doc: Updated mail/p5-Mail-Box to 3.005

(wiz)

p5-Mail-Box: update to 3.005.

verison 3.005: Sun Mar  4 21:48:38 CET 2018

Changes:
- code trusted on "perl -w", but now added many "use warnings".

Improvements:
- spell fixes rt.cpan.org #12400 [Damyan Ivanov] (Debian)
- remove license file: now in README.md
  rt.cpan.org#124057 [Petr Pisar]
- remove Mail/Box-Shorts.pod: already consumed somewhere else
  rt.cpan.org#124056 [Petr Pisar]
- converted to GIT, publish to  GitHub
- check produced pods

(wiz)

doc: Updated mail/p5-Email-Address to 1.909

(wiz)

p5-Email-Address: update to 1.909.

1.909    2018-03-04 22:07:12-05:00 America/New_York
        - add some docs saying "don't use this, it can be busted"

(wiz)

doc: Updated devel/p5-Test2-Suite to 0.000106

(wiz)

p5-Test2-Suite: update to 0.000106.

0.000106  2018-03-06 13:10:55-08:00 America/Los_Angeles

    - No changes since trial

0.000105  2018-03-06 09:13:36-08:00 America/Los_Angeles (TRIAL RELEASE)

    - Fix nesting bug in Test2::Workflow

0.000104  2018-03-05 09:27:44-08:00 America/Los_Angeles

    - Add Data::Dumper to dep list (#154)

0.000103  2018-03-02 13:00:54-08:00 America/Los_Angeles (TRIAL RELEASE)

    - AsyncSubtest now works with UUIDs and adds other proper meta-data

(wiz)

doc: Updated devel/p5-String-Format to 1.18

(wiz)

p5-String-Format: update to 1.18.

* stable version with the changes in 1.17_50

# Version 1.17_50                                        March 03,  2018

* escape { and } (fix for RT #124147)

(wiz)

doc: Updated devel/p5-Module-FromPerlVer to 0.001000

(wiz)

p5-Module-FromPerlVer: update to 0.001000.

-  v0.1.0 Tue Mar  6 12:38:07 CST 2018

    Passes all Dir tests on all platforms, bump up version.

    POD.

-  v0.0.7 Mon Mar  5 23:06:03 CST 2018

    Correct error in Makefile.PL.

    Added tests.

-  v0.0.6

    POD cleanups.

    Copy message "files" => "files/dirs" to avoid confusion with
    list of files displayed.

(wiz)

xf86-video-chips: remove obsolete workaround for missing file in distfile.

(wiz)

Updated security/py-ntlm-auth, fonts/py-fonttools

(adam)

py-fonttools: updated to 3.24.1

3.24.1:
[varLib] Don't remap the same DeviceTable twice in VarStore optimizer.
[varLib] Add --disable-iup option to fonttools varLib script, and a optimize=True keyword argument to varLib.build function, to optionally disable IUP optimization while building varfonts.
[ttCollection] Fixed issue while decompiling ttc with python3

(adam)

py-ntlm-auth: updated to 1.1.0

1.1.0:
Removed DES code as the license was found to be incorrect from the source
Added new DES code not based on the original
Fixed up some deprecation warnings
Changed tests from running unittest to py.test
Changed licence from GPL to MIT as code is not all my own

(adam)

gnuserv: include bsd.prefs.mk for X11_TYPE

Comment out dead links.

(wiz)

Updated www/libsass, www/sassc

(adam)

sassc: updated to 3.5.0

3.5.0:
This is the SassC for LibSass 3.5.0

(adam)

libsass: updated to 3.5.0

3.5.0:
Features
Implement trailing commas in parameters and arguments
Implement deprecation warning for ID strings that look like colors
Implement content-exists function
Implement support for passing var() to CSS functions
Implement first class functions
Implement nesting guard to avoid "out of stack space"
Implement exponents for numbers
Implement long file path support for Windows
Implement case modifier for attribute selector
Implement warning for double parent selectors
Implement support for custom property syntax
Implement support for custom-property feature flag

Optimisations
Performance improvements
Fix memory leak by removing previously unused code
Fix memory leak of custom functions signature

Community
Add libsass-python to Readme
Update link to go-libsass

Fixes
Fix media query stack and eval issue
Fix Attribute Selector equal compare operator
Fix segfault for varargs with non-string keys
Fix Element Selector compare operators
Fix compiler issue with spec regression on NetBSD 6.1
Fix some segfaults caused by the parser being too forgiving
Fix segfault with invalid map keys
Fix null pointer dereference in css_error
Fix bug when parsing selector schemas
Fix null pointer dereference when parsing selector schemas
Fix .editorconfig
Fix compiler issue with spec regression on NetBSD 6.1
Fix segfault when extending pseudo selectors failed
Fix parser for urls looking like ruleset selectors
Fix use of non-portable std::to_string
Fix use of non-portable strdup
Fix unary slash expressions
Fix missing error for trailing comma in selector list
Fix selector and binominal look ahead
Fix hex escape handling in interpolation
Fix wrong parsing of calc functions as number units
Fix incorrect comment evaluation for compressed output
Fix parent selector handling in selector schema
Fix parameter vararg and keyword handling
Fix a few minor memory leaks
Fix issue with invalid error indicator
Fix selector parsing and url regression
Fix null ptr segv on invalid vararg
Fix segfault in selector extend edge-case
Fix segfault in selector extend edge-case
Fix segfault in selector append edge-case
Fix ref-counted value handling in if function
Fix segfault in at-root cssize edge-case
Fix file content malloc to avoid reading beyond buffer
Fix case-sensitive lookup to named color map
Fix shebang for tap-driver
Fix segfault in parser edge case
Fix memory corruption on error in parse_selector_schema
Fix autoconf path for sassc tester
Fix output of invisible @support blocks
Fix to_value for bracketed lists
Fix propagation of named rest arguments
Fix @extend of wrapped selectors
Fix wrapped pseudo selector handling
Fix minor issue with attribute selector unification
Fix issue when passing restargs to call
Fix compressing of colors in selectors
Fix missing error on selector with invalid quote mark
Fix travis-ci mac OSX builds
Fix endless loop comparing Selector_List to List
Fix SmartOS/Solaris build regression
Fix to connect parent selector only once
Fix whitespace issue for wrapped selectors
Fix missing error if cwd goes missing
Fix missing error when mixin ruleset in root has parent selector
Fix sourcemap crutch once again
Fix parser state column following static values
Fix error indicator not being Unicode aware
Fix error sourcemaps not being fully Unicode aware
Fix some compiler warnings
Fix math with multiple units
Fix css test for interpolated numbers
Fix null pointer access in nesting check
Fix @else possibly producing invalid output
Fix parsing of @supports declarations

(adam)

Updated www/py-pylint-django, www/py-asgiref

(adam)

py-asgiref: updated to 2.2.0

2.2.0:
* Cancelled tasks now correctly cascade-cancel their children
* Communicator.wait() no longer re-raises CancelledError from inner coroutines

(adam)

py-pylint-django: updated to 0.9.3

0.9.3:
Fix 133 and 134 by including package data when building wheel and tar.gz packages for PyPI

0.9.2:
Fix 129 - Move tests under site-packages/pylint_django
Fix 96 - List Django as a dependency

(adam)

Added security/py-libnacl; Updated security/py-cryptodome

(adam)

py-cryptodome: updated to 3.5.0

New features
* Import and export of ECC curves in compressed form.
* The initial counter for a cipher in CTR mode can be a byte string (in addition to an integer).
* Faster PBKDF2 for HMAC-based PRFs (at least 20x for short passwords, more for longer passwords). Thanks to Christian Heimes for pointing out the implementation was under-optimized.
* The salt for PBKDF2 can be either a string or bytes.

Resolved issues
* Without libgmp, modular exponentiation (since v3.4.8) crashed on 32-bit big-endian systems.

Breaks in compatibility
* Removed support for Python < 2.6.

(adam)

py-libnacl: added version 1.6.1

This library is used to gain direct access to the functions exposed by Daniel
J. Bernstein's nacl library via libsodium. It has been constructed to maintain
extensive documentation on how to use nacl as well as being completely
portable. The file in libnacl/__init__.py can be pulled out and placed directly
in any project to give a single file binding to all of nacl.

(adam)

py-cookiecutter: remove patch that was removed from distinfo

(wiz)

math/R: Add missing dependencies to buildlink3.mk

(minskim)

doc: Added finance/R-tseries version 0.10.43

(minskim)

finance/Makefile: Add R-tseries

(minskim)

finance/R-tseries: Import version 0.10.43

Time series analysis and computational finance.

(minskim)

math/R-nloptr: Use pkg-config to set link options properly

(minskim)

doc: Updated net/knot to 2.4.5

(pettai)

Knot DNS 2.4.5 (2017-06-23)
===========================

Security:
---------
- Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!)

Bugfixes:
---------
- Corner case journal fixes (huge changesets, OpenWRT operation)

Knot DNS 2.4.4 (2017-06-05)
===========================

Improvements:
-------------
- Improved error handling in kjournalprint

Bugfixes:
---------
- Zone flush not replanned upon unsuccessful flush
- Journal inconsistency after deleting deleted zone
- Zone events not rescheduled upon server reload (Thanks to Mark Warren)
- Unreliable LMDB mapsize detection in kjournalprint
- Some minor issues found by AddressSanitizer

Knot DNS 2.4.3 (2017-04-11)
===========================

Improvements:
-------------
- New 'journal-db-mode' optimization configuration option
- The default TSIG algorithm for utilities input is HMAC-SHA256
- Implemented sensible default EDNS(0) padding policy (Thanks to D. K. Gillmor)
- Added some more semantic checks on the knotc configuration operations

Bugfixes:
---------
- Missing 'zone' keyword in the YAML output
- Missing trailing dot in the keymgr DS owner output
- Journal logs 'invalid parameter' in several cases
- Some minor journal-related problems

Knot DNS 2.4.2 (2017-03-23)
===========================

Features:
---------
- Zscanner can store record comments placed on the same line
- Knotc status extension with version, configure, and workers parameters

Improvements:
-------------
- Significant incoming XFR speed-up in the case of many zones

Bugfixes:
---------
- Double OPT RR insertion when a global module returns KNOT_STATE_FAIL
- User-driven zscanner parsing logic inconsistency
- Lower serial at master doesn't trigger any errors
- Queries with too long DNAME substitution do not return YXDOMAIN response
- Incorrect elapsed time in the DDNS log
- Failed to process forwarded DDNS request with TSIG

Knot DNS 2.4.1 (2017-02-10)
===========================

Improvements:
-------------
- Speed-up of rdata addition into a huge rrset
- Introduce check of minumum timeout for next refresh
- Dnsproxy module can forward all queries without local resolving

Bugfixes:
--------
- Transfer of a huge rrset goes into an infinite loop
- Huge response over TCP contains useless TC bit instead of SERVFAIL
- Failed to build utilities with disabled daemon
- Memory leaks during keys removal
- Rough TSIG packet reservation causes early truncation
- Minor out-of-bounds string termination write in rrset dump
- Server crash during stop if failed to open timers DB
- Failed to compile on OS X older than Sierra
- Poor minimum UDP-max-size configuration check
- Failed to receive one-record-per-message IXFR-style AXFR
- Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message

Knot DNS 2.4.0 (2017-01-18)
===========================
- Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message

Knot DNS 2.4.0 (2017-01-18)
===========================

Bugfixes:
--------
- False positive semantic-check warning about invalid bitmap in NSEC
- Unnecessary SOA queries upon notify with up to date serial
- Timers for expired zones are reset on reload
- Zone doesn't expire when the server is down
- Failed to handle keys with duplicate keytags
- Per zone module and global module insconsistency
- Obsolete online signing module configuration
- Malformed output from kjournalprint
- Redundant SO_REUSEPORT activation on the TCP socket
- Failed to use higher number of background workers

Improvements:
-------------
- Lower memory consumption with qp-trie
- Zone events and zone timers improvements
- Print all zone names in the FQDN format
- Simplified query module interface
- Shared TCP connection between SOA query and transfer
- Response Rate Limiting as a module with statistics support
- Key filters in keymgr

Features:
---------
- New unified LMDB-based zone journal
- Server statistics support
- New statistics module for traffic measuring
- Automatic deletion of retired DNSSEC keys
- New control logging category

(pettai)

doc: Updated www/contao45 to 4.5.6

(taca)

www/contao45: update to 4.5.6

Contao 4.5.5 is available 2018/03/06 11:04 by Leo Feyer

Contao version 4.5.5 is available. The bugfix release fixes problems with
using InnoDB without the innodb_large_prefix option.

Contao 4.5.6 is available 2018/03/06 15:53 by Leo Feyer

Contao version 4.5.6 is available. The bugfix release fixes a problem with new
installations with InnoDB without large prefixes.

(taca)

doc: Updated emulators/ucon64 to 2.1.0nb1

(wiz)

ucon64: add patches from upstream to improve build on NetBSD.

Bump PKGREVISION.

(wiz)

doc: Updated x11/xdriinfo to 1.0.6

(wiz)

xdriinfo: update to 1.0.6.

Alan Coopersmith (1):
      xdriinfo 1.0.6

Emil Velikov (1):
      autogen.sh: use quoted string variables

Hans de Goede (1):
      Fix xdriinfo not working with glvnd

Mihail Konev (1):
      autogen: add default patch prefix

Peter Hutterer (1):
      autogen.sh: use exec instead of waiting for configure to finish

(wiz)

doc: Updated wm/twm to 1.0.10

(wiz)

twm: update to 1.0.10.

This release of twm was made possible by contributions from members of the
NetBSD project and viewers like you.

Alan Coopersmith (1):
      twm 1.0.10

Christos Zoulas (1):
      Add some const.

Emil Velikov (1):
      autogen.sh: use quoted string variables

Michael van Elst (1):
      Do not try to extend the font-pattern with a wild-card.

Mihail Konev (1):
      autogen: add default patch prefix

Peter Hutterer (1):
      autogen.sh: use exec instead of waiting for configure to finish

Thomas Klausner (1):
      Adapt callers to ExpandFilename change.

(wiz)

doc: Updated time/oclock to 1.0.4

(wiz)

oclock: update to 1.0.4.

Alan Coopersmith (6):
      Remove unused function TDrawArc
      Reduce scope of variables in check_jewel_poly
      config: Add missing AC_CONFIG_SRCDIR
      configure: Drop AM_MAINTAINER_MODE
      autogen.sh: Honor NOCONFIGURE=1
      oclock 1.0.4

Emil Velikov (1):
      autogen.sh: use quoted string variables

Mihail Konev (1):
      autogen: add default patch prefix

Peter Hutterer (1):
      autogen.sh: use exec instead of waiting for configure to finish

(wiz)

doc: Updated fonts/mkfontscale to 1.1.3

(wiz)

mkfontscale: update to 1.1.3.

Alan Coopersmith (1):
      mkfontscale 1.1.3

Emil Velikov (1):
      autogen.sh: use quoted string variables

Jeremy Huddleston Sequoia (1):
      mkfontscale: Avoid a buffer underrun

Mihail Konev (1):
      autogen: add default patch prefix

Peter Hutterer (1):
      autogen.sh: use exec instead of waiting for configure to finish

Stefan Dirsch (1):
      fix handling of Type1 fonts without /FamilyName and/or /FullName

(wiz)

doc: Updated x11/xf86-video-ati to 18.0.0

(wiz)

xf86-video-ati: update to 18.0.0.

I'm pleased to announce the 18.0.0 release of xf86-video-ati, the Xorg
driver for ATI/AMD Radeon GPUs supported by the radeon kernel driver.
This release supports xserver versions 1.13-1.19. It also works with
xserver 1.20 RC1, so unless something unexpected happens, it should work
with xserver 1.20 as well.

Highlights:

* New year-based versioning scheme
* Page flipping can now be used even when the HW cursor can't be used in
  some cases
* Support for 30-bit RGB colour output. Note that gamma correction is
  currently not available with 30-bit colour. Also, GLAMOR hardware
  acceleration is not available with 30-bit colour with xserver versions
  before 1.20.

Plus other improvements and fixes. Thanks to everybody who contributed
to this release in any way!

(wiz)

doc: Updated x11/libdrm to 2.4.91

(wiz)

libdrm: update to 2.4.91.

    Andrey Grodzovsky (1):
      amdgpu: Fix mistake in initial hole size calculation.

    Christian K旦nig (3):
      amdgpu: mostly revert "use the high VA range if possible v2"
      amdgpu: add AMDGPU_VA_RANGE_HIGH
      amdgpu: fix "add AMDGPU_VA_RANGE_HIGH"

    Chunming Zhou (1):
      test/amdgpu: disable bo eviction test by default

    Eric Engestrom (1):
      meson: add configuration summary

    Heiko Becker (1):
      *-symbol-check: Don't hard-code nm executable

    Igor Gnatenko (1):
      meson: do not use cairo/valgrind if disabled

    Jonathan Gray (1):
      meson/configure.ac: pthread-stubs not present on OpenBSD

    Marek Ol邸叩k (2):
      meson: bump the version number
      RELEASING: mention meson

    Michel D辰nzer (1):
      tests/amdgpu: Fix misspellings of "suite"

    Rob Clark (2):
      freedreno: add interface to get buffer address
      bump version for release

    Rob Herring (4):
      android: revert making handle magic and version members const
      android: fix mis-named alloc_handle_t
      android: add helper to convert buffer_handle_t to gralloc_handle_t ptr
      android: fix gralloc_handle_create() problems

    Thierry Reding (2):
      drm/fourcc: Fix fourcc_mod_code() definition
      drm/tegra: Sanitize format modifiers

(wiz)

xorgproto: make it a build dependency by default.

(wiz)

xorgproto: use xorgproto instead of separate *proto packages

Remove now obsolete packages.

(wiz)

doc: Updated devel/kafka to 1.0.1

(fhajny)

devel/kafka: Update to 1.0.1.

Improvement
- Kafka metrics templates used in document generation should maintain
  order of tags
- Consolidate MockTime implementations between connect and clients
- Fix repeated words words in JavaDoc and comments.
- Cache lastEntry in TimeIndex to avoid unnecessary disk access
- AbstractIndex should cache index file to avoid unnecessary disk
  access during resize()
- Have State Stores Restore Before Initializing Toplogy
- SSLTransportLayer should keep reading from socket until either the
  buffer is full or the socket has no more data
- Improve KTable Source state store auto-generated names

Bug
- QueryableStateIntegrationTest.concurrentAccess is failing
  occasionally in jenkins builds
- KafkaProducer is not joining its IO thread properly
- Kafka connect: error with special characters in connector name
- Streams metrics tagged incorrectly
- ClassCastException in BigQuery connector
- ClientQuotaManager threads prevent shutdown when encountering an
  error loading logs
- Streams configuration requires consumer. and producer. in order to
  be read
- Timestamp on streams directory contains a colon, which is an illegal
  character
- Add methods in Options classes to keep binary compatibility with
  0.11
- RecordQueue.clear() does not clear MinTimestampTracker's maintained
  list
- Selector memory leak with high likelihood of OOM in case of down
  conversion
- GlobalKTable never finishes restoring when consuming transactional
  messages
- IllegalArgumentException if 1.0.0 is used for
  inter.broker.protocol.version or log.message.format.version
- Using standby replicas with an in memory state store causes Streams
  to crash
- Issues with protocol version when applying a rolling upgrade to
  1.0.0
- A metric named 'XX' already exists, can't register another one.
- Flaky Unit test:
  KStreamKTableJoinIntegrationTest.shouldCountClicksPerRegionWithNonZeroByteCache
- AbstractCoordinator not clearly handles NULL Exception
- Request logging throws exception if acks=0
- KTable state restore fails after rebalance
- Make loadClass thread-safe for class loaders of Connect plugins
- Inconsistent protocol type for empty consumer groups
- Broken symlink interrupts scanning the plugin path
- NetworkClient should not return internal failed api version
  responses from poll
- Topic can not be recreated after it is deleted
- mBeanName should be removed before returning from
  JmxReporter#removeAttribute()
- Connect: Struct equals/hashCode method should use Arrays#deep*
  methods
- kafka-acls regression for comma characters (and maybe other
  characters as well)
- punctuate with WALL_CLOCK_TIME triggered immediately
- Update KStream JavaDoc with regard to KIP-182
- StackOverflowError in kafka-coordinator-heartbeat-thread
- Fix StateRestoreListener To Use Correct Batch Ending Offset
- NullPointerException on KStream-GlobalKTable leftJoin when
  KeyValueMapper returns null
- Non-aggregation KTable generation operator does not construct value
  getter correctly
- When enable trace level log in mirror maker, it will throw null
  pointer exception and the mirror maker will shutdown
- Enforce layout of dependencies within a Connect plugin to be
  deterministic
- Connect: Some per-task-metrics not working
- Broker leaks memory and file descriptors after sudden client
  disconnects

Test
- KafkaStreamsTest fails in trunk
- SelectorTest may fail with ConcurrentModificationException

(fhajny)

doc: Updated lang/nodejs6 to 6.13.1

(fhajny)

lang/nodejs6: Update to 6.13.1.

http, tls:
- better support for IPv6 addresses

(fhajny)

doc: Updated lang/nodejs8 to 8.10.0

(fhajny)

lang/nodejs8: Update to 8.10.0

deps:
- update V8 to 6.2.414.46
- revert ABI breaking changes in V8 6.2
- upgrade libuv to 1.19.1
- re land npm 5.6.0
- ICU 60 bump
crypto:
- Support both OpenSSL 1.1.0 and 1.0.2
- warn on invalid authentication tag length
async_hooks:
- update defaultTriggerAsyncIdScope for perf
- use typed array stack as fast path
- use scope for defaultTriggerAsyncId
- separate missing from default context
- rename initTriggerId
- deprecate undocumented API
- add destroy event for gced AsyncResources
- add trace events to async_hooks
- set HTTPParser trigger to socket
- add provider types for net server
n-api:
- add helper for addons to get the event loop
cli:
- add --stack-trace-limit to NODE_OPTIONS
console:
- add support for console.debug
module:
- add builtinModules
- replace default paths in require.resolve()
src:
- add helper for addons to get the event loop
- add process.ppid
http:
- support generic `Duplex` streams
- add rawPacket in err of `clientError` event
- better support for IPv6 addresses
net:
- remove ADDRCONFIG DNS hint on Windows
process:
- fix reading zero-length env vars on win32
tls:
- unconsume stream on destroy
process:
- improve unhandled rejection message
stream:
- remove usage of *State.highWaterMark
trace_events:
- add executionAsyncId to init events

(fhajny)

Updated graphics/graphite2 to 1.3.11

(ryoon)

Update to 1.3.11

Changelog:
1.3.11
    . Fixes due to security review
    . Minor collision avoidance fixes
    . Fix LZ4 decompressor against high compression

(ryoon)

libmaa: set MAKE_JOBS_SAFE to "NO" (for now)

(cheusov)

doc: Updated devel/libmaa to 1.4.2

(cheusov)

Update libmaa to 1.4.2
  Fix build failure on SunOS-5.11 (alloca)

(cheusov)

doc: Updated devel/mk-configure to 0.30.0

(cheusov)

Update to version 0.30.0

  Variables MKC_{CHECK,REQUIRE}_HEADER_FILES were introduced.

  Improvements and addons to regression tests.

  Improvements and minor fixes in mkc_check_{header,decl,funclib,sizeof}
  This may fix checking failure if -Werror=strict-prototyping
      is passed to CFLAGS.

  OBJDIR_<project> is now set correctly if MAKEOBJDIRPREFIX is set.

(cheusov)

doc: Updated inputmethod/librime to 1.0nb8

(wiz)

librime: back out unintended change.

(wiz)

librime: Fix compilation with gcc 6.

Return boolean where the function definition has boolean return type.

(wiz)

Updated security/sudo

(adam)

sudo: updated to 1.8.22

What's new in Sudo 1.8.22

* Commands run in the background from a script run via sudo will
  no longer receive SIGHUP when the parent exits and I/O logging
  is enabled.

* A particularly offensive insult is now disabled by default.

* The description of "sudo -i" now correctly documents that
  the "env_keep" and "env_check" sudoers options are applied to
  the environment.

* Fixed a crash when the system's host name is not set.

* The sudoers2ldif script now handles #include and #includedir
  directives.

* Fixed a bug where sudo would silently exit when the command was
  not allowed by sudoers and the "passwd_tries" sudoers option
  was set to a value less than one.

* Fixed a bug with the "listpw" and "verifypw" sudoers options and
  multiple sudoers sources.  If the option is set to "all", a
  password should be required unless none of a user's sudoers
  entries from any source require authentication.

* Fixed a bug with the "listpw" and "verifypw" sudoers options in
  the LDAP and SSSD back-ends.  If the option is set to "any", and
  the entry contained multiple rules, only the first matching rule
  was checked.  If an entry contained more than one matching rule
  and the first rule required authentication but a subsequent rule
  did not, sudo would prompt for a password when it should not have.

* When running a command as the invoking user (not root), sudo
  would execute the command with the same group vector it was
  started with.  Sudo now executes the command with a new group
  vector based on the group database which is consistent with
  how su(1) operates.

* Fixed a double free in the SSSD back-end that could occur when
  ipa_hostname is present in sssd.conf and is set to an unqualified
  host name.

* When I/O logging is enabled, sudo will now write to the terminal
  even when it is a background process.  Previously, sudo would
  only write to the tty when it was the foreground process when
  I/O logging was enabled.  If the TOSTOP terminal flag is set,
  sudo will suspend the command (and then itself) with the SIGTTOU
  signal.

* A new "authfail_message" sudoers option that overrides the
  default "N incorrect password attempt(s)".

* An empty sudoRunAsUser attribute in the LDAP and SSSD backends
  will now match the invoking user.  This is more consistent with
  how an empty runas user in the sudoers file is treated.

* Documented that in check mode, visudo does not check the owner/mode
  on files specified with the -f flag.

* It is now an error to specify the runas user as an empty string
  on the command line.  Previously, an empty runas user was treated
  the same as an unspecified runas user.

* When "timestamp_type" option is set to "tty" and a terminal is
  present, the time stamp record will now include the start time
  of the session leader.  When the "timestamp_type" option is set
  to "ppid" or when no terminal is available, the start time of
  the parent process is used instead.  This significantly reduces
  the likelihood of a time stamp record being re-used when a user
  logs out and back in again.

* The sudoers time stamp file format is now documented in the new
  sudoers_timestamp manual.

* The "timestamp_type" option now takes a "kernel" value on OpenBSD
  systems.  This causes the tty-based time stamp to be stored in
  the kernel instead of on the file system.  If no tty is present,
  the time stamp is considered to be invalid.

* Visudo will now use the SUDO_EDITOR environment variable (if
  present) in addition to VISUAL and EDITOR.

(adam)

Updated mail/exim, mail/exim-html

(adam)

exim: updated to 4.90.1

Exim version 4.90.1

JH/03 Fix pgsql lookup for multiple result-tuples with a single column.
      Previously only the last row was returned.

JH/04 Bug 2217: Tighten up the parsing of DKIM signature headers. Previously
      we assumed that tags in the header were well-formed, and parsed the
      element content after inspecting only the first char of the tag.
      Assumptions at that stage could crash the receive process on malformed
      input.

JH/05 Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
      While running the DKIM ACL we operate on the Permanent memory pool so that
      variables created with "set" persist to the DATA ACL.  Also (at any time)
      DNS lookups that fail create cache records using the Permanent pool.  But
      expansions release any allocations made on the current pool - so a dnsdb
      lookup expansion done in the DKIM ACL releases the memory used for the
      DNS negative-cache, and bad things result.  Solution is to switch to the
      Main pool for expansions.
      While we're in that code, add checks on the DNS cache during store_reset,
      active in the testsuite.
      Problem spotted, and debugging aided, by Wolfgang Breyha.

JH/06 Fix issue with continued-connections when the DNS shifts unreliably.
      When none of the hosts presented to a transport match an already-open
      connection, close it and proceed with the list.  Previously we would
      queue the message.  Spotted by Lena with Yahoo, probably involving
      round-robin DNS.

JH/07 Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
      Previously a spurious "250 OK id=" response was appended to the proper
      failure response.

JH/10 Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
      rows affected is given instead).

JH/12 Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
      SMTP connection.  Previously, when one had more receipients than the
      first, an abortive onward connection was made.  Move to full support for
      multiple onward connections in sequence, handling cutthrough connection
      for all multi-message initiating connections.

JH/13 Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
      routers.  Previously, a multi-recipient message would fail to match the
      onward-connection opened for the first recipient, and cause its closure.

JH/14 Bug 2174: A timeout on connect for a callout was also erroneously seen as
      a timeout on read on a GnuTLS initiating connection, resulting in the
      initiating connection being dropped.  This mattered most when the callout
      was marked defer_ok.  Fix to keep the two timeout-detection methods
      separate.

HS/01 Fix Buffer overflow in base64d() (CVE-2018-6789)

JH/16 Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
      metadata, resulting in a crash in free().

PP/01 Fix broken Heimdal GSSAPI authenticator integration.
      Broken in f2ed27cf5, missing an equals sign for specified-initialisers.
      Broken also in d185889f4, with init system revamp.

(adam)

bootstrap: don't output "Hopefully" when bootstrap finishes

The pkgsrc bootstrap has been used long enough to be more
self-confident.

(rillig)

mk/help: sort keywords

(rillig)

mk/help: ignore topics in lines that are indented by at least 2 tabs

The variable names are typically mentioned in one of these styles:

# Package-settable variables:
#
# VARNAME
# Description

# Package-settable variables:
#
# VARNAME
# Description

Lines that are indented with two tabs contain text. And if one of these
lines starts with a variable name, it is just a coincidence. A practical
example of this happening is in mk/misc/developer.mk 1.24, where PKGNAME
starts a line of description.

(rillig)

Updated www/py-django, www/py-django2

(adam)

py-django2: updated to 2.0.3

2.0.3:
CVE-2018-7536: Denial-of-service possibility in urlize and urlizetrunc template filters
CVE-2018-7537: Denial-of-service possibility in truncatechars_html and truncatewords_html template filters
Bugfixes

(adam)

py-django: updated to 1.11.11

1.11.11:
CVE-2018-7536: Denial-of-service possibility in urlize and urlizetrunc template filters
CVE-2018-7537: Denial-of-service possibility in truncatechars_html and truncatewords_html template filters

(adam)

doc: Added devel/R-bit64 version 0.9.7

(minskim)

devel/Makefile: Add R-bit64

(minskim)

devel/R-bit64: Import version 0.9.7

Package 'bit64' provides serializable S3 atomic 64bit (signed)
integers. These are useful for handling database keys and exact
counting in +-2^63. WARNING: do not use them as replacement for 32bit
integers, integer64 are not supported for subscripting by R-core and
they have different semantics when combined with double,
e.g. integer64 + double => integer64. Class integer64 can be used in
vectors, matrices, arrays and data.frames. Methods are available for
coercion from and to logicals, integers, doubles, characters and
factors as well as many elementwise and summary functions. Many fast
algorithmic operations such as 'match' and 'order' support interactive
data exploration and manipulation and optionally leverage caching.

(minskim)

doc: Added devel/R-bit version 1.1.12

(minskim)

devel/Makefile: Add R-bit

(minskim)

devel/R-bit: Import version 1.1.12

bitmapped vectors of booleans (no NAs), coercion from and to logicals,
integers and integer subscripts; fast boolean operators and fast
summary statistics. With 'bit' vectors you can store true binary
booleans {FALSE,TRUE} at the expense of 1 bit only, on a 32 bit
architecture this means factor 32 less RAM and ~ factor 32 more speed
on boolean operations. Due to overhead of R calls, actual speed gain
depends on the size of the vector: expect gains for vectors of size >
10000 elements. Even for one-time boolean operations it can pay-off to
convert to bit, the pay-off is obvious, when such components are used
more than once. Reading from and writing to bit is approximately as
fast as accessing standard logicals - mostly due to R's time for
memory allocation. The package allows to work with pre-allocated
memory for return values by calling .Call() directly: when evaluating
the speed of C-access with pre-allocated vector memory, coping from
bit to logical requires only 70% of the time for copying from logical
to logical; and copying from logical to bit comes at a performance
penalty of 150%. the package now contains further classes for
representing logical selections: 'bitwhich' for very skewed selections
and 'ri' for selecting ranges of values for chunked processing. All
three index classes can be used for subsetting 'ff' objects (ff-2.1-0
and higher).

(minskim)

doc: Updated www/contao44 to 4.4.15

(taca)

www/contao44: update to 4.4.15

Contao 4.4.15 is available 2018/03/06 09:52 by Leo Feyer

Contao version 4.4.15 is available. The bugfix release fixes several issues
including problems with the HTTP cache and improves the folder hash
calculation.

(taca)

doc: Updated www/contao35 to 3.5.34

(taca)

www/contao35: update to 3.5.34

Version 3.5.34 (2018-03-06)
---------------------------

### Fixed
Check the registry for table prefixed queries (see contao/core-bundle#1161).

### Fixed
Improve the folder hashing performance (see #8856).

### Fixed
Reset the autologin hash if the username or password changes (see #8843).

### Fixed
Correctly encode the sitemap URLs (see #8849).

(taca)

doc: Updated wm/bbrun to 1.3nb6

(wiz)

bbrun: honor LDFLAGS. Fixes RELRO build.

Bump PKGREVISION.

(wiz)

doc: Updated emulators/xbeeb to 0.4.1nb3

(wiz)

xbeeb: honor LDFLAGS. Fixes RELRO build.

Bump PKGREVISION.

(wiz)

doc: Updated x11/xmx to 2.1a7nb8

(wiz)

xmx: honor LDFLAGS. Fixes RELRO build.

Bump PKGREVISION.

(wiz)

doc: Updated multimedia/fxtv to 1.03nb22

(wiz)

fxtv: honor LDFLAGS. Fixes RELRO build.

Bump PKGREVISION.

(wiz)

doc: Updated x11/xcalib to 0.8nb2

(wiz)

xcalib: honor LDFLAGS. Fixes RELRO build.

Bump PKGREVISION.

(wiz)

doc: Updated emulators/kegs to 0.91nb6

(wiz)

kegs: do not overwrite LDFLAGS.

Fixes RELRO build. Bump PKGREVISION.

(wiz)

kyotocabinet: Fix compilation with gcc-6.

'false' is not a valid char *.

(wiz)

doc: Updated chat/libtlen to 20041113nb2

(wiz)