Updated databases/postgresql9[3456], databases/postgresql10

(adam)

Reset PKGREVISION

(adam)

postgresqlNN: updated to 10.3, 9.6.8, 9.5.12, 9.4.17, 9.3.22

PostgreSQL 10.3, 9.6.8, 9.5.12, 9.4.17, and 9.3.22:
The purpose of this release is to address CVE-2018-1058, which describes how a user can create like-named objects in different schemas that can change the behavior of other users' queries and cause unexpected or malicious behavior, also known as a "trojan-horse" attack. Most of this release centers around added documentation that describes the issue and how to take steps to mitigate the impact on PostgreSQL databases.

(adam)

Bump PKGREVISION after updating graphics/opencv.

(fhajny)

doc: Updated graphics/opencv-contrib-face to 3.4.1

(fhajny)

graphics/opencv-contrib-face: Update to 3.4.1 to match graphics/opencv.

(fhajny)

doc: Updated graphics/opencv to 3.4.1

(fhajny)

graphics/opencv: Update to 3.4.1.

== OpenCV 3.4.1

dnn
- Added support for quantized TensorFlow networks
- OpenCV is now able to use Intel DL inference engine as DNN
  acceleration backend
- Added AVX-512 acceleration to the performance-critical kernels, such
  as convolution and fully-connected layers
- SSD-based models trained and retrained in TensorFlow Object
  Detection API can be easier imported by a single invocation of
  python script making a text graph representation
- Performance of pthreads backend of cv::parallel_for_() has been
  greatly improved on many core machines
- OpenCL backend has been expanded to cover more layers
- Several bugs in various layers have been fixed

OpenCL
- On-disk caching of precompiled OpenCL kernels has been fixed to
  comply with OpenCL standard
- Certain cases with UMat deadlock when copying UMats in different
  threads has been fixed

Android
- Supported Android NDK16
- Added build.gradle into OpenCV 4 Android SDK
- Added initial support of Camera2 API via JavaCamera2View interface

C++
- C++11: added support of multi-dimentional cv::Mat creation via C++
  initializers lists
- C++17: OpenCV source code and tests comply C++17 standard

Misc
- opencv_contrib: added GMS matching
- opencv_contrib: added CSR-DCF tracker
- opencv_contrib: several improvements in OVIS module

== OpenCV 3.4

- New background subtraction algorithms have been integrated.

dnn
- Added faster R-CNN support
- Javascript bindings have been extended to cover DNN module
- DNN has been further accelerated for iGPU using OpenCL

OpenCL
- On-disk caching of precompiled OpenCL kernels has been finally
  implemented
- It's now possible to load and run pre-compiled OpenCL kernels via
  T-API
- Bit-exact 8-bit and 16-bit resize has been implemented

(fhajny)

doc: Added www/ap-uwsgi version 2.0.16

(joerg)

+ py-uwsgi

(joerg)

Package the mod_proxy_uwsgi support separately from the main uwsgi
package.

(joerg)

Package the mod_proxy_uwsgi support separately from the main uwsgi
package.

(joerg)

doc: Added devel/py-Pympler version 0.5

(joerg)

+ py-Pympler

(joerg)

Add py-Pympler-0.5:

Pympler is a development tool to measure, monitor and analyze the memory
behavior of Python objects in a running Python application.

By pympling a Python application, detailed insight in the size and the
lifetime of Python objects can be obtained. Undesirable or unexpected
runtime behavior like memory bloat and other ���pymples��� can easily be
identified.

Pympler integrates three previously separate projects into a single,
comprehensive profiling tool. Asizeof provides basic size information for
one or several Python objects, muppy is used for on-line monitoring of a
Python application and the class tracker provides off-line analysis of
the lifetime of selected Python objects. A web profiling frontend exposes
process statistics, garbage visualisation and class tracker statistics.

(joerg)

These patches were missing from the initial import.

As they are mentioned in distinfo, I don't think anyone could build this
so far, so no PKGREVISION bump.

(bsiegert)

fontcacheproto: remove obsolete package

(wiz)

mk/pkgconfig-builtin.mk: use more recent package in example in comment

(wiz)

doc: Updated pkgtools/x11-links to 1.07

(wiz)

x11-links: update to 1.07

Remove fontcacheproto

(wiz)

libXfontcache: remove obsolete package

(wiz)

doc: Updated x11/libXfont2 to 2.0.3nb1

(wiz)

libXfont2: remove unnecessary dependency

Bump PKGREVISION.

(wiz)

doc: Updated x11/libXfont to 1.5.4nb1

(wiz)

libXfont: remove unnecessary dependency.

Bump PKGREVISION.

(wiz)

Updated devel/py-hypothesis, net/py-botocore, net/py-boto3, net/py-awscli, devel/py-multipledispatch

(adam)

py-multipledispatch: updated to 0.5.0

0.5.0:
optimize import times
Switch testing to pytest add benchmark test
support PEP484 function argument annotation
setup.py improvements
Convert readthedocs links for their .org -> .io migration for hosted

(adam)

py-awscli: updated to 1.14.50

1.14.50
api-change:ec2: Update ec2 command to latest version
api-change:events: Update events command to latest version
api-change:servicecatalog: Update servicecatalog command to latest version
api-change:storagegateway: Update storagegateway command to latest version
api-change:ssm: Update ssm command to latest version

1.14.49
api-change:application-autoscaling: Update application-autoscaling command to latest version

1.14.48
api-change:ecr: Update ecr command to latest version

(adam)

py-boto3: updated to 1.6.3

1.6.3
api-change:ssm: [botocore] Update ssm client to latest version
api-change:servicecatalog: [botocore] Update servicecatalog client to latest version
api-change:events: [botocore] Update events client to latest version
api-change:storagegateway: [botocore] Update storagegateway client to latest version
api-change:ec2: [botocore] Update ec2 client to latest version

1.6.2
api-change:application-autoscaling: [botocore] Update application-autoscaling client to latest version

1.6.1
api-change:ecr: [botocore] Update ecr client to latest version

1.6.0
enhancement:Stubber: [botocore] Added the ability to add items to response metadata with the stubber.
api-change:sts: [botocore] Update sts client to latest version
api-change:route53: [botocore] Update route53 client to latest version
feature:s3: [botocore] Default to virtual hosted addressing regardless of signature version

(adam)

py-botocore: updated to 1.9.3

1.9.3
api-change:ssm: Update ssm client to latest version
api-change:servicecatalog: Update servicecatalog client to latest version
api-change:events: Update events client to latest version
api-change:storagegateway: Update storagegateway client to latest version
api-change:ec2: Update ec2 client to latest version

1.9.2
api-change:application-autoscaling: Update application-autoscaling client to latest version

1.9.1
api-change:ecr: Update ecr client to latest version

1.9.0
enhancement:Stubber: Added the ability to add items to response metadata with the stubber.
api-change:sts: Update sts client to latest version
api-change:route53: Update route53 client to latest version
feature:s3: Default to virtual hosted addressing regardless of signature version

(adam)

py-hypothesis: updated to 3.47.0

3.47.0:
:obj:~hypothesis.settings.register_profile now accepts keyword arguments for specific settings, and the parent settings object is now optional. Using a name for a registered profile which is not a string was never suggested, but it is now also deprecated and will eventually be an error.

(adam)

Updated devel/py-serpent, multimedia/libdvbpsi

(adam)

libdvbpsi: updated to 1.3.2

Changes between 1.3.1 and 1.3.2:
* Fix bug in dvbpsi_decoder_psi_section_add() set i_last_section_number
* Fix bug in descriptor 0x8a that prevented it from being parsed properly
* Fix bug in descriptor 0x56 generation with multiple teletext page entries
* Fix bug in descriptor 0x41 correct maximum service count

(adam)

py-serpent: updated to 1.24

release 1.24:
fix Python 3.7 deprecation warnings about importing ABC types from collections vs collections.abc

(adam)

doc: add memcached-1.5.6 and rust-1.24.1

(zafer)

Fix compilation error for gettimeofday() on FreeBSD.

Use of gettimeofday() needs __XSI_VISIBLE (that implies _XOPEN_SOURCE
defined) on FreeBSD.

(triaxx)

Updated www/py-django-cors-headers, fonts/py-fonttools, devel/py-test-mock, devel/py-txaio

(adam)

py-txaio: updated to 2.9.0

2.9.0:
Unknown changes.

(adam)

py-test-mock: updated to 1.7.1

1.7.1:
Fix setup.py to correctly read the README.rst.

(adam)

py-fonttools: updated to 3.24.0

3.24.0:
[ttGlyphPen] Decompose composite glyphs if any components' transform is too large to fit a F2Dot14 value, or clamp transform values that are (almost) equal to +2.0 to make them fit and avoid decomposing.
[ttx] Added new -g option to dump glyphs from the glyf table splitted as individual ttx files.
Copied ufoLib.filenames module to fontTools.misc.filenames, used for the ttx split-glyphs option .
[feaLib] Added support for cvParameters blocks in Character Variant feautures cv01-cv99.
[Snippets] Added checksum.py script to generate/check SHA1 hash of ttx files.
[varLib.mutator] Fixed issue while instantiating some variable fonts whereby the horizontal advance width computed from gvar phantom points could turn up to be negative.
[varLib/subset] Fixed issue with subsetting GPOS variation data not picking up ValueRecord Device objects (54fd71f).
[feaLib/voltLib] In all AST elements, the location is no longer a required positional argument, but an optional kewyord argument (defaults to None). This will make it easier to construct feature AST from code

(adam)

py-django-cors-headers: updated to 2.2.0

2.2.0:
Django 2.0 compatibility. Again there were no changes to the actual library code, so previous versions probably work.
Ensured that request._cors_enabled is always a bool() - previously it could be set to a regex match object.

(adam)

doc: Updated lang/nodejs to 9.7.1

(fhajny)

lang/nodejs: Update to 9.7.1.

- libuv: Updated to libuv 1.19.2
- src: Add initial support for Node.js-specific post-mortem
  metadata
- timers: The return value of setImmediate() now has ref() and
  unref() methods
- util: It is now possible to get the name for a numerical
  platform-specific error code as a string

(fhajny)

doc: Updated devel/gradle to 4.6

(fhajny)

devel/gradle: Update to 4.6

== Gradle 4.6

- JUnit 5 support
- Fail fast option for Test tasks
- Allow declared reasons for dependency and resolution rules
- Dependency constraints for transitive dependencies
- BOM import
- Support for optional dependencies in POM consumption
- Compile/runtime scope separation in POM consumption
- Customizable metadata file resolution
- Convenient declaration of annotation processor dependencies
- Tasks API allows custom command-line options
- Rich command-line arguments for Test, JavaExec or Exec tasks
- Logging options for debugging build caching
- Caching for Scala compilation when using the play plugin
- Improved Visual Studio IDE support for multi-project builds
- Improvements in gradle-native plugins
- Documentation updates
- Honour cache-expiry settings in the presence of detached
  configurations
- Default JaCoCo version upgraded to 0.8.0
- Build cache and task output caching marked stable
- TestKit marked stable
- CompileOptions.annotationProcessorPath now stable
- Bugfixes

Release notes:

  https://docs.gradle.org/4.6/release-notes.html

== Gradle 4.5.1

- Fixed regression in 4.5 where in some rare cases a dependency could
  be imported into a different scope than the one declared
- Fixed problem where NullPointerException could be observed if the
  parent build finished before the different composites
- Fixed regression in Eclipse project generation that could cause a
  sub-project to be added as a dependency to itself

== Gradle 4.5

- C/C++ compilation improvements
- ANTLR task is now cacheable by default
- Documentation enhancements
- Signing artifacts with gpg-agent
- Reduced deprecation logging in console
- Init task can now generate Kotlin DSL build scripts
- New plugin APIs
- Default CodeNarc has been upgraded to 1.0
- Configure executable directory in distributions
- Arbitrary task property names
- Bugfixes

Release notes:

  https://docs.gradle.org/4.5/release-notes.html

(fhajny)

Take maintainership.
Enable scp support.
Bump PKGREVISION.

(sborrill)

Updated devel/SDL2

(adam)

SDL2: updated to 2.0.8

2.0.8:

General:
* Added SDL_fmod() and SDL_log10()
* Each of the SDL math functions now has the corresponding float version
* Added SDL_SetYUVConversionMode() and SDL_GetYUVConversionMode() to control the formula used when converting to and from YUV colorspace. The options are JPEG, BT.601, and BT.709

Windows:
* Implemented WASAPI support on Windows UWP and removed the deprecated XAudio2 implementation
* Added resampling support on WASAPI on Windows 7 and above

Windows UWP:
* Added SDL_WinRTGetDeviceFamily() to find out what type of device your application is running on

Mac OS X:
* Added support for the Vulkan SDK for Mac:
  https://www.lunarg.com/lunarg-releases-vulkan-sdk-1-0-69-0-for-mac/
* Added support for OpenGL ES using ANGLE when it's available

Mac OS X / iOS / tvOS:
* Added a Metal 2D render implementation
* Added SDL_RenderGetMetalLayer() and SDL_RenderGetMetalCommandEncoder() to insert your own drawing into SDL rendering when using the Metal implementation

iOS:
* Added the hint SDL_HINT_IOS_HIDE_HOME_INDICATOR to control whether the home indicator bar on iPhone X should be hidden. This defaults to dimming the indicator for fullscreen applications and showing the indicator for windowed applications.

iOS / Android:
* Added the hint SDL_HINT_RETURN_KEY_HIDES_IME to control whether the return key on the software keyboard should hide the keyboard or send a key event (the default)

Android:
* SDL now supports building with Android Studio and Gradle by default, and the old Ant project is available in android-project-ant
* SDL now requires the API 19 SDK to build, but can still target devices down to API 14 (Android 4.0.1)
* Added SDL_IsAndroidTV() to tell whether the application is running on Android TV

Android / tvOS:
* Added the hint SDL_HINT_TV_REMOTE_AS_JOYSTICK to control whether TV remotes should be listed as joystick devices (the default) or send keyboard events.

Linux:
* Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to control whether the X server should skip the compositor for the SDL application. This defaults to "1"
* Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control whether the Raspberry Pi and KMSDRM video drivers should use double or triple buffering (the default)

(adam)

Enable FreeBSD support

(triaxx)

doc/TODO: +clamav-0.99.4.

(taca)

pkgsrc: reset PKGREVISION after lang/php{56,70,71,72} update

(taca)

lang/php56: update to 5.6.34

01 Mar 2018, PHP 5.6.34

- Standard:
  . Fixed bug #75981 (stack-buffer-overflow while parsing HTTP response). (Stas)

(taca)

lang/php70: update to 7.0.28

01 Mar 2018 PHP 7.0.28

- Standard:
  . Fixed bug #75981 (stack-buffer-overflow while parsing HTTP response). (Stas)

(taca)

lang/php72: update to 7.2.3

01 Mar 2018, PHP 7.2.3

- Core:
  . Fixed bug #75864 ("stream_isatty" returns wrong value on s390x). (Sam Ding)

- Apache2Handler:
  . Fixed bug #75882 (a simple way for segfaults in threadsafe php just with
    configuration). (Anatol)

- Date:
  . Fixed bug #75857 (Timezone gets truncated when formatted). (carusogabriel)
  . Fixed bug #75928 (Argument 2 for `DateTimeZone::listIdentifiers()` should
    accept `null`). (Pedro Lacerda)
  . Fixed bug #68406 (calling var_dump on a DateTimeZone object modifies it).
    (jhdxr)

- LDAP:
  . Fixed bug #49876 (Fix LDAP path lookup on 64-bit distros). (dzuelke)

- libxml2:
  . Fixed bug #75871 (use pkg-config where available). (pmmaga)

- PGSQL:
  . Fixed bug #75838 (Memory leak in pg_escape_bytea()). (ard_1 at mail dot ru)

- Phar:
  . Fixed bug #54289 (Phar::extractTo() does not accept specific directories to
    be extracted). (bishop)
  . Fixed bug #65414 (deal with leading slash while adding files correctly).
    (bishopb)
  . Fixed bug #65414 (deal with leading slash when adding files correctly).
    (bishopb)

- ODBC:
  . Fixed bug #73725 (Unable to retrieve value of varchar(max) type). (Anatol)

- Opcache:
  . Fixed bug #75729 (opcache segfault when installing Bitrix). (Nikita)
  . Fixed bug #75893 (file_get_contents $http_response_header variable bugged
    with opcache). (Nikita)
  . Fixed bug #75938 (Modulus value not stored in variable). (Nikita)

- SPL:
  . Fixed bug #74519 (strange behavior of AppendIterator). (jhdxr)

- Standard:
  . Fixed bug #75916 (DNS_CAA record results contain garbage). (Mike,
    Philip Sharp)
  . Fixed bug #75981 (Prevent reading beyond buffer start in http wrapper).
    (Stas)

(taca)

lang/php71: update to 7.1.15

01 Mar 2018, PHP 7.1.15

- Apache2Handler:
  . Fixed bug #75882 (a simple way for segfaults in threadsafe php just with
    configuration). (Anatol)

- Date:
  . Fixed bug #75857 (Timezone gets truncated when formatted). (carusogabriel)
  . Fixed bug #75928 (Argument 2 for `DateTimeZone::listIdentifiers()` should
    accept `null`). (Pedro Lacerda)
  . Fixed bug #68406 (calling var_dump on a DateTimeZone object modifies it).
    (jhdxr)

- PGSQL:
  . Fixed #75838 (Memory leak in pg_escape_bytea()). (ard_1 at mail dot ru)

- ODBC:
  . Fixed bug #73725 (Unable to retrieve value of varchar(max) type). (Anatol)

- LDAP:
  . Fixed bug #49876 (Fix LDAP path lookup on 64-bit distros). (dzuelke)

- libxml2:
  . Fixed bug #75871 (use pkg-config where available). (pmmaga)

- Phar:
  . Fixed bug #65414 (deal with leading slash when adding files correctly).
    (bishopb)

- SPL:
  . Fixed bug #74519 (strange behavior of AppendIterator). (jhdxr)

- Standard:
  . Fixed bug #75916 (DNS_CAA record results contain garbage). (Mike,
    Philip Sharp)
  . Fixed bug #75981 (stack-buffer-overflow while parsing HTTP response). (Stas)

(taca)

proj: revbump of multiple depdendencies

(gdt)

postgresql-postgis2: revbump for proj

(gdt)

gdal-lib: revbump for proj

(gdt)

libspatialite: revbump for proj

(gdt)

Bump required versions to 5.0.0

There is an ABI break, and the API is changing enough that it's too
hard to figure out if not bumping API is safe.  This is unfortunately
a big change and all of the geospatial world is going to have to cope.

(gdt)

doc: Updated geography/proj to 5.0.0

(gdt)

proj: Update to 5.0.0

5.0.0 Release Notes
-------------------

This version of PROJ introduces some significant extensions and
improvements to (primarily) the geodetic functionality of the system.

The main driver for introducing the new features is the emergence of
dynamic reference frames, the increasing use of high accuracy GNSS,
and the related growing demand for accurate coordinate
transformations.  While older versions of PROJ included some geodetic
functionality, the new framework lays the foundation for turning PROJ
into a generic geospatial coordinate transformation engine.

[see upstream NEWS]

UPDATES
-------

o Introduced new API in proj.h.
  - The new API is orthogonal to the existing proj_api.h API and the
    internally used projects.h API.
  - The new API adds the ability to transform spatiotemporal (4D)
    coordinates.
  - Functions in the new API use the "proj_" namespace.
  - Data types in the new API use the "PJ_" namespace, with a few
    historic exceptions such as XY, XYZ, LP and LPZ.

o Introduced the concept of "transformation pipelines" that makes it
  possible to do complex geodetic transformations of spatiotemporal
  coordinates by daisy chaining simple coordinate operations.

o Introduced cct, the Coordinate Conversion and Transformation
  application.

o Introduced gie, the Geospatial Integrity Investigation Environment.
  - Selftest invoked by -C flag in proj has been removed
  - Ported approx. 1300 built-in selftests to gie format
  - Ported approx. 1000 tests from the gigs test framework
  - Added approx. 200 new tests

o Adopted terminology from the OGC/ISO-19100 geospatial standards
  series. Key definitions are:
  - At the most generic level, a *coordinate operation* is a change
    of coordinates, based on a one-to-one relationship, from one
    coordinate reference system to another.
  - A *transformation* is a coordinate operation in which the two
    coordinate reference systems are based on different datums, e.g.
    a change from a global reference frame to a regional frame.
  - A *conversion* is a coordinate operation in which both
    coordinate reference systems are based on the same datum,
    e.g. change of units of coordinates.
  - A *projection* is a coordinate conversion from an ellipsoidal
    coordinate system to a plane. Although projections are simply
    conversions according to the standard, they are treated as
    separate entities in PROJ as they make up the vast majority
    of operations in the library.

o New operations:
  - The pipeline operator (pipeline)
  - Transformations:
    + Helmert transform (helmert)
    + Horner real and complex polynomial evaluation (horner)
    + Horizontal gridshift (hgridshift)
    + Vertical gridshift (vgridshift)
    + Molodensky transform (molodensky)
    + Kinematic gridshift with deformation model (deformation)
  - Conversions:
    + Unit conversion (unitconvert)
    + Axis swap (axisswap)
  - Projections:
    + Central Conic projection (ccon)

o Significant documentation updates, including
  - Overhaul of the structure of the documentation
  - A better introduction to the use of PROJ
  - A complete reference to the new proj.h API
  - a complete rewrite of the section on geodesic calculations
  - Figures for all projections

o New "free format" option for operation definitions, which
  permits separating tokens by whitespace when specifying key/value-
  pairs, e.g. "proj = merc lat_0 = 45".

o Added metadata to init-files that can be read with the
  proj_init_info() function in the new proj.h API.

o Added ITRF2000, ITRF2008 and ITRF2014 init-files with ITRF
  transformation parameters, including plate motion model
  parameters.

o Added ellipsoid parameters for GSK2011, PZ90 and "danish". The
  latter is similar to the already supported andrae ellipsoid,
  but has a slightly different semimajor axis.

o Added Copenhagen prime meridian.

o Updated EPSG database to version 9.2.0.

o Geodesic library updated to version 1.49.2-c.

o Support for analytical partial derivatives has been removed.

o Improved performance in Winkel Tripel and Aitoff.

o Introduced pj_has_inverse() function to proj_api.h. Checks if an
  operation has an inverse. Use this instead of checking whether
  P->inv exists, since that can no longer be relied on.

o ABI version number updated to 13:0:0.

o Removed support for Windows CE.

o Removed the VB6 COM interface.

BUG FIXES
------------

[various]

DEPRECATIONS
------------

[see upstream NEWS]

(gdt)

decode-dimms is gone

(pgoyette)

doc: Updated x11/xkbcomp to 1.4.1

(wiz)

xkbcomp: update to 1.4.1.

This release adds the path of the xkbcomp executable to the pkgconfig
data, allowing the X server to find the right binary regardless of
where its (the X servers) $prefix is pointed. Without this the X server
will guess that xkbcomp is configured for the same prefix; since the
default prefix is /usr/local, and your distribution certainly did not
install xkbcomp there, 'make check' and 'ninja dist' for the X server
build would fail because Xvfb would not start.

xkbcomp itself has no functional changes in this release.

(wiz)

decode-dimms is gone.  Too much work to get the packaging right.

(pgoyette)

doc: Updated x11/xorgproto to 2018.4

(wiz)

xorgproto: update to 2018.4.

This release updates the specifications and protocol headers for DRI3
and Present to 1.2, and fixes several spelling and grammar errors in
the specification texts.

(wiz)

Fix patch to ignore original's CVS Revision tag; update distinfo accordingly

(pgoyette)

Update distinfo

(pgoyette)

Add decode-dimms

(pgoyette)

Add sysutils/decode-dimms - utility to decode the DIMMs' SPD ROM data

(pgoyette)

gst-plugin1-x264 (yes, really): fix build with x264-devel-20180224

(snj)

Updated x11/qt5

(adam)

qt5: updated to 5.10.1

5.10.1:
Bug fix release.

(adam)

Updated cad/kicad to 4.0.7

(mef)

Updated cad/kicad{,-footprints,-doc,-i18n,-lib} to 4.0.7, provided the patch by @tristelo,

the location of the patch is here:
  https://gist.github.com/steleto/7d03ea70a3b1d6dbd3ad9cc9424b0112#file-pkgsrc_kicad-4-0-7-patch
Hopefull to fix PR/52996, but not checked on the paticular NetBSD release.
Only checked on 8.99.12 so far.
-----------------------------------------------------------
KiCad 4.0.7 Stable Release
2017-08-28
The KiCad project is proud to announce the latest stable
release of KiCad. The 4.0.7 stable version contains critical
bug fixes and other minor improvements since the last
release. It also includes improved footprint, symbol, and 3D
model libraries, translations, and documentation. The stable
release version 4.0.7 is made from the stable 4.0 branch with
bug fixes cherry picked from the development branch of
KiCad. KiCad binaries are available or will be available in
the near future for download for Windows, OSX and Linux, see
the download page for guidance.
  http://kicad-pcb.org/post/release-4.0.7/

KiCad 4.0.6 Stable Release
2017-03-07
The KiCad project is proud to announce the latest stable
release of KiCad. The 4.0.6 stable version contains critical
bug fixes and other minor improvements since the last
release. One other notable change was the replacement of the
Avhttp library with the libcurl library when building the
GitHub plugin. This should allow Linux distributions that are
not compatible with the OpenSSL library license to distribute
KiCad with the GitHub plugin enabled.
  http://kicad-pcb.org/post/release-4.0.6/

KiCad 4.0.5 Stable Release
2016-12-18
The KiCad project is proud to announce a new stable release of
KiCad. The 4.0.5 stable version contains critical bug fixes
and version string improvements since the last release. The
stable release version 4.0.5 is made from the stable 4.0
branch with bug fixes cherry picked from the development
branch of KiCad. KiCad binaries are available or will be
available in the near future for download for Windows, OSX and
Linux, see the download page for guidance.
  http://kicad-pcb.org/post/release-4.0.5/

(mef)

doc: Updated databases/mongo-c-driver to 1.9.3

(fhajny)

databases/mongo-c-driver: Update to 1.9.3.

- Fix a session-management bug that could cause an authentication error
  while connected to MongoDB 3.6+ and iterating a cursor
- Permit the $gleStats modifier with mongoc_collection_aggregate.

(fhajny)

doc: Updated devel/libbson to 1.9.3

(fhajny)

devel/libbson: Update to 1.9.3.

- No change since 1.9.2; released to keep pace with libmongoc's version.

(fhajny)

doc: Updated www/passenger to 5.2.1

(fhajny)

www/*passenger: Update to 5.2.1.

- Fixes a regression from 5.1.11 that prevented Passenger from
  compiling on FreeBSD in some cases.
- Fixes a bounds issue in printing an error message that could occur
  in some cases when spawning a child process fails.
- Fixes a regression from 5.2.0 which prevented setting the max pool
  idle time to 0.
- Warns if using an incompatible compiler on macOS < 10.13.
- No longer uses Security Framework on macOS 10.13+. This will prevent
  further keychain warnings from appropriately compiled Passengers.
- Fixes warning on macOS about /proc/self access (excluded some code
  that was intended only for Linux).
- `passenger-install-nginx-module` now downloads the preferred Nginx
  version via https.
- [Apache] Fixes a regression from 5.2.0 that caused a crash on
  startup when no top-level ServerName is set.
- [Enterprise] Adds support for using RAM-based pricing on Heroku.

(fhajny)

doc: Updated databases/py-peewee to 3.1.1

(fhajny)

databases/py-peewee: Update to 3.1.1.

- Fixed bug when using Model.alias() when the model defined a
  particular database schema.
- Added SchemaManager.create_foreign_key API to simplify adding
  constraints when dealing with circular foreign-key relationships.
- Improved implementation of Migrator.add_foreign_key_constraint so
  that it can be used with Postgresql (in addition to MySQL).
- Added PickleField to the playhouse.fields module. Docs.
- Fixed bug in implementation of CompressedField when using Python 3.
- Added KeyValue API in playhouse.kv module. Docs.
- More test cases for joining on sub-selects or common table
  expressions.

(fhajny)

doc: update dovecot2-* packages to 2.0.3.1

mail/dovecot2-gssapi
mail/dovecot2-ldap
mail/dovecot2-mysql
mail/dovecot2-pgsql
mail/dovecot2-sqlite

(taca)

doc: Updated mail/dovecot2 to 2.3.0.1

(taca)

mail/dovecot2: update to 2.3.0.1

Small patch release to fix the worst bugs in v2.3.0. v2.3.1 is coming in about a month with a lot more changes.

* CVE-2017-15130: TLS SNI config lookups may lead to excessive
  memory usage, causing imap-login/pop3-login VSZ limit to be reached
  and the process restarted. This happens only if Dovecot config has
  local_name { } or local { } configuration blocks and attacker uses
  randomly generated SNI servernames.
* CVE-2017-14461: Parsing invalid email addresses may cause a crash or
  leak memory contents to attacker. For example, these memory contents
  might contain parts of an email from another user if the same imap
  process is reused for multiple users. First discovered by Aleksandar
  Nikolic of Cisco Talos. Independently also discovered by "flxflndy"
  via HackerOne.
* CVE-2017-15132: Aborted SASL authentication leaks memory in login
  process.
* Linux: Core dumping is no longer enabled by default via
  PR_SET_DUMPABLE, because this may allow attackers to bypass
  chroot/group restrictions. Found by cPanel Security Team. Nowadays
  core dumps can be safely enabled by using "sysctl -w
  fs.suid_dumpable=2". If the old behaviour is wanted, it can still be
  enabled by setting:
  import_environment=$import_environment PR_SET_DUMPABLE=1
- imap-login with SSL/TLS connections may end up in infinite loop

(taca)

Updated net/libcares, fonts/py-fonttools

(adam)

py-fonttools: updated to 3.23.0

3.23.0:
[designspaceLib] Added an optional lib element to the designspace as a whole, as well as to the instance elements, to store arbitrary data in a property list dictionary, similar to the UFO窶冱 lib. Added an optional font attribute to the SourceDescriptor, to allow operating on in-memory font objects.
[cffLib] Fixed issue with lazy-loading of attributes when attempting to set the CFF TopDict.Encoding.
[ttx] Fixed regression introduced in 3.22.0 that affected the split tables -s option.
[feaLib] Added IncludedFeaNotFound custom exception subclass, raised when an included feature file cannot be found.
[otTables] Changed VarIdxMap to use glyph names internally instead of glyph indexes. The old ttx dumps of HVAR/VVAR tables that contain indexes can still be imported.
[varLib] Implemented VarStore optimizer.
[subset] Implemented pruning of GDEF VarStore, HVAR and MVAR.
[sfnt] Restore backward compatiblity with numFonts attribute of SFNTReader object.
[merge] Initial support for merging LangSysRecords.
[ttCollection] don窶冲 seek(0) when writing to possibly unseekable strems.
[subset] Keep all --name-IDs from 0 to 6 by default.
[cffLib] Added width module to calculate optimal CFF default and nominal glyph widths.
[varLib] Don窶冲 fail if STAT already in the master fonts

(adam)

libcares: updated to 1.14.0

c-ares version 1.14.0:

Changes:
android: Introduce new ares_library_init_android() call for Oreo support

Bug fixes:
Fix patch for CVE-2017-1000381 to not be overly aggressive
win32: Preserve DNS server order returned by Windows when sorting and exclude DNS servers in legacy subnets
win32: Support most recent Visual Studio 2017
gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
win32: Exclude legacy ipv6 subnets
android: Applications compiled for Oreo can no longer use __system_property_get and must use Java calls to retrieve DNS servers
win32: Force use of ANSI functions
CMake minimum version is now 3.1
ares_gethostbyname.3: fix callback status values
docs: Document WSAStartup requirement
Fix a typo in init_by_resolv_conf
Android JNI code leaks local references in some cases
Force using the ANSI versions of WinAPI functions

(adam)

Updated devel/py-cffi, finance/py-braintree, devel/py-test-xdist, textproc/py-creole

(adam)

py-creole: updated to 1.3.2

1.3.2:
Adding optional img size to creole2html and html2creole
run tests also with python 3.5 and 3.6

(adam)

py-test-xdist: updated to 1.22.2

1.22.2:
Add backward compatibility for slaveoutput attribute to WorkerController instances.

(adam)

py-braintree: updated to 3.42.0

3.42.0:
Add support for association_filter_id in Customer#find

(adam)

py-cffi: updated to 1.11.5

v1.11.5

* Issue 357_: fix ffi.emit_python_code() which generated a buggy
  Python file if you are using a struct with an anonymous union
  field or vice-versa.

* Windows: ffi.dlopen() should now handle unicode filenames.

* ABI mode: implemented ffi.dlclose() for the in-line case (it used
  to be present only in the out-of-line case).

* Fixed a corner case for setup.py install --record=xx --root=yy
  with an out-of-line ABI module.  Also fixed Issue 345_.

* More hacks on Windows for running CFFI's own setup.py.

* Issue 358_: in embedding, to protect against (the rare case of)
  Python initialization from several threads in parallel, we have to use
  a spin-lock.  On CPython 3 it is worse because it might spin-lock for
  a long time (execution of Py_InitializeEx()).  Sadly, recent
  changes to CPython make that solution needed on CPython 2 too.

* CPython 3 on Windows: we no longer compile with Py_LIMITED_API
  by default because such modules cannot be used with virtualenv.
  Issue 350_ mentions a workaround if you still want that and are not
  concerned about virtualenv: pass a define_macros=[("Py_LIMITED_API",
  None)] to the ffibuilder.set_source() call.

(adam)

Updated misc/libreoffice to 6.0.1.1nb1

(ryoon)

Do not share NSS database files with Mozilla products. Bump PKGREVISION

In some case, cert8.db/key3.db/secmod.db in MDB format
from Mozilla Products causes crash on opening XML-based document.
Use LibreOffice own NSS database.
XML and PDF signing with X.509 certificate is not tested.

(ryoon)

doc: Updated net/quagga to 1.2.4

(gdt)

quagga: Update to 1.2.4

This update (from 1.2.2) contains bug fixes, including fixes for
security issues described at:
https://www.quagga.net/security/Quagga-2018-0543.txt
https://www.quagga.net/security/Quagga-2018-1114.txt
https://www.quagga.net/security/Quagga-2018-1550.txt
https://www.quagga.net/security/Quagga-2018-1975.txt

(gdt)

doc: note update of ISC DHCP packages to 4.3.6p1

net/isc-dhcp4
net/isc-dhclient4
net/isc-dhcpd4
net/isc-dhcrelay4

(taca)

net/isc-dhcp4: update to 4.3.6p1 (ISC DHCP 4.3.6-P1)

Changes since 4.3.6

!- Plugged a socket descriptor leak in OMAPI, that can occur when there is
  data pending to be written to an OMAPI connection, when the connection
  is closed by the reader.
  [ISc-Bugs #46767]

! Corrected an issue where large sized 'X/x' format options were causing
  option handling logic to overwrite memory when expanding them to human
  readable form. Reported by Felix Wilhelm, Google Security Team.
  [ISC-Bugs #47139]
  CVE: CVE-2018-5732

! Option reference count was not correctly decremented in error path
  when parsing buffer for options. Reported by Felix Wilhelm, Google
  Security Team.
  [ISC-Bugs #47140]
  CVE: CVE-2018-5733

(taca)