lang/nodejs: Update to 10.8.0.

No notable changes besides update to npm 6.2.0, which we do not
bundle.

(fhajny)

doc: Updated x11/libdrm to 2.4.93

(wiz)

libdrm: update to 2.4.93.

Christian K旦nig (1):
      amdgpu: make sure to set CLOEXEC on duplicated FDs

Emil Velikov (10):
      xf86drm: drmGetDevice2: error out if the fd has unknown subsys
      xf86drm: introduce drm_device_has_rdev() helper
      xf86drm: Fold drmDevice processing into process_device() helper
      xf86drm: Allocate drmDevicePtr's on stack
      xf86drm: introduce a get_real_pci_path() helper
      xf86drm: Add drmDevice support for virtio_gpu
      tests/drmdevices: install alongside other utilities
      tests/drmdevice: add a couple of printf headers
      drmdevice: convert the tabbed output into a tree
      drmdevice: print the correct host1x information

Jan Vesely (3):
      amdgpu: Take a lock before removing devices from fd_tab hash table.
      amdgpu/util_hash_table: Add helper function to count the number of entries in hash table
      amdgpu: Destroy fd_hash table when the last device is removed.

Jos辿 Roberto de Souza (2):
      intel: Introducing Whiskey Lake platform
      intel: Introducing Amber Lake platform

Kevin Strasser (1):
      xf86drm: Be sure to closedir before return

Marek Ol邸叩k (3):
      amdgpu: don't call add_handle_to_table for KMS BO exports
      amdgpu: add amdgpu_bo_handle_type_kms_noimport
      configure.ac: bump version to 2.4.93

Mariusz Ceier (1):
      xf86drm: Fix error path in drmGetDevice2

Michel D辰nzer (2):
      Always pass O_CLOEXEC when opening DRM file descriptors
      Revert "amdgpu: don't call add_handle_to_table for KMS BO exports"

Rob Clark (5):
      freedreno: add user ptr to fd_ringbuffer
      freedreno: add fd_ringbuffer_new_object()
      freedreno: small cleanup
      freedreno: slight reordering
      freedreno/msm: "stateobj" support

(wiz)

sort

(jnemeth)

doc: Updated sysutils/dmidecode to 3.1nb3

(msaitoh)

Add two officially recommended patch to sysutils/dmidecode

2018-08-01: Avoid OOB read on invalid entry point length

Don't let the entry point checksum verification run beyond the end
of the buffer holding it (32 bytes). This bug was discovered by
Lionel Debroux using the AFL fuzzer and AddressSanitizer.
Signed-off-by: Jean Delvare <jdelvare@suse.de>

2018-08-01: Validate structure completeness before decoding

Ensure that the whole DMI structure fits in the announced table
length before performing any action on it. Otherwise we might end
up reading beyond the end of our memory buffer. This bug was
discovered by Lionel Debroux using the AFL fuzzer and
AddressSanitizer. Its probability is very low, as it requires a DMI
table corrupted in one of two very specific ways to trigger. This
bug exists since dmidecode version 2.9, although it is hard to
test because option --from-dump was only introduced in version
2.10.
Signed-off-by: Jean Delvare <jdelvare@suse.de>

(msaitoh)

Colord depends on lcms2.

(youri)

doc/CHANGES-2018: fix time warps

When updating a package, some package authors use local time for the
entries in doc/CHANGES, and my system clock was off by several days. To
detect and fix these problems early, pkglint now checks that the dates
are properly ordered.

(rillig)

p11-kit: Build fix for older Darwin.

(jperkin)

mk/fetch/github.mk: document that PKGBASE influences GitHub variables

See https://mail-index.netbsd.org/pkgsrc-users/2018/07/thread1.html#027251

(rillig)

glib2: Update workaround for older Darwin releases.

(jperkin)

doc: Updated sysutils/dc-tools to 1.6nb1

(tpaul)

Honor LDFLAGS, now builds with PKGSRC_USE_RELRO=yes

Bump PKGREVISION
ok <abs>

(tpaul)

doc: Updated x11/qt5-qtwebkit to 5.212.0.alpha2nb8

(maya)

qtwebkit: don't disable JIT on netbsd, declare functions like linux.

this works well enough to browse javascript websites with otter-browser,
which needed paxctl +m, although I didn't try it without these changes.

XXX this package might be crashing from feeding bogus values to
posix_memalign.

(maya)

doc: Updated www/otter-browser to 0.9.99.1

(maya)

otter-browser: update to 0.9.99.1
Additionally, this fixes the build.
Mark paxctl +m, I probably needed this because I locally
enabled qt-webkit's JIT.

0.9.99.1:
    added importer for OPML files;
    added support for abp: protocol for adding new content filtering profiles;
    added ability to open selection as link if it macthes URL format;
    various fixes and minor improvements for Feeds reader.

0.9.99:
    initial version of Feeds Reader:
        Atom and RSS 2.0 parsers;
        support for categories;
        ability to preview feeds before subscribing using view-feed: protocol;
    added action to take page screenshot;
    some minor optimizations.

0.9.98:
several enhancements in experimental backend for QtWebEngine (Blink):

    initial work on global history support;
    added support for alternative stylesheets;
    added support for fetching lists of search engines, feeds and links;

initial work on Feeds Reader;
several bug fixes and some minor optimizations.

0.9.97:
    added initial version of Tab History panel;
    some minor optimizations.

0.9.96:
added initial version of Tab History panel;
some minor optimizations

0.9.95:
    added initial version of toolbar widget for viewing downloads from current session;
    added some new keyboard shortcuts;
    some minor fixes.

0.9.94:
    added new default style for Start Page by Kamil N��cek;
    added interface allowing to manage list of hosts using customized website overrides;
    several bug fixes and some optimizations.

0.9.93:
    added Page Information panel;
    added support for external icons for User Scripts;
    some minor fixes and optimizations.

0.9.92:
    improved support for styling tab bar text;
    added support for deleting User Scripts in Addons Manager;
    restored inline URLs completion;
    added action for peeking tab contents;
    multiple bug fixes and stability improvements.

0.9.91:
reworked toolbars:

    added support for visibility toggle button (collapsing contents);
    fixed unified toolbar and titlebar style under macOS;
    toolbar visibility and location is now stored per main window;

improved sidebar(s):

    added ability to add new sidebars;
    allow to change their location by drag and drop;

vastly improved error pages:

    special error pages are now used instead of SSL warning dialogs;
    blocked content triggers dedicated error pages;

improved User Agents configuration;
added support for managing multiple proxy configurations and setting them per page or host;
reworked internal actions handling system allows to specify parameters for actions trigerred by keyboard shortcuts and mouse gestures;
vastly decreased import time for large bookmark files;
added module for listing opened windows and tabs;
improved styling under Windows, Unity and macOS;
added new default icon theme by Kamil N��cek;
item views can now allocate extra space to predefined column other than last one;
added action to set, reset or toggle an option;
global editing actions now apply to focused single and multi line text edit widgets too;
added ability to drop URLs onto bookmark bars;
spell checking is now available in other multi line text edit widgets;
added action to control multimedia playback rate;
keyboard shortcuts are now validated while editing;
added support for customizing F12 menu;
implemented "Validate Using" menu;
added support for configurable Fast Forward rules;

0.9.12:
    greatly improved tab bar:
        allow to detach tabs by dragging them away;
        allow to drop URLs and tabs from other windows;
        added option to show embedded tab thumbnails;
        improved handling of visibility of close button;
        tabs demanding attention are drawn using bold font;
        improved RTL support;
        decreased default tab padding;
        tab text is no longer centered horizontally;
        fixed status tip messages while rearranging tabs;
    improved KDE5 and Unity integration:
        added support for progress information;
        added support for desktop actions;
    several MacOS X specific fixes and improvements:
        improved rendering of platform style;
        added dock icon menu;
        added support for listing applications associated with given MIME type;
    added support for Windows jump list;
    added fullscreen support for QtWebKit backend;
    open file path is saved;
    improved RTL support in address and search fields;
    many other fixes and improvements.

0.9.11:
    added initial support for storing passwords:
        support for multiple credential sets per host;
        basic passwords management;
        disabled by default (no encryption yet);
    added crash reporter;
    added support for muting tab media;
    F12 menu now exposes all modes for Images visibility (including new option to show cached images only) and Plugins;
    QtWebEngine backend is now capable of saving pages in MIME HTML format and as complete set of files;
    added new toolbar visibility settings for full screen mode;
    added new widget for showing content blocking details;
    added ability to customize progress bar;
    added ability to add loading progress information widgets to any toolbar;
    various improvements in handling of content blocking profiles:
        added new definitions and updated existing;
        added option to add custom blocking rules;
        profiles are now grouped by type;
    various minor fixes and improvements.

(maya)

py-configobj: Depend on py-six

(gdt)

TLS is broken on NetBSD aarch64, so force use of pthread_{set,get}specific

(jmcneill)

Updated www/p5-CGI-Simple to 1.16

(wen)

Update to 1.16

Upstream changes:
1.16  2018-07-25 MANWAR
      - Made t/manifest.t AUTHOR only (RT #125383).
      - Removed +x bits from test scripts.

(wen)

Updated www/p5-App-Nopaste to 1.012

(wen)

Update to 1.012

Upstream changes:
1.012  2018-07-08 03:56:39Z
        - add GitLab service

(wen)

doc: Updated mail/qmail-run to 20180801

(schmonz)

Depend on pkgtools/pkg_alternatives and a new enough mail/qmail to rely
on finding "nbcheckpassword" (which, at present, might be either
checkpassword-pam or DJB's original).

Depend (unconditionally) on mail/qmail-rejectutils, instead of having it
as an option on mail/qmail.

Bump version.

(schmonz)

doc: Updated mail/qmail to 1.03nb36

(schmonz)

Depend on new enough sysutils/checkpassword{,-pam} such that qmail-run
can (by itself depending on pkgtools/pkg_alternatives) expect to find
"nbcheckpassword".

Remove 'qmail-rejectutils' option, which will become an unconditional
dependency in qmail-run.

Bump PKGREVISION.

(schmonz)

Updated textproc/p5-Text-Quoted to 2.10

(wen)

Update to 2.10

Upstream changes:
2.10 2018-07-26
- Add no_separators option (RJBS)
- Fix "Negative repeat count does nothing" warning (thanks to Stefan
  Bühler)
- Fix Makefile.PL for perl 5.26 where "." is not in @INC by default
  (thanks to Petr Písař)

(wen)

doc: Updated sysutils/checkpassword-pam to 0.99nb1

(schmonz)

Offer an 'nbcheckpassword' alternative to pkg_alternatives(8). Bump PKGREVISION.

(schmonz)

doc: Updated sysutils/checkpassword to 0.90nb1

(schmonz)

Offer an 'nbcheckpassword' alternative to pkg_alternatives(8). Bump PKGREVISION.

(schmonz)

doc: Updated security/putty to 0.69nb4

(maya)

putty: fix build after gdk_beep became deprecated.
bump pkgrevision for paranoia.

(maya)

caribou: Add missing dependencies.

(jperkin)

chat/py-mastodon: Fix typo in patch.

(nia)

audacity: SunOS build fixes.

(jperkin)

Only need nasm when building for x86.

(rjs)

doc: Added www/py-http_ece version 1.0.5

(nia)

www/py-http_ece: Import http_ece-1.0.5

py-http_ece is a simple implementation of the HTTP encrypted
content-encoding (RFC 8188).

(nia)

chat/tootstream: Add a patch removing the use of the 'async' keyword,
allowing it to be used with Python 3.7.

(nia)

chat/py-mastodon: Add a patch to avoid the use of the 'async' keyword,
allowing it to be used with Python 3.7.

(nia)

chat/tootstream: incompatible with python37 due to its chat/py-mastodon
dependency.

(nia)

chat/py-mastodon: Version in pkgsrc is incompatible with python37
due to a collision with the async keyword.

(nia)

lilv: Fix build on SunOS.

(jperkin)

grilo-plugins: Fix "format not a string literal" errors.

Disable the bliptv plugin, the service has been shut down.

(jperkin)

audacious-plugins: Fix oss4 PLIST entry.

(jperkin)

audacious: Use standard shared library naming on SunOS.

(jperkin)

gammu: Fix build on SunOS.

(jperkin)

Build fix for databases/openldap-smbk5pwd

From upstream ITS #8885

Add a configure test for hdb_generate_key_set_password() prototype

contrib/slapd-modules/smbk5pwd uses hdb_generate_key_set_password() from
Heimdal, which was shortly turned from a 5 arguments function to a 7 arguments
function before the prototype change was rolled back to address API
incompatibility.

Unfortunately, the 7 arguments hdb_generate_key_set_password() made it into
released NetBSD 8.0, causing a build break in contrib/slapd-modules/smbk5pwd.

This change adds a configure test for 7 arguments prototype so that
contrib/slapd-modules/smbk5pwd build again on NetBSD 8.0, and other OS that
would include the 7 arguments hdb_generate_key_set_password().

(manu)

lasso: _XOPEN_SOURCE and _POSIX_C_SOURCE fixes.

(jperkin)

doc: Updated sysutils/consul to 1.2.2

(fhajny)

sysutils/consul: Update to 1.2.2

## 1.2.2 (July 30, 2018)

SECURITY:
- acl: Fixed an issue where writes operations on the Keyring and
  Operator were being allowed with a default allow policy even when
  explicitly denied in the policy.

FEATURES:

- **Alias Checks:** Alias checks allow a service or node to alias the
  health status of another service or node in the cluster.
- agent: New Cloud Auto-join providers: vSphere and Packet.net.
- cli: Added `-serf-wan-port`, `-serf-lan-port`, and `-server-port`
  flags to CLI for cases where these can't be specified in config
  files and `-hcl` is too cumbersome.
- connect: The TTL of leaf (service) certificates in Connect is now
  configurable.

IMPROVEMENTS:

- proxy: With `-register` flag, heartbeat failures will only log once
  service registration succeeds.
- http: 1.0.3 introduced rejection of non-printable chars in HTTP URLs
  due to a security vulnerability. Some users who had keys written
  with an older version which are now dissallowed were unable to delete
  them. A new config option disable_http_unprintable_char_filter is
  added to allow those users to remove the offending keys. Leaving this
  new option set long term is strongly discouraged as it bypasses
  filtering necessary to prevent some known vulnerabilities.
- agent: Allow for advanced configuration of some gossip related
  parameters.
- agent: Make some Gossip tuneables configurable via the config file
- ui: Included searching on `.Tags` when using the freetext search
  field.
- ui: Service.ID's are now shown in the Service detail page and (only
  if it is different from the service name) the Node Detail >
  [Services] tab.

BUG FIXES:

- acl/connect: Fix an issue that was causing managed proxies not to
  work when ACLs were enabled.
- connect: Fix issue with managed proxies and watches attempting to
  use a client addr that is 0.0.0.0 or ::
- connect: Allow Native and Unmanaged proxy configurations via config
  file
- connect: Fix bug causing 100% CPU on agent when Connect is disabled
  but a proxy is still running
- proxy: Don't restart proxies setup in a config file when Consul
  restarts
- ui: Display the Service.IP address instead of the Node.IP address in
  the Service detail view.
- ui: Watch for trailing slash stripping 301 redirects and forward the
  user to the correct location.
- connect: Fixed an issue in the connect native HTTP client where it
  failed to resolve service names.

## 1.2.1 (July 12, 2018)

IMPROVEMENTS:

- acl: Prevented multiple ACL token refresh operations from occurring
  simultaneously.
- acl: Add async-cache down policy mode to always do ACL token
  refreshes in the background to reduce latency.
- proxy: Pass through HTTP client env vars to managed proxies so that
  they can connect back to Consul over HTTPs when not serving HTTP.
- connect: Persist intermediate CAs on leader change.

BUG FIXES:

- api: Intention APIs parse error response body for error message.
- agent: Intention read endpoint returns a 400 on invalid UUID
- agent: Service registration with "services" does not error on
  Connect upstream configuration.
- dns: Ensure that TXT RRs dont get put in the Answer section for
  A/AAAA queries.
- dns: Ensure that only 1 CNAME is returned when querying for services
  that have non-IP service addresses.
- api: Fixed issue where `Lock` and `Semaphore` would return earlier
  than their requested timeout when unable to acquire the lock.
- watch: Fix issue with HTTPs only agents not executing watches
  properly
- agent: Managed proxies that bind to 0.0.0.0 now get a health check
  on a sane IP
- server: (Consul Enterprise) Fixed an issue causing Consul to panic
  when network areas were used
- license: (Consul Enterprise) Fixed an issue causing the snapshot
  agent to log erroneous licensing errors

(fhajny)

Build fix

We had "error: 'std::tr1' has not been declared" because all code was
not yet updated for -std=gnu++11. Use -std=gnu++98 instead.

(manu)

doc: Updated mail/rspamd to 1.7.8

(fhajny)

mail/rspamd: Update to 1.7.8

1.7.8: 12 Jul 2018
- [Feature] Add more extended statistics about fuzzy updates
- [Feature] Add more non-conformant Received headers support
- [Feature] Add preliminary function to get fuzzy hashes from text in
  Lua
- [Feature] Allow to configure AV module rejection message
- [Feature] Implement fuzzy hashes extraction in mime tool
- [Feature] Improve WHITE_ON_WHITE rule
- [Feature] Improve integer -> string conversion
- [Feature] Reuse maps in multimap module more aggressively
- [Fix] Avoid race condition in skip map as pool lifetime is not
  enough
- [Fix] Eliminate all specific C plugins pools
- [Fix] Fix DKIM check rule if DNS is unavailable
- [Fix] Fix build where ucontext is defined in ucontext.h
- [Fix] Fix crash in base url handling
- [Fix] Fix descriptors leak in sqlite3 locking code
- [Fix] Fix messages quarantine
- [Fix] Fix padded numbers printing
- [Fix] Fix race condition on maps reinit
- [Fix] Fix regexp functions when no data is passed
- [Fix] Fix specific urls extraction
- [Fix] Fix styles propagation
- [Fix] Improve resetting of the limit buckets
- [Fix] Initialize sqlite3 properly
- [Fix] Work with broken resolvers in resolv.conf
- [Project] Implement HTTP maps caching
- [Project] Refresh fuzzy hashes when matched
- [Project] Add logic to deduplicate fuzzy updates queue
- [WebUI] Add missed declarations
- [WebUI] Avoid using "undefined" property
- [WebUI] Do not accept passwords containing control characters
- [WebUI] Do not redeclare variables
- [WebUI] Enable strict mode,
- [WebUI] Fix variable assignment
- [WebUI] Initialize variables at declaration
- [WebUI] Remove duplicated path from RequireJS config
- [WebUI] Remove unused block
- [WebUI] Remove unused variable
- [WebUI] Remove unused variables
- [WebUI] Use self-explanatory notation
- [WebUI] Use type-safe equality operators

1.7.7: 02 Jul 2018
- [CritFix] Check NM part of pubkey to match it with rotating keypairs
- [CritFix] Do not overwrite PID of the main process
- [CritFix] Fix maps after reload
- [CritFix] Fix maps race conditions on reload
- [CritFix] Fix shmem leak in encrypting proxy mode
- [Feature] Add a concept of ignored symbols to avoid race conditions
- [Feature] Add ability to print bayes tokens in rspamadm mime
- [Feature] Add method to get statistical tokens in Lua API
- [Feature] Add preliminary mime stat command
- [Feature] Add rspamadm mime tool
- [Feature] Add urls extraction tool
- [Feature] Address ZeroFont exploit
- [Feature] Allow rspamadm mime to process multiple files
- [Feature] Allow to extract words in `rspamadm mime`
- [Feature] Allow to print mime part data
- [Feature] Allow to show HTML structure on extraction
- [Feature] Distinguish IP failures from connection failures
- [Feature] Improve output for mime command
- [Feature] Improve styles propagation
- [Feature] Main process crash will now cleanup all children
- [Feature] Preload file and static maps in main process
- [Feature] Print stack trace on crash
- [Feature] Process font size in HTML parser
- [Feature] Propagate content length of invisible tags
- [Feature] Read ordinary file maps in chunks to be more safe on
  rewrites
- [Feature] Support base tag in HTML
- [Feature] Support more size suffixes when parsing HTML styles
- [Feature] Support opacity style
- [Fix] Another fix for nested composites
- [Fix] Fill nm id in keypairs cache code
- [Fix] Fix colors alpha channel handling
- [Fix] Fix destruction logic
- [Fix] Fix double free
- [Fix] Fix maps preload logic
- [Fix] Fix nested composites process
- [Fix] Fix proxying of Exim connections
- [Fix] Fix reload crash
- [Fix] Fix rspamadm -l command
- [Fix] Update ed25519 signing schema
- [WebUI] Stop using "const" declaration
- [WebUI] Update RequireJS to 2.3.5

1.7.6: 15 Jun 2018
- [CritFix] Fix multiple neural networks support
- [Feature] Add decryption function to keypair command
- [Feature] Add gzip compression for HTTP requests in elastic module
- [Feature] Add gzip methods to lua util
- [Feature] Add maps based on Top Level Domains
- [Feature] Add pubkey checks for dkim_signing
- [Feature] Add support of fake DNS records
- [Feature] Add tool to encrypt files
- [Feature] Allow to add symbols using settings directly
- [Feature] Allow to match private and public keys for DKIM signatures
- [Feature] Allow to set task flags via settings
- [Feature] Allow to specify fake DNS address from the config
- [Feature] Implement signatures verification using rspamadm keypair
- [Feature] Implement signing using `rspamadm keypair`
- [Feature] Improve error reporting for DKIM key access issues
- [Feature] Provide $HOSTNAME variable in UCL
- [Feature] Rework levenshtein distance computation
- [Feature] Split message parsing and processing
- [Feature] Support ED25519 DKIM signatures
- [Feature] Support encrypted configs in UCL
- [Feature] Suppress duplicate warning on very large radix tries
- [Feature] Use OSB to combine header names
- [Fix] Cleanup maps data on shutdown
- [Fix] Fix '~' behaviour in composites
- [Fix] Fix HTTP maps updates
- [Fix] Fix NIST signatures
- [Fix] Fix RFC822 comments when processing a mime address
- [Fix] Fix double free
- [Fix] Fix dynamic settings application
- [Fix] Fix for CommuniGate Pro maillist
- [Fix] Fix keypair creation method to actually create keypair...
- [Fix] Fix matching patterns with no paths
- [Fix] Fix memory leak in parsing comments
- [Fix] Fix parsing of urls with numeric password
- [Fix] Fix plugins intialisation in configwizard
- [Fix] Fix potential crash on reload
- [Fix] Fix potential race condition for a finished HTTP connections
- [Fix] Fix race-condition leak on processes reload
- [Fix] Fix signing in openssl mode
- [Fix] Free language detector structures
- [Fix] Relax alignment requirements
- [Fix] Send DMARC reports compressed
- [Fix] Try to fix leak in dmarc module
- [Fix] Try to plug memory leak in metric exporter
- [Project] Convert rspamadm subcommands to Lua
- [WebUI] Display smtp sender/recipient in history
- [WebUI] Fix elements disabling in "Symbols" tab
- [WebUI] Limit recipients list in history column to 3
- [WebUI] Match envelope and mime addresses following in arbitrary
  order
- [WebUI] Update column header
- [WebUI] Wrap addresses in history

1.7.5: 18 May 2018
- [Conf] Add MSBL proposed return codes
- [Conf] Add additional groups for policies
- [CritFix] Do not use volatile Lua strings as UCL keys
- [Feature] Add ability to add fuzzy hashes to headers
- [Feature] Add function to extract most meaningful urls
- [Feature] Add rule to block mixed text and encrypted parts
- [Feature] Allow multiple groups for symbols
- [Feature] Allow to disable lua squeezing logic
- [Feature] Allow to get multipart children in Lua
- [Feature] Allow to insert multiple headers from milter headers
- [Feature] Allow to print scores in subject and further extensions
- [Feature] Be more error-prone in squeezed rules
- [Feature] Support multiple return codes in emails module
- [Feature] Use EMA for calculating averages
- [Feature] Use common jit cache for all regexps
- [Feature] support for CommuniGate Pro self-generated messages
- [Fix] Allow to have multiple values for headers as arrays
- [Fix] Do not open sockets for disabled workers
- [Fix] Fix AuthservId
- [Fix] Fix base64 folding in Lua API
- [Fix] Fix build on non-x86 platforms
- [Fix] Fix cached maps logic
- [Fix] Fix compatibility with old maps query logic
- [Fix] Fix crash if skip_map is used
- [Fix] Fix importing static maps from UCL
- [Fix] Fix parsing of unix sockets
- [Fix] Fix raw_mime regexp on HTML part with no text content
- [Fix] Fix tables logging
- [Fix] Fix vertical tab handling in libucl
- [Fix] Try to fix frequency counters
- [Fix] Use better sharding for ip_score
- [Fix] Use multiple results from SURBL DNS reply
- [Fix] When doing AV scan select a different server for retransmit

(fhajny)

Updated devel/p5-Test-POE-Client-TCP to 1.22

(wen)

Update to 1.22

Upstream changes:
version 1.22 at 2018-07-15 12:24:13 +0000
-----------------------------------------

  Change: f3770138dd1fe7948ee2f7633a14dd661daa1267
  Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
  Date : 2018-07-15 13:24:13 +0000

    Fixed problem when specifying ssl options

-----------------------------------------
version 1.20 at 2018-07-13 18:06:30 +0000
-----------------------------------------

  Change: dedc0de6a3a6513ac32355393443ae5bee756ec8
  Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
  Date : 2018-07-13 19:06:30 +0000

    Added sslctx, sslcert and sslkey options

    These allow manipulation of the SSL/TLS connection and to specify
    client-side certificate, respectively.

(wen)

Updated devel/p5-Test-Simple to 1.302128

(wen)

Update to 1.302138

Upstream changes:
1.302138  2018-07-11 09:29:51-07:00 America/Los_Angeles

    - No changes since trial

1.302137  2018-05-25 08:45:13-07:00 America/Los_Angeles (TRIAL RELEASE)

    - Make it safe to fork before events in IPC

(wen)

doc: Added graphics/py-imageio version 2.3.0

(prlw1)

Add py-imageio 2.3.0

Note that this used to be part of py-scipy.

Imageio is a Python library that provides an easy interface to read
and write a wide range of image data, including animated images,
video, volumetric data, and scientific formats. It is cross-platform,
runs on Python 2.7 and 3.4+, and is easy to install.

(prlw1)

Updated devel/p5-Test-TempDir-Tiny to 0.018

(wen)

Update to 0.018
Add missing DEPENDS

Upstream changes:
0.018    2018-07-12 08:21:56-04:00 America/New_York

    - Bumped required version of File::Temp to 0.2308

(wen)

Updated devel/p5-Test2-Suite to 0.000115

(wen)

Update to 0.000115

Upstream changes:
0.000115  2018-07-11 09:39:37-07:00 America/Los_Angeles

    - Fix warning on undefined note/diag
    - Improve an error message.

(wen)

Updated devel/p5-Type-Tiny to 1.004002

(wen)

Update to 1.004002

Upstream changes:
1.004002        2018-07-29

[ Bug Fixes ]
- Skip one particular test on old versions of Moo because it relies on a
  feature introduced in Moo 1.004000.
  Fixes RT#125948.
  <https://rt.cpan.org/Ticket/Display.html?id=125948>

(wen)

Removed www/joomla

(wen)

Remove joomla

(wen)

Remove www/joomla.

Suggested by: joerg@
Reviewed by: wiz@

(wen)

doc: Added lang/py37-html-docs version 3.7.0

(leot)

lang/Makefile: Add py37-html-docs

(leot)

py37-html-docs: Add py37-html-docs-3.7.0

HTML Documentation for Python 3.7

(leot)

doc/TODO: + gnutls-3.6.3, mbedtls-2.12.0.

(wiz)

doc: Updated lang/py36-html-docs to 3.6.6

(leot)

py36-html-docs: Update lang/py36-html-docs to 3.6.6

Changes:
3.6.6
-----
Documentation
- bpo-33503: Fix broken pypi link
- bpo-33421: Add missing documentation for typing.AsyncContextManager.
- bpo-33378: Add Korean language switcher for https://docs.python.org/3/
- bpo-33276: Clarify that the __path__ attribute on modules cannot be just
              any value.
- bpo-33201: Modernize documentation for writing C extension types.
- bpo-33195: Deprecate Py_UNICODE usage in c-api/arg document.
              Py_UNICODE related APIs are deprecated since Python 3.3, but it
              is missed in the document.
- bpo-33126: Document PyBuffer_ToContiguous().
- bpo-27212: Modify documentation for the islice() recipe to consume initial
              values up to the start index.
- bpo-28247: Update zipapp documentation to describe how to make standalone
              applications.
- bpo-18802: Documentation changes for ipaddress. Patch by Jon Foster and
              Berker Peksag.
- bpo-27428: Update documentation to clarify that WindowsRegistryFinder
              implements MetaPathFinder. (Patch by Himanshu Lakhara)
- bpo-8243: Add a note about curses.addch and curses.addstr exception
            behavior when writing outside a window, or pad.
- bpo-31432: Clarify meaning of CERT_NONE, CERT_OPTIONAL, and CERT_REQUIRED
              flags for ssl.SSLContext.verify_mode.

(leot)

colord: Fix PLIST.

(jperkin)

doc: Updated www/curl to 7.61.0nb1

(wiz)

curl: fix a regression with -O -J in 7.61.0 using upstream patch.

Bump PKGREVISION.

(wiz)

libasr: set mantype to man

Addresses PR 53486 by Dennis Lindroos.

(wiz)

doc: Updated math/djbsort to 20180729

(schmonz)

Update to 20180729. From the changelog:

Algorithm

Rewrite of the core int32/avx2 implementation for (1) higher speed and
(2) reduced memory consumption. Stack allocation is now at most a few
kilobytes, even for gigantic arrays.

Internally, the sorting algorithm is now mostly bitonic to simplify
indexing, although odd-even speedups are still applied when
convenient. Lanes are complemented to take the down-up decision out of
the inner loops.

As in previous djbsort versions, data is sorted first in vector lanes
and then transposed for final merges, reducing the overall number of
vector permutations. Unlike previous versions, transposition is done
in-place. The transposition in this version is bit-reversal on the outer
6 bits (bottom 3 bits and the top 3 bits), but leaves intermediate bits
alone. Non-power-of-2 array sizes are handled by an extra, more
traditional, merge step.

Sizes 2, 3, 4, 5, 6, 7, 8, 16, 32 are now special-cased. Non-power-of-2
sizes below 256 are padded to the next power of 2.

Portable implementations: The out-of-place int32/portable1 and
int32/portable2 implementations are now gone; the in-place
int32/portable3 and int32/portable4 implementations remain.

C API

float32_sort is now supported. The arithmetic in the reduction from
float32 to int32 is int32 31-bit right shift, uint32 1-bit right shift,
xor; this is slightly more efficient than the reduction from float32 to
uint32 from 2001 Herf.

Compiling

Tests now have more variation (without much slowdown): the uint32 test
cases now deviate from int32 in more than the sign; float32 uses
floating-point numbers that aren't integers; int32 does more loops for
small cases, and some larger cases.

Internals

API for 2-input sorting is now MINMAX macro operating on two
inputs in place.

Better inline assembly from Jason Donenfeld for 2-input sorting: more
flexibility in compiler's register allocation.

The package version number is now automatically copied to version.c as
the implementation version number for implementations that don't provide
version.c.

Verification

minmax now supports more peephole optimizations for complemented bitonic
sorting and for padding: xor(s,xor(s,t)) ⇒ t; xor(-1,s) ⇒ invert(s);
Reverse(Reverse(s)) ⇒ s; signedmin(invert(s),invert(t)) ⇒
invert(signedmax(s,t)); signedmax(invert(s),invert(t)) ⇒
invert(signedmin(s,t)); invert(s)[high:low] ⇒ invert(s[high:low]);
s[bits-1:0] ⇒ s; s[high:low][high2:low2] ⇒ s[high2+low:low2+low];
Concat(...)[high:low] ⇒ ...[high-pos:low-pos] when possible;
Reverse(s)[high:low] ⇒ Reverse(s[...]) when possible; eliminate
signedmin/signedmax when one input is the minimum or maximum constant.

verifymany now includes the implementation version number on
verified lines.

(schmonz)

Compiler options are also baked into paths, so switch to dynamic PLIST.
Install with pax, not cp. On deinstall, remove whatever's left in
share/djbsort.

(schmonz)

doc: Updated math/djbsort to 20180717nb1

(schmonz)

From DJB: "For correctness, ./test has to be run on the installation
machine, not on the machine preparing a binary package." (Also: "The
issues are explained in Section 8 of
https://pqcrypto.eu.org/deliverables/d2.4.pdf.")

For this to work, we install the source tree (with built objects) to
${PREFIX}/share/djbsort. Then we run tests, install to ${PREFIX}/include
and ${PREFIX}/lib, and check the installed files against pseudo-PLIST.

This means pkg_add(1) will fail if no C compiler is present, which is
unusual behavior for pkg_add but perhaps not entirely unreasonable for a
C library.

Bump PKGREVISION.

(schmonz)

move --disable-gcc-global-regs to Makefile.php.
Seems to make a previously segfaulting netbsd-8/i386's build not segfault.
ap-php runs PHP's configure and builds some of its code, so it needs the
same flag.

Now we can stop requiring an arbitrary GCC version. The test case in the
GCC bugzilla fails on all GCC versions I tested, but magically some
versions of GCC manage to build a working PHP.

(maya)

Updated mail/thunderbird-l10n to 52.9.1

(ryoon)

Update to 52.9.1

* Sync with mail/thunderbird-52.9.1

(ryoon)

Updated mail/thunderbird to 52.9.1

(ryoon)

Update to 52.9.1

Changelog:
    changed
    Thunderbird will now prompt to compact IMAP folders even if the account is online. Note: Under certain circumstances an incorrect estimate of the expected gain is shown.

    fixed
    Complete fix of the EFAIL vulnerability: 1) Removing some HTML crafted to carry out an attack. 2) Optionally: Not decrypting subordinate message parts that otherwise might reveal decrypted content to the attacker. Preference mailnews.p7m_subparts_external needs to be set to true for added security.

    fixed
    Various problems when forwarding messages inline when using "simple" HTML view

    fixed
    Deleting or detaching attachments corrupted messages under certain circumstances (not working only in Thunderbird version 52.9.0)

    fixed
    Various security fixes

Security fixes:
#CVE-2018-12359: Buffer overflow using computed size of canvas element
#CVE-2018-12360: Use-after-free when using focus()
#CVE-2018-12372: S/MIME and PGP decryption oracles can be built with HTML emails
#CVE-2018-12373: S/MIME plaintext can be leaked through HTML reply/forward
#CVE-2018-12362: Integer overflow in SSSE3 scaler
#CVE-2018-12363: Use-after-free when appending DOM nodes
#CVE-2018-12364: CSRF attacks through 307 redirects and NPAPI plugins
#CVE-2018-12365: Compromised IPC child process can list local filenames
#CVE-2018-12366: Invalid data handling during QCMS transformations
#CVE-2018-12368: No warning when opening executable SettingContent-ms files
#CVE-2018-12374: Using form to exfiltrate encrypted mail part by pressing enter in form field
#CVE-2018-5188: Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, Firefox ESR 52.9, and Thunderbird 52.9

(ryoon)

Updated cross/pdp11-aout-gcc to 8.2.0

(ryoon)

Update to 8.2.0

Changelog:
General Improvements

    Fixed LTO link-time performance problems caused by an overflow in the
    partitioning algorithm while building large binaries.

Language Specific Changes
C++
GCC 8.2 fixed a bug introduced in GCC 8.1 affecting passing or returning of
classes with a deleted copy constructor and defaulted trivial move constructor
(bug c++/86094). GCC 8.2 introduces -fabi-version=13 and makes it the default,
ABI incompatibilities between GCC 8.1 and 8.2 can be reported with -Wabi=12.
See C++ changes for more details.

Target Specific Changes
IA-32/x86-64

    -mtune=native performance regression PR84413 on Intel Skylake processors
    has been fixed.

(ryoon)

Updated cross/pdp11-aout-binutils to 2.31.1

(ryoon)

Update to 2.31.1

Changelog:
2.31.1
  This release also contains a fix for gold/23409 where the gold
  linker could end up creating duplicate copies of some symbols.

2.31
This release contains numerous bug fixes, and also the
following new features:

  * Direct linking with DLLs for Cygwin and Mingw targets is now faster.

  * The linker now defaults to enabling -z separate-code for Linux
    targets, although a configure time option can change this.
    This option can increase disk and memory size of executables, but
    it does help to improve security.

  * The disassembler supports Netronome Flow Processor (NFP) firmware
    files.

  * The AArch64 disassembler supports showing disassembly notes which
    are emitted when inconsistencies are found with the instruction that
    may result in the instruction being invalid.  It also emits warnings
    when a combination of an instruction and a named register could be
    invalid.

  * The AR archive manager now supports an "O" modifier to display
    member offsets inside an archive.

  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.

  * The MIPS assembler supports the Global INValidate (GINV) and
    Cyclic Redudancy Check (CRC) architecture extensions.

  * Support has been added for the Freescale S12Z architecture.

  * The assembler has a new --generate-missing-build-notes=[yes|no]
    option to create (or not) GNU Build Attribute notes if none are
    present in the input sources.

  * The -mold-gcc command-line option has been removed for x86 targets.

  * The x86 assembler now supports a -O[2|s] command-line options to
    enable alternate shorter instruction encodings.

  * The gold linker has a new --debug=plugin option for easier debugging
    of plugin-related problems.

  * The gold linker now supports the -z keep_text_section_prefix option.

  * The gold linker now has support for .note.gnu.property sections
    (from Linux ABI extensions).

  * Add gold linker now has support for Intel's Indirect Branch Tracking
    (IBT) and Shadow Stack instructions.

(ryoon)

Updated cross/arm-none-eabi-gcc to 8.2.0

(ryoon)

Update to 8.2

Changelog:
General Improvements

    Fixed LTO link-time performance problems caused by an overflow in the
    partitioning algorithm while building large binaries.

Language Specific Changes
C++
GCC 8.2 fixed a bug introduced in GCC 8.1 affecting passing or returning of
classes with a deleted copy constructor and defaulted trivial move constructor
(bug c++/86094). GCC 8.2 introduces -fabi-version=13 and makes it the default,
ABI incompatibilities between GCC 8.1 and 8.2 can be reported with -Wabi=12.
See C++ changes for more details.

Target Specific Changes
IA-32/x86-64

    -mtune=native performance regression PR84413 on Intel Skylake processors
    has been fixed.

(ryoon)

Updated cross/arm-none-eabi-binutils to 2.31.1

(ryoon)

Update to 2.31.1

Changelog:
2.31.1
  This release also contains a fix for PR gold/23409 where the gold
  linker could end up creating duplicate copies of some symbols.

2.31
This release contains numerous bug fixes, and also the
following new features:

  * Direct linking with DLLs for Cygwin and Mingw targets is now faster.

  * The linker now defaults to enabling -z separate-code for Linux
    targets, although a configure time option can change this.
    This option can increase disk and memory size of executables, but
    it does help to improve security.

  * The disassembler supports Netronome Flow Processor (NFP) firmware
    files.

  * The AArch64 disassembler supports showing disassembly notes which
    are emitted when inconsistencies are found with the instruction that
    may result in the instruction being invalid.  It also emits warnings
    when a combination of an instruction and a named register could be
    invalid.

  * The AR archive manager now supports an "O" modifier to display
    member offsets inside an archive.

  * The ADR and ADRL pseudo-instructions supported by the ARM assembler
    now only set the bottom bit of the address of thumb function symbols
    if the -mthumb-interwork command line option is active.

  * The MIPS assembler supports the Global INValidate (GINV) and
    Cyclic Redudancy Check (CRC) architecture extensions.

  * Support has been added for the Freescale S12Z architecture.

  * The assembler has a new --generate-missing-build-notes=[yes|no]
    option to create (or not) GNU Build Attribute notes if none are
    present in the input sources.

  * The -mold-gcc command-line option has been removed for x86 targets.

  * The x86 assembler now supports a -O[2|s] command-line options to
    enable alternate shorter instruction encodings.

  * The gold linker has a new --debug=plugin option for easier debugging
    of plugin-related problems.

  * The gold linker now supports the -z keep_text_section_prefix option.

  * The gold linker now has support for .note.gnu.property sections
    (from Linux ABI extensions).

  * Add gold linker now has support for Intel's Indirect Branch Tracking
    (IBT) and Shadow Stack instructions.

(ryoon)