py-arrow: update to 0.10.0

0.10.0
- [FIX] Fix getattr off by one for quarter
- [FIX] Fix negative offset for UTC
- [FIX] Update arrow.py

(adam)

Updated devel/py-async-timeout, devel/py-test-xdist

(adam)

py-test-xdist: update to 1.20.1

1.20.1:

Bug Fixes
- Fix hang when all worker nodes crash and restart limit is reached
- Fix issue where the -n option would still run distributed tests when pytest
  was run with the --collect-only option

(adam)

py-async-timeout: update to 2.0.0

2.0.0:
* Changed `timeout <= 0` behaviour
  * Backward incompatibility change, prior this version `0` was
    shortcut for `None`
  * when timeout <= 0 `TimeoutError` raised faster

(adam)

typo:  u-boot-nanopi-neo22 -> u-boot-nanopi-neo2

(jnemeth)

leptonica: Support openjpeg-2.3.

(jperkin)

Added sysutils/u-boot-nanopi-neo2 version 2017.09

(jmcneill)

+ u-boot-nanopi-neo2

(jmcneill)

Initial import of u-boot-nanopi-neo2 version 2017.09.

U-Boot is a bootloader for embedded boards based on PowerPC, ARM, MIPS and
several other processors, which can be installed in a boot ROM and used to
initialize and test the hardware or to download and run application code.

This package provides U-Boot for the FriendlyARM NanoPi NEO 2.

(jmcneill)

Updated emulators/qemu

(adam)

qemu: update to 2.10.1

2.10.1:
Bug fixes.

(adam)

doc: Updated x11/libXfont2 to 2.0.2

(wiz)

libXfont2: update to 2.0.2.

A collection of minor fixes since 2.0.1, including CVEs 2017-13720
and 2017-13722.

(wiz)

doc: Updated x11/libXres to 1.2.0

(wiz)

libXres: update to 1.2.0.

Version 1.2 of the X-Resource extension (added in xserver 1.13)
added some new requests allowing inspection of every resource for a
client, the bytes used per resource, and the PIDs of local clients.
Unfortunately the client library never saw a corresponding release, so
let's fix that.

(wiz)

gtk-doc: Add comment about failing test case.

(wiz)

doc: Updated textproc/gtk-doc to 1.26

(wiz)

gtk-doc: update to 1.26.

GTK-Doc 1.26  (Aug 11 2017)
==============

Remove tmpl support (gtkdoc-mktmpl). Port all tools from bash/perl to python.

Changes

o 773879 :  -    scangobj: Do not generate unused parameters
o 780789 : Convert gtkdoc-scan from Perl to Python
o 752126 : Add support for inline program documentation
o 753052 : _() causes element a: validity error : ID idx already defined
o 758137 : GtkLabel and GtkShortcutsShortcut notes on escaping character entities don't render properly
o 764407 : Broken links to structs in function definitions
o 764543 : /usr/bin/gtkdoc-mkpdf always exits with an error
o 768675 : make check fails on master
o 769125 : gtkdoc-mkhtml/pdf fails on spaces in search path
o 769341 : gtkdoc-mkdb line 3966 triggers " Negative repeat count does nothing " warnings
o 771255 :  " Symbol name not found at the start of comment block " warning with " attributes " annotation.
o 773151 : configure: Lower perl dependency to 5.16.0
o 774168 : gobject introspection annotations and gtk-doc parser do not agree
o 774812 : Error messages from xsltproc are hidden by gtkdoc-mkhtml
o 778144 : Allow disabling introspection for ancillary property mechanisms
o 779566 : Replace shell executables with Python

GTK-Doc 1.25  (Mar 21 2016)
==============

Changes

o 763465 :  -    released version of gtk-doc no longer understands cross-reference data in gtk+
o 742404 : unify index.sgml and *.devhelp2 + change gtkdoc-fixxref to use *.devhelp2
o 743182 : Automatically support PACKAGE variables as XML entities
o 744061 : Skip standard g_iface, parent_instance and parent_class struct members
o 751479 : help: Document the Stability tag for documentation comments
o 751777 : gtk-doc -sections.txt file documentation is a bit confusing
o 751783 : Creating master xml document documentation is a bit lacking
o 751906 : help: Fix incorrect example syntax for embedded images
o 752795 : documentation is not rebuilt when only content of doc comments change
o 753145 : gtkdoc-mkhtml fails on spaces in file names
o 753348 : gtkdocize does not handle -flat flavours
o 756297 : Add CMake module
o 756368 : gtkdocize mistakenly parses options from comments in configure.ac
o 756519 : `make check' fails - Sequence (?R...) not recognized in regex
o 756684 : Support (not nullable) annotation
o 756998 : Support |[ <!-- language= " plain " --> ]|
o 758996 : gtkdoc-mkdb: ensure macros appear in the correct section
o 759017 : autogenerated ids in return and parameter blocks

GTK-Doc 1.24  (May 29 2015)
============

This is another quick bugfix release for a regression, see bug #749591

Changes

o 749591 : gtk-doc 1.23 no longer includes xml namespace in .devhelp2 files
o 749706 : .gitignore files should not be under version control
o 749816 : Support syntax highlighting of different languages (patch included)
o 749901 : Strip common indent when highlighting with vim

GTK-Doc 1.23  (May 17 2015)
============

This is a quick bugfix release for a regression, see bug #749142.

Changes

o 749142 : Can't build totem-pl-parser from master using gtk-doc 1.22
o 749210 : mkman: Use full URL to refer to the docbook manpages stylesheet

GTK-Doc 1.22    (May 07 2015)
============

Important notice - starting with the next release these long deprecated
features will be removed - you'll now see a warning if you actually use these
features. Please write to gtk-doc-list@gnome.org and tell us your concerns:
o gtkdoc-mktmpl - please move all the comments into the sources.
o generating html via sgml tools (jade/openjade), using xsltproc and
  docbook-xslt is pretty common and preferred since version 1.6

Changes

o 727778 :  -    gtk-doc doesn't understand annotations for GList-contained types
o 729911 : Using #TypeName inshort_description makes " - " in HTML index disappear
o 732689 : strange result on a generated html page
o 734689 :  " Specific -> General " document title format
o 736073 : Regression: problems with enum constants
o 736725 : Documentation consists mostly of empty space
o 741305 : Scanner issue with enum containing value ='{'
o 741763 : Example Makefile.am improvements
o 741941 : Last function argument missing in docs (possibly due to macro in code)
o 743879 : special case G_DECLARE_*_TYPE
o 743967 : Make build results reproducible
o 744075 : Missing struct members if forward declared in another header
o 744368 : gtkdoc-depscan doesn't handle unicode in .devhelp2 files correctly
o 746118 : gtkdoc-scan: fix regex for get_type() functions
o 746120 : Expand annotation recognition on symbol lines
o 746121 : gtkdoc-mkdb: don't warn on 'deprecated entities'
o 747207 : Typos in documentation
o 747298 : Test still tries to check gtkdoc-scanobj
o 748456 : xsl: Enable ToC generation on empty <toc/> elements

(wiz)

doc: Updated multimedia/adobe-flash-player to 27.0.0.159

(tsutsui)

adobe-flash-player: update to 27.0.0.159.

Note this version seems to include a fix for crash of nspluginwrapper
(npviewer.bin) on NetBSD/i386 7.1 with pulseaudio (i.e. no libflashsupport)
settings.

Upstream changes:

https://helpx.adobe.com/security/products/flash-player/apsb17-31.html

Adobe Security Bulletin

Summary

Adobe has released an update for Adobe Flash Player for Windows,
Macintosh, Linux and Chrome OS. This monthly update addresses
functionality bugs.

(tsutsui)

doc: Added devel/ocaml-ppx_hash version 0.9.0

(jaapb)

New package devel/ocaml-ppx_hash.

This is an OCaml library that automatically generates hash functions
from type definitions. It's needed as a dependency for
devel/ocaml-ppx_base.

(jaapb)

Added ocaml-ppx_enumerate to Makefile SUBDIRs

(jaapb)

doc: Added devel/ocaml-ppx_enumerate version 0.9.0

(jaapb)

New package devel/ocaml-ppx_enumerate

This is a library that generates a list of values of finite types. It's
needed as a dependency of devel/ocaml-ppx_base.

(jaapb)

Added ocaml-ppx_compare to Makefile SUBDIRs

(jaapb)

doc: Added devel/ocaml-ppx_compare version 0.9.0

(jaapb)

New package devel/ocaml-ppx_compare

This is an OCaml library to generate comparison functions from type
definitions. It's needed as a dependency of ocaml-ppx_base.

(jaapb)

Fix dependency.

(joerg)

Updated mail/py-authres

(adam)

py-authres: update to 1.0.1

1.0.1:
+ Extended experimental support for ARC results

1.0.0:
+ Added initial experimental support for ARC results
+ Swith to sematic versioning scheme and only set version in setup.py and
  __init__

(adam)

doc: Updated sysutils/salt to 2017.7.2

(sborrill)

salt: update to 2017.7.2

Changelog:
https://docs.saltstack.com/en/latest/topics/releases/2017.7.2.html

Fixes CVE-2017-14695 and CVE-2017-14696

(sborrill)

Update to revision 44986 - note simplekv

(markd)

doc/TODO: - ImageMagick, perl

(wiz)

doc: Updated devel/dconf to 0.26.1

(wiz)

dconf: update to 0.26.1.

Changes in dconf 0.26.1
========================

- Work around a deadlock in GObject type initialization (#674885)

(wiz)

doc: Updated net/p5-Net-Libdnet6 to 0.27nb4

(wiz)

p5-Net-Libdnet6: fix some bugs on NetBSD

From Edgar Fuß in PR 52610.

Bump PKGREVISION.

(wiz)

Updated devel/py-logilab-common, math/py-simpleeval, www/py-mod_wsgi

(adam)

py-mod_wsgi: update to 4.5.20

Version 4.5.20:
Bugs Fixed
Installation on MacOS X using setup.py or pip would fail if Xcode 9.0 was installed.

(adam)

doc: Updated devel/p5-local-lib to 2.000024

(wiz)

p5-local-lib: update to 2.000024.

2.000024 - 2017-10-08
- be compatible with CPAN.pm 1.82 to 1.86_51 during bootstrap process

(wiz)

doc: Updated devel/p5-Term-Table to 0.011

(wiz)

p5-Term-Table: update to 0.011.

0.011    2017-10-09 12:52:32-07:00 America/Los_Angeles

    - Honor the env variable even on non-term output

(wiz)

doc: Updated devel/p5-Test-Simple to 1.302100

(wiz)

p5-Test-Simple: update to 1.302100.

1.302100  2017-10-10 14:30:18-07:00 America/Los_Angeles

    - No changes since last TRIAL

1.302099  2017-10-10 09:29:40-07:00 America/Los_Angeles (TRIAL RELEASE)

    - Fix run_subtest inherit_trace option

(wiz)

doc: Updated net/syncthing to 0.14.39

(wiz)

doc: Updated www/p5-HTTP-Server-Simple-Static to 0.13

(wiz)

p5-HTTP-Server-Simple-Static: update to 0.13.

0.13  Sun, 08 Oct 2017 09:38:00 +0100

        - Reworked file path handling to prevent attacker traversing
          out of the base directory. Closes:
  https://rt.cpan.org/Ticket/Display.html?id=123178

(wiz)

py-simpleeval: update to 0.9.5

0.9.5:
Python 3 compatibility.
Bug fixes.

(adam)

doc: Updated devel/p5-CPANPLUS to 0.9172

(wiz)

p5-CPANPLUS: update to 0.9172.

0.9172      Mon Oct  9 12:14:38 BST 2017

* Replace File'Fetch with File::Fetch [rt.cpan.org #123221]

(wiz)

doc: Updated devel/p5-Alien-Build to 1.25

(wiz)

p5-Alien-Build: update to 1.25.

1.25      2017-10-09 08:57:34 -0400

1.24_01  2017-10-08 10:40:11 -0400
  - Build process now considers share/pkgconfig in addition to lib/pkgconfig
    for all things pkg-config related (gh#39, gh#40 a3f++)

1.23_01  2017-10-07 20:58:52 -0400
  - Improve SSL diagnostics for Download::Negotiate and Fetch::HTTPTiny
    plugins.

(wiz)

py-logilab-common: update to 1.4.1

1.4.1:
Bug fixes.

(adam)

doc: Updated audio/p5-MP3-Info to 1.26

(wiz)

p5-MP3-Info: update to 1.26.

Changes not documented.

(wiz)

syncthing: update to 0.14.39.

This is a regularly scheduled stable release.

Resolved issues:

    #4357: Removing paused folders no longer triggers a crash.
    #4360: Add further security related HTTP headers
    #4375: Improve info level logging in some cases
    #4377: Improve GUI tooltips in chromium based browsers
    #4382: Hide temporary files on Windows
    #4387: Add -device-id command line switch

In addition, failure to upgrade folder markers from file to directory type is
no longer fatal.

(wiz)

py-websocket-client: pkgsrc fixes

Sorted PLIST
Added ALTERNATIVES
Removed underscore (_) from PKGNAME

(adam)

mit-krb5: update to 1.14.6

(tez)

mit-krb5: update to 1.14.6

Major changes in 1.14.6 (2017-09-25)

This is a bug fix release.

    Fix a KDC denial of service vulnerability caused by unset status strings [CVE-2017-11368]
    Preserve GSS contexts on init/accept failure [CVE-2017-11462]
    Fix kadm5 setkey operation with LDAP KDB module
    Use a ten-second timeout after successful connection for HTTPS KDC requests, as we do for TCP requests
    Fix client null dereference when KDC offers encrypted challenge without FAST

(tez)

ImageMagick: update to 7.0.7.7

(tez)

ImageMagick: update to 7.0.7.7

2017-10-07  7.0.7-7 Cristy  <quetzlzacatenango@image...>
  * Release ImageMagick version 7.0.7-7, GIT revision 21432:29003eeed:20171007.

2017-10-06  7.0.7-7 Cristy  <quetzlzacatenango@image...>
  * Correct handling of GIF transparency (reference
    https://github.com/ImageMagick/ImageMagick/issues/831).

2017-10-04  7.0.7-6 Cristy  <quetzlzacatenango@image...>
  * Release ImageMagick version 7.0.7-6, GIT revision 21426:0a1cb507b:20171004.

2017-10-03  7.0.7-6 Cristy  <quetzlzacatenango@image...>
  * Reset the magick_list_initialized boolean when needed (reference
    https://github.com/ImageMagick/ImageMagick/pull/826).
2017-10-02  7.0.7-6 Cristy  <quetzlzacatenango@image...>
  * Reset the magick_list_initialized boolean when needed (reference
    https://github.com/ImageMagick/ImageMagick/pull/826).

2017-10-01  7.0.7-5 Cristy  <quetzlzacatenango@image...>
  * Release ImageMagick version 7.0.7-5, GIT revision 21382:3846f9d97:20171001.

2017-09-28  7.0.7-5 Cristy  <quetzlzacatenango@image...>
  * Fixed numerous memory leaks (reference
    https://github.com/ImageMagick/ImageMagick/issues).
  * Support URW-base35 fonts.

2017-09-26  7.0.7-5 Glenn Randers-Pehrson <glennrp@image...>
  * Removed "ping_preserve_iCCP=MagickTrue;" statement that was inadvertently
    added to coders/png.c (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=32771).

2017-09-23  7.0.7-4 Cristy  <quetzlzacatenango@image...>
  * Release ImageMagick version 7.0.7-4, GIT revision 21265:bdbc14590:20170923.

2017-09-23  7.0.7-4 Cristy  <quetzlzacatenango@image...>
  * Fixed numerous memory leaks (reference
    https://github.com/ImageMagick/ImageMagick/pull/763).

2017-09-17  7.0.7-3 Cristy  <quetzlzacatenango@image...>
  * Release ImageMagick version 7.0.7-3, GIT revision 21202:6e6907ac7:20170917.

2017-09-17  7.0.7-3 ADLab of Venustech
  * Fixed numerous memory leaks (reference
    https://github.com/ImageMagick/ImageMagick/pull/763).

2017-09-15  7.0.7-3 Glenn Randers-Pehrson <glennrp@image...>
  * Stop potential leaks in the JNG decoder (reference:
    https://github.com/ImageMagick/ImageMagick/issues/760).
  * Maximum valid hour is 23, not 24, in the PNG tIME chunk, and maximum
    valid minute is 59, not 60.

(tez)

xfce4-whiskermenu-plugin: Remove duplicate BUILDLINK_TRANSFORM.

(jperkin)

mk/platform: Remove unsupported Darwin/SunOS linker arguments.

(jperkin)

hal: Remove duplicate BUILDLINK_TRANSFORM.

(jperkin)

Updated finance/py-stripe

(adam)

py-stripe: update to 1.66.0

1.66.0:
* Support length reads on list objects

(adam)

NOte update of lang/ocaml to 4.05.0nb1.

(he)

Apply the required fixes to make this work again on NetBSD/powerpc.

A similar set of changes has been sent upstream.
OK by jaapb@

(he)

doc: Updated misc/tmux to 2.6

(leot)

tmux: Update misc/tmux to 2.6

Changes:
CHANGES FROM 2.5 TO 2.6, 05 October 2017
* Add select-pane -T to set pane title.
* Fix memory leak when lines with BCE are removed from history.
* Fix (again) the "prefer unattached" behaviour of attach-session.
* Reorder how keys are checked to allow keys to be specified that have a
  leading escape. GitHub issue 1048.
* Support REP escape sequence (\033[b).
* Run alert hooks based on options rather than always, and allow further bells
  even if there is an existing bell.
* Add -d flag to display-panes to override display-panes-time.
* Add selection_present format when in copy mode (allows key bindings that do
  something different if there is a selection).
* Add pane_at_left, pane_at_right, pane_at_top and pane_at_bottom formats.
* Make bell, activity and silence alerting more consistent by: removing the
  bell-on-alert option; adding activity-action and silence-action options with
  the same possible values as the existing bell-action; adding a "both" value
  for the visual-bell, visual-activity and visual-silence options to trigger
  both a bell and a message.
* Add a pane_pipe format to show if pipe-pane is active.
* Block signals between forking and resetting signal handlers so that the
  libevent signal handler doesn't get called in the child and incorrectly write
  into the signal pipe that it still shares with the parent. GitHub issue 1001.
* Allow punctuation in pane_current_command.
* Add -c for respawn-pane and respawn-window.
* Wait for any remaining data to flush when a pane is closed while pipe-pane is
  in use.
* Fix working out current client with no target. GitHub issue 995.
* Try to fallback to C.UTF-8 as well as en_US.UTF-8 when looking for a UTF-8
  locale.
* Add user-keys option for user-defined key escape sequences (mapped to User0
  to User999 keys).
* Add pane-set-clipboard hook.
* FAQ file has moved out of repository to online.
* Fix problem with high CPU usage when a client dies unexpectedly. GitHub issue
  941.
* Do a dance on OS X 10.10 and above to return tmux to the user namespace,
  allowing access to the clipboard.
* Do not allow escape sequences which expect a specific terminator (APC, DSC,
  OSC) to wait for forever - use a small timeout. This reduces the chance of
  the pane locking up completely when sent garbage (cat /dev/random or
  similar).
* Support SIGUSR2 to toggle logging on a running server, also generate the
  "out" log file with -vv not -vvvv.
* Make set-clipboard a three state option: on (tmux both sends to outside
  terminal and accepts from applications inside); external (tmux sends outside
  but does not accept inside); and off.
* Fix OSC 4 palette setting for bright foreground colours. GitHub issue 954.
* Use setrgbf and setrgbb terminfo(5) capabilities to set RGB colours, if they
  are available. (Tc is still supported as well.)
* Fix redrawing panes when they are resized several times but end up with the
  size unchanged (for example, splitw/resizep -Z/breakp).
* Major rewrite of choose mode. Now includes preview, sorting, searching and
  tagging; commands that can be executed directly from the mode (for example,
  to delete one or more buffers); and filtering in tree mode.
* choose-window and choose-session are now aliases of choose-tree (in the
  command-alias option).
* Support OSC 10 and OSC 11 to set foreground and background colours.
* Check the U8 capability to determine whether to use UTF-8 line drawing
  characters for ACS.
* Some missing notifications for layout changes.
* Control mode clients now do not affect session sizes until they issue
  refresh-client -C. new-session -x and -y works with control clients even if
  the session is not detached.
* All new sessions that are unattached (whether with -d or started with no
  terminal) are now created with size 80 x 24. Whether the status line is on or
  off does not affect the size of new sessions until they are attached.
* Expand formats in option names and add -F flag to expand them in option values.
* Remember the search string for a pane even if copy mode is exited and entered
  again.
* Some further BCE fixes (scroll up, reverse index).
* Improvements to how terminals are cleared (entirely or partially).

(leot)

Fix build after 2017.09 update.

(jmcneill)

Revbumped databases/pgocaml after update of textproc/ocaml-csv

(jaapb)

doc: Updated textproc/ocaml-csv to 2.0

(jaapb)

Updated package textproc/ocaml-csv to latest version (2.0).

Changes: Lwt support has been added (I'll add an option for that later)
and the package now uses jbuilder to build.

(jaapb)

neomutt: Remove duplicate option, no functional change.

(jperkin)

doc: Updated mail/neomutt to 20170912nb1

(jperkin)

neomutt: Register conflict with mutt.  Bump PKGREVISION.

(jperkin)

doc: Updated mail/mutt to 1.9.1nb1

(jperkin)

mutt: Register conflict with neomutt.  Bump PKGREVISION.

(jperkin)

Note update of net/unbound to 1.6.7.

(he)

Upgrade unbound to version 1.6.7.

Pkgsrc changes:
* None.

Upstream changes:

Features:
* Set trust-anchor-signaling default to yes
* Fix #1440: [dnscrypt] client nonce cache.
* Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.

Bug fixes:
* Fix that looping modules always stop the query, and don't pass
  control.
* Fix unbound-host to report error for DNSSEC state of failed lookups.
* Spelling fixes, from Josh Soref.
* Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
* use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
* trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
* allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
* Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
* Log name of looping module
* Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
* Fix param unused warning for windows exportsymbol compile.
* Use RCODE from A query on DNS64 synthesized answer.
* Fix trust-anchor-signaling works in libunbound.
* Fix spelling in unbound-control man page.

(he)

Updated devel/py-ZopeComponent, devel/py-cffi

(adam)

py-cffi: update to 1.11.2

v1.11.2
Fix Windows issue with managing the thread-state on CPython 3.0 to 3.5

(adam)

py-ZopeComponent: update to 4.4.1

4.4.1:
- Remove obsolete call of ``searchInterface``

(adam)

Added devel/py-ordered-set, devel/py-mixbo; Updated security/py-cybox, security/py-stix

(adam)

py-stix: update to 1.2.0.4

Version 1.2.0.4:
Add support for Python 3.6.
Update to latest mixbox.
Emit proper xsi:type for AISMarkingStructure.
Implement hash for required objects

(adam)

py-cybox: update to 2.1.0.14

Version 2.1.0.14:
- Add support for Python 3.6.
- Update to latest version of mixbox.
- Add __hash__ to classes.

(adam)

A library of common code leveraged by python-cybox, python-maec, and
python-stix.

(adam)

An OrderedSet is a custom MutableSet that remembers its order, so that every
entry has an index that can be looked up.

(adam)

doc: Added www/R-curl version 3.0

(brook)

+ R-curl

(brook)

Initial import of R-curl v3.0 from CRAN.

The curl() and curl_download() functions provide highly configurable
drop-in replacements for base url() and download.file() with better
performance, support for encryption (https, ftps), gzip compression,
authentication, and other 'libcurl' goodies. The core of the package
implements a framework for performing fully customized requests where
data can be processed either in memory, on disk, or streaming via the
callback or connection interfaces.

(brook)

seems we actually don't need the EXTRACT_USING=gtar, apparently
it's been carried over from php 5.x times

(jdolecek)

visualvm: Disable SSP checks for bundled libraries.

(jperkin)

ruby-metasploit_payloads-mettle: Disable SSP checks.

(jperkin)

paros: Disable SSP checks for bundled libraries.

(jperkin)

netbeans-ide: Disable SSP checks for bundled files.

(jperkin)

jetty9: Disable SSP for bundled libraries.

(jperkin)

jalbum: Disable SSP for bundled libraries.

(jperkin)

eclipse: Disable SSP for bundled libraries.

(jperkin)

doc: Updated sysutils/liblognorm to 2.0.4

(fhajny)

Update sysutils/liblognorm to 2.0.4.

- added support for native JSON number formats
  supported by parsers: number, float, hex
- added support for creating unix timestamps
  supported by parsers: date-rfc3164, date-rfc5424
- fixed build problems on Solaris

(fhajny)

doc: Updated print/py-weasyprint to 0.41

(kleink)

5564 5565

(spz)

Pullup ticket #5565 - requested by sevan
lang/go: security update

Revisions pulled up:
- lang/go/distinfo                                              1.52
- lang/go/version.mk                                            1.29

-------------------------------------------------------------------
  Module Name:    pkgsrc
  Committed By:  bsiegert
  Date:          Fri Oct  6 18:38:25 UTC 2017

  Modified Files:
          pkgsrc/lang/go: distinfo version.mk

  Log Message:
  Update Go to 1.9.1 (security fix).

  Two security-related issues were recently reported.
  To address this issue, we have just released Go 1.8.4 and Go 1.9.1.

  We recommend that all users update to one of these releases (if you're
  not sure
  which, choose Go 1.9.1).

  The issues addressed by these releases are:

  By nesting a git checkout inside another version control repository, it was
  possible for an attacker to trick the "go get" command into executing
  arbitrary
  code. The go command now refuses to use version control checkouts found
  inside
  other version control systems, with an exception for git submodules (git
  inside
  git).
  The issue is tracked as https://golang.org/issue/22125 (Go 1.8.4) and
  https://golang.org/issue/22131 (Go 1.9.1). Fixes are linked from the issues.
  Thanks to Simon Rawet for the report.

  In the smtp package, PlainAuth is documented as sending credentials only
  over
  authenticated, encrypted TLS connections, but it was changed in Go 1.1
  to also
  send credentials on non-TLS connections when the remote server
  advertises that
  PLAIN authentication is supported. The change was meant to allow use of
  PLAIN
  authentication on localhost, but it has the effect of allowing a
  man-in-the-middle attacker to harvest credentials. PlainAuth now requires
  either TLS or a localhost connection before sending credentials,
  regardless of
  what the remote server claims.
  This issue is tracked as https://golang.org/issue/22134 (Go 1.8.4) and
  https://golang.org/issue/22133 (Go 1.9.1). Fixes are linked from the issues.
  Thanks to Stevie Johnstone for the report.

  To generate a diff of this commit:
  cvs rdiff -u -r1.51 -r1.52 pkgsrc/lang/go/distinfo
  cvs rdiff -u -r1.28 -r1.29 pkgsrc/lang/go/version.mk

(spz)

py-weasyprint: update to 0.41.

Version 0.41
------------

Released on 2017-10-05.

WeasyPrint now depends on pdfrw >= 0.4.

New features:

* `#471 <https://github.com/Kozea/WeasyPrint/issues/471>`_:
  Support page marks and bleed.

Bug fixes:

* `#513 <https://github.com/Kozea/WeasyPrint/issues/513>`_:
  Don't crash on unsupported image-resolution values.
* `#506 <https://github.com/Kozea/WeasyPrint/issues/506>`_:
  Fix @font-face use with write_* methods.
* `#500 <https://github.com/Kozea/WeasyPrint/pull/500>`_:
  Improve readability of _select_source function.
* `#498 <https://github.com/Kozea/WeasyPrint/issues/498>`_:
  Use CSS prefixes as recommanded by the CSSWG.
* `#441 <https://github.com/Kozea/WeasyPrint/issues/441>`_:
  Fix rendering problems and crashes when using @font-face.
* `bb3a4db <https://github.com/Kozea/WeasyPrint/commit/bb3a4db>`_:
  Try to break pages after a block before trying to break inside it.
* `1d1654c <https://github.com/Kozea/WeasyPrint/commit/1d1654c>`_:
  Fix and test corner cases about named pages.

Documentation:

* `#508 <https://github.com/Kozea/WeasyPrint/pull/508>`_:
  Add missing libpangocairo dependency for Debian and Ubuntu.
* `a7b17fb <https://github.com/Kozea/WeasyPrint/commit/a7b17fb>`_:
  Add documentation on logged rendering steps.

(kleink)

Pullup ticket #5564 - requested by sevan
math/py-numpy: security update

Revisions pulled up:
- math/py-numpy/Makefile                                        1.44
- math/py-numpy/distinfo                                        1.25
- math/py-numpy/patches/patch-numpy_distutils_fcompiler_gnu.py  1.13

-------------------------------------------------------------------
  Module Name:    pkgsrc
  Committed By:  adam
  Date:          Thu Oct  5 08:21:27 UTC 2017

  Modified Files:
          pkgsrc/math/py-numpy: Makefile distinfo
          pkgsrc/math/py-numpy/patches: patch-numpy_distutils_fcompiler_gnu.py

  Log Message:
  py-numpy: update to 1.13.3

  NumPy 1.13.3:
  This is a bugfix release for some problems found since 1.13.1. The most
  important fixes are for CVE-2017-12852 and temporary elision. Users of
  earlier
  versions of 1.13 should upgrade.

  To generate a diff of this commit:
  cvs rdiff -u -r1.43 -r1.44 pkgsrc/math/py-numpy/Makefile
  cvs rdiff -u -r1.24 -r1.25 pkgsrc/math/py-numpy/distinfo
  cvs rdiff -u -r1.12 -r1.13 \
      pkgsrc/math/py-numpy/patches/patch-numpy_distutils_fcompiler_gnu.py

(spz)

doc/TODO: + ImageMagick-7.0.7.7, cfengine3-3.10.2, dconf-0.26.1, freedv-1.2.2,
  gdk-pixbuf2-2.36.11, gtk3-3.22.24, gtksourceview3-3.24.5,
  itstool-2.0.3, jbig2dec-0.14, kismet-2016.07R1, librsvg-2.40.19,
  libxml2-2.9.6, libxslt-1.1.31, php-tt-rss-fever-plugin-1.4.7,
  poppler-0.60.1, py-cssselect2-0.2.1, py-libxml2-2.9.6,
  py-libxslt-1.1.31, py-test-xdist-1.20.1, thunderbird-enigmail-1.9.8.3,
  vim-8.0.1181, vim-share-8.0.1181, x264-devel-20171007, xlockmore-5.55.

(wiz)

xtris: comment out dead sites

(wiz)

ytalk: update HOMEPAGE and MASTER_SITES

(wiz)

yap: update HOMEPAGE

(wiz)