Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (1h)  pkgsrc-2024Q1 (14d)  pkgsrc-2023Q4 (42d)  pkgsrc-2023Q2 (74d)  pkgsrc-2023Q3 (154d) 

2024-05-13 02:07:42 UTC Now

2018-01-18 10:30:16 UTC MAIN commitmail json YAML

Updated lang/py-execjs, www/py-aiohttp

(adam)

2018-01-18 10:29:54 UTC MAIN commitmail json YAML

py-aiohttp: updated to 2.3.9

2.3.9:
Fix colon handing in path for dynamic resources

(adam)

2018-01-18 10:29:25 UTC MAIN commitmail json YAML

tex-fvextra{,-doc}: add version 1.3.1

fvextra provides several extensions to fancyvrb, including
automatic line breaking and improved math mode. It also patches
some fancyvrb internals. Parts of fvextra were originally
developed as part of pythontex and minted.

(markd)

2018-01-18 10:29:08 UTC MAIN commitmail json YAML

Updated sysutils/xenkernel48 to 4.8.2nb3

(bouyer)

2018-01-18 10:28:13 UTC MAIN commitmail json YAML

Add patches from upstream, from xsa254/README.pti :
> This README gives references for one of three mitigation strategies
> for Meltdown.

> This series is a first-class migitation pagetable isolation series for
> Xen.  It is available for Xen 4.6 to Xen 4.10 and later.

bump PKGREVISION

(bouyer)

2018-01-18 10:13:27 UTC MAIN commitmail json YAML

py-execjs: updated to 1.5.1

1.5.1:
Bug fixes.

(adam)

2018-01-18 09:56:57 UTC MAIN commitmail json YAML

Added mail/py-ukpostcodeparser, Updated devel/py-faker

(adam)

2018-01-18 09:55:52 UTC MAIN commitmail json YAML

py-faker: updated to 0.8.10

0.8.10:
* Pass python_requires argument to setuptools.
* Remove some words from en_US lorem ipsum provider.

(adam)

2018-01-18 09:55:00 UTC MAIN commitmail json YAML

2018-01-18 09:53:37 UTC MAIN commitmail json YAML

print: add tex-tex4ebook{,-doc}

(markd)

2018-01-18 09:52:00 UTC MAIN commitmail json YAML

tex-tex4ebook{,-doc}: Add version 0.1e

This is a bundle of lua scripts and LaTeX packages for
conversion of LaTeX files to ebook formats such as epub, mobi
and epub3. tex4ht is used as conversion engine.

(markd)

2018-01-18 09:50:23 UTC MAIN commitmail json YAML

Updated graphics/freetype2

(adam)

2018-01-18 09:49:24 UTC MAIN commitmail json YAML

freetype2: updated to 2.9

FreeType 2.9
FreeType version 2.9, the first release of a new ���minor��� series, is now available for download. The main reason for starting a new series is Ewald Hew's GSoC contribution of making Adobe's CFF engine handle Type 1 fonts also, greatly improving the rendering quality of this ancient but still important font format.

(adam)

2018-01-18 09:44:55 UTC MAIN commitmail json YAML

Updated net/p5-Net-Twitter to 4.01043

(wen)

2018-01-18 09:44:17 UTC MAIN commitmail json YAML

2018-01-18 09:43:47 UTC MAIN commitmail json YAML

Update to 4.01043

Upstream changes:
4.01043 2018-01-17
    - deprecation notice: Twitter::API is the new Net::Twitter
    - deprecated update_with_media
    - doc and build updates
    - remove debugger breakpoint (Oof!)

(wen)

2018-01-18 09:19:44 UTC MAIN commitmail json YAML

Updated databases/py-sqlalchemy, databases/py-alembic

(adam)

2018-01-18 09:18:30 UTC MAIN commitmail json YAML

Updated devel/p5-Log-Any to 1.705

(wen)

2018-01-18 09:18:06 UTC MAIN commitmail json YAML

2018-01-18 09:17:26 UTC MAIN commitmail json YAML

Update to 1.705

Upstream changes:
1.705    2018-01-17 13:49:22-06:00 America/Chicago

    [Fixed]

    - Fixed the `binmode` attribute of the File adapter not working
      properly. Thanks @MadLord80! [Github #71]

(wen)

2018-01-18 09:15:29 UTC MAIN commitmail json YAML

qt5-qtbase: remove references to qt5-qtquick1 and qt5-sqlite3

(markd)

2018-01-18 09:12:17 UTC MAIN commitmail json YAML

py-sqlalchemy: updated to 1.2.1

1.2.1:

[orm] [bug] Fixed bug where an object that is expunged during a rollback of a nested or subtransaction which also had its primary key mutated would not be correctly removed from the session, causing subsequent issues in using the session.
[orm] [bug] Fixed regression where pickle format of a Load / _UnboundLoad object (e.g. loader options) changed and __setstate__() was raising an UnboundLocalError for an object received from the legacy format, even though an attempt was made to do so. tests are now added to ensure this works.
[orm] [bug] Fixed regression caused by new lazyload caching scheme in 3954 where a query that makes use of loader options with of_type would cause lazy loads of unrelated paths to fail with a TypeError.
[orm] [bug] Fixed bug in new 窶徭electin窶� relationship loader where the loader could try to load a non-existent relationship when loading a collection of polymorphic objects, where only some of the mappers include that relationship, typically when PropComparator.of_type() is being used.

sql
[sql] [bug] Fixed bug in Insert.values() where using the 窶徇ulti-values窶� format in combination with Column objects as keys rather than strings would fail. Pull request courtesy Aubrey Stark-Toller.

mssql
[mssql] [bug] Fixed regression in 1.2 where newly repaired quoting of collation names in 3785 breaks SQL Server, which explicitly does not understand a quoted collation name. Whether or not mixed-case collation names are quoted or not is now deferred down to a dialect-level decision so that each dialect can prepare these identifiers directly.

oracle
[oracle] [bug] Fixed regression where the removal of most setinputsizes rules from cx_Oracle dialect impacted the TIMESTAMP datatype窶冱 ability to retrieve fractional seconds.
[oracle] [bug] Fixed regression in Oracle imports where a missing comma caused an undefined symbol to be present. Pull request courtesy Miroslav Shubernetskiy.

misc
[bug] [ext] Fixed regression in association proxy due to 3769 (allow for chained any() / has()) where contains() against an association proxy chained in the form (o2m relationship, associationproxy(m2o relationship, m2o relationship)) would raise an error regarding the re-application of contains() on the final link of the chain.
[bug] [tests] Removed an oracle-specific requirements rule from the public test suite that was interfering with third party dialect suites.
[bug] [tests] Added a new exclusion rule group_by_complex_expression which disables tests that use 窶廨ROUP BY <expr>窶�, which seems to be not viable for at least two third party dialects.

(adam)

2018-01-18 09:11:02 UTC MAIN commitmail json YAML

doc: update qt5-{mysql,psql,odbc}

(markd)

2018-01-18 09:06:59 UTC MAIN commitmail json YAML

2018-01-18 09:04:17 UTC MAIN commitmail json YAML

2018-01-18 09:00:17 UTC MAIN commitmail json YAML

2018-01-18 08:52:06 UTC MAIN commitmail json YAML

Added mail/py-email_validator version

(adam)

2018-01-18 08:43:40 UTC MAIN commitmail json YAML

2018-01-18 08:35:48 UTC MAIN commitmail json YAML

py-email_validator: added version 1.0.2

This library validates that address are of the form x@y.com. This is the sort
of validation you would want for a login form on a website.

Key features:
* Good for validating email addresses used for logins/identity.
* Friendly error messages when validation fails (appropriate to show to end
  users).
* (optionally) Checks deliverability: Does the domain name resolve?
* Supports internationalized domain names and (optionally) internationalized
  local parts.
* Normalizes email addresses (super important for internationalized addresses!).

(adam)

2018-01-18 08:03:48 UTC MAIN commitmail json YAML

Removed a reference to wip

(adam)

2018-01-18 08:02:55 UTC MAIN commitmail json YAML

Removed references to wip

(adam)

2018-01-18 07:53:13 UTC MAIN commitmail json YAML

doc: removal of some qt5 packages

(markd)

2018-01-18 07:49:32 UTC MAIN commitmail json YAML

2018-01-18 07:44:43 UTC MAIN commitmail json YAML

2018-01-18 06:52:30 UTC MAIN commitmail json YAML

doc: this mornings updates

(markd)

2018-01-18 05:14:17 UTC MAIN commitmail json YAML

baloo5: update distinfo to match this mornings update

(markd)

2018-01-18 05:10:44 UTC MAIN commitmail json YAML

2018-01-18 05:07:04 UTC MAIN commitmail json YAML

py-sip: update distinfo to match this mornings update

(markd)

2018-01-18 04:57:22 UTC MAIN commitmail json YAML

add and enable lynis

(jnemeth)

2018-01-18 03:42:40 UTC MAIN commitmail json YAML

Updated www/moodle to 3.4.1

(wen)

2018-01-18 03:40:42 UTC MAIN commitmail json YAML

Update to 3.4.1

Upstream changes:
Here is the full list of fixed issues in 3.4.1.
Highlights

    MDL-34161 - LTI: backup and restore supports submissions and also course and site tools. References to the site tools are restored only on the same site (they are not included in course backup for security reasons).
    MDL-27886 - If general backup setting "Include users" is unchecked, users with relevant capability can now backup user data
    MDL-40613 - LDAP authentication method can now synchronise custom user profile fields

Fixes and improvements

    MDL-58887 - Accessibility: Gear icon is now properly defined for screen readers
    MDL-54106 - Incomplete user accounts are now deleted after specified period of time (setting "Delete not fully setup users after")
    MDL-59512 - Allow to connect to OAuth 2 services that only support client authentication via Basic Auth
    MDL-56197 - Lesson: Multiple Choice answers appear on same line as radio button
    MDL-45068 - Import Groups from CSV tool bug fixes
    MDL-52100 - Folder resource: Large files deleted when editing teachers update resource with global maxbytes lower
    MDL-37757 - Turning off Server Files Repository should not break courses that use it
    MDL-58272 - Assignment: Converting images in submissions to pdf (unoconv)
    MDL-54967 - IMS Common Cartridge import works correctly with HTML entities in URLs
    MDL-27230 - Quiz: when group override is deleted the calendar event should also be deleted
    MDL-57431 - Quiz: Clicking on help for "Shuffle" button no longer toggles shuffle itself
    MDL-42676 - Assignment: The message "This assignment is not accepting submissions" is displayed in the assignment when override the grade
    MDL-34389 - Category manager with the 'moodle/course:changecategory' should be able to move existing courses between categories
    MDL-52538 - Lesson: Content pages no longer display grade
    MDL-45500 - Allow uninstalling grading methods plugins
    MDL-58817 - LTI: display correct icons
    MDL-43042 - Lesson multi-choice questions with multiple answers: more clear indication for the user which answer was correct
    MDL-40790 - Lesson: UI fix for content buttons running off the edge of the page
    MDL-59999 - Lesson: Grade essays page shows which essays have been graded
    MDL-57564 - "Sort my courses (navsortmycoursessort)" setting now respected on the dashboard

Security issues

A number of security related issues were resolved. Details of these issues will be released after a period of approximately one week to allow system administrators to safely update to the latest version.

(wen)

2018-01-17 20:22:36 UTC MAIN commitmail json YAML

dynamips: update to 0.2.17

* Set nonblocking I/O for UDP sockets
* Fix tap interface usage on FreeBSD
* Fix build on FreeBSD
* NM-16ESW: process packets even if MAC address table is full. Fixes #72.

(markd)

2018-01-17 20:19:58 UTC MAIN commitmail json YAML

2018-01-17 20:16:59 UTC MAIN commitmail json YAML

2018-01-17 20:13:39 UTC MAIN commitmail json YAML

2018-01-17 20:12:30 UTC MAIN commitmail json YAML

textproc: add syntax-highlighting

(markd)

2018-01-17 20:11:06 UTC MAIN commitmail json YAML

2018-01-17 20:09:33 UTC MAIN commitmail json YAML

2018-01-17 20:06:50 UTC MAIN commitmail json YAML

2018-01-17 20:05:44 UTC MAIN commitmail json YAML

2018-01-17 20:04:45 UTC MAIN commitmail json YAML

2018-01-17 20:03:38 UTC MAIN commitmail json YAML

2018-01-17 20:00:22 UTC MAIN commitmail json YAML

2018-01-17 19:56:18 UTC MAIN commitmail json YAML

2018-01-17 19:54:56 UTC MAIN commitmail json YAML

karchive: update to 5.41.0

16 months worth of updates. requires qt5>=5.7

(markd)

2018-01-17 19:53:45 UTC MAIN commitmail json YAML

kf5: update to 5.41.0

16 months worth of updates. requires qt5>=5.7

(markd)

2018-01-17 19:49:29 UTC MAIN commitmail json YAML

2018-01-17 19:44:06 UTC MAIN commitmail json YAML

2018-01-17 19:39:58 UTC MAIN commitmail json YAML

2018-01-17 19:37:33 UTC MAIN commitmail json YAML

pkgsrc/x11/qt5-qtwebkit/Makefile@1.47 / diff
pkgsrc/x11/qt5-qtwebkit/PLIST@1.5 / diff
pkgsrc/x11/qt5-qtwebkit/buildlink3.mk@1.33 / diff
pkgsrc/x11/qt5-qtwebkit/distinfo@1.11 / diff
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_JavaScriptCore_API_JSStringRef.cpp deleted
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_JavaScriptCore_DerivedSources.pri deleted
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_JavaScriptCore_JavaScriptCore.pri deleted
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_JavaScriptCore_Target.pri deleted
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_JavaScriptCore_assembler_ARMAssembler.h@1.2 / diff
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_JavaScriptCore_assembler_MacroAssemblerARM.cpp@1.2 / diff
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_JavaScriptCore_dfg_DFGNode.h@1.2 / diff
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_JavaScriptCore_heap_MachineStackMarker.cpp@1.2 / diff
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_JavaScriptCore_runtime_DatePrototype.cpp deleted
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_JavaScriptCore_tools_CodeProfiling.cpp@1.4 / diff
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_QtWebKit.pro deleted
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_ThirdParty_ANGLE_Target.pri deleted
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_ThirdParty_ANGLE_src_compiler_glslang.y deleted
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_ThirdParty_ANGLE_src_compiler_osinclude.h deleted
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_ThirdParty_leveldb_Target.pri deleted
pkgsrc/x11/qt5-qtwebkit/patches/patch-Source_WTF_WTF.pro deleted
      :
(more 31 files)
qt5-qtwebkit: update to 5.212.0.alpha2

Version of qtwebkit that is being updated with webkit changes.

(markd)

2018-01-17 19:30:49 UTC MAIN commitmail json YAML

2018-01-17 19:21:20 UTC MAIN commitmail json YAML

2018-01-17 19:18:47 UTC MAIN commitmail json YAML

2018-01-17 19:16:05 UTC MAIN commitmail json YAML

2018-01-17 19:10:23 UTC MAIN commitmail json YAML

2018-01-17 19:10:08 UTC MAIN commitmail json YAML

doc: Added math/R-aplpack version 1.3.0

(minskim)

2018-01-17 19:09:42 UTC MAIN commitmail json YAML

math/Makefile: Add R-aplpack

(minskim)

2018-01-17 19:09:16 UTC MAIN commitmail json YAML

math/R-aplpack: Import version 1.3.0

Set of functions for drawing some special plots: stem.leaf plots a
stem and leaf plot, stem.leaf.backback plots back-to-back versions of
stem and leafs, bagplot plots a bagplot, skyline.hist plots several
histgramm in one plot of a one dimensional data set, plotsummary plots
a graphical summary of a data set with one or more variables,
plothulls plots sequentially hulls of a bivariate data set, faces
plots chernoff faces, spin3R for an inspection of a 3-dim point cloud,
slider functions for interactive graphics.

(minskim)

2018-01-17 19:07:38 UTC MAIN commitmail json YAML

kde-runtime4: PLIST changes for polkit-qt update

(markd)

2018-01-17 19:05:57 UTC MAIN commitmail json YAML

libbaloo4: fix for polkit-qt update

(markd)

2018-01-17 19:03:25 UTC MAIN commitmail json YAML

k3b: PLIST changes for polkit-qt update

(markd)

2018-01-17 18:59:53 UTC MAIN commitmail json YAML

kwalletmanager: PLIST changes for polkit-qt update

(markd)

2018-01-17 18:57:37 UTC MAIN commitmail json YAML

kdepim4:  PLIST changes for polkit-qt update

(markd)

2018-01-17 18:55:20 UTC MAIN commitmail json YAML

kde4: note update of kdelibs to 4.14.38

(markd)

2018-01-17 18:53:26 UTC MAIN commitmail json YAML

2018-01-17 18:48:26 UTC MAIN commitmail json YAML

2018-01-17 18:43:31 UTC MAIN commitmail json YAML

doc: Updated math/R-e1071 to 1.6.8

(minskim)

2018-01-17 18:43:10 UTC MAIN commitmail json YAML

math/R-e1071: Update to 1.6-8

Changes:

- add and use native symbols for C-code
- naiveBayes() now supports logical variables

(minskim)

2018-01-17 18:37:34 UTC MAIN commitmail json YAML

2018-01-17 12:10:38 UTC MAIN commitmail json YAML

2018-01-17 12:07:51 UTC MAIN commitmail json YAML

Updated databases/py-alembic, math/py-patsy

(adam)

2018-01-17 12:07:19 UTC MAIN commitmail json YAML

py-patsy: updated 0.5.0

v0.5.0:
* Dropped support for Python 2.6 and 3.3.
* Update to keep up with pandas API changes
* More consistent handling of degenerate linear constraints in
  :meth:DesignInfo.linear_constraint
* Fix a crash in DesignMatrix.__repr__ when shape[0] == 0

(adam)

2018-01-17 12:03:01 UTC MAIN commitmail json YAML

gsm: honor LDFLAGS. Fixes RELRO build.

(wiz)

2018-01-17 12:01:48 UTC MAIN commitmail json YAML

rx: Honor LDFLAGS. Fixes RELRO build.

(wiz)

2018-01-17 11:55:36 UTC MAIN commitmail json YAML

py-alembic: updated to 0.9.7

0.9.7
[bug] [autogenerate] Fixed regression caused by 421 which would cause case-sensitive quoting rules to interfere with the comparison logic for index names, thus causing indexes to show as added for indexes that have case-sensitive names. Works with SQLAlchemy 0.9 and later series.
[bug] [autogenerate] [postgresql] Fixed bug where autogenerate would produce a DROP statement for the index implicitly created by a Postgresql EXCLUDE constraint, rather than skipping it as is the case for indexes implicitly generated by unique constraints. Makes use of SQLAlchemy 1.0.x窶冱 improved 窶彭uplicates index窶� metadata and requires at least SQLAlchemy version 1.0.x to function correctly.

(adam)

2018-01-17 11:19:46 UTC MAIN commitmail json YAML

2018-01-17 09:06:18 UTC MAIN commitmail json YAML

doc: Updated www/p5-Mojolicious to 7.61

(wiz)

2018-01-17 09:06:11 UTC MAIN commitmail json YAML

p5-Mojolicious: update to 7.61.

7.61  2018-01-08
  - Increased default upgrade_timeout from 60 to 180 seconds in
    Mojo::Server::Hypnotoad.

(wiz)

2018-01-17 08:57:04 UTC MAIN commitmail json YAML

doc: Updated sysutils/p5-File-Copy-Recursive to 0.40

(wiz)

2018-01-17 08:56:56 UTC MAIN commitmail json YAML

p5-File-Copy-Recursive: update to 0.40.

Use TEST_DEPENDS.

0.40 Tue Jan 16 10:00:09 2017
    - github Issue #5 - Deep directories pathmk
    - rt 123966 - switch to bsd_glob() since glob() will disappear in perl 5.30
    - rt 123971 - skip symlink tests when the OS does not support symlinks
    - rt 123970 - use Path::Tiny instead of File::Slurp in tests
    - rt 117241 - add test for read only directories

(wiz)

2018-01-17 08:52:59 UTC MAIN commitmail json YAML

doc: Updated security/p5-Net-SSLeay to 1.84

(wiz)

2018-01-17 08:52:51 UTC MAIN commitmail json YAML

p5-Net-SSLeay: update to 1.84.

Use TEST_DEPENDS.

1.84 2018-01-17
Fixed an error in t/local/04_basic.t causing a test failure if
Test::Exception not installed. Reported by Joel Berger.

1.83 2018-01-16
Fixed a problem with exporting OPENSSL_NO_NEXTPROTONEG even though they are not availble on LibreSSL.
Patch patch-SSLeay_xs-NO_NPN from Alexander Bluhm.
Patch from Heikki Vatiainen adds support for SSL_set_default_passwd_cb* for
OpenSSL 1.1.0f and later. LibreSSL does not support these functions, at
least yet.
Patch from Heikki Vatiainen adds new functions related to SSL_CTX_new.
Patch from Heikki Vatiainen adds two new functions introduced in OpenSSL 1.1.0, a number
of constants and a couple of const qualifiers to SSLeay.xs. Tests and
documentation .pod were also updated.
Patch from Heikki Vatiainen adds one new OpenSSL 1.1.0 function and has a minor fix for
LibreSSL version detection:
*  Added support for SSL_use_certificate_chain_file
    function introduced in OpenSSL 1.1.0.
*  Fixed LibreSSL version detection to correctly parse
    LibreSSL minor version.
Patch from Steffen Ulrich to fix memory leaks in OCSP handling. Thanks.
Patch from Heikki Vatiainen adds new functions for certificate verification introduced in
OpenSSL 1.02, a number of constants, new test data files, new tests and
updates to .pod documentation.
The new functions provide access to the built-in wildcard check
functionality available in OpenSSL 1.0.2 and later.
The patch also adds new tests for the new functions and updates some of
the current tests for CTX_set_default_passwd_cb* functions.
Added X509_STORE_CTX_new and X509_verify_cert.
SSL_OCSP_response_verify now clears the error queue if OCSP_basic_verify fails but the
intermediate certificate succeeds. Patch from Stefan Ullrich.

(wiz)

2018-01-17 08:38:02 UTC MAIN commitmail json YAML

Updated www/py-yarl, www/py-aiohttp

(adam)

2018-01-17 08:37:35 UTC MAIN commitmail json YAML

py-aiohttp: updated to 2.3.8

2.3.8:
Do not use yarl.unquote internal function in aiohttp. Fix incorrectly unquoted path part in URL dispatcher
Fix compatibility with yarl==1.0.0

(adam)

2018-01-17 08:37:02 UTC MAIN commitmail json YAML

py-yarl: updated to 1.0.0

1.0.0:
Use fast path if quoted string does not need requoting
Speed up quoting/unquoting by _Quoter and _Unquoter classes
Drop yarl.quote and yarl.unquote public functions
Add custom string writer, reuse static buffer if available; Code is 50-80 times faster than Pure Python version (was 4-5 times faster)
Don窶冲 recode IP zone
Support encoded=True in yarl.URL.build()
Fix updating query with multiple keys

(adam)

2018-01-17 00:34:08 UTC MAIN commitmail json YAML

Update of bind packages:

net/bind910 9.10.6pl1
net/bind99 9.9.11pl1

(taca)

2018-01-17 00:33:15 UTC MAIN commitmail json YAML

net/bind99: update to 9.9.11pl1 (BIND 9.9.11-P1)

Release Notes for BIND Version 9.9.11-P1

Introduction

  This document summarizes changes since BIND 9.9.11.

  BIND 9.9.11-P1 addresses the security issue described in CVE-2017-3145.

Download

  The latest versions of BIND 9 software can always be found at
  http://www.isc.org/downloads/. There you will find additional
  information about each release, source code, and pre-compiled versions
  for Microsoft Windows operating systems.

New DNSSEC Root Key

  ICANN is in the process of introducing a new Key Signing Key (KSK) for
  the global root zone. BIND has multiple methods for managing DNSSEC
  trust anchors, with somewhat different behaviors. If the root key is
  configured using the managed-keys statement, or if the pre-configured
  root key is enabled by using dnssec-validation auto, then BIND can keep
  keys up to date automatically. Servers configured in this way should
  have begun the process of rolling to the new key when it was published
  in the root zone in July 2017. However, keys configured using the
  trusted-keys statement are not automatically maintained. If your server
  is performing DNSSEC validation and is configured using trusted-keys,
  you are advised to change your configuration before the root zone
  begins signing with the new KSK. This is currently scheduled for
  October 11, 2017.

  This release includes an updated version of the bind.keys file
  containing the new root key. This file can also be downloaded from
  https://www.isc.org/bind-keys .

Windows XP No Longer Supported

  As of BIND 9.9.11, Windows XP is no longer a supported platform for
  BIND, and Windows XP binaries are no longer available for download from
  ISC.

Security Fixes

    * Addresses could be referenced after being freed during resolver
      processing, causing an assertion failure. The chances of this
      happening were remote, but the introduction of a delay in
      resolution increased them. (The delay will be addressed in an
      upcoming maintenance release.) This bug is disclosed in
      CVE-2017-3145. [RT #46839]
    * An error in TSIG handling could permit unauthorized zone transfers
      or zone updates. These flaws are disclosed in CVE-2017-3142 and
      CVE-2017-3143. [RT #45383]
    * The BIND installer on Windows used an unquoted service path, which
      can enable privilege escalation. This flaw is disclosed in
      CVE-2017-3141. [RT #45229]
    * With certain RPZ configurations, a response with TTL 0 could cause
      named to go into an infinite query loop. This flaw is disclosed in
      CVE-2017-3140. [RT #45181]

Feature Changes

    * Threads in named are now set to human-readable names to assist
      debugging on operating systems that support that. Threads will have
      names such as "isc-timer", "isc-sockmgr", "isc-worker0001", and so
      on. This will affect the reporting of subsidiary thread names in ps
      and top, but not the main thread. [RT #43234]
    * DiG now warns about .local queries which are reserved for Multicast
      DNS. [RT #44783]

Bug Fixes

    * Fixed a bug that was introduced in an earlier development release
      which caused multi-packet AXFR and IXFR messages to fail validation
      if not all packets contained TSIG records; this caused
      interoperability problems with some other DNS implementations. [RT
      #45509]
    * Semicolons are no longer escaped when printing CAA and URI records.
      This may break applications that depend on the presence of the
      backslash before the semicolon. [RT #45216]
    * AD could be set on truncated answer with no records present in the
      answer and authority sections. [RT #45140]

End of Life

  BIND 9.9 (Extended Support Version) will be supported until at least
  June, 2018. https://www.isc.org/downloads/software-support-policy/

(taca)

2018-01-17 00:31:38 UTC MAIN commitmail json YAML

net/bind910: update to 9.10.6pl1 (BIND 9.10.6-P1).

Release Notes for BIND Version 9.10.6-P1

Introduction

  This document summarizes changes since BIND 9.10.6.

  BIND 9.10.6-P1 addresses the security issue described in CVE-2017-3145.

Download

  The latest versions of BIND 9 software can always be found at
  http://www.isc.org/downloads/. There you will find additional
  information about each release, source code, and pre-compiled versions
  for Microsoft Windows operating systems.

New DNSSEC Root Key

  ICANN is in the process of introducing a new Key Signing Key (KSK) for
  the global root zone. BIND has multiple methods for managing DNSSEC
  trust anchors, with somewhat different behaviors. If the root key is
  configured using the managed-keys statement, or if the pre-configured
  root key is enabled by using dnssec-validation auto, then BIND can keep
  keys up to date automatically. Servers configured in this way should
  have begun the process of rolling to the new key when it was published
  in the root zone in July 2017. However, keys configured using the
  trusted-keys statement are not automatically maintained. If your server
  is performing DNSSEC validation and is configured using trusted-keys,
  you are advised to change your configuration before the root zone
  begins signing with the new KSK. This is currently scheduled for
  October 11, 2017.

  This release includes an updated version of the bind.keys file
  containing the new root key. This file can also be downloaded from
  https://www.isc.org/bind-keys .

Windows XP No Longer Supported

  As of BIND 9.10.6, Windows XP is no longer a supported platform for
  BIND, and Windows XP binaries are no longer available for download from
  ISC.

Security Fixes

    * Addresses could be referenced after being freed during resolver
      processing, causing an assertion failure. The chances of this
      happening were remote, but the introduction of a delay in
      resolution increased them. (The delay will be addressed in an
      upcoming maintenance release.) This bug is disclosed in
      CVE-2017-3145. [RT #46839]
    * An error in TSIG handling could permit unauthorized zone transfers
      or zone updates. These flaws are disclosed in CVE-2017-3142 and
      CVE-2017-3143. [RT #45383]
    * The BIND installer on Windows used an unquoted service path, which
      can enable privilege escalation. This flaw is disclosed in
      CVE-2017-3141. [RT #45229]
    * With certain RPZ configurations, a response with TTL 0 could cause
      named to go into an infinite query loop. This flaw is disclosed in
      CVE-2017-3140. [RT #45181]

Feature Changes

    * dig +ednsopt now accepts the names for EDNS options in addition to
      numeric values. For example, an EDNS Client-Subnet option could be
      sent using dig +ednsopt=ecs:.... Thanks to John Worley of Secure64
      for the contribution. [RT #44461]
    * Threads in named are now set to human-readable names to assist
      debugging on operating systems that support that. Threads will have
      names such as "isc-timer", "isc-sockmgr", "isc-worker0001", and so
      on. This will affect the reporting of subsidiary thread names in ps
      and top, but not the main thread. [RT #43234]
    * DiG now warns about .local queries which are reserved for Multicast
      DNS. [RT #44783]

Bug Fixes

    * Fixed a bug that was introduced in an earlier development release
      which caused multi-packet AXFR and IXFR messages to fail validation
      if not all packets contained TSIG records; this caused
      interoperability problems with some other DNS implementations. [RT
      #45509]
    * Semicolons are no longer escaped when printing CAA and URI records.
      This may break applications that depend on the presence of the
      backslash before the semicolon. [RT #45216]
    * AD could be set on truncated answer with no records present in the
      answer and authority sections. [RT #45140]

End of Life

  The end of life for BIND 9.10 is yet to be determined but will not be
  before BIND 9.12.0 has been released for 6 months.
  https://www.isc.org/downloads/software-support-policy/

(taca)

2018-01-16 23:52:06 UTC MAIN commitmail json YAML

2018-01-16 16:30:45 UTC MAIN commitmail json YAML

Updated databases/mysql55-client, databases/mysql55-server, databases/mysql56-client, databases/mysql56-server, databases/mysql57-client, databases/mysql57-server

(adam)

2018-01-16 16:29:42 UTC MAIN commitmail json YAML

mysql57: updated to 5.7.21

MySQL 5.7.21

Audit Log Notes
* MySQL Enterprise Audit now supports compression and encryption of audit log files. Encryption is based on a user-defined password. To use this feature, the MySQL keyring must be enabled because audit logging uses it for password storage. MySQL Enterprise Audit also now supports logging in JSON format, in addition to the existing XML formats. For JSON format, functions are available that provide runtime log reading capabilities. For additional information, see MySQL Enterprise Audit.

Configuration Notes
* For RHEL, SLES, and Fedora RPMs, the default plugin directory for debug builds has been changed from /usr/lib64/mysql/plugin to /usr/lib64/mysql/plugin/debug.
* The installation scripts for MySQL Enterprise Audit and MySQL Enterprise Firewall now create their associated tables in the mysql system database as InnoDB rather than MyISAM tables.
* The hardcoded memory page size of 8KB for the memory-mapped transaction coordinator was too small for platforms such as ARM64 and PowerPC where the page size is much larger. The server now invokes a system call to get the page size of the current platform rather than using a hardcoded value. A consequence for the --log-tc-size option is that the minimum and default values are now 6 times the page size. Also, the value must be a multiple of the page size. Thanks to Alexey Kopytov for the patch.

Performance Schema Notes
* The Performance Schema setup_timers table is now deprecated, to be removed in MySQL 8.0, as is the TICK row in the performance_timers table.

Pluggable Authentication
* For the LDAP authentication plugins, handling of the group search attribute indicated by the authentication_ldap_sasl_group_search_attr and authentication_ldap_simple_group_search_attr system variables is more flexible. If the group search attribute is isMemberOf, LDAP authentication directly retrieves the user attribute isMemberOf value and assign it as group information. If the group search attribute is not isMemberOf, LDAP authentication searches for all groups where the user is a member. (The latter is the default behavior.) This behavior is based on how LDAP group information can be stored two ways: 1) A group entry can have an attribute named memberUid or member with a value that is a user name; 2) A user entry can have an attribute named isMemberOf with values that are group names.
* The LDAP authentication plugins now permit the authentication string that provides user DN information to begin with a + character. In the absence of this character, the authentication string value is treated as is without modification, as it has been previously. If the authentication string begins with +, the plugin constructs the full user DN value from the account user name as the cn attribute value, together with the authentication string (with the + removed). The authentication string is stored as given in the mysql.user system table, with the full user DN constructed on the fly before authentication.
* For the LDAP authentication plugins, the group search attribute was fixed and not configurable. Two new system variables now enable using custom group filters: authentication_ldap_sasl_group_search_filter and authentication_ldap_simple_group_search_filter.

Security Notes
* Incompatible Change: Passwords are now restricted to a maximum of 256 characters for the sha256_password authentication plugin, and for the PASSWORD() function when old_passwords=2. Also, the number of password hashing rounds is capped to limit CPU time used.
* The linked OpenSSL library for the MySQL Commercial Server has been updated to version 1.0.2n. Issues fixed in the new OpenSSL version are described at http://www.openssl.org/news/vulnerabilities.html.
* This change does not affect the Oracle-produced MySQL Community build of MySQL Server, which uses the yaSSL library instead.
* MySQL now supports key migration between underlying keyring keystores. This enables DBAs to switch a MySQL installation from one keyring plugin to another. See Migrating Keys Between Keyring Keystores.
* MySQL Enterprise Edition now includes a keyring plugin, keyring_encrypted_file, that is similar to the keyring_file plugin in its use of a local data file for key storage, but that also encrypts the file based on a user-defined password. See Using the keyring_encrypted_file Keyring Plugin.

(adam)

2018-01-16 16:27:12 UTC MAIN commitmail json YAML

mysql56: updated to 5.6.39

MySQL 5.6.39

Configuration Notes
* For RHEL, SLES, and Fedora RPMs, the default plugin directory for debug builds has been changed from /usr/lib64/mysql/plugin to /usr/lib64/mysql/plugin/debug.

Security Notes
* Incompatible Change: Passwords are now restricted to a maximum of 256 characters for the sha256_password authentication plugin, and for the PASSWORD() function when old_passwords=2. Also, the number of password hashing rounds is capped to limit CPU time used.
* The linked OpenSSL library for the MySQL Commercial Server has been updated to version 1.0.2n. Issues fixed in the new OpenSSL version are described at http://www.openssl.org/news/vulnerabilities.html.
* This change does not affect the Oracle-produced MySQL Community build of MySQL Server, which uses the yaSSL library instead.

Test Suite Notes
* Documentation for the MySQL Test Suite is now maintained in the MySQL source tree using Doxygen (see http://dev.mysql.com/doc/dev/mysql-server/latest/PAGE_MYSQL_TEST_RUN.html). The related Unix man pages that previously were produced from the old test suite manual are no longer updated and have gone out of date. Consequently, they are no longer included in MySQL distributions.

Bugs Fixed
* InnoDB: An ALTER TABLE operation caused the server to halt.
* InnoDB: A FLUSH TABLES operation failed to drop an aborted index. While removing the table from the cache, the clustered index was dropped prior to checking for the aborted index.
* InnoDB: Warnings that should only appear in a debug version of MySQL were printed to the error log when the length of the history list exceeded 2000000.
* InnoDB: Full-text search on indexed columns that use a binary collation did not return case sensitive matches.
* Partitioning: In certain cases when fetching heap records a partition ID could be set to zero.
* Replication: With semisynchronous replication in use, if RESET MASTER was issued while an active transaction was waiting for an acknowledgement from the slave, the count of waiting sessions in the Rpl_semi_sync_master_wait_sessions server status variable was incorrect after the wait was completed.
* Microsoft Windows: On Windows, with the myisam_use_mmap and flush system variables enabled, MyISAM did not always flush table files properly.
* Microsoft Windows: On Windows, resolution was improved of a timer used for query performance assessment.
* VALUES() was not handled correctly in some cases.
* The Performance Schema now stores rewritten rather than raw SQL statement text when available.
* Incorrect results or a server exit could result when SHA2() was passed a user-defined variable in some character sets.
* Creating a table with excessive index information could cause a server exit.
* REFERENCES privilege checking could use the incorrect database in some cases.
* Some statements could cause a buffer overflow in the digest code. Thanks to Laurynas Biveinis and Roel van de Paar for the patch.
* Incorrect results could occur on a table with a unique index when the optimizer chose a loose index scan even though the unique index had no index extensions.
* Executing a stored procedure containing a statement that created a table from the contents of certain SELECT statements could result in a memory leak.
* For geometry calculations, invalid input parameters could lead to an incorrect result buffer and cause an assertion to be raised or a server exit.
* Setting the MYSQL_GROUP_SUFFIX environment variable had no effect.
* A circular dependency problem involving sql/sql_builtin.cc was resolved.
* A prepared statement containing an ORDER BY list that referred to a parameter was not always handled correctly.

(adam)

2018-01-16 16:23:20 UTC MAIN commitmail json YAML

mysql55: updated to 5.5.59

MySQL 5.5.59:

Configuration Notes
* For RHEL, SLES, and Fedora RPMs, the default plugin directory for debug builds has been changed from /usr/lib64/mysql/plugin to /usr/lib64/mysql/plugin/debug.

Test Suite Notes
* Documentation for the MySQL Test Suite is now maintained in the MySQL source tree using Doxygen (see http://dev.mysql.com/doc/dev/mysql-server/latest/PAGE_MYSQL_TEST_RUN.html). The related Unix man pages that previously were produced from the old test suite manual are no longer updated and have gone out of date. Consequently, they are no longer included in MySQL distributions.

Bugs Fixed
* InnoDB: Warnings that should only appear in a debug version of MySQL were printed to the error log when the length of the history list exceeded 2000000.
* Packaging: Initialization of the MySQL Server Docker container failed with the message ���hostname: command not found��� when the server was being initialized. That was due to a missing library in the Docker image.
* Partitioning: Queries involving NULL were not always handled correctly on tables that were partitioned by LIST.
* Microsoft Windows: On Windows, with the myisam_use_mmap and flush system variables enabled, MyISAM did not always flush table files properly.
* VALUES() was not handled correctly in some cases.
* Incorrect results or a server exit could result when SHA2() was passed a user-defined variable in some character sets.
* Creating a table with excessive index information could cause a server exit.
* Setting the MYSQL_GROUP_SUFFIX environment variable had no effect.
* A circular dependency problem involving sql/sql_builtin.cc was resolved.
* A prepared statement containing an ORDER BY list that referred to a parameter was not always handled correctly.

(adam)

2018-01-16 15:49:47 UTC MAIN commitmail json YAML

2018-01-16 15:20:49 UTC MAIN commitmail json YAML

emacs21-nox: explicitly disable X

(wiz)

2018-01-16 14:53:28 UTC MAIN commitmail json YAML

2018-01-16 14:22:30 UTC MAIN commitmail json YAML

doc: Updated devel/protobuf to 3.5.1

(mef)

2018-01-16 14:22:20 UTC MAIN commitmail json YAML

devel/protobuf and devel/py-protobuf updated to 3.5.1

2017-12-20 version 3.5.1 (C++/Java/Python/PHP/Objective-C/C#/Ruby/JavaScript)
  Planned Future Changes
  * Make C++ implementation C++11 only: we plan to require C++11 to build
    protobuf code starting from 3.6.0 release. Please join this github issue:
    https://github.com/google/protobuf/issues/2780 to provide your feedback.

  protoc
  * Fixed a bug introduced in 3.5.0 and protoc in Windows now accepts non-ascii
    characters in paths again.

  C++
  * Removed several usages of C++11 features in the code base.
  * Fixed some compiler warnings.

  PHP
  * Fixed memory leak in C-extension implementation.
  * Added discardUnknokwnFields API.
  * Removed duplicatd typedef in C-extension headers.
  * Avoided calling private php methods (timelib_update_ts).
  * Fixed Any.php to use fully-qualified name for DescriptorPool.

  Ruby
  * Added Google_Protobuf_discard_unknown for discarding unknown fields in
    messages.

  C#
  * Unknown fields are now preserved by default.
  * Floating point values are now bitwise compared, affecting message equality
    check and Contains() API in map and repeated fields.

(mef)

2018-01-16 13:35:31 UTC MAIN commitmail json YAML

guile-slib: Fix guile version in DESCR

(wiz)

2018-01-16 13:34:15 UTC MAIN commitmail json YAML

doc: Added devel/guile22-slib version 3.2.5

(wiz)

2018-01-16 13:34:06 UTC MAIN commitmail json YAML

devel/Makefile: + guile22-slib

(wiz)

2018-01-16 13:33:32 UTC MAIN commitmail json YAML

devel/guile22-slib: import guile22-slib-3.2.5

SLIB glue files for guile 2.2.

(wiz)

2018-01-16 13:28:12 UTC MAIN commitmail json YAML

icu: Revert previous clang patch, clang was changed instead.

(jperkin)

2018-01-16 13:11:16 UTC MAIN commitmail json YAML

www/contao: add used by www/contao45/Makefile line

Add used by www/contao45/Makefile line.

(taca)

2018-01-16 13:01:38 UTC MAIN commitmail json YAML

Removed unused patch

(adam)

2018-01-16 12:43:42 UTC MAIN commitmail json YAML

doc: Updated databases/mysqltuner to 1.7.2

(mef)

2018-01-16 12:43:17 UTC MAIN commitmail json YAML

Updated databases/mysqltuner 1.6.0 to 1.7.2

MySQLTuner v1.7.2
- Missing argument requirement for cvefile in mysqltuner help enhancement
- typo, space missing before 'is' enhancement
- [Questions] No recommendations for my problems Questions
- Galera gcs.fc_factor is not evaluated correctly and reports an
  erroneous message.
- Use of uninitialized value bug Test wanted
- Unknown option: pfstat
- Advice for performance schema given for wrong version?
- CVE-2016-6663(<= 10.1.18) bug Help Wanted
- binlog_cache_size
- How to grant all necessary requirements? Questions
- Disclosed password in ps uax output enhancement Questions
- on mysql 5.7.17, the tuner is not working anymore. Test wanted
- Argument "xxxM" isn't numeric in numeric ge (>=) bug Help Wanted
- Perl Error bug Test wanted
- Doesn't work for remote server on AWS bug Test wanted
- Software doesn't escape SQL statements in basic_passwords.txt
  enhancement Test wanted
- MEMORY tables returning as non-InnoDB (Galera Cluster)
- bug (?) script fails on centos 6.8 due to a number of uninitialized
  vars Questions Wont be Fixed
- MariaDB GTID mode bug Test wanted

v1.6.18
- Galera metrics
- System metrics
- Better thread pool metrics
- InnoDB 5.7 innodb_buffer_pool_chunk_size checks
- Bugs fixes on CVE detection
- Bug fixes on error message displayed for some versions

(mef)

2018-01-16 12:38:35 UTC MAIN commitmail json YAML

2018-01-16 12:29:04 UTC MAIN commitmail json YAML

doc: Updated chat/ejabberd to 18.01

(fhajny)

2018-01-16 12:28:56 UTC MAIN commitmail json YAML

Update chat/ejabberd to 18.01.

- Fix TLS driver memory management
- Fix privacy_set command
- Report 'fs' support as unavailable on SunOS
- Let mod_block_strangers bounce an error when a message is rejected

(fhajny)

2018-01-16 12:27:03 UTC MAIN commitmail json YAML

doc: Updated net/erlang-esip to 1.0.21

(fhajny)

2018-01-16 12:26:54 UTC MAIN commitmail json YAML

Update net/erlang-esip to 1.0.21.

Version 1.0.21
- Updating fast_tls to version 1.0.20.
- Updating stun to version 1.0.20.

Version 1.0.20
- Updating stun to version 1.0.19.
- Updating fast_tls to version 1.0.19.

Version 1.0.19
- Updating stun to version 1.0.18.
- Updating fast_tls to version 71250ae.
- Support SNI for TLS connections

(fhajny)

2018-01-16 12:24:15 UTC MAIN commitmail json YAML

doc: Updated net/erlang-stun to 1.0.20

(fhajny)

2018-01-16 12:24:07 UTC MAIN commitmail json YAML

Update net/erlang-stun to 1.0.20.

Version 1.0.20
- Updating fast_tls to version 1.0.20.

Version 1.0.19
- Updating fast_tls to version 1.0.19.

Version 1.0.18
- Updating fast_tls to version 71250ae.
- Fix compilation warnings

(fhajny)

2018-01-16 12:20:34 UTC MAIN commitmail json YAML

doc: Updated net/erlang-xmpp to 1.1.19

(fhajny)

2018-01-16 12:20:26 UTC MAIN commitmail json YAML

Update net/erlang-xmpp to 1.1.19.

Version 1.1.19
- Updating fast_xml to version 1.1.28.

Version 1.1.18
- Updating fast_xml to version 1.1.27.
- Don't treat xmpp: URI as valid

(fhajny)

2018-01-16 12:18:29 UTC MAIN commitmail json YAML

doc: Updated textproc/erlang-fast_xml to 1.1.28

(fhajny)

2018-01-16 12:18:21 UTC MAIN commitmail json YAML

Update textproc/fast_xml to 1.1.28.

Version 1.1.28
- Include Makefile in package generated for hex

Version 1.1.27
- Freeze dependencies in mix.lock file to be more friendly with hex.pm
- Fix ambiguous Elixir syntax in mix.exs

(fhajny)

2018-01-16 12:16:31 UTC MAIN commitmail json YAML

doc: Updated security/erlang-fast_tls to 1.0.20

(fhajny)

2018-01-16 12:16:22 UTC MAIN commitmail json YAML

Update security/fast_tls to 1.0.20.

Version 1.0.20
- Include uthash.h in hex package

Version 1.0.19
- Fix couple memory leaks
- Switch hashmap to uthash library
- Use system allocator in openssl
- Update ciphers and option to safer defaults

(fhajny)

2018-01-16 12:10:00 UTC MAIN commitmail json YAML

doc: Updated databases/mongo-c-driver to 1.9.2

(fhajny)

2018-01-16 12:09:51 UTC MAIN commitmail json YAML

Update databases/mongo-c-driver to 1.9.2.

- No change since 1.9.1; released to keep pace with libbson's
  version number.

(fhajny)

2018-01-16 12:09:23 UTC MAIN commitmail json YAML

doc: Updated devel/libbson to 1.9.2

(fhajny)

2018-01-16 12:09:14 UTC MAIN commitmail json YAML

Update devel/libbson to 1.9.2.

- This release completes reverting a changed macro definition that
  broke API compatibility. The revert in 1.9.1 did not completely
  fix the BC break.

(fhajny)

2018-01-16 11:28:09 UTC MAIN commitmail json YAML

2018-01-16 11:26:18 UTC MAIN commitmail json YAML

php70: Don't automatically add libgcc on SunOS.

(jperkin)

2018-01-16 11:04:54 UTC MAIN commitmail json YAML

2018-01-16 10:49:57 UTC MAIN commitmail json YAML

php72: Don't automatically add libgcc on SunOS.

(jperkin)

2018-01-16 10:10:00 UTC MAIN commitmail json YAML

coreutils: Fix issue with clang -errwarn on SunOS.

(jperkin)

2018-01-16 09:48:46 UTC MAIN commitmail json YAML

2018-01-16 09:37:36 UTC MAIN commitmail json YAML

doc: Updated net/transmission-qt to 2.92nb13

(wiz)

2018-01-16 09:37:24 UTC MAIN commitmail json YAML

doc: Updated net/transmission-gtk to 2.92nb10

(wiz)

2018-01-16 09:37:13 UTC MAIN commitmail json YAML

doc: Updated net/transmission to 2.92nb6

(wiz)

2018-01-16 09:37:00 UTC MAIN commitmail json YAML

2018-01-16 09:34:40 UTC MAIN commitmail json YAML

cross-libtool-base: catch up with libtool-base 2.4.6 PLIST changes.

From Harold Gutch in PR pkg/52921

(maya)

2018-01-16 09:24:56 UTC MAIN commitmail json YAML

py-mercurial: add upstream patch to fix test failure

No change to binary package, so no PKGREVISION bump.

(wiz)

2018-01-16 09:15:28 UTC MAIN commitmail json YAML

zeromq: Requires C99.

(jperkin)

2018-01-16 08:13:32 UTC MAIN commitmail json YAML

Updated archivers/lz4

(adam)

2018-01-16 08:13:01 UTC MAIN commitmail json YAML

lz4: updated to 1.8.1.2

v1.8.1.2:
It's the same as v1.8.1, but the version number in source code has been fixed.
The version number is used in cli and documentation display, to create the full name of dynamic library, and can be requested via LZ4_versionNumber().

(adam)

2018-01-16 07:48:47 UTC MAIN commitmail json YAML

samba: force fail pam configure if the option is disabled.
It auto-detects existing PAM.

From Harold Gutch in PR pkg/52927

(maya)

2018-01-16 07:19:23 UTC MAIN commitmail json YAML

doc: Updated chat/irssi to 1.1.0

(maya)

2018-01-16 07:18:45 UTC MAIN commitmail json YAML

irssi: update to 1.1.0

v1.1.0 2018-01-15 The Irssi team <staff@irssi.org>
* Colour is now re-set when reaching a comma, matching mIRC
  behaviour (#742, #740, #790)
* Irssi now shows the initial nick and name on first start
  (#785, #786)
* lynx is no longer required to run autogen.sh (#81, #781)
* The command history no longer permits wrapping around (#686)
* /foreach now correctly sends arguments as commands, stopping
  you from embarassing AMSGs (#659)
* /server does not connect to servers anymore, use /server
  connect to change servers (#559, #649).
+ Add an option to ignore all channels or ignore all queries
  using /set activity_hide_targets. By Jari Matilainen (#612,
  #779)
+ Add a startup warning if the TERM var is wrong inside
  tmux/screen (#726)
+ Add option to hide certain levels from the textbuffer using
  /window hidelevel (#746, #808)
+ Irssi now has its first unit test (for mode parsing). By
  Will Storey (#793)
+ Added access to global command history when using window
  history, and a binding to erase entries from the command
  history (erase_history_entry) (#762)
+ -alternate_nick is now available as a network specific
  property. By Paul Townsend (#120, #771)
+ On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
  enter). By Edward Tomasz Napierala (#735, #755, #772)
+ Filenames (directories) ending with a / now tab-complete
  (#741)
+ UTF-8 should now work in regular expressions when using
  GRegex (the default) (#636, #653)
+ Nicks are now properly escaped on completion. By Oscar
  Linderholm (#693, #709)
+ /server add -port <num> now works. By Jari Matilainen (#703)
+ Add a setting key_timeout to make key sequences
  automatically re-set when not finished (#644, #645)
+ Warn users about expired client certificates, as servers may
  refuse them (#211, #627)
+ Add a new net_start_ssl function for StartTLS. This is
  available from ABI 8 and can be used by protocol modules
  (#615, #622).
+ The %# code is now stored in the textbuffer, so for example
  web scripts can make use of it (#626)
+ Add new setting break_wide which can be used to enable
  breaking of wide characters (for east-asian
  users). Originally from FreeBSD ports. (#625)
+ Add fuzzing code (#610, #620, #701, #713)
- Netsplits show properly again (#812)
- Do not error on blank lines when using /exec -o. By Fabian
  Kurz (FS#902, #805)
- Detect used nickname as reported by server. By Alexandre
  Morignot (#219, #804)
- Prevent use after free error during the execution of some
  commands. Found by Joseph Bisch. (GL#17, GL!24)
- Fix MODE parameter parsing when colon was used at a place
  Irssi didn't expect (#601, #766)
- Fixed code to compile with
  -Werror=declaration-after-statement (#795)
- Clang-format is now supported for git-clang-format (#784)
- Fix use after free when changing the network of
  hilights. Reported by Rui Mathias. (#787, #788)
- Fix positioning error when tab-completing non-ascii
  strings. (#752, #754)
- In-development issues (#750, #751)
- Clarify Alis in /help list (#699, #712)
- Improve /lastlog performance from O(N^2) to O(N) (#715)
- Fix a segfault on "script destroyed" signal. By Stephen
  Oberholtzer (#660, #661).
- Fix early ISON error (#596, #647)
- Documentation improvements. By Paolo Martini (#639).
  By Tristan Pepin (#731).  By Paul Townsend (#684, #736).
  By Will Storey (#777)
- Minor cleanups (#590). By Edward Tomasz Napierala (#734,
  #738). By Will Storey (#770)
- Fix space issue in glib-2.0.m4 (#621)

(maya)

2018-01-15 21:36:26 UTC MAIN commitmail json YAML

doc: Added www/php-phalcon version 3.3.1

(fhajny)

2018-01-15 21:36:05 UTC MAIN commitmail json YAML

Import phalcon-3.3.1 as www/php-phalcon.

Phalcon is an open source full stack framework for PHP, written as a
C-extension. Phalcon is optimized for high performance. Its unique
architecture allows the framework to always be memory resident,
offering its functionality whenever its needed, without expensive
file stats and file reads that traditional PHP frameworks employ.

(fhajny)

2018-01-15 18:13:12 UTC MAIN commitmail json YAML

doc: Updated devel/cmake to 3.10.1nb2

(minskim)

2018-01-15 18:12:41 UTC MAIN commitmail json YAML

devel/cmake: Add the upstream patch to support boost-libs-1.66

Bump PKGREVISION.

(minskim)

2018-01-15 12:56:08 UTC MAIN commitmail json YAML

2018-01-15 12:39:32 UTC MAIN commitmail json YAML

Added security/lynis version 2.5.9

(sborrill)

2018-01-15 12:38:37 UTC MAIN commitmail json YAML

lynis: add 2.5.9

Lynis is an open source security auditing tool. Used by system
administrators, security professionals, and auditors, to evaluate the
security defenses of their Linux and Unix-based systems. It runs on the host
itself, so it performs more extensive security scans than vulnerability
scanners.

(sborrill)

2018-01-15 12:36:36 UTC MAIN commitmail json YAML

doc: Updated databases/mongo-c-driver to 1.9.1

(fhajny)

2018-01-15 12:36:26 UTC MAIN commitmail json YAML

Update databases/mongo-c-driver to 1.9.1.

- This release fixes a bug that caused session ID to be included
  in authentication and server monitoring commands.

(fhajny)

2018-01-15 12:35:38 UTC MAIN commitmail json YAML

doc: Updated devel/libbson to 1.9.1

(fhajny)

2018-01-15 12:35:29 UTC MAIN commitmail json YAML

Update devel/libbson to 1.9.1.

- This release reverts a changed macro definition that broke API
  compatibility, and fixes an off-by-one error in bson_append_regex
  that resulted in corrupt BSON.

(fhajny)

2018-01-15 12:21:36 UTC MAIN commitmail json YAML

2018-01-15 11:06:28 UTC MAIN commitmail json YAML

Updated sysutils/rsyslog* to 8.32.0

(fhajny)

2018-01-15 11:01:16 UTC MAIN commitmail json YAML

Update sysutils/rsyslog* to 8.32.0.

- rsyslogd: add capability to specify that no pid file shall be
  written
- ompgsql: considerable enhancements
- build system: removed --enable-rtinst configure option
- pmrfc3164: support for headerless messages
- omhiredis: add option to use RPUSH instead of LPUSH
- mmexternal improvements
- omprog: refactored, code shared with mmexternal moved to common
  object
- logctl tool: refactor to support newer rsyslog standards
- imfile: added support for Solaris File Event notification (FEN)
- core/action: new parameter "action.errorfile"
- imfile: added new module parameter "sortFiles"
- imuxsock: improved status reporting: socket name received from
  systemd
- build system: added new testbench configure switches
- mmpstrucdata: new parameter "sd_name.lowercase"
- omfile: add module-global option "dynafile.donotsuspend"
- testbench: add a capability to turn off libfaketime tests via
  configure
- testbench: name valgrind tests consistently
- RainerScript: add function parse_json()
- RainerScript: add function substring()
- RainerScript: add function http_request()
- RainerScript: add function previous_is_suspended()
- Patches from BSD projects have been imported
- script bugfix: invalid function names were silently ignored
- rainerscript: add int2hex() function
- rainerscript: add is_time() function
- RainerScript: add function script_error() and error-reporting
  support
- testbench: fixed build problem of testbench tools under Alpine Linux
- added --enable-libsystemd configure option to enforce use of
  libsystemd
- core/glbl: remove long-unused option $optimizeforuniprocessor
- core/queue: emit better status messages at rsyslog shutdown
- fixed a couple of build issues with gcc-7 (in less frequently used
  modules)
- fixed a couple of build issues on the arm platform (actually
  raspbian)
- impstats: fix invalid counter definitions for getrusage() reporting
- imudp bugfix: potential segfault in ratelimiting
- imptcp bugfix: access to free'ed memory
- mmanon bugfix: fix wrong ipv6 embedded recognition
- imfile bugfix: not detecting files in directory when wildcards are
  used.
- script bugfix: improper string-to-number conversion for negative
  numbers
- core/action bugfix: 100% CPU utilization on suspension of output
  module
- core/variables bugfix: bare $! cannot be used in set statement
- core bugfix: auto commit of actions improperly handled
- core bugfix: filename length limitation of 199 bytes
- core bugfix: undefined behavior due to integer overflow
- core bugfix: race on LocalHostIP property during startup
- bugfix: potential segfault on startup
- omhiredis bugfix: rsyslog segfault on startup if no template is
  specified
- omprog bugfix: argv[0] not set when using binary without arguments
- core: refactoring of rsyslog's cstr "class"
- parent directory creation function refactored
- mmsnmptrapd bugfix: potential misadressing
- imkafka: fix potential small ressource leak
- imkafka bugfix: do not emit error message on regular state
- omkafka: expose operational status to user where useful
- omkafka bugfix: potential message duplication
- omkafka: fix multithreading
- omkafka bugfix: potential misadressing
- omkafka bugfix: build fails with older versions of librdkafka
- omgssapi bugfix: fix compiler warnings with gcc-7
- dnscache bugfix: entries were cached based on IP AND port number
- omkafka bugfix: fixed memory leak
- mmdblookup bugfix: replace thread-unsafe strtok() by thread-safe
  counterpart
- pmnormalize bugfix: remove unsave "strcat" implementation
- rainerscript bugfix: ltrim() and rtrim function misadressing
- imklog bugfix: local host IP was hardcoded to 127.0.0.1
- cleanup: remove obsolete pre-KSI GuardTime signature interface
- cleanup: obsolete defintion SOL_TCP replaced by newer IPPROTO_TCP
- lookup tables: fixed undefined behavior detected by UBSan

(fhajny)

2018-01-15 10:40:33 UTC MAIN commitmail json YAML

Updated devel/py-faker, devel/py-decorator

(adam)

2018-01-15 10:40:07 UTC MAIN commitmail json YAML

py-decorator: updated to 4.2.1

4.2.1:
Fixed a regression breaking IPython and discovered by https://github.com/spapini

4.2.0:
Added a facility to define families of decorators (aka decorators with
arguments) as requested by several users.

(adam)

2018-01-15 10:35:26 UTC MAIN commitmail json YAML

py-faker: updated to 0.8.9

0.8.9:
Remove support for Python 3.3.
Allow past dates within a second.
Added phone number formatting to en_GB localisation to ensure no genuine phone numbers are generated.
Added en_GB localisation for SSN (UK National Insurance Number).
Added ro_RO person Provider.
Added domain argument to email provider.

(adam)

2018-01-15 10:07:50 UTC MAIN commitmail json YAML

2018-01-15 09:54:21 UTC MAIN commitmail json YAML

moria: Use FORTIFY_SUPPORTED=no instead of PKGSRC_USE_FORTIFY=no.

(jperkin)

2018-01-15 09:51:56 UTC MAIN commitmail json YAML

ap-php: Use {FORTIFY,SSP}_SUPPORTED.

(jperkin)

2018-01-15 09:50:47 UTC MAIN commitmail json YAML

memtestplus: Use {FORTIFY,SSP}_SUPPORTED.

(jperkin)

2018-01-15 09:49:03 UTC MAIN commitmail json YAML

ovmf: Use SSP_SUPPORTED=no instead of PKGSRC_USE_SSP=no.

(jperkin)

2018-01-15 09:47:55 UTC MAIN commitmail json YAML

2018-01-15 09:45:18 UTC MAIN commitmail json YAML

doc: Updated security/easy-rsa to 3.0.3nb1

(jnemeth)

2018-01-15 09:35:45 UTC MAIN commitmail json YAML

mk: Introduce *_SUPPORTED variables for security features.

Using variables such as PKGSRC_USE_SSP in package Makefiles to disable SSP does
not work due to the parsing order in bsd.prefs.mk.  Even if it did, it's not a
good idea to mix user and package settable variables, and would cause issues in
complex packages where bsd.prefs.mk is included early (e.g. Makefile.common).

Packages can now set {MKPIE,MKREPRO,FORTIFY,RELRO,SSP,STACK_CHECK}_SUPPORTED=no
to correctly disable security features if necessary.

(jperkin)

2018-01-15 09:26:23 UTC MAIN commitmail json YAML

2018-01-15 09:00:01 UTC MAIN commitmail json YAML

Note update of fonts/fontconfig to 2.12.6nb1.

(he)

2018-01-15 08:59:15 UTC MAIN commitmail json YAML

Add a workaround for the Old in-tree fontconfig headers
on netbsd-6 (build fix).
Bump PKGREVISION.

(he)

2018-01-15 08:52:25 UTC MAIN commitmail json YAML

2018-01-15 08:51:55 UTC MAIN commitmail json YAML

jq: fixed dynamic linking (now bin/jq is tiny); cleaned pkglint warnings

(adam)

2018-01-15 08:49:04 UTC MAIN commitmail json YAML

oniguruma: updated to 6.7.0

New feature of version 6.7.0
NEW: hexadecimal codepoint \uHHHH
NEW: add ONIG_SYNTAX_ONIGURUMA (== ONIG_SYNTAX_DEFAULT)
Disabled \N and \O on ONIG_SYNTAX_RUBY
Reduced object size

New feature of version 6.6.1
Fix definition of \X

New feature of version 6.6.0
NEW: ASCII only mode options for character type/property (?WDSP)
NEW: Extended Grapheme Cluster boundary \y, \Y (*original)
NEW: Extended Grapheme Cluster \X
Range-clear (Absent-clear) operator restores previous range in backtrack.

New feature of version 6.5.0
NEW: \K (keep)
NEW: \R (general newline) \N (no newline)
NEW: \O (true anychar)
NEW: if-then-else syntax (?(...)...|...)
NEW: Backreference validity checker (?(xxx)) (*original)
NEW: Absent repeater (?~absent)
NEW: Absent expression (?~|absent|expr) (*original)
NEW: Absent stopper (?~|absent) (*original)

New feature of version 6.4.0
Fix fatal problem of endless repeat on Windows
NEW: call zero (call the total regexp) \g<0>
NEW: relative backref/call by positive number \k<+n>, \g<+n>

New feature of version 6.3.0
NEW: octal codepoint \o{.....}

New feature of version 6.1.2
allow word bound, word begin and word end in look-behind.
NEW option: ONIG_OPTION_CHECK_VALIDITY_OF_STRING

New feature of version 6.1
improved doc/RE
NEW API: onig_scan()

New feature of version 6.0
Update Unicode 8.0 Property/Case-folding
NEW API: onig_unicode_define_user_property()

(adam)

2018-01-15 08:08:55 UTC MAIN commitmail json YAML

Updated devel/ccache, multimedia/mp4v2

(adam)

2018-01-15 08:08:26 UTC MAIN commitmail json YAML

mp4v2: updated to 3.0.3.0

3.0.3.0:
Now hosted on GitHub.
Bug fixes.

(adam)

2018-01-15 08:07:02 UTC MAIN commitmail json YAML

ccache: updated to 3.3.5

ccache 3.3.5

New features and improvements
* Documented how automatic cache cleanup works.

Bug fixes
* Fixed a regression where the original order of debug options could be lost. This reverts the ���Improved parsing of -g* options��� feature in ccache 3.3.
* Multiple -fdebug-prefix-map options should now be handled correctly.
* Fixed matching of directories in the ignore_headers_in_manifest configuration option.
* Fixed detection of missing argument to -opt/--options-file.
* ccache now bails out when building a precompiled header if any of the corresponding header files have an updated timestamp. This fixes complaints from clang.
* Fixed a bug related to erroneously storing a dependency file with absolute paths in the cache on a preprocessed hit.
* ccache -c/--cleanup now works like documented: it just recalculates size counters and trims the cache to not exceed the max size and file number limits. Previously, the forced cleanup took ���limit_multiple��� into account, so that ccache -c/--cleanup by default would trim the cache to 80% of the max limit.
* ccache no longer ignores linker arguments for clang since clang warns about them.
* Plugged a couple of file descriptor leaks.
* Fixed a bug where ccache would skip hashing the compiler argument following a -fno-working-directory, -fworking-directory, -nostdinc, -nostdinc++, -remap or -trigraphs option in preprocessor mode.

(adam)

2018-01-14 17:34:02 UTC MAIN commitmail json YAML

games/*: fix alignment of variable values

pkglint -Wall -r --autofix --only aligned

After running the above command, three packages had to be adjusted
manually:

In maelstrom-x11, pkglint didn't see that a commented variable
assignment should have been re-aligned as well.

In netmaze, there was a single line that didn't align well with all the
others, but pkglint decided to adjust the whole paragraph to this single
line. The result would have been ok, but not good.

In tscp, there was a paragraph where some of the lines were indented
one space more than the others. This rule is useful when one variable
name is very long compared to the others, but not in this case.

(rillig)

2018-01-14 16:12:08 UTC MAIN commitmail json YAML

doc: Updated net/youtube-dl to 20180114

(leot)

2018-01-14 16:11:53 UTC MAIN commitmail json YAML

youtube-dl: Update net/youtube-dl to 20180114

Changes:
version 2018.01.14

Extractors
* [youtube] Fix live streams extraction (#15202)
* [wdr] Bypass geo restriction
* [wdr] Rework extractors (#14598)
+ [wdr] Add support for wdrmaus.de/elefantenseite (#14598)
+ [gamestar] Add support for gamepro.de (#3384)
* [viafree] Skip rtmp formats (#15232)
+ [pandoratv] Add support for mobile URLs (#12441)
+ [pandoratv] Add support for new URL format (#15131)
+ [ximalaya] Add support for ximalaya.com (#14687)
+ [digg] Add support for digg.com (#15214)
* [limelight] Tolerate empty pc formats (#15150, #15151, #15207)
* [ndr:embed:base] Make separate formats extraction non fatal (#15203)
+ [weibo] Add extractor (#15079)
+ [ok] Add support for live streams
* [canalplus] Fix extraction (#15072)
* [bilibili] Fix extraction (#15188)

version 2018.01.07

Core
* [utils] Fix youtube-dl under PyPy3 on Windows
* [YoutubeDL] Output python implementation in debug header

Extractors
+ [jwplatform] Add support for multiple embeds (#15192)
* [mitele] Fix extraction (#15186)
+ [motherless] Add support for groups (#15124)
* [lynda] Relax URL regular expression (#15185)
* [soundcloud] Fallback to avatar picture for thumbnail (#12878)
* [youku] Fix list extraction (#15135)
* [openload] Fix extraction (#15166)
* [lynda] Skip invalid subtitles (#15159)
* [twitch] Pass video id to url_result when extracting playlist (#15139)
* [rtve.es:alacarta] Fix extraction of some new URLs
* [acast] Fix extraction (#15147)

version 2017.12.31

Core
+ [extractor/common] Add container meta field for formats extracted
  in _parse_mpd_formats (#13616)
+ [downloader/hls] Use HTTP headers for key request
* [common] Use AACL as the default fourcc when AudioTag is 255
* [extractor/common] Fix extraction of DASH formats with the same
  representation id (#15111)

Extractors
+ [slutload] Add support for mobile URLs (#14806)
* [abc:iview] Bypass geo restriction
* [abc:iview] Fix extraction (#14711, #14782, #14838, #14917, #14963, #14985,
  #15035, #15057, #15061, #15071, #15095, #15106)
* [openload] Fix extraction (#15118)
- [sandia] Remove extractor
- [collegerama] Remove extractor
+ [mediasite] Add support for sites based on Mediasite Video Platform (#5428,
  #11185, #14343)
+ [ufctv] Add support for ufc.tv (#14520)
* [pluralsight] Fix missing first line of subtitles (#11118)
* [openload] Fallback on f-page extraction (#14665, #14879)
* [vimeo] Improve password protected videos extraction (#15114)
* [aws] Fix canonical/signed headers generation on python 2 (#15102)

(leot)

2018-01-14 16:00:46 UTC MAIN commitmail json YAML

doc: Updated chat/py-hangups to 0.4.4

(leot)

2018-01-14 16:00:35 UTC MAIN commitmail json YAML

hangups: Update chat/py-hangups to 0.4.4

pkgsrc changes:
- Update some DEPENDS PKGVERSIONs to reflect upstream setup.py changes

Changes:
* fix error when updating read timestamp for empty conversation
* fix HTTP client resource management issue
* add alternate up/down keybindings
* add terminal bell notification method
* add --notification-type option, deprecate --disable-notifications
* fix exception propagation issues in UI

(leot)

2018-01-14 15:30:00 UTC MAIN commitmail json YAML

doc: Updated security/sudo to 1.8.21p2nb1

(maya)

2018-01-14 15:29:38 UTC MAIN commitmail json YAML

2018-01-14 15:26:49 UTC MAIN commitmail json YAML

2018-01-14 14:58:41 UTC MAIN commitmail json YAML

2018-01-14 11:31:41 UTC MAIN commitmail json YAML

Updated graphics/py-dot

(adam)

2018-01-14 11:30:46 UTC MAIN commitmail json YAML

py-dot: updated to 1.2.4

1.2.4:
- ENH: propagate LD_LIBRARY_PATH when calling GraphViz
- API: raise OSError when a GraphViz executable is not found
- API: add method __str__ to classes Node, Edge, Graph
- API: add arg encoding to Dot methods create, write
- API: quote cluster names when necessary
- API: give source and destination nodes as separate args to Edge.__init__
- API: never ignore src, dst, overwrite if points defined in obj_dict

(adam)

2018-01-14 11:19:35 UTC MAIN commitmail json YAML

Updated devel/py-cffi, devel/py-blessings

(adam)

2018-01-14 11:19:05 UTC MAIN commitmail json YAML

py-blessings: updated to 1.6.1

1.6.1:
* Don窶冲 crash if number_of_colors() is called when run in a non-terminal or when does_styling is otherwise false.

(adam)

2018-01-14 11:09:17 UTC MAIN commitmail json YAML

py-cffi: updated to 1.11.4

v1.11.4:
* Windows: reverted linking with python3.dll, because virtualenv does not make this DLL available to virtual environments for now. On Windows only, the C extension modules created by cffi follow for now the standard naming scheme foo.cp36-win32.pyd, to make it clear that they are regular CPython modules depending on python36.dll.

(adam)