fix" to pay attention to contents of ".gitmodules"
  while accepting "git push" was a bit overly strict than necessary,
  which has been adjusted.

* "git fsck" learns to make sure the optional commit-graph file is in
  a sane state.

* "git diff --color-moved" feature has further been tweaked.

* Code restructuring and a small fix to transport protocol v2 during
  fetching.

* Parsing of -L[<N>][,[<M>]] parameters "git blame" and "git log"
  take has been tweaked.

* lookup_commit_reference() and friends have been updated to find
  in-core object for a specific in-core repository instance.

* Various glitches in the heuristics of merge-recursive strategy have
  been documented in new tests.

* "git fetch" learned a new option "--negotiation-tip" to limit the
  set of commits it tells the other end as "have", to reduce wasted
  bandwidth and cycles, which would be helpful when the receiving
  repository has a lot of refs that have little to do with the
  history at the remote it is fetching from.

* For a large tree, the index needs to hold many cache entries
  allocated on heap.  These cache entries are now allocated out of a
  dedicated memory pool to amortize malloc(3) overhead.

* Tests to cover various conflicting cases have been added for
  merge-recursive.

* Tests to cover conflict cases that involve submodules have been
  added for merge-recursive.

* Look for broken "&&" chains that are hidden in subshell, many of
  which have been found and corrected.

* The singleton commit-graph in-core instance is made per in-core
  repository instance.

* "make DEVELOPER=1 DEVOPTS=pedantic" allows developers to compile
  with -pedantic option, which may catch more problematic program
  constructs and potential bugs.

* Preparatory code to later add json output for telemetry data has
  been added.

* Update the way we use Coccinelle to find out-of-style code that
  need to be modernised.

* It is too easy to misuse system API functions such as strcat();
  these selected functions are now forbidden in this codebase and
  will cause a compilation failure.

* Add a script (in contrib/) to help users of VSCode work better with
  our codebase.

* The Travis CI scripts were taught to ship back the test data from
  failed tests.
  (merge aea8879a6a sg/travis-retrieve-trash-upon-failure later to maint).

* The parse-options machinery learned to refrain from enclosing
  placeholder string inside a "<bra" and "ket>" pair automatically
  without PARSE_OPT_LITERAL_ARGHELP.  Existing help text for option
  arguments that are not formatted correctly have been identified and
  fixed.
  (merge 5f0df44cd7 rs/parse-opt-lithelp later to maint).

* Noiseword "extern" has been removed from function decls in the
  header files.

* A few atoms like %(objecttype) and %(objectsize) in the format
  specifier of "for-each-ref --format=<format>" can be filled without
  getting the full contents of the object, but just with the object
  header.  These cases have been optimized by calling
  oid_object_info() API (instead of reading and inspecting the data).

* The end result of documentation update has been made to be
  inspected more easily to help developers.

* The API to iterate over all objects learned to optionally list
  objects in the order they appear in packfiles, which helps locality
  of access if the caller accesses these objects while as objects are
  enumerated.

* Improve built-in facility to catch broken &&-chain in the tests.

* The more library-ish parts of the codebase learned to work on the
  in-core index-state instance that is passed in by their callers,
  instead of always working on the singleton "the_index" instance.

* A test prerequisite defined by various test scripts with slightly
  different semantics has been consolidated into a single copy and
  made into a lazily defined one.
  (merge 6ec633059a wc/make-funnynames-shared-lazy-prereq later to maint).

* After a partial clone, repeated fetches from promisor remote would
  have accumulated many packfiles marked with .promisor bit without
  getting them coalesced into fewer packfiles, hurting performance.
  "git repack" now learned to repack them.

* Partially revert the support for multiple hash functions to regain
  hash comparison performance; we'd think of a way to do this better
  in the next cycle.

* "git help --config" (which is used in command line completion)
  missed the configuration variables not described in the main
  config.txt file but are described in another file that is included
  by it, which has been corrected.

* The test linter code has learned that the end of here-doc mark
  "EOF" can be quoted in a double-quote pair, not just in a
  single-quote pair.

(adam)

2018-09-13 09:17:40 UTC MAIN commitmail json YAML

lang/erlang: Fix patch file, __STDC_VERSION__ might not be defined.

(fhajny)

2018-09-13 09:02:52 UTC MAIN commitmail json YAML

erlang-{doc,man}: Fix DEPENDS to handle DIST_VERSION_PATCH.

(jperkin)

2018-09-13 07:39:35 UTC MAIN commitmail json YAML

Updated textproc/py-sphinx, print/py-reportlab

(adam)

2018-09-13 07:39:17 UTC MAIN commitmail json YAML

py-reportlab: updated to 3.5.6

RELEASE 3.5.6:
* Restore DocTemplate seq attribute lost in rev c985bd7093ad (4405)
  version 3.4.41

(adam)

2018-09-13 07:36:52 UTC MAIN commitmail json YAML

py-sphinx: updated to 1.8.0

Release 1.8.0:

Dependencies
1.8.0b1
* LaTeX: :confval:latex_use_xindy, if True (default for
  xelatex/lualatex), instructs make latexpdf to use :program:xindy
  for general index.  Make sure your LaTeX distribution includes it.

Incompatible changes
1.8.0b2
* html theme: refer pygments_style settings of HTML themes
  preferentially
* The URL of download files are changed
* quickstart: Makefile and make.bat are not overwritten if exists

1.8.0b1
* the :py:mod:sphinx.ext.graphviz: extension runs dot in the
  directory of the document being built instead of in the root directory of
  the documentation.
* extensions which stores any data to environment should return the
  version of its env data structure as metadata.  In detail, please see
  :ref:ext-metadata.
* Sphinx expects source parser modules to have supported file formats as
  Parser.supported attribute
* The default value of :confval:epub_author and :confval:epub_publisher are
  changed from 'unknown' to the value of :confval:author.  This is same as
  a conf.py file sphinx-build generates.
* The gettext_compact attribute is removed from document.settings
  object.  Please use config.gettext_compact instead.
* The processing order on reading phase is changed.  smart_quotes, sphinx
  domains, :event:doctree-read event and versioning doctrees are invoked
  earlier than so far.  For more details, please read a description of
  :py:meth:.Sphinx.add_transform()
* All substitution_definition nodes are removed from doctree on
  reading phase
* docutils.conf on $HOME and /etc directories are ignored.  Only
  docutils.conf on confdir is refered.
* :samp: role supports to escape curly braces with backslash
* The files under :confval:html_static_path are excluded from source
  files.
* latex: Use \sphinxcite for citation references instead \hyperref
* The config value viewcode_import is renamed to
  :confval:viewcode_follow_imported_members
* latex: :confval:latex_show_pagerefs does not add pagerefs for
  citations
* latex: Now "rubric" elements are rendered as unnumbered section title
* html: The anchor for productionlist tokens has been changed
* Modifying a template variable script_files in templates is allowed now.
  Please use app.add_js_file() instead.
* Save environment object also with only new documents
* qthelp builder allows dashes in :confval:qthelp_namespace
* LaTeX: with lualatex or xelatex use by default :program:xindy as
  UTF-8 able replacement of :program:makeindex.  After
  upgrading Sphinx, please clean latex build repertory of existing project
  before new build.
* html: hlist items are now aligned to top
* highlightlang directive is processed on resolving phase
* latex: LaTeX template has been chaned.  Following elements are moved
  into the template:
  - \begin{document}
  - shorthandoff variable
  - maketitle variable
  - tableofcontents variable

Deprecated
1.8.0b2
* sphinx.io.SphinxI18nReader.set_lineno_for_reporter() is deprecated
* sphinx.io.SphinxI18nReader.line is deprecated
* sphinx.util.i18n.find_catalog_source_file() has changed; the
  *gettext_compact* argument has been deprecated
* sphinx.util.images.guess_mimetype() has changed; the *content*
  argument has been deprecated

1.8.0b1
* :confval:source_parsers is deprecated
* :confval:autodoc_default_flags is deprecated
* quickstart: --epub option becomes default, so it is deprecated
* Drop function based directive support.  For now, Sphinx only supports class
  based directives.
* sphinx.util.docutils.directive_helper() is deprecated
* sphinx.cmdline is deprecated
* sphinx.make_mode is deprecated
* sphinx.locale.l_() is deprecated
* helper function warn() for HTML themes is deprecated
* app.override_domain() is deprecated
* app.add_stylesheet() is deprecated
* app.add_javascript() is deprecated
* app.import_object() is deprecated
* app.add_source_parser() has changed;  the *suffix* argument has been
  deprecated
* sphinx.versioning.prepare() is deprecated
* Config.__init__() has changed;  the *dirname*, *filename* and *tags*
  argument has been deprecated
* Config.check_types() is deprecated
* Config.check_unicode() is deprecated
* sphinx.application.CONFIG_FILENAME is deprecated
* highlightlang directive is deprecated
* BuildEnvironment.load() is deprecated
* BuildEnvironment.loads() is deprecated
* BuildEnvironment.frompickle() is deprecated
* env.read_doc() is deprecated
* env.update() is deprecated
* env._read_serial() is deprecated
* env._read_parallel() is deprecated
* env.write_doctree() is deprecated
* env._nitpick_ignore is deprecated
* env.versionchanges is deprecated
* env.dump() is deprecated
* env.dumps() is deprecated
* env.topickle() is deprecated
* env.note_versionchange() is deprecated
* sphinx.writers.latex.Table.caption_footnotetexts is deprecated
* sphinx.writers.latex.Table.header_footnotetexts is deprecated
* sphinx.writers.latex.LaTeXTranslator.footnotestack is deprecated
* sphinx.writers.latex.LaTeXTranslator.in_container_literal_block is deprecated
* sphinx.writers.latex.LaTeXTranslator.next_section_ids is deprecated
* sphinx.writers.latex.LaTeXTranslator.next_hyperlink_ids is deprecated
* sphinx.writers.latex.LaTeXTranslator.restrict_footnote() is deprecated
* sphinx.writers.latex.LaTeXTranslator.unrestrict_footnote() is deprecated
* sphinx.writers.latex.LaTeXTranslator.push_hyperlink_ids() is deprecated
* sphinx.writers.latex.LaTeXTranslator.pop_hyperlink_ids() is deprecated
* sphinx.writers.latex.LaTeXTranslator.check_latex_elements() is deprecated
* sphinx.writers.latex.LaTeXTranslator.bibitems is deprecated
* sphinx.writers.latex.LaTeXTranslator.hlsettingstack is deprecated
* sphinx.writers.latex.ExtBabel.get_shorthandoff() is deprecated
* sphinx.writers.html.HTMLTranslator.highlightlang is deprecated
* sphinx.writers.html.HTMLTranslator.highlightlang_base is deprecated
* sphinx.writers.html.HTMLTranslator.highlightlangopts is deprecated
* sphinx.writers.html.HTMLTranslator.highlightlinenothreshold is deprecated
* sphinx.writers.html5.HTMLTranslator.highlightlang is deprecated
* sphinx.writers.html5.HTMLTranslator.highlightlang_base is deprecated
* sphinx.writers.html5.HTMLTranslator.highlightlangopts is deprecated
* sphinx.writers.html5.HTMLTranslator.highlightlinenothreshold is deprecated
* sphinx.ext.mathbase extension is deprecated
* sphinx.ext.mathbase.math node is deprecated
* sphinx.ext.mathbase.displaymath node is deprecated
* sphinx.ext.mathbase.eqref node is deprecated
* sphinx.ext.mathbase.is_in_section_title() is deprecated
* sphinx.ext.mathbase.MathDomain is deprecated
* sphinx.ext.mathbase.setup_math() is deprecated
* sphinx.directives.other.VersionChanges is deprecated
* sphinx.highlighting.PygmentsBridge.unhighlight() is deprecated
* sphinx.ext.mathbase.get_node_equation_number() is deprecated
* sphinx.ext.mathbase.wrap_displaymath() is deprecated
* The trim_doctest_flags argument of sphinx.highlighting.PygmentsBridge
  is deprecated

Features added
1.8.0b2
* Ensure frozen object descriptions are reproducible
* apidoc: Add --tocfile option to change the filename of ToC

1.8.0b1
* Add :event:config-inited event
* Add sphinx.config.Any to represent the config value accepts any type of
  value
* :confval:source_suffix allows a mapping fileext to file types
* Add :confval:author as a configuration value
* imgconverter: Support to convert GIF to PNG
* sphinx-build command supports i18n console output
* Add app.add_message_catalog() and sphinx.locale.get_translations() to
  support translation for 3rd party extensions
* helper function warning() for HTML themes is added
* Add Domain.enumerable_nodes to manage own enumerable nodes for domains
  (experimental)
* Add a new keyword argument override to Application APIs
* LaTeX: new key 'fvset' for :confval:latex_elements. For
  XeLaTeX/LuaLaTeX its default sets fanvyvrb to use normal, not small,
  fontsize in code-blocks
* Add :confval:html_css_files and :confval:epub_css_files for adding CSS
  files from configuration
* Add :confval:html_js_files for adding JS files from configuration
* Ensure set object descriptions are reproducible.
* Allow to override :confval:numfig_format partially.  Full definition
  is not needed.
* Improve warning messages during including
* LaTeX: separate customizability of :rst:role:guilabel and
  :rst:role:menuselection
* Add Config.read() classmethod to create a new config object from
  configuration file
* Wrap graphviz diagrams in <div> tag
* viewcode: Add :event:viewcode-find-source and
  :event:viewcode-follow-imported to load source code without loading
* napoleon: Add strings to translation file for localisation
* Display a warning when invalid values are passed to linenothreshold
  option of highlight directive
* C++:
  - Add a cpp:texpr role as a sibling to cpp:expr.
  - Add support for unions.
  - add support for anonymous entities using names staring with @.
  - add support for (most) character literals.
  - Cross-referencing entities inside primary templates is supported,
    and now properly documented.
  - add new cross-referencing format for cpp:any and cpp:func roles,
    for referencing specific function overloads.

* MathJax should be loaded with async attribute
* html: Output canonical_url metadata if :confval:html_baseurl set
* autosummary: expose inherited_members to template
* mathjax: Add :confval:mathjax_options to give options to script tag
  for mathjax
* latex: Don't overwrite .tex file if document not changed
* latex: Add alphanumeric enumerated list support
* Add :confval:latex_use_xindy for UTF-8 savvy indexing, defaults to True
  if :confval:latex_engine is 'xelatex' or 'lualatex'.
* SphinxLoggerAdapter.info() now supports location parameter
* setuptools: support nitpicky option
* autoclass directive supports nested class
* Add app.add_html_math_renderer() to register a math renderer for HTML
* Apply :confval:trim_doctest_flags to all builders (cf. text, manpages)
* linkcheck: Add better Accept header to HTTP client
* sphinx-build: Add --keep-going option to show all warnings
* Add :rst:role:math:numref role to refer equations (Same as :rst:role:eq)
* quickstart: epub builder is enabled by default
* Add :confval:singlehtml_sidebars to configure sidebars for singlehtml
  builder
* doctest: Skip doctest conditionally
* autodoc: emit a warning for invalid typehints
* autodoc: Add :confval:autodoc_default_options which accepts
  option values as dict

Bugs fixed
1.8.0b2
* html: search box overrides to other elements if scrolled
* i18n: warnings for translation catalogs have wrong line numbers
* latex: cross references has been broken by multiply labeled objects
* C++, fixes for symbol addition and lookup. Lookup should no longer break
  in partial builds.
* download reference to remote file is not displayed
* html theme: pygments_style of theme was overrided by conf.py
  by default
* toctree shows confusible warning when document is excluded
* autodoc: :members: causes :special-members: not to be shown
* autodoc: ImportError is replaced by AttributeError for deeper module
* Incorrect links with :download:, duplicate names, and
  parallel builds
* autodoc: failed to analyze source code in egg package
* Sphinx crashes if unknown po file exists

1.8.0b1
* i18n: message catalogs were reset on each initialization
* latex: footnote inside footnote was not rendered
* i18n: fix lang_COUNTRY not fallback correctly for IndexBuilder. Thanks
  to Shengjing Zhu.
* productionlist directive generates invalid IDs for the tokens
* (lualatex) PDF build fails if indexed word starts with Unicode character
* latex: index headings "Symbols" and "Numbers" not internationalized
* sphinx-build: Handle errors on scanning documents
* epub: spine has been broken when "self" is listed on toctree
* autosummary does not understand docstring of module level attributes
* C++, prevent nested declarations in functions to avoid lookup problems.
* C++, add missing isPack method for certain template parameter types.
* C++, parse attributes on declerators as well.
* C++, parse delete expressions and basic new expressions as well.
* graphviz: SVGs do not adapt to the column width

Features removed
1.8.0b1
* sphinx.ext.pngmath extension

Documentation
1.8.0b1
* Fix wrong make.bat option for internationalization.
* napoleon: add admonitions added by 4613 to the docs.

(adam)

2018-09-13 02:57:43 UTC MAIN commitmail json YAML

Disable atomic operations on VAX and m68k in addition to mipsel so BIND
compiles on these architectures.

(jklos)

2018-09-13 02:45:52 UTC MAIN commitmail json YAML

add and enable filter_audio

(jnemeth)

2018-09-12 21:35:35 UTC MAIN commitmail json YAML

doc: Updated devel/gradle to 4.10.1

(fhajny)

2018-09-12 21:35:26 UTC MAIN commitmail json YAML

devel/gradle: Update to 4.10.1.

This bug-fix release addresses 6 regressions in Gradle 4.10:

- FileTreeElement.getPath() returns absolute system dependent
  filepath.
- Up-to-date checks for missing files can be incorrect
- Gradle fails when no incremental compile snapshot data
  available.
- Gradle 4.10 incorrect ordering between dependencies of
  dependent tasks.
- tasks.withType(ScalaCompile::class.java).configureEach fails
  on multi-project builds.
- Double deprecation message when using publishing plugin.

(fhajny)

2018-09-12 20:01:31 UTC MAIN commitmail json YAML

doc: Updated lang/erlang to 21.0.9

(schmonz)

2018-09-12 20:01:12 UTC MAIN commitmail json YAML

Update to 21.0.9. From the release announcements:

  --- POTENTIAL INCOMPATIBILITIES -------------------------------------

  OTP-15225    Application(s): erts

                Fixed a bug causing some Erlang references to be
                inconsistently ordered. This could for example cause
                failure to look up certain elements with references as
                keys in search data structures. This bug was introduced
                in R13B02.

                Thanks to Simon Cornish for finding the bug and
                supplying a fix.

  --- compiler-7.2.4 --------------------------------------------------

  --- Fixed Bugs and Malfunctions ---

  OTP-15292    Application(s): compiler

                Fix a regression in OTP-15204 that removed .beam file
                metadata that some external build tools relied on.

  OTP-15204    Application(s): compiler
                Related Id(s): ERL-679

                Fixed an issue where files compiled with the
                +deterministic option differed if they were compiled in
                a different directory but were otherwise identical.

  OTP-15156    Application(s): compiler
              Related Id(s): ERL-655

              In rare cases involving matching of binary literal
              strings, the compiler could optimize away code that
              should be executed.

  OTP-15157    Application(s): compiler

              There could be an internal consistency check failure
              when compiling code that called map_get(Key, Map) and
              then updated the same map.

  OTP-15166    Application(s): compiler
              Related Id(s): ERL-660

              In rare circumstances, the compiler could crash in
              beam_jump when compiling a floating point operation.

  OTP-15150    Application(s): compiler
              Related Id(s): ERL-650

              The compiler could could crash when compiling a
              complicated function that used the binary syntax.

  Full runtime dependencies of compiler-7.2.4: crypto-3.6, erts-9.0,
  hipe-3.12, kernel-4.0, stdlib-2.5

  --- erts-10.0.8 -----------------------------------------------------

  --- Fixed Bugs and Malfunctions ---

  OTP-15289    Application(s): erts
                Related Id(s): ERIERL-235, ERL-576, OTP-14943

                As of ERTS version 10.0 (OTP 21.0) the erl_child_setup
                program, which creates port programs, ignores TERM
                signals. This setting was unintentionally inherited by
                port programs. Handling of TERM signals in port
                programs has now been restored to the default behavior.
                That is, terminate the process.

  OTP-15296    Application(s): erts
                Related Id(s): ERIERL-226, OTP-15279

                The fix made for OTP-15279 in erts-10.07 (OTP-21.0.8)
                was not complete. It could cause a new connection
                attempt to be incorrectly aborted in certain cases.
                This fix will amend that flaw.

  OTP-15275    Application(s): erts
                Related Id(s): PR-1943

                A process could get stuck in an infinite rescheduling
                loop between normal and dirty schedulers. This bug was
                introduced in ERTS version 10.0.

                Thanks to Maxim Fedorov for finding and fixing this
                issue.

  OTP-15279    Application(s): erts
                Related Id(s): ERIERL-226

                Garbage collection of a distribution entry could cause
                an emulator crash if net_kernel had not brought
                previous connection attempts on it down properly.

  OTP-15237    Application(s): erts

                A race between termination of a process and resume of
                the same process via erlang:resume_process/1 could
                cause the VM to crash. This bug was introduced in erts
                version 10.0 (OTP 21.0).

  OTP-15269    Application(s): erts
                Related Id(s): ERL-713

                When tracing on running, in trace events could be lost
                when a process was rescheduled between a dirty and a
                normal scheduler.

  OTP-15223    Application(s): erts

                Fixed a bug which caused an emulator crash when
                enif_send() was called by a NIF that executed on a
                dirty scheduler. The bug was either triggered when the
                NIF called enif_send() without a message environment,
                or when the process executing the NIF was send traced.

  OTP-15225    Application(s): erts

                *** POTENTIAL INCOMPATIBILITY ***

                Fixed a bug causing some Erlang references to be
                inconsistently ordered. This could for example cause
                failure to look up certain elements with references as
                keys in search data structures. This bug was introduced
                in R13B02.

                Thanks to Simon Cornish for finding the bug and
                supplying a fix.

  OTP-15169    Application(s): erts

              Fixed a bug that prevented the noshell option from
              working correctly on Mac OS X and BSD.

  OTP-15184    Application(s): erts

              Fixed a crash when matching directly against a literal
              map using a single key that had been saved on the
              stack.

  OTP-15196    Application(s): erts

              Fix node crash when passing a bad time option to
              file:read_file_info/2.

  OTP-15154    Application(s): erts

                Fixed a scheduler bug that caused normal schedulers to
                run dirty code.

  OTP-15183    Application(s): erts
                Related Id(s): ERL-670

                Fixed a bug in erlang:trace_info/2 which caused the
                emulator to crash when a bad argument was passed. The
                bug was introduced in ERTS version 10.0.

  OTP-15067    Application(s): erts
              Related Id(s): ERL-573

              Fixed a rare bug that could cause processes to be
              scheduled after they had been freed.

  OTP-15158    Application(s): erts
              Related Id(s): ERL-654

              Fixed a race condition in the inet driver that could
              cause receive to hang when the emulator was compiled
              with gcc 8.

  OTP-15147    Application(s): erts
              Related Id(s): ERL-644

              The keys used in os:getenv and os:putenv are
              case-insensitive again on Windows.

  Full runtime dependencies of erts-10.0.8: kernel-6.0, sasl-3.0.1,
  stdlib-3.5

  --- kernel-6.0.1 ----------------------------------------------------

  --- Fixed Bugs and Malfunctions ---

  OTP-15280    Application(s): kernel
                Related Id(s): ERIERL-226, OTP-15279

                Fixed bug in net_kernel that could cause an emulator
                crash if certain connection attempts failed. Bug exists
                since kernel-6.0 (OTP-21.0).

  Full runtime dependencies of kernel-6.0.1: erts-10.0, sasl-3.0,
  stdlib-3.5

--- crypto-4.3.2 ----------------------------------------------------

--- Fixed Bugs and Malfunctions ---

  OTP-15233    Application(s): crypto

              Update the crypto engine functions to handle multiple
              loads of an engine.

              engine_load/3/4 is updated so it doesn't add the engine
              ID to OpenSSLs internal list of engines which makes it
              possible to run the engine_load more than once if it
              doesn't contain global data.

              Added ensure_engine_loaded/2/3 which guarantees that
              the engine just is loaded once and the following calls
              just returns a reference to it. This is done by add the
              ID to the internal OpenSSL list and check if it is
              already registered when the function is called.

              Added ensure_engine_unloaded/1/2 to unload engines
              loaded with ensure_engine_loaded.

              Then some more utility functions are added.

              engine_add/1, adds the engine to OpenSSL internal list

              engine_remove/1, remove the engine from OpenSSL
              internal list

              engine_get_id/1, fetch the engines id

              engine_get_name/1, fetch the engine name

  OTP-15194    Application(s): crypto
                Related Id(s): ERL-673

                Fixed a node crash in crypto:compute_key(ecdh, ...)
                when passing a wrongly typed Others argument.

Full runtime dependencies of crypto-4.3.2: erts-9.0, kernel-5.3,
stdlib-3.4

--- public_key-1.6.1 ------------------------------------------------

  OTP-15151    Application(s): public_key
              Related Id(s): OTP-15113

              Some of the keylengths in the newly generated moduli
              file in public_key are not universally supported. This
              could cause the SSH key exchange
              diffie-hellman-group-exchange-sha* to fail.

              Those keylengths are now removed.

Full runtime dependencies of public_key-1.6.1: asn1-3.0, crypto-3.8,
erts-6.0, kernel-3.0, stdlib-3.5

--- stdlib-3.5.1 ----------------------------------------------------

  OTP-15159    Application(s): stdlib

              Fix a bug that could cause a crash when formatting a
              list of non-characters using the control sequences p or
              P and limiting the output with the option chars_limit.

Full runtime dependencies of stdlib-3.5.1: compiler-5.0, crypto-3.3,
erts-10.0, kernel-6.0, sasl-3.0

(schmonz)

2018-09-12 19:04:07 UTC MAIN commitmail json YAML

filter_audio: add buildlink3.mk

Forgot to cvs add this, it's used by wip/uTox-git.

(maya)

2018-09-12 17:50:44 UTC pkgsrc-2018Q2 commitmail json YAML

Pullup tickets #5827 and #5828.

(bsiegert)

2018-09-12 17:49:10 UTC pkgsrc-2018Q2 commitmail json YAML

Pullup ticket #5828 - requested by leot
net/youtube-dl: bugfix

Revisions pulled up:
- net/youtube-dl/Makefile                                      1.140-1.145
- net/youtube-dl/PLIST                                          1.66-1.68
- net/youtube-dl/distinfo                                      1.125-1.130
- net/youtube-dl/patches/patch-youtube__dl_postprocessor_ffmpeg.py 1.4

---
  Module Name:    pkgsrc
  Committed By:  leot
  Date:          Sat Jul 14 11:27:05 UTC 2018

  Modified Files:
          pkgsrc/net/youtube-dl: Makefile PLIST distinfo
          pkgsrc/net/youtube-dl/patches:
              patch-youtube__dl_postprocessor_ffmpeg.py

  Log Message:
  youtube-dl: Update net/youtube-dl to 20180710

  Changes:
  version 2018.07.10

  Core
  * [utils] Share JSON-LD regular expression
  * [downloader/dash] Improve error handling (#16927)

  Extractors
  + [nrktv] Add support for new season and serie URL schema
  + [nrktv] Add support for new episode URL schema (#16909)
  + [frontendmasters] Add support for frontendmasters.com (#3661, #16328)
  * [funk] Fix extraction (#16918)
  * [watchbox] Fix extraction (#16904)
  * [dplayit] Sort formats
  * [dplayit] Fix extraction (#16901)
  * [youtube] Improve login error handling (#13822)

  version 2018.07.04

  Core
  * [extractor/common] Properly escape % in MPD templates (#16867)
  * [extractor/common] Use source URL as Referer for HTML5 entries (16849)
  * Prefer ffmpeg over avconv by default (#8622)

  Extractors
  * [pluralsight] Switch to graphql (#16889, #16895, #16896, #16899)
  * [lynda] Simplify login and improve error capturing (#16891)
  + [go90] Add support for embed URLs (#16873)
  * [go90] Detect geo restriction error and pass geo verification headers
    (#16874)
  * [vlive] Fix live streams extraction (#16871)
  * [npo] Fix typo (#16872)
  + [mediaset] Add support for new videos and extract all formats (#16568)
  * [dctptv] Restore extraction based on REST API (#16850)
  * [svt] Improve extraction and add support for pages (#16802)
  * [porncom] Fix extraction (#16808)

  version 2018.06.25

  Extractors
  * [joj] Relax URL regular expression (#16771)
  * [brightcove] Workaround sonyliv DRM protected videos (#16807)
  * [motherless] Fix extraction (#16786)
  * [itv] Make SOAP request non fatal and extract metadata from webpage (#16780)
  - [foxnews:insider] Remove extractor (#15810)
  + [foxnews] Add support for iframe embeds (#15810, #16711)

  version 2018.06.19

  Core
  + [extractor/common] Introduce expected_status in _download_* methods
    for convenient accept of HTTP requests failed with non 2xx status codes
  + [compat] Introduce compat_integer_types

  Extractors
  * [peertube] Improve generic support (#16733)
  + [6play] Use geo verification headers
  * [rtbf] Fix extraction for python 3.2
  * [vgtv] Improve HLS formats extraction
  + [vgtv] Add support for www.aftonbladet.se/tv URLs
  * [bbccouk] Use expected_status
  * [markiza] Expect 500 HTTP status code
  * [tvnow] Try all clear manifest URLs (#15361)

---
  Module Name:    pkgsrc
  Committed By:  leot
  Date:          Sun Jul 22 10:16:11 UTC 2018

  Modified Files:
          pkgsrc/net/youtube-dl: Makefile distinfo

  Log Message:
  youtube-dl: Update net/youtube-dl to 20180721

  Changes:
  2018.07.21
  ----------
  Core
  + [utils] Introduce url_or_none
  * [utils] Allow JSONP without function name (#17028)
  + [extractor/common] Extract DASH and MSS formats from SMIL manifests

  Extractors
  + [bbc] Add support for BBC Radio Play pages (#17022)
  * [iwara] Fix download URLs (#17026)
  * [vrtnu] Relax title extraction and extract JSON-LD (#17018)
  + [viu] Pass Referer and Origin headers and area id (#16992)
  + [vimeo] Add another config regular expression (#17013)
  + [facebook] Extract view count (#16942)
  * [dailymotion] Improve description extraction (#16984)
  * [slutload] Fix and improve extraction (#17001)
  * [mediaset] Fix extraction (#16977)
  + [theplatform] Add support for theplatform TLD customization (#16977)
  * [imgur] Relax URL regular expression (#16987)
  * [pornhub] Improve extraction and extract all formats (#12166, #15891, #16262,
    #16959)

---
  Module Name:    pkgsrc
  Committed By:  leot
  Date:          Thu Aug  9 11:10:10 UTC 2018

  Modified Files:
          pkgsrc/net/youtube-dl: Makefile PLIST distinfo

  Log Message:
  youtube-dl: Update net/youtube-dl to 20180804

  Changes:
  2018.08.04
  ----------
  Extractors
  * [funk:channel] Improve byChannelAlias extraction (#17142)
  * [twitch] Fix authentication (#17024, #17126)
  * [twitch:vod] Improve URL regular expression (#17135)
  * [watchbox] Fix extraction (#17107)
  * [pbs] Fix extraction (#17109)
  * [theplatform] Relax URL regular expression (#16181, #17097)
  + [viqeo] Add support for viqeo.tv (#17066)

  2018.07.29
  ----------
  Extractors
  * [crunchyroll:playlist] Restrict URL regular expression (#17069, #17076)
  + [pornhub] Add support for subtitles (#16924, #17088)
  * [ceskatelevize] Use https for API call (#16997, #16999)
  * [dailymotion:playlist] Fix extraction (#16894)
  * [ted] Improve extraction
  * [ted] Fix extraction for videos without nativeDownloads (#16756, #17085)
  * [telecinco] Fix extraction (#17080)
  * [mitele] Reduce number of requests
  * [rai] Return non HTTP relinker URL intact (#17055)
  * [vk] Fix extraction for inline only videos (#16923)
  * [streamcloud] Fix extraction (#17054)
  * [facebook] Fix tahoe player extraction with authentication (#16655)
  + [puhutv] Add support for puhutv.com (#12712, #16010, #16269)

---
  Module Name:    pkgsrc
  Committed By:  leot
  Date:          Wed Aug 22 10:57:11 UTC 2018

  Modified Files:
          pkgsrc/net/youtube-dl: Makefile PLIST distinfo

  Log Message:
  youtube-dl: Update net/youtube-dl to 20180822

  Changes:
  version 2018.08.22
  ------------------
  Core
  * [utils] Use pure browser header for User-Agent (#17236)

  Extractors
  + [kinopoisk] Add support for kinopoisk.ru (#17283)
  + [yourporn] Add support for yourporn.sexy (#17298)
  + [go] Add support for disneynow.go.com (#16299, #17264)
  + [6play] Add support for play.rtl.hr (#17249)
  * [anvato] Fallback to generic API key for access-key-to-API-key lookup
    (#16788, #17254)
  * [lci] Fix extraction (#17274)
  * [bbccouk] Extend id URL regular expression (#17270)
  * [cwtv] Fix extraction (#17256)
  * [nova] Fix extraction (#17241)
  + [generic] Add support for expressen embeds
  * [raywenderlich] Adapt to site redesign (#17225)
  + [redbulltv] Add support redbull.com tv URLs (#17218)
  + [bitchute] Add support for bitchute.com (#14052)
  + [clyp] Add support for token protected media (#17184)
  * [imdb] Fix extension extraction (#17167)

---
  Module Name:    pkgsrc
  Committed By:  leot
  Date:          Sat Sep  1 16:49:45 UTC 2018

  Modified Files:
          pkgsrc/net/youtube-dl: Makefile distinfo

  Log Message:
  youtube-dl: Update net/youtube-dl to 20180901

  Changes:
  version 2018.09.01

  Core
  * [utils] Skip remote IP addresses non matching to source address' IP version
    when creating a connection (#13422, #17362)

  Extractors
  + [ard] Add support for one.ard.de (#17397)
  * [niconico] Fix extraction on python3 (#17393, #17407)
  * [ard] Extract f4m formats
  * [crunchyroll] Parse vilos media data (#17343)
  + [ard] Add support for Beta ARD Mediathek
  + [bandcamp] Extract more metadata (#13197)
  * [internazionale] Fix extraction of non-available-abroad videos (#17386)

  version 2018.08.28

  Extractors
  + [youtube:playlist] Add support for music album playlists (OLAK5uy_ prefix)
    (#17361)
  * [bitchute] Fix extraction by pass custom User-Agent (#17360)
  * [webofstories:playlist] Fix extraction (#16914)
  + [tvplayhome] Add support for new tvplay URLs (#17344)
  + [generic] Allow relative src for videojs embeds (#17324)
  + [xfileshare] Add support for vidto.se (#17317)
  + [vidzi] Add support for vidzi.nu (#17316)
  + [nova:embed] Add support for media.cms.nova.cz (#17282)

---
  Module Name:    pkgsrc
  Committed By:  leot
  Date:          Sat Sep  8 16:24:35 UTC 2018

  Modified Files:
          pkgsrc/net/youtube-dl: Makefile distinfo

  Log Message:
  youtube-dl: Update net/youtube-dl to 20180908

  Changes:
  version 2018.09.08

  Extractors
  * [youtube] Fix extraction (#17457, #17464)
  + [pornhub:uservideos] Add support for new URLs (#17388)
  * [iprima] Confirm adult check (#17437)
  * [slideslive] Make check for video service name case-insensitive (#17429)
  * [radiojavan] Fix extraction (#17151)
  * [generic] Skip unsuccessful jwplayer extraction (#16735)

(bsiegert)

2018-09-12 17:42:09 UTC pkgsrc-2018Q2 commitmail json YAML

Pullup ticket #5827 - requested by maya
x11/xlockmore, x11/xlockmore-lite: build fix

Revisions pulled up:
- x11/xlockmore-lite/Makefile                                  1.23
- x11/xlockmore/Makefile                                        1.134
- x11/xlockmore/Makefile.common                                1.79

---
  Module Name: pkgsrc
  Committed By: maya
  Date: Sun Sep  9 20:05:19 UTC 2018

  Modified Files:
  pkgsrc/x11/xlockmore: Makefile.common

  Log Message:
  xlockmore{,-lite}: drop CONFLICTS.

  This file is used by both xlockmore-lite and xlockmore, and results in
  the package being considered conflicting with itself.

  Reported by he in PR pkg/53586

---
  Module Name:    pkgsrc
  Committed By:  maya
  Date:          Mon Sep 10 00:06:07 UTC 2018

  Modified Files:
          pkgsrc/x11/xlockmore: Makefile
          pkgsrc/x11/xlockmore-lite: Makefile

  Log Message:
  xlockmore{,-lite}: restore CONFLICTS.

(bsiegert)

2018-09-12 17:15:56 UTC MAIN commitmail json YAML

Add filter_audio version 0.0.1

Lightweight audio filtering library made from webrtc code

(maya)

2018-09-12 16:59:41 UTC MAIN commitmail json YAML

etcmanage: add patch to make releasedir honor alias

Now, using evbearmv7hf-el as arch will result in that being the subdir
under releasedir, so that 6/7 do not collide.

(gdt)

2018-09-12 15:03:20 UTC MAIN commitmail json YAML

gutenprint-lib: drop include of gexiv2 bl3

gutenprint had a workaruond because something it included added
-lgexiv2 to the link link (via libtool) without having it in bl3.
That's fixed, so drop the workaround.

(gdt)

2018-09-12 12:44:26 UTC MAIN commitmail json YAML

doc: Updated security/openssl to 1.0.2p

(fhajny)

2018-09-12 12:44:17 UTC MAIN commitmail json YAML

security/openssl: Update to 1.0.2p.

- Client DoS due to large DH parameter

  During key agreement in a TLS handshake using a DH(E) based ciphersuite a
  malicious server can send a very large prime value to the client. This will
  cause the client to spend an unreasonably long period of time generating a
  key for this prime resulting in a hang until the client has finished. This
  could be exploited in a Denial Of Service attack.

  This issue was reported to OpenSSL on 5th June 2018 by Guido Vranken
  (CVE-2018-0732)
  [Guido Vranken]

- Cache timing vulnerability in RSA Key Generation

  The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to
  a cache timing side channel attack. An attacker with sufficient access to
  mount cache timing attacks during the RSA key generation process could
  recover the private key.

  This issue was reported to OpenSSL on 4th April 2018 by Alejandro Cabrera
  Aldaya, Billy Brumley, Cesar Pereida Garcia and Luis Manuel Alvarez Tapia.
  (CVE-2018-0737)
  [Billy Brumley]

- Make EVP_PKEY_asn1_new() a bit stricter about its input.  A NULL pem_str
  parameter is no longer accepted, as it leads to a corrupt table.  NULL
  pem_str is reserved for alias entries only.
  [Richard Levitte]

- Revert blinding in ECDSA sign and instead make problematic addition
  length-invariant. Switch even to fixed-length Montgomery multiplication.
  [Andy Polyakov]

- Change generating and checking of primes so that the error rate of not
  being prime depends on the intended use based on the size of the input.
  For larger primes this will result in more rounds of Miller-Rabin.
  The maximal error rate for primes with more than 1080 bits is lowered
  to 2^-128.
  [Kurt Roeckx, Annie Yousar]

- Increase the number of Miller-Rabin rounds for DSA key generating to 64.
  [Kurt Roeckx]

- Add blinding to ECDSA and DSA signatures to protect against side channel
  attacks discovered by Keegan Ryan (NCC Group).
  [Matt Caswell]

- When unlocking a pass phrase protected PEM file or PKCS#8 container, we
  now allow empty (zero character) pass phrases.
  [Richard Levitte]

- Certificate time validation (X509_cmp_time) enforces stricter
  compliance with RFC 5280. Fractional seconds and timezone offsets
  are no longer allowed.
  [Emilia Kè¾°sper]

(fhajny)

2018-09-12 10:44:04 UTC MAIN commitmail json YAML

Updated textproc/py-jsbeautifier, sysutils/py-watchdog

(adam)

2018-09-12 10:43:39 UTC MAIN commitmail json YAML

py-watchdog: updated to 0.9.0

0.9.0:
Unknown changes.

(adam)

2018-09-12 10:25:23 UTC MAIN commitmail json YAML

py-jsbeautifier: updated to 1.8.6

v1.8.6
Beautifier has moved to https://beautifier.io

Closed Issues
JS beautify break the angular compile
base64 string is broken with v1.8.4
Bookmarklet becomes totally useless
HTTPS
Beautify breaks when js starts with space followed by multi-line comment

v1.8.4
Broader adoption of 1.8.x revealed a few more high priority fixes

Closed Issues
Multiple newlines added between empty textarea and "unformatted" inline elements
unindent_chained_methods broken

v1.8.3
Closed Issues
Missing Bower Assets
Javascript ternary breaked with await
Object property indented after await
Handlebars formatting problems
beautify.js doesn't have indent_level option

v1.8.1
Closed Issues
Why npm is a dependency?
indent_inner_html not working in v1.8.0

(adam)

2018-09-12 05:16:43 UTC pkgsrc-2018Q2 commitmail json YAML

2018-09-12 05:06:56 UTC pkgsrc-2018Q2 commitmail json YAML

Pullup ticket #5822 - requested by bsiegert
security/sleuthkit: security fix

Revisions pulled up:
- security/sleuthkit/Makefile                                  1.11
- security/sleuthkit/distinfo                                  1.6
- security/sleuthkit/patches/patch-tsk_fs_iso9660__dent.c      1.1

-------------------------------------------------------------------
  Module Name:    pkgsrc
  Committed By:  he
  Date:          Thu Aug 23 07:47:34 UTC 2018

  Modified Files:
          pkgsrc/security/sleuthkit: Makefile distinfo
  Added Files:
          pkgsrc/security/sleuthkit/patches: patch-tsk_fs_iso9660__dent.c

  Log Message:
  Add a fix for CVE-2017-13755, pointed to from
  https://github.com/sleuthkit/sleuthkit/issues/913
  Bump PKGREVISION.

  To generate a diff of this commit:
  cvs rdiff -u -r1.10 -r1.11 pkgsrc/security/sleuthkit/Makefile
  cvs rdiff -u -r1.5 -r1.6 pkgsrc/security/sleuthkit/distinfo
  cvs rdiff -u -r0 -r1.1 \
      pkgsrc/security/sleuthkit/patches/patch-tsk_fs_iso9660__dent.c

(spz)

2018-09-11 20:04:13 UTC MAIN commitmail json YAML

doc: Updated net/go-grpc to 1.15.0

(minskim)

2018-09-11 20:03:27 UTC MAIN commitmail json YAML

net/go-grpc: Update to 1.15.0

Recent new features:

- client: Add ClientConn.ResetConnectBackoff to force reconnections on
  demand
- channelz: stage 4 - add security and socket option info with
  appengine build tags
- ClientConn: add Target() returning target string
- balancer: add rpc method to PickOptions
- transport: set and respect HTTP/2 SETTINGS_MAX_HEADER_LIST_SIZE
- client: Implement gRFC A6: configurable client-side retry support
- grpc: update dial/server buffer options to support a "disable"
  setting
- credentials/alts: Add AuthInfoFromContext utility API
- status: Introduce FromContextError convenience function
- server: export ServerTransportStreamFromContext for unary
  interceptors to control headers/trailers
- metadata: Add Get, Set, and Append methods to metadata.MD
- server: add grpc.Method function for extracting method from context
- grpclb: cache SubConns for 10 seconds after it is removed from the
  backendlist
- clientconn: add support for unix network in DialContext
- client: introduce WithDisableServiceConfig DialOption
- stickiness: add stickiness support
- channelz: provide channel level info for live program network issue
  diagnosis/debugging

(minskim)

2018-09-11 19:58:30 UTC MAIN commitmail json YAML

doc: Added misc/go-genproto-googleapis-rpc version 20180901

(minskim)

2018-09-11 19:58:12 UTC MAIN commitmail json YAML

doc: Updated misc/go-genproto to 20180901

(minskim)

2018-09-11 19:57:37 UTC MAIN commitmail json YAML

misc/go-genproto: Update to 20180901

Notable changes:
- Add response field to HttpRule
- Sync with googleapis and protobuf
- Add cloud tasks protos
- Add cloudowners

go-genproto-googleapis-rpc has been separated from google-genproto to
break a dependency cycle; go-genproto depends on go-grpc, and go-grpc
depends go-genproto-googleapis-rpc.

(minskim)

2018-09-11 18:27:25 UTC MAIN commitmail json YAML

doc: Updated devel/go-protobuf to 1.2.0

(minskim)

2018-09-11 18:27:08 UTC MAIN commitmail json YAML

devel/go-protobuf: Update to 1.2.0

Notable changes:

- add DiscardUnknown function
- The serialization logic (for both Marshal and Unmarshal) has been
  optimized. Testing inside Google demonstrate that the new
  implementation is about 1.3x to 2.1x faster.
- Unknown fields in proto3 are now preserved.
- JSON marshal and unmarshal now check for proto2 required field.
- GetExtension returns the raw bytes if the ExtensionDesc does not
  have type information.
- Invalid UTF-8 in string types are rejected during marshal and
  unmarshal.
- Fields of bad wire types are treated as unknown fields instead of an
  error.
- The protoc-gen-go generator supports the paths=source_relative
  option.
- Unknown fields in map entries are now ignored instead of causing an
  unmarshal error.
- The "import public" feature is now implemented using Go type
  aliases.
- jsonpb.Unmarshal correctly handles escaped strings for some of the
  well-known types
- jsonpb.Unmarshal correctly returns an error when trying to marshal a
  scalar enum into repeated enums.
- jsonpb.Unmarshal correctly handles string versions of numeric
  primitives
- jsonpb.Unmarshal correctly handles enum values in maps
- fixes a performance regression where nested maps led to quadratic
  behavior
- reverts strict UTF-8 validation for proto2 string fields
- makes UTF-8 validation errors for proto3 string fields non-fatal

(minskim)

2018-09-11 17:45:17 UTC MAIN commitmail json YAML

doc: Added devel/go-logrus version 1.0.6

(minskim)

2018-09-11 17:45:10 UTC MAIN commitmail json YAML

devel/Makefile: Add go-logrus

(minskim)

2018-09-11 17:45:06 UTC MAIN commitmail json YAML

devel/go-logrus: Import version 1.0.6

Logrus is a structured logger for Go (golang), completely API
compatible with the standard library logger.

(minskim)

2018-09-11 17:26:52 UTC MAIN commitmail json YAML

geos: Update comments about depending packages

(gdt)

2018-09-11 17:26:13 UTC MAIN commitmail json YAML

postgresql-postgis2: revbump due to geos/libtool

(gdt)

2018-09-11 17:23:22 UTC MAIN commitmail json YAML

py-gdal: revbump due to geos update/libtool

(gdt)

2018-09-11 16:39:42 UTC MAIN commitmail json YAML

2018-09-11 16:15:39 UTC MAIN commitmail json YAML

gdal-lib: revbump for geos C++ ABI change

together with libtool causing gdal's installed library to directly
depend on the C++ ABI.

CVS: ----------------------------------------------------------------------
CVS: CVSROOT  cvs.NetBSD.org:/cvsroot
CVS: please use "PR category/123" to have the commitmsg appended to PR 123

(gdt)

2018-09-11 16:13:37 UTC MAIN commitmail json YAML

doc: Updated geography/geos to 3.7.0

(gdt)

2018-09-11 16:13:29 UTC MAIN commitmail json YAML

Update to 3.7.0:

pkgsrc changes: revise comments about geos C vs C++ library linking in
light of unexpected libtool behavior (which defeats geos's scheme)

Upstream NEWS:

3.7.0 changes
2018-09-10
- New things:
  - CAPI: GEOSDistanceIndexed (#795, Dan Baston)
  - CAPI: GEOSCoordSeq_isCCW (#870, Dan Baston)
  - CAPI: GEOSGeom_getXMin, GEOSGeom_getXMax,
          GEOSGeom_getYMin, GEOSGeom_getYMax (#871, Dan Baston)
  - CAPI: GEOSFrechetDistance (#797, Shinichi SUGIYAMA)
  - CAPI: GEOSReverse (#872, Dan Baston)
  - CAPI: GEOSGeomGetZ (#581, J Smith)

- Improvements
  - Interruptible snap operation (Paul Ramsey)
  - Numerous packaging, doc, and build changes
    (Debian group: Bas Couwenberg, Francesco Paolo Lovergine)
    (NetBSD: Greg Troxel)
  - Allow static library with C API for CMake builds (#878, Dakota Hawkins)

- C++ API changes:
  - Require defining USE_UNSTABLE_GEOS_CPP_API for use without
    warnings.
  - Make C++11 required (Mateusz Loskot)
  - Use C++11 unique_ptr, nullptr, and override constructs
    (Mateusz Loskot)
  - C++11 standard delete on noncopyable
    (#851, Vicky Vergara)
  - Fix CommonBits::getBit to correctly handle i >= 32
    (#834, Kurt Schwehr)

(gdt)

2018-09-11 15:55:34 UTC MAIN commitmail json YAML

doc: Added devel/go-godirwalk version 1.7.3

(minskim)

2018-09-11 15:55:28 UTC MAIN commitmail json YAML

devel/Makefile: Add go-godirwalk

(minskim)

2018-09-11 15:55:24 UTC MAIN commitmail json YAML

devel/go-godirwalk: Import version 1.7.3

godirwalk is a library for traversing a directory tree on a file
system. It is faster, easier to use, and more flexible than
filepath.Walk.

(minskim)

2018-09-11 15:46:02 UTC MAIN commitmail json YAML

doc: Updated multimedia/adobe-flash-player to 31.0.0.108

(tsutsui)

2018-09-11 15:45:43 UTC MAIN commitmail json YAML

adobe-flash-player: update to 31.0.0.108.

Upstream announcement:

https://helpx.adobe.com/security/products/flash-player/apsb18-31.html

Adobe Security Bulletin
Security updates available for Flash Player | APSB18-31

Summary

  Adobe has released security updates for Adobe Flash Player for Windows,
  macOS, Linux and Chrome OS. These updates address an important
  vulnerability in Adobe Flash Player 30.0.0.154 and earlier versions.
  Successful exploitation could lead to information disclosure.

(tsutsui)

2018-09-11 14:25:50 UTC MAIN commitmail json YAML

doc: Updated lang/nodejs8 to 8.12.0

(fhajny)

2018-09-11 14:25:41 UTC MAIN commitmail json YAML

lang/nodejs8: Update to 8.12.0.

- async_hooks:
  - rename PromiseWrap.parentId
  - remove runtime deprecation
  - deprecate unsafe emit{Before,After}
- cluster:
  - add cwd to cluster.settings
  - support windowsHide option for workers
- crypto:
  - allow passing null as IV unless required
- deps:
  - upgrade npm to 6.4.1
  - upgrade libuv to 1.19.2
  - Upgrade node-inspect to 1.11.5
- fs,net:
  - support as and as+ flags in stringToFlags()
  - emit 'ready' for fs streams and sockets
- http, http2:
  - add options to http.createServer()
  - add 103 Early Hints status code
  - add http fallback options to .createServer
- n-api:
  - take n-api out of experimental
- perf_hooks:
  - add warning when too many entries in the timeline
- src:
  - add public API for managing NodePlatform
  - allow --perf-(basic-)?prof in NODE\_OPTIONS
  - node internals' postmortem metadata
- tls:
  - expose Finished messages in TLSSocket
- trace_events:
  - add file pattern cli option
- util:
  - implement util.getSystemErrorName()

(fhajny)

2018-09-11 11:43:33 UTC MAIN commitmail json YAML

wireshark: fix PLIST for Darwin

(adam)

2018-09-11 09:57:58 UTC MAIN commitmail json YAML

doc: Adjust lynx-2.8.8.2nb9 entry

`Updated' entries only need ${PKGVERSION} (not ${PKGNAME}). Spotted via pkglint.

(leot)

2018-09-11 09:44:04 UTC MAIN commitmail json YAML

doc: Updated security/stunnel to 5.49

(schmonz)

2018-09-11 09:43:41 UTC MAIN commitmail json YAML

Update to 5.49. From the changelog:

* New features
  - Performance optimizations.
  - Logging of negotiated or resumed TLS session IDs (thx
    to ANSSI - National Cybersecurity Agency of France).
  - Merged Debian 10-enabled.patch and 11-killproc.patch
    (thx to Peter Pentchev).

* Bugfixes
  - Fixed a crash in the session persistence implementation.
  - Fixed syslog identifier after configuration file reload.
  - Fixed non-interactive "make check" invocations.
  - Fixed reloading syslog configuration.
  - stunnel.pem created with SHA-256 instead of SHA-1.
  - SHA-256 "make check" certificates.

(schmonz)

2018-09-11 07:52:15 UTC MAIN commitmail json YAML

Updated www/py-django-countries, www/py-django-tastypie

(adam)

2018-09-11 07:51:47 UTC MAIN commitmail json YAML

py-django-tastypie: updated to 0.14.2

v0.14.2:
Added support for Django 2.1; minor bugs and regressions fixed.
Drops support for Django 1.8 LTS.

(adam)

2018-09-11 07:49:10 UTC MAIN commitmail json YAML

py-django-countries: updated to 5.3.2

5.3.2:
Tests for Django 2.1 and Django Rest Framework 3.8.

(adam)

2018-09-11 07:16:50 UTC MAIN commitmail json YAML

Updated textproc/py-lxml, devel/py-dulwich

(adam)

2018-09-11 07:16:28 UTC MAIN commitmail json YAML

py-dulwich: updated 0.19.6

0.19.6:
BUG FIXES
* Fix support for custom transport arguments in dulwich.porcelain.clone.
* Fix compatibility with Python 3.8
* Fix some corner cases in path_to_tree_path.
* Support paths as bytestrings in various places in dulwich.index

(adam)

2018-09-11 07:13:45 UTC MAIN commitmail json YAML

py-lxml: updated to 4.2.5

4.2.5:
Bugs fixed
Javascript URLs that used URL escaping were not removed by the HTML cleaner.

(adam)

2018-09-11 06:17:09 UTC pkgsrc-2018Q2 commitmail json YAML

pullups 5821 5823 5824 5825 5826

(spz)

2018-09-11 00:30:52 UTC MAIN commitmail json YAML

doc: Added sysutils/goreman version 0.1.1

(minskim)

2018-09-11 00:30:46 UTC MAIN commitmail json YAML

sysutils/Makefile: Add goreman

(minskim)

2018-09-11 00:30:42 UTC MAIN commitmail json YAML

sysutils/goreman: Import version 0.1.1

Clone of foreman written in the Go programming language.

(minskim)

2018-09-11 00:08:46 UTC MAIN commitmail json YAML

devel/go-godotenv: Add buildlink3.mk

(minskim)

2018-09-11 00:08:06 UTC MAIN commitmail json YAML

devel/go-colortext: Add buildlink3.mk

(minskim)

2018-09-10 23:54:41 UTC MAIN commitmail json YAML

doc: Added devel/go-godotenv version 1.2.0

(minskim)

2018-09-10 23:54:35 UTC MAIN commitmail json YAML

devel/Makefile: Add go-godotenv

(minskim)

2018-09-10 23:54:31 UTC MAIN commitmail json YAML

devel/go-godotenv: Import version 1.2.0

A Go port of the Ruby dotenv project, which loads env vars from a .env
file. It can be used as a library (for loading in env for your own
daemons etc) or as a bin command.

(minskim)

2018-09-10 23:49:04 UTC MAIN commitmail json YAML

doc: Added devel/go-colortext version 1.0.0

(minskim)

2018-09-10 23:48:58 UTC MAIN commitmail json YAML

devel/Makefile: Add go-colortext

(minskim)

2018-09-10 23:48:54 UTC MAIN commitmail json YAML

devel/go-colortext: Import version 1.0.0

This is a package to change the color of the text and background in
the console, working both under Windows and other systems.

(minskim)

2018-09-10 22:44:08 UTC MAIN commitmail json YAML

doc: Added devel/go-appengine version 1.1.0

(minskim)

2018-09-10 22:44:02 UTC MAIN commitmail json YAML

devel/Makefile: Add go-appengine

(minskim)

2018-09-10 22:43:58 UTC MAIN commitmail json YAML

2018-09-10 20:57:16 UTC MAIN commitmail json YAML

geography/libmaxminddb: Add buildlink3.mk

(fhajny)

2018-09-10 20:55:32 UTC MAIN commitmail json YAML

doc: Added geography/libmaxminddb version 1.3.2

(fhajny)

2018-09-10 20:55:20 UTC MAIN commitmail json YAML

geography/libmaxminddb: Import libmaxminddb 1.3.2.

The libmaxminddb library provides a C library for reading MaxMind
DB files, including the GeoIP2 databases from MaxMind.

(fhajny)

2018-09-10 20:43:33 UTC MAIN commitmail json YAML

doc: Updated fonts/fntsample to 5.2

(fhajny)

2018-09-10 20:43:24 UTC MAIN commitmail json YAML

fonts/fntsample: Update to 5.2.

Changes in version 5.2
- Fix handling of non-ASCII characters in pdfoutline

Changes in version 5.1
- Make writing outlines with Cairo actually work
- Fix typos

Changes in version 5.0
- Add command line flag that allows to use pango for text layout
- Add possiblility to create PDF outline directly using cairo
- Switch to CMake as build system
- Add command line flag for loading Unicode blocks file during runtime.

(fhajny)

2018-09-10 20:18:45 UTC pkgsrc-2018Q2 commitmail json YAML

Pullup ticket #5826 - requested by taca
shells/zsh: security update

Revisions pulled up:
- shells/zsh/Makefile                                          1.85
- shells/zsh/PLIST                                              1.39
- shells/zsh/distinfo                                          1.63
- shells/zsh/patches/patch-configure.ac                        1.6

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: wen
  Date: Sun Sep  9 00:46:52 UTC 2018

  Modified Files:
  pkgsrc/shells/zsh: Makefile PLIST distinfo
  pkgsrc/shells/zsh/patches: patch-configure.ac

  Log Message:
  Update to 5.6

  Upstream changes:
  Changes from 5.5.1-test-2 to 5.6
  --------------------------------

  CVE-2018-0502: Data from the second line of a #! script file might be passed to
  execve().  For example, in the following situation -
  .
      printf '#!foo\nbar' > baz
      ./baz
  .
  the shell might take "bar" rather than "foo" for the argv[0] to be passed to
  execve().  [ Reported by Anthony Sottile and Buck Evan. ]

  CVE-2018-13259: A shebang line longer than 64 characters would be truncated.
  For example, in the following situation:
  .
      ( printf '#!'; repeat 64 printf 'x'; printf 'y' ) > foo
      ./foo
  .
  the shell might execute x...x (64 repetitions) rather than x...xy (64 x's,
  one y).  [ Reported by Daniel Shahaf. ]

  Changes from 5.5.1 to 5.5.1-test-2
  ----------------------------------

  Non-stop IEEE 754 arithmetic support - Inf and NaN are now returned
  from floating point operations where errors were printed before.
  Inf and NaN are also recognised in arithmetic expressions.

  In shell patterns, [[:blank:]] now honours the locale instead of
  matching exclusively on space and tab, like for the other POSIX
  character classes or for extended regular expressions.

  Nanosecond precision on file times is supported in the module
  zsh/stat.

  To generate a diff of this commit:
  cvs rdiff -u -r1.84 -r1.85 pkgsrc/shells/zsh/Makefile
  cvs rdiff -u -r1.38 -r1.39 pkgsrc/shells/zsh/PLIST
  cvs rdiff -u -r1.62 -r1.63 pkgsrc/shells/zsh/distinfo
  cvs rdiff -u -r1.5 -r1.6 pkgsrc/shells/zsh/patches/patch-configure.ac

(spz)

2018-09-10 19:44:32 UTC pkgsrc-2018Q2 commitmail json YAML

Pullup ticket #5825 - requested by wiz
www/curl: security update

Revisions pulled up:
- www/curl/Makefile                                            1.201
- www/curl/distinfo                                            1.146
- www/curl/patches/patch-src_tool__cb__hdr.c                    deleted

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: wiz
  Date: Wed Sep  5 06:49:26 UTC 2018

  Modified Files:
  pkgsrc/www/curl: Makefile distinfo
  Removed Files:
  pkgsrc/www/curl/patches: patch-src_tool__cb__hdr.c

  Log Message:
  curl: update to 7.61.1.

  This release includes the following bugfixes:

    o security advisory (CVE-2018-14618): NTLM password overflow via integer overflow [73]
    o CURLINFO_SIZE_UPLOAD: fix missing counter update [46]
    o CURLOPT_ACCEPT_ENCODING.3: list them comma-separated
    o CURLOPT_SSL_CTX_FUNCTION.3: might cause accidental connection reuse [72]
    o Curl_getoff_all_pipelines: improved for multiplexed [3]
    o DEPRECATE: remove release date from 7.62.0
    o HTTP: Don't attempt to needlessly decompress redirect body [30]
    o INTERNALS: require GnuTLS >= 2.11.3 [62]
    o README.md: add LGTM.com code quality grade for C/C++ [42]
    o SSLCERTS: improve the openssl command line
    o Silence GCC 8 cast-function-type warnings [47]
    o ares: check for NULL in completed-callback [3]
    o asyn-thread: Remove unused macro [40]
    o auth: only pick CURLAUTH_BEARER if we *have* a Bearer token [15]
    o auth: pick Bearer authentication whenever a token is available [15]
    o cmake: CMake config files are defining CURL_STATICLIB for static builds [54]
    o cmake: Respect BUILD_SHARED_LIBS [35]
    o cmake: Update scripts to use consistent style [9]
    o cmake: bumped minimum version to 3.4 [34]
    o cmake: link curl to the OpenSSL targets instead of lib absolute paths [34]
    o configure: conditionally enable pedantic-errors [64]
    o configure: fix for -lpthread detection with OpenSSL and pkg-config [38]
    o conn: remove the boolean 'inuse' field [3]
    o content_encoding: accept up to 4 unknown trailer bytes after raw deflate data [5]
    o cookie tests: treat files as text
    o cookies: support creation-time attribute for cookies [75]
    o curl: Fix segfault when -H @headerfile is empty [23]
    o curl: add http code 408 to transient list for --retry [78]
    o curl: fix time-of-check, time-of-use race in dir creation [71]
    o curl: use Content-Disposition before the "URL end" for -OJ [29]
    o curl: warn the user if a given file name looks like an option [56]
    o curl_threads: silence bad-function-cast warning [69]
    o darwinssl: add support for ALPN negotiation [7]
    o docs/CURLOPT_URL: fix indentation [20]
    o docs/CURLOPT_WRITEFUNCTION: size is always 1 [19]
    o docs/SECURITY-PROCESS: mention bounty, drop pre-notify
    o docs/examples: add hiperfifo example using linux epoll/timerfd [21]
    o docs: add disallow-username-in-url.d and haproxy-protocol.d to dist [50]
    o docs: clarify NO_PROXY env variable functionality [70]
    o docs: improved the manual pages of some callbacks [48]
    o docs: mention NULL is fine input to several functions [43]
    o formdata: Remove unused macro HTTPPOST_CONTENTTYPE_DEFAULT [40]
    o gopher: Do not translate `?' to `%09' [67]
    o header output: switch off all styles, not just unbold [8]
    o hostip: fix unused variable warning
    o http2: Use correct format identifier for stream_id [77]
    o http2: abort the send_callback if not setup yet [63]
    o http2: avoid set_stream_user_data() before stream is assigned [61]
    o http2: check nghttp2_session_set_stream_user_data return code [55]
    o http2: clear the drain counter in Curl_http2_done [27]
    o http2: make sure to send after RST_STREAM [58]
    o http2: separate easy handle from connections better [12]
    o http: fix for tiny "HTTP/0.9" response [51]
    o http_proxy: Remove unused macro SELECT_TIMEOUT [40]
    o lib/Makefile: only do symbol hiding if told to [32]
    o lib1502: fix memory leak in torture test [44]
    o lib1522: fix curl_easy_setopt argument type
    o libcurl-thread.3: expand somewhat on the NO_SIGNAL motivation [66]
    o mime: check Curl_rand_hex's return code [22]
    o multi: always do the COMPLETED procedure/state [3]
    o openssl: assume engine support in 1.0.0 or later [2]
    o openssl: fix debug messages [39]
    o projects: Improve Windows perl detection in batch scripts [49]
    o retry: return error if rewind was necessary but didn't happen [28]
    o reuse_conn(): memory leak - free old_conn->options [17]
    o schannel: client certificate store opening fix [68]
    o schannel: enable CALG_TLS1PRF for w32api >= 5.1
    o schannel: fix MinGW compile break [1]
    o sftp: don't send post-qoute sequence when retrying a connection [79]
    o smb: fix memory leak on early failure [26]
    o smb: fix memory-leak in URL parse error path [4]
    o smb_getsock: always wait for write socket too [11]
    o ssh-libssh: fix infinite connect loop on invalid private key [53]
    o ssh-libssh: reduce excessive verbose output about pubkey auth [53]
    o ssh-libssh: use FALLTHROUGH to silence gcc8 [76]
    o ssl: set engine implicitly when a PKCS#11 URI is provided [36]
    o sws: handle EINTR when calling select() [24]
    o system_win32: fix version checking [16]
    o telnet: Remove unused macros TELOPTS and TELCMDS [40]
    o test1143: disable MSYS2's POSIX path conversion [10]
    o test1148: disable if decimal separator is not point [65]
    o test1307: (fnmatch testing) disabled [31]
    o test1422: add required file feature [6]
    o test1531: Add timeout [41]
    o test1540: Remove unused macro TEST_HANG_TIMEOUT [40]
    o test214: disable MSYS2's POSIX path conversion for URL
    o test320: treat curl320.out file as binary [14]
    o tests/http_pipe.py: Use /usr/bin/env to find python
    o tests: Don't use Windows path %PWD for SSH tests [74]
    o tests: fixes for Windows line endlings [13]
    o tool_operate: Fix setting proxy TLS 1.3 ciphers
    o travis: build darwinssl on macos 10.12 to fix linker errors [33]
    o travis: execute "set -eo pipefail" for coverage build [45]
    o travis: run a 'make checksrc' too [25]
    o travis: update to GCC-8 [52]
    o travis: verify that man pages can be regenerated [50]
    o upload: allocate upload buffer on-demand [60]
    o upload: change default UPLOAD_BUFSIZE to 64KB [60]
    o urldata: remove unused pipe_broke struct field [57]
    o vtls: reinstantiate engine on duplicated handles [59]
    o windows: implement send buffer tuning [37]
    o wolfSSL/CyaSSL: Fix memory leak in Curl_cyassl_random [18]

  To generate a diff of this commit:
  cvs rdiff -u -r1.200 -r1.201 pkgsrc/www/curl/Makefile
  cvs rdiff -u -r1.145 -r1.146 pkgsrc/www/curl/distinfo
  cvs rdiff -u -r1.1 -r0 pkgsrc/www/curl/patches/patch-src_tool__cb__hdr.c

(spz)

2018-09-10 19:32:13 UTC pkgsrc-2018Q2 commitmail json YAML

Pullup ticket #5824 - requested by bsiegert
net/wireshark: security update

Revisions pulled up:
- net/wireshark/Makefile                                        1.194,1.196
- net/wireshark/distinfo                                        1.113-1.114
- net/wireshark/options.mk                                      1.20
- net/wireshark/patches/patch-ui_qt_packet__format__group__box.cpp deleted
- net/wireshark/patches/patch-ui_qt_time__shift__dialog.cpp    deleted
- net/wireshark/patches/patch-ui_qt_wireless__frame.cpp        deleted

-------------------------------------------------------------------
  Module Name:    pkgsrc
  Committed By:  wiz
  Date:          Thu Aug 16 13:20:32 UTC 2018

  Modified Files:
          pkgsrc/net/wireshark: Makefile distinfo
  Removed Files:
          pkgsrc/net/wireshark/patches:
              patch-ui_qt_packet__format__group__box.cpp
              patch-ui_qt_time__shift__dialog.cpp patch-ui_qt_wireless__frame.cpp

  Log Message:
  wireshark: update to 2.6.2.

  Wireshark 2.6.2 Release Notes

    What’s New

    Bug Fixes

      The following vulnerabilities have been fixed:

        • wnpa-sec-2018-34[1]

        • BGP dissector large loop. Bug 13741[2]. CVE-2018-14342[3].

        • wnpa-sec-2018-35[4]

        • ISMP dissector crash. Bug 14672[5]. CVE-2018-14344[6].

        • wnpa-sec-2018-36[7]

        • Multiple dissectors could crash. Bug 14675[8]. CVE-2018-14340[9].

        • wnpa-sec-2018-37[10]

        • ASN.1 BER dissector crash. Bug 14682[11]. CVE-2018-14343[12].

        • wnpa-sec-2018-38[13]

        • MMSE dissector infinite loop. Bug 14738[14]. CVE-2018-14339[15].

        • wnpa-sec-2018-39[16]

        • DICOM dissector crash. Bug 14742[17]. CVE-2018-14341[18].

        • wnpa-sec-2018-40[19]

        • Bazaar dissector infinite loop. Bug 14841[20].
          CVE-2018-14368[21].

        • wnpa-sec-2018-41[22]

        • HTTP2 dissector crash. Bug 14869[23]. CVE-2018-14369[24].

        • wnpa-sec-2018-42[25]

        • CoAP dissector crash. Bug 14966[26]. CVE-2018-14367[27].

      The following bugs have been fixed:

        • ISMP.EDP "Tuples" dissected incorrectly. Bug 4943[28].

        • Wireshark - Race issue when switching between files using
          Wireshark’s "Files in Set" dialog. Bug 10870[29].

        • Sorting on "Source port" or "Destination port" column sorts
          alphabetically, not numerically. Bug 11460[30].

        • Wireshark crashes when changing profiles. Bug 11648[31].

        • Crash when starting capture while saving capture file or
          rescanning file after display filter change. Bug 13594[32].

        • Crash when switching to TRANSUM enabled profile. Bug 13697[33].

        • TCP retransmission with additional payload leads to incorrect
          bytes and length in stream. Bug 13700[34].

        • Wireshark crashes with single quote string display filter. Bug
          14084[35].

        • randpkt can write packets that libwiretap can’t read. Bug
          14107[36].

        • Wireshark crashes when loading new file before previous load has
          finished. Bug 14351[37].

        • Valid packet produces Malformed Packet: OpcUa. Bug 14465[38].

        • Error received from dissect_wccp2_hash_assignment_info(). Bug
          14573[39].

        • CRC checker wrong for FPP. Bug 14610[40].

        • Cross-build broken due to make-dissectors and make-taps. Bug
          14622[41].

        • Extraction of SMB file results in wrong size. Bug 14662[42].

        • 6LoWPAN dissector merges fragments from different sources. Bug
          14700[43].

        • IP address to name resolution doesn’t work in TShark. Bug
          14711[44].

        • "Decode as" Modbus RTU over USB doesn’t work with 2.6.0 but with
          2.4.6. Bug 14717[45].

        • proto_tree_add_protocol_format might leak memory. Bug 14719[46].

        • tostring for NSTime objects in lua gives wrong results. Bug
          14720[47].

        • Media type "application/octet-stream" registered for both Thread
          and UASIP. Bug 14729[48].

        • Crash related to SCTP tap. Bug 14733[49].

        • Formatting of OSI area addresses/address prefixes goes past the
          end of the area address/address prefix. Bug 14744[50].

        • ICMPv6 Router Renumbering - Packet Dissector - malformed. Bug
          14755[51].

        • WiMAX HARQ MAP decoder segfaults when length is too short. Bug
          14780[52].

        • HTTP PUT request following a HEAD request is not correctly
          decoded. Bug 14793[53].

        • SYNC PDU type 3 miss the last PDU length. Bug 14823[54].

        • Reversed 128 bits service UUIDs when Bluetooth Low Energy
          advertisement data are dissected. Bug 14843[55].

        • Issues with Wireshark when the user doesn’t have permission to
          capture. Bug 14847[56].

        • Wrong description when LE Bluetooth Device Address type is
          dissected. Bug 14866[57].

        • LE Role advertisement type (0x1c) is not dissected properly
          according to the Bluetooth specification. Bug 14868[58].

        • Regression: Wireshark 2.6.0 and 2.6.1 are unable to read NetMon
          files which were readable by previous versions. Bug 14876[59].

        • Wireshark doesn’t properly display (deliberately) invalid 220
          responses from Postfix. Bug 14878[60].

        • Follow TCP Stream and click reassembled content moves you to
          incorrect current packet. Bug 14898[61].

        • Crash when changing profiles while loading a capture file. Bug
          14918[62].

        • Duplicate PDU during C Arrays Output Export. Bug 14933[63].

        • DCE/RPC not dissected when "reserved for use by implementations"
          flag bits set. Bug 14942[64].

        • Follow TCP Stream truncates output on missing (but ACKed)
          segments. Bug 14944[65].

        • There’s no option to include column headings when printing
          packets or exporting packet dissections with Qt Wireshark. Bug
          14945[66].

        • Qt: SCTP Graph Dialog: Abort when doing analysis. Bug 14971[67].

        • CMake is unable to find LUA libraries. Bug 14983[68].

    Updated Protocol Support

      6LoWPAN, ASN.1 BER, Bazaar, BGP, Bluetooth, Bluetooth HCI_CMD, CIGI,
      Cisco ttag, CoAP, Data, DCERPC, Diameter 3GPP, DICOM, DOCSIS, FPP,
      GSM A GM, GTPv2, HTTP, HTTP2, IAX2, ICMPv6, IEEE 1722, IEEE 802.11,
      IPv4, ISMP, LISP, MMSE, MTP3, MySQL, NFS, OpcUa, PPI GPS, Q.931,
      RNSAP, RPCoRDMA, S1AP, SCTP, SMB, SMTP, STUN, SYNC, T.30, TCP,
      TRANSUM, WAP, WCCP, Wi-SUN, WiMax HARQ Map Message, and WSP

    New and Updated Capture File Support

      Alcatel-Lucent Ascend and Microsoft Network Monitor

  To generate a diff of this commit:
  cvs rdiff -u -r1.193 -r1.194 pkgsrc/net/wireshark/Makefile
  cvs rdiff -u -r1.112 -r1.113 pkgsrc/net/wireshark/distinfo
  cvs rdiff -u -r1.1 -r0 \
      pkgsrc/net/wireshark/patches/patch-ui_qt_packet__format__group__box.cpp \
      pkgsrc/net/wireshark/patches/patch-ui_qt_time__shift__dialog.cpp \
      pkgsrc/net/wireshark/patches/patch-ui_qt_wireless__frame.cpp

-------------------------------------------------------------------
  Module Name:    pkgsrc
  Committed By:  wiz
  Date:          Sun Sep  2 21:49:06 UTC 2018

  Modified Files:
          pkgsrc/net/wireshark: Makefile distinfo options.mk

  Log Message:
  wireshark: update to 2.6.3.

  Fix some pkglint warnings while here.

  Wireshark 2.6.3 Release Notes

    Bug Fixes

      The following vulnerabilities have been fixed:

        • wnpa-sec-2018-44[1]

        • Bluetooth AVDTP dissector crash. Bug 14884[2]. CVE-2018-16058[3].

        • wnpa-sec-2018-45[4]

        • Bluetooth Attribute Protocol dissector crash. Bug 14994[5].
          CVE-2018-16056[6].

        • wnpa-sec-2018-46[7]

        • Radiotap dissector crash. Bug 15022[8]. CVE-2018-16057[9].

      The following bugs have been fixed:

        • Wireshark Hangs on startup initializing external capture plugins.
          Bug 14657[10].

        • Qt: SCTP Analyse Association Dialog: Segmentation fault when
          clicking twice the Filter Association button. Bug 14970[11].

        • Incorrect presentation of dissected data item (NETMASK) in ISAKMP
          dissector. Bug 14987[12].

        • Decode NFAPI: CONFIG.request Error. Bug 14988[13].

        • udpdump frame too long error. Bug 14989[14].

        • ISDN - LAPD dissector broken since version 2.5.0. Bug 15018[15].

        • ASTERIX Category 062 / 135 Altitude has wrong value. Bug
          15030[16].

        • Wireshark cannot decrypt SSL/TLS session if it was proxied over
          HTTP tunnel. Bug 15042[17].

        • TLS records in a HTTP tunnel are displayed as "Encrypted
          Handshake Message". Bug 15043[18].

        • BTATT Dissector: Temperature Measurement: Celsius and Fahrenheit
          swapped. Bug 15058[19].

        • Diameter AVP User Location Info, Mobile Network Code decoded not
          correctly. Bug 15068[20].

        • Heartbeat message "Info" displayed without comma separator. Bug
          15079[21].

    Updated Protocol Support

      ASTERIX, Bluetooth, Bluetooth ATT, Bluetooth AVDTP, DHCP, DTLS,
      E.212, FP, GSM A RR, HTTP, HTTP2, IEEE 802.11, ISAKMP, ISDN, K12,
      NFAPI, Nordic BLE, PFCP, Radiotap, SSL, Steam IHS Discovery, and TLS
      1.3

    New and Updated Capture File Support

      pcapng

    New and Updated Capture Interfaces support

      ciscodump, udpdump

  To generate a diff of this commit:
  cvs rdiff -u -r1.195 -r1.196 pkgsrc/net/wireshark/Makefile
  cvs rdiff -u -r1.113 -r1.114 pkgsrc/net/wireshark/distinfo
  cvs rdiff -u -r1.19 -r1.20 pkgsrc/net/wireshark/options.mk

(spz)

2018-09-10 15:41:33 UTC MAIN commitmail json YAML

2018-09-10 15:22:53 UTC MAIN commitmail json YAML

doc: Updated databases/ruby-sequel to 5.12.0

(taca)

2018-09-10 15:22:27 UTC MAIN commitmail json YAML

databases/ruby-sequel: update to 5.12.0

=== 5.12.0 (2018-08-31)

* Make constraint_validations extension respect Database#constraint_validations_table setting (jeremyevans)

* Make Sequel.extension load files from gems (jeremyevans)

* Map clob prepared statement argument type to OCI8::CLOB in the oracle adapter (pipistrellka) (#1534)

* Make Model.load_cache public in the static_cache plugin (AlexWayfer) (#1533)

* Enable support for NOWAIT on MariaDB 10.3+ (jeremyevans)

* Enable support for INTERSECT and EXCEPT on MariaDB 10.3+ (jeremyevans)

* Make tactical_eager_loading plugin handle automatic eager loading for associated objects created by eager_graph (jeremyevans)

* Cache eager_graph loader to speed up subsequent loads from the same dataset (jeremyevans)

* Add caller_logging database extension to log callers before queries, useful during development (jeremyevans)

* Add Database#call_procedure in the postgres adapter for calling PostgreSQL 11+ procedures (jeremyevans)

* Add eager_graph_eager plugin for chaining eager association loads after eager_graph association loads (jeremyevans)

* Support using Dataset#eager_graph in eager load callback for associations using join tables (jeremyevans)

* Make Dataset#graph handle existing selections without determinable aliases by forcing a subselect (jeremyevans)

* Freeze prepared statement arguments before returning the prepared statement (jeremyevans)

* Refactor emulated prepared statement internals to use a placeholder literalizer (jeremyevans)

=== 5.11.0 (2018-08-01)

* Fix using the jdbc/sqlserver adapter on JRuby 9.2+ (jeremyevans)

* Fix dumping schema for numeric/decimal columns with default values, broken starting in 5.9.0 (jeremyevans)

* Recognize additional check constraint violations on certain versions of SQLite (jeremyevans)

* Use cached model instances for Model.first calls without an argument or with a single integer argument in the static_cache plugin (AlexWayfer) (#1529)

* Support ON CONFLICT clause for INSERT on SQLite 3.24+ (jeremyevans)

* Support Dataset#window for WINDOW clause on MySQL 8 and SQLAnywhere (jeremyevans)

* Enable window function support on SQLAnywhere (jeremyevans)

* Support using a hash as a window function :frame option value, with support for ROWS/RANGE/GROUPS, numeric offsets, and EXCLUDE (jeremyevans)

* Allow using set_column_default with a nil value to remove the default value for a column on MySQL when the column is NOT NULL (jeremyevans)

=== 5.10.0 (2018-07-01)

* Use input type casts when using the postgres adapter with pg 0.18+ to reduce string allocations for some primitive types used as prepared statement arguments (jeremyevans)

* Assume local time if database timezone not specified when handling BC timestamps on JRuby 9.2.0.0 in the pg_extended_date_support extension (jeremyevans)

* Fix parsing of timetz types in the jdbc/postgresql adapter (jeremyevans)

* Make SQLTime.parse respect SQLTime.date and Sequel.application_timezone (jeremyevans)

* Add :top as an option in the list plugin (celsworth) (#1526)

* Fix Model#{ancestors,descendants,self_and_siblings} in the tree plugin when custom parent/children association names are used (jeremyevans) (#1525)

* Treat read-only mode error as disconnect error on mysql and mysql2 adapters, for better behavior on AWS Aurora cluster (jeremyevans)

* Don't use cached placeholder literalizers for in Dataset#{first,where_all,where_each,where_single_value} if argument is empty array or hash (jeremyevans)

* Support :tablespace option when adding tables, indexes, and materialized views on PostgreSQL (jeremyevans)

* Support :include option for indexes on PostgreSQL 11+ (jeremyevans)

* Allow the use of IN/NOT IN operators with set returning functions for Sequel::Model datasets (jeremyevans)

* Make many_to_pg_array associations in the pg_array_associations plugin work on PostgreSQL 11 (jeremyevans)

* Only load strscan library in pg_array extension if it is needed (jeremyevans)

* Don't remove related many_to_one associations from cache when setting column value to existing value for model instances that have not been persisted (jeremyevans) (#1521)

* Support ruby 2.6+ endless ranges in the pg_range extension (jeremyevans)

* Support ruby 2.6+ endless ranges in filters, using just a >= operator for them (jeremyevans)

(taca)

2018-09-10 14:32:40 UTC MAIN commitmail json YAML

Note update of net/unbound to 1.8.0.

(he)

2018-09-10 14:31:48 UTC MAIN commitmail json YAML

Update unbound to version 1.8.0

Upstream changes:

Features
- unbound-control auth_zone_reload _zone_ option rereads the zonefile.
- unbound-control auth_zone_transfer _zone_ option starts the probe
  sequence for a master to transfer the zone from and transfers when
  a new zone version is available.
- num.queries.tls counter for queries over TLS.
- log port number with err_addr logs.
- dns64-ignore-aaaa: config option to list domain names for which the
  existing AAAA is ignored and dns64 processing is used on the A
  record.
- Fix #4112: Fix that unbound-anchor -f /etc/resolv.conf will not pass
  if DNSSEC is not enabled.  New option -R allows fallback from
  resolv.conf to direct queries.
- Note RFC8162 support.  SMIMEA record type can be read in by the
  zone record parser.
- Patches from Jim Hague (Sinodun) for EDNS KeepAlive.
- Add config tcp-idle-timeout (default 30s). This applies to
  client connections only; the timeout on TCP connections upstream
  is unaffected.
- Add edns-tcp-keepalive and edns-tcp-keepalive timeout options
  and implement option in client responses.
- Add delay parameter to streamtcp, -d secs.
  To be used when testing idle timeout.
- Expose if a query (or a subquery) was ratelimited (not src IP
  ratelimiting) to libunbound under 'ub_result.was_ratelimited'.
  This also introduces a change to 'ub_event_callback_type' in
  libunbound/unbound-event.h.
- Patch to implement tcp-connection-limit from Jim Hague (Sinodun).
  This limits the number of simultaneous TCP client connections
  from a nominated netblock.
- Fix #4142: unbound.service.in: improvements and fixes.
  Add unit dependency ordering (based on systemd-resolved).
  Add 'CAP_SYS_RESOURCE' to 'CapabilityBoundingSet' (fixes warnings
  about missing privileges during startup). Add 'AF_INET6' to
  'RestrictAddressFamilies' (without it IPV6 can't work). From
  Guido Shanahan.
- unbound-checkconf checks if modules exist and prints if they are
  not compiled in the name of the wrong module.
- Patch for stub-no-cache and forward-no-cache options that disable
  caching for the contents of that stub or forward, for when you
  want immediate changes visible, from Bjoern A. Zeeb.
- Upgraded crosscompile script to include libunbound DLL in the
  zipfile.
- Set libunbound to increase current, because the libunbound change
  to the event callback function signature.  That needs programs,
  that use it, to recompile against the new header definition.
- log-servfail: yes prints log lines that say why queries are
  returning SERVFAIL to clients.
- log-local-actions: yes option for unbound.conf that logs all the
  local zone actions, a patch from Saksham Manchanda (Secure64).
- #4146: num.query.subnet and num.query.subnet_cache counters.
- #4140: Expose repinfo (comm_reply) to the inplace_callbacks. This
  gives access to reply information for the client's communication
  point when the callback is called before the mesh state (modules).
  Changes to C and Python's inplace_callback signatures were also
  necessary.
- Set defaults to yes for a number of options to increase speed and
  resilience of the server.  The so-reuseport, harden-below-nxdomain,
  and minimal-responses options are enabled by default.  They used
  to be disabled by default, waiting to make sure they worked.  They
  are enabled by default now, and can be disabled explicitly by
  setting them to "no" in the unbound.conf config file.  The reuseport
  and minimal options increases speed of the server, and should be
  otherwise harmless.  The harden-below-nxdomain option works well
  together with the recently default enabled qname minimisation, this
  causes more fetches to use information from the cache.
- Added serve-expired-ttl and serve-expired-ttl-reset options.

Bug Fixes
- Windows example service.conf edited with more windows specific
  configuration.
- #4108: systemd reload hang fix.
- Fix usage printout for unbound-host, hostname has to be last
  argument on BSDs and Windows.
- Partial fix for permission denied on IPv6 address on FreeBSD.
- Fix that auth-zone master reply with current SOA serial does not
  stop scan of masters for an updated zone.
- Fix that auth-zone does not start the wait timer without checking
  if the wait timer has already been started.
- #4109: Fix that package config depends on python unconditionally.
- Patch, do not export python from pkg-config, from Petr Men邸鱈k.
- Fix checking for libhiredis printout in configure output.
- Fix typo on man page in ip-address description.
- Update libunbound/python/examples/dnssec_test.py example code to
  also set the 20326 trust anchor for the root in the example code.
- Better documentation for unblock-lan-zones and insecure-lan-zones
  config statements.
- Fix permission denied printed for auth zone probe random port nrs.
- Fix documentation ambiguity for tls-win-cert in tls-upstream and
  forward-tls-upstream docs.
- iana port update.
- Fix round robin for failed addresses with prefer-ip6: yes
- Note in documentation that the cert name match code needs
  OpenSSL 1.1.0 or later to be enabled.
- Fix to improve systemd socket activation code file descriptor
  assignment.
- Fix for 4126 that the #define for UNKNOWN_SERVER_NICENESS can be more
  easily changed to adjust default rtt assumptions.
- Fix #4127 unbound -h does not list -p help.
- Print error if SSL name verification configured but not available
  in the ssl library.
- Fix that ratelimit and ip-ratelimit are applied after reload of
  changed config file.
- Resize ratelimit and ip-ratelimit caches if changed on reload.
- Fix #4129 unbound-control error message with wrong cert permissions
  is too cryptic.
- Fix #4130: print text describing -dd and unbound-checkconf on
  config file read error at startup, the errors may have been moved
  away by the startup process.
- Fix #4131: for solaris, error YY_CURRENT_BUFFER undeclared.
- Fix use-systemd readiness signalling, only when use-systemd is yes
  and not in signal handler.
- Fix #4135: 64-bit Windows Installer Creates Entries Under The
  Wrong Registry Key, reported by Brian White.
- Fix man page, say that chroot is enabled by default.
- Sort out test runs when the build directory isn't the project
  root directory.
- Error if EDNS Keepalive received over UDP.
- Correct and expand manual page entries for keepalive and idle timeout.
- Implement progressive backoff of TCP idle/keepalive timeout.
- Fix 'make depend' to work when build dir is not project root.
- Fix #4139: Fix unbound-host leaks memory on ANY.
- Fix to remove systemd sockaddr function check, that is not
  always present.  Make socket activation more lenient.  But not
  different when socket activation is not used.
- Fix #4136: insufficiency from mismatch of FLEX capability between
  released tarball and build host.  Fix to unconditionally call
  destroy in daemon.c.
- Make capsforid fallback QNAME minimisation aware.
- document --enable-subnet in doc/README.
- Fix #4144: dns64 module caches wrong (negative) information.
- Fix that printout of error for cycle targets is a verbosity 4
  printout and does not wrongly print it is a memory error.
- Fix segfault in auth-zone read and reorder of RRSIGs.
- Fix contrib/fastrpz.patch.
- Fix warning on compile without threads.
- print servfail info to log as error.
- added more servfail printout statements, to the iterator.
- Fix classification for QTYPE=CNAME queries when QNAME minimisation is
  enabled.
- Fix only misc failure from log-servfail when val-log-level is not
  enabled.
- Fix lintflags for lint on FreeBSD.
- Fix that a local-zone with a local-zone-type that is transparent
  in a view with view-first, makes queries check for answers from the
  local-zones defined outside of views.

(he)

2018-09-10 13:47:44 UTC MAIN commitmail json YAML

doc: Added devel/xxhash version 0.6.5

(fhajny)

2018-09-10 13:47:31 UTC MAIN commitmail json YAML

devel/xxhash: Import xxhash 0.6.5.

xxHash is an Extremely fast Hash algorithm, running at RAM speed
limits. It successfully completes the SMHasher test suite which
evaluates collision, dispersion and randomness qualities of hash
functions.

(fhajny)

2018-09-10 13:34:16 UTC MAIN commitmail json YAML

Add upstream patch to address CVE-2018-1000222.
Restore the tiff option, so libtiff can be avoided.
Ok by adam@.

(kim)

2018-09-10 12:18:18 UTC MAIN commitmail json YAML

doc: Updated databases/py-cassandra-driver to 3.15.1

(fhajny)

2018-09-10 12:18:10 UTC MAIN commitmail json YAML

databases/py-cassandra-driver: Update to 3.15.1.

- C* 4.0 schema-parsing logic breaks running against DSE 6.0.X

(fhajny)

2018-09-10 12:15:23 UTC MAIN commitmail json YAML

doc: Updated net/py-lexicon to 2.7.2

(fhajny)

2018-09-10 12:15:14 UTC MAIN commitmail json YAML

net/py-lexicon: Update to 2.7.2.

2.7.2
- Update online cassette
- online api change: domain_id became simply domain name

2.7.1
- Remove route53 tests, boto recordings no longer work.
- Create a library unit test suite
- [Gehirn Web Service] fix 400 response on GET request
- Update setup.py adding cryptography to the setup.py file
- Use ImportError instead of subclass ModuleNotFoundError, which is
  supported only by python 3.6

(fhajny)

2018-09-10 12:12:34 UTC MAIN commitmail json YAML

2018-09-10 12:10:53 UTC MAIN commitmail json YAML

doc/guide: Reword CONFLICTS usage suggestions

Despite most CONFLICTS are automatically detected at package
installation time it is still a good idea to manually mark CONFLICTS
in order to fail as early as possible instead e.g. of failing at
package installation time after possibly installing several (maybe
not needed) dependencies.

Pointed out by discussion on pkgsrc-changes@ by <jperkin>:

<https://mail-index.NetBSD.org/pkgsrc-changes/2018/09/09/msg180626.html>

Last two paragraphs from <jperkin>, thanks!

Also discussed with <wiz>, thanks!

(leot)

2018-09-10 10:30:06 UTC MAIN commitmail json YAML

Parameterize loadable module extension. Should fix packaging on non-Darwin.

(schmonz)

2018-09-10 10:24:36 UTC MAIN commitmail json YAML

Updated devel/googletest, devel/msgpack

(adam)

2018-09-10 10:24:18 UTC MAIN commitmail json YAML

msgpack: updated to 3.1.1

version 3.1.1
Add force endian set functionality
Fix vrefbuffer memory management problem
Fix msvc specific problem
Update boost from 1.61.0 to 1.68.0
Fix msgpack_timestamp type mismatch bug

(adam)

2018-09-10 10:23:33 UTC MAIN commitmail json YAML

googletest: updatee to 1.8.1

v1.8.1:
1.8.1 Release reflects a current version of the project.
The 1.8.x is the last release supporting pre-C++11 compilers.
The 1.8.x will not accept any requests for any new features and any bugfix requests will only be accepted if proven "critical"

(adam)

2018-09-10 10:16:58 UTC MAIN commitmail json YAML

Set default malloc_options iff NetBSD. Other platforms that don't
support the same options may make noise about that, such as OpenBSD.
Suggested by joerg@.

(schmonz)

2018-09-10 09:08:07 UTC MAIN commitmail json YAML

doc: Updated mail/qmail-run to 20180910

(schmonz)

2018-09-10 09:07:50 UTC MAIN commitmail json YAML

Add scripts to wrap spamc and rspamc, suitable for use in .qmail files
with e.g. condtomaildir(1). Bump version.

(schmonz)

2018-09-10 08:34:06 UTC MAIN commitmail json YAML

wireshark: Readjust PLIST for ${PLIST.icons} entries

Readd ${PLIST.icons} as it was in net/wireshark/PLIST,-r1.36 in order to at
least fix wireshark when is built with `-qt5' option.

(leot)

2018-09-10 07:14:59 UTC pkgsrc-2018Q2 commitmail json YAML

Pullup ticket #5823 - requested by bsiegert
x11/libX11: security update

Revisions pulled up:
- x11/libX11/Makefile                                          1.46
- x11/libX11/PLIST                                              1.14
- x11/libX11/distinfo                                          1.28

-------------------------------------------------------------------
  Module Name:    pkgsrc
  Committed By:  wiz
  Date:          Tue Aug 21 19:29:48 UTC 2018

  Modified Files:
          pkgsrc/x11/libX11: Makefile PLIST distinfo

  Log Message:
  libX11: update to 1.6.6.

  Security fix release.

  Alan Coopersmith (6):
        Make Xkb{Get,Set}NamedIndicator spec & manpages match code
        Clarify state parameter to XkbSetNamedDeviceIndicator
        Improve table formatting in XkbChangeControls & XkbKeyNumGroups man pages
        If XGetImage fails to create image, don't dereference it to bounds check
        Use size_t for buffer sizes in SetHints.c
        Change fall through comment in lcDB.c to match gcc's requirements

  Arthur Huillet (1):
        _XDefaultError: set XlibDisplayIOError flag before calling exit

  Bhavi Dhingra (1):
        Fix possible memory leak in cmsProp.c:140

  Martin Natano (1):
        Don't rebuild ks_tables.h if nothing changed.

  Matthieu Herrb (2):
        Remove statement with no effect.
        libX11 1.6.6

  Michal Srb (1):
        Use flexible array member instead of fake size.

  Ryan C. Gordon (1):
        Valgrind fix for XStoreColor and XStoreColors.

  Samuel Thibault (1):
        XkbOpenDisplay.3: fix typo

  Tobias Stoeckmann (4):
        Validation of server response in XListHosts.
        Fixed off-by-one writes (CVE-2018-14599).
        Fixed out of boundary write (CVE-2018-14600).
        Fixed crash on invalid reply (CVE-2018-14598).

  walter harms (13):
        fix shadow warning
        _XIOError(dpy); will never return so remore dead
        remove argument check for free() adjust one inden
        fix shadow char_size
        fix more shadow warning
        no need to check argument for _XkbFree()
        remove stray extern
        no need to check args for Xfree()
        fix memleak in error path
        fix memleak in error path
        no need to check XFree arguments
        mark _XDefaultIOError as no_return
        Fixes: warning: variable 'req' set but not,used

  wharms (3):
        add _X_UNUSED to avoid unused variable warnings
        remove empty line
        silence gcc warning assignment discards 'const' qualifier from
  pointer target type

  To generate a diff of this commit:
  cvs rdiff -u -r1.45 -r1.46 pkgsrc/x11/libX11/Makefile
  cvs rdiff -u -r1.13 -r1.14 pkgsrc/x11/libX11/PLIST
  cvs rdiff -u -r1.27 -r1.28 pkgsrc/x11/libX11/distinfo

(spz)

2018-09-10 06:48:25 UTC pkgsrc-2018Q2 commitmail json YAML

Pullup ticket #5821 - requested by bsiegert
x11/libxkbcommon: security update

Revisions pulled up:
- x11/libxkbcommon/Makefile                                    1.21
- x11/libxkbcommon/distinfo                                    1.14

-------------------------------------------------------------------
  Module Name:    pkgsrc
  Committed By:  wiz
  Date:          Thu Aug 16 12:21:44 UTC 2018

  Modified Files:
          pkgsrc/x11/libxkbcommon: Makefile distinfo

  Log Message:
  libxkbcommon: update to 0.8.2.

  libxkbcommon 0.8.2 - 2018-08-05
  =========

  - Fix various problems found with fuzzing (see commit messages for
    more details):

      - Fix a few NULL-dereferences, out-of-bounds access and undefined behavior
        in the XKB text format parser.

  libxkbcommon 0.8.1 - 2018-08-03
  =========

  - Fix various problems found in the meson build (see commit messages for more
    details):

      - Fix compilation on Darwin.

      - Fix compilation of the x11 tests and demos when XCB is installed in a
        non-standard location.

      - Fix xkbcommon-x11.pc missing the Requires specification.

  - Fix various problems found with fuzzing and Coverity (see commit messages for
    more details):

      - Fix stack overflow in the XKB text format parser when evaluating boolean
        negation.

      - Fix NULL-dereferences in the XKB text format parser when some unsupported
        tokens appear (the tokens are still parsed for backward compatibility).

      - Fix NULL-dereference in the XKB text format parser when parsing an
        xkb_geometry section.

      - Fix an infinite loop in the Compose text format parser on some inputs.

      - Fix an invalid free() when using multiple keysyms.

  - Replace the Unicode characters for the leftanglebracket and rightanglebracket
    keysyms from the deprecated LEFT/RIGHT-POINTING ANGLE BRACKET to
    MATHEMATICAL LEFT/RIGHT ANGLE BRACKET.

  - Reject out-of-range Unicode codepoints in xkb_keysym_to_utf8 and
    xkb_keysym_to_utf32.

  To generate a diff of this commit:
  cvs rdiff -u -r1.20 -r1.21 pkgsrc/x11/libxkbcommon/Makefile
  cvs rdiff -u -r1.13 -r1.14 pkgsrc/x11/libxkbcommon/distinfo

(spz)

2018-09-10 01:04:42 UTC MAIN commitmail json YAML

lang/ghc7: fix typo in error message

(rillig)

2018-09-10 00:06:07 UTC MAIN commitmail json YAML

2018-09-09 21:52:07 UTC MAIN commitmail json YAML

doc: Updated graphics/gimp to 2.10.6nb2

(wiz)

2018-09-09 21:51:57 UTC MAIN commitmail json YAML

gimp: switch to lcms2.

Bump PKGREVISION.

(wiz)

2018-09-09 20:05:19 UTC MAIN commitmail json YAML

xlockmore{,-lite}: drop CONFLICTS.

This file is used by both xlockmore-lite and xlockmore, and results in
the package being considered conflicting with itself.

Reported by he in PR pkg/53586

(maya)

2018-09-09 17:48:08 UTC MAIN commitmail json YAML

doc: Updated editors/nano to 3.0

(wiedi)

2018-09-09 17:47:18 UTC MAIN commitmail json YAML

nano: update to 3.0

2018.09.09 - GNU nano 3.0 "Water Flowing Underground" speeds up the
            reading of a file by seventy percent, roughly doubles the
            speed of handling ASCII text, changes the way words at line
            boundaries are deleted, makes <Ctrl+Delete> wipe the next
            word and <Ctrl+Shift+Delete> the preceding word, binds M-Q
            to 'findprevious' by default (the Tabs-to-Spaces toggle is
            placed on M-O, and the More-Space toggle is fully removed),
            makes an external spell check undoable, shows the correct
            number of lines on the status bar when opening multiple
            files, removes the 'formatter' command, removes the
            'searchagain' bindable function (M-W is now bound to
            'findnext' by default), moves the No-Convert toggle to the
            Insert menu, removes the Backup and New-Buffer toggles from
            the main menu (they remain in the Write-Out and Insert
            menus, respectively), is more precise in what it accepts as
            a rebindable key name, ignores any presses of <Esc> before
            a valid command keystroke, recognizes some more escape
            sequences for modified editing-pad keys, does not hide
            rcfile error messages on a Linux console, renames the
            bindable functions 'copytext' to 'copy' and 'uncut' to
            'paste', and avoids a possible hang during a Full-Justify.

(wiedi)

2018-09-09 13:17:23 UTC MAIN commitmail json YAML

- bind-9.11.2.

(taca)

2018-09-09 13:16:57 UTC MAIN commitmail json YAML

doc: Added net/bind912 version 9.12.2pl1

(taca)

2018-09-09 13:16:36 UTC MAIN commitmail json YAML

net/Makefile: add and enable bind912

(taca)

2018-09-09 13:16:02 UTC MAIN commitmail json YAML

net/bind912: Added BIND 9.12 package

Add bind-9.12.2pl1 (BIND 9.12.2-P1) pacakge.

Note: named(8) requires writable permission to current directory when
start up or the directory specified by "directory" in options statement.

BIND, the Berkeley Internet Name Daemon, version 9 is a major rewrite
of nearly all aspects of the underlying BIND architecture.  Some
of the important features of BIND-9 are:

- DNS Security
- IP version 6
- DNS Protocol Enhancements
- Views
- Multiprocessor Support
- Improved Portability Architecture
- Full NSEC3 support
- Automatic zone re-signing
- New update-policy methods tcp-self and 6to4-self

This package contains the BIND 9.12 release.

- named and related libraries have been substantially refactored for
  improved query performance.
- Code implementing the name server query processing logic has been
  moved into a new libns library.
- The DNS Response Policy Service API (DNSRPS) is now supported.
- Log file timestamps can now also be formatted in ISO 8601 (local)
  or ISO 8601 (UTC) formats.
- Added support for the EDNS Padding and Keepalive options.
- 'new-zones-directory' option sets the location where the
  configuration data for zones added by rndc addzone is stored.
- The default key algorithm in rndc-confgen is now hmac-sha256.
- filter-aaaa-on-v4 and filter-aaaa-on-v6 options are now available
  by default without a configure option.
- The obsolete isc-hmac-fixup command has been removed.

(taca)

2018-09-09 13:12:53 UTC MAIN commitmail json YAML

doc: Added net/bind911 version 9.11.4pl1

(taca)

2018-09-09 13:12:19 UTC MAIN commitmail json YAML

net/Makefile Add and enable bind911

(taca)

2018-09-09 13:11:38 UTC MAIN commitmail json YAML

net/bind911 Add BIND 9.11 package

Add bind9.11.4pl1 (BIND 9.11.4-P1) package.

Note: named(8) requires writable permission to current directory when
start up or the directory specified by "directory" in options statement.

BIND, the Berkeley Internet Name Daemon, version 9 is a major rewrite
of nearly all aspects of the underlying BIND architecture.  Some
of the important features of BIND-9 are:

- DNS Security
- IP version 6
- DNS Protocol Enhancements
- Views
- Multiprocessor Support
- Improved Portability Architecture
- Full NSEC3 support
- Automatic zone re-signing
- New update-policy methods tcp-self and 6to4-self

This package contains the BIND 9.11 release.

- Catalog Zones, a new method for provisioning servers
- "dnstap", a fast and flexible method of capturing and logging
  DNS traffic.
- "dyndb", a new API for loading zone data from an external database
- dnssec-keymgr, a new key mainenance utility
- mdig, an alternate version of dig utility
- And more...

(taca)

2018-09-09 12:28:06 UTC MAIN commitmail json YAML

doc Updated misc/ruby-sprockets to 3.7.2

(taca)