Add py-pytest-localserver-0.3.7:

pytest-localserver is a plugin for the pytest testing framework which
enables you to test server connections locally.

Sometimes monkeypatching urllib2.urlopen() just does not cut it, for
instance if you work with urllib2.Request, define your own
openers/handlers or work with httplib. In these cases it may come in
handy to have an HTTP server running locally which behaves just like the
real thing.

(joerg)

doc/CHANGES-2017: Note removal of gdb5 and gdb6

Removed devel/gdb5
Removed devel/gdb6

(kamil)

+ py-test-utils

(joerg)

+ py-termcolor

(joerg)

Add py-test-utils-0.1.0:

This module provides a collection of utility functions and classes which
make writing and running functional and integration tests easier.

(joerg)

doc/TODO: Drop gdb6-6.8a entry

gdb6 has been removed from pkgsrc.

(kamil)

mk/defaults/options.description: Drop unused gdb6-tui

gdb6 - the only user of gdb6-tui - has been eliminated from pkgsrc.

(kamil)

Add py-termcolor-1.1.0:

py-termcolor is a simple library for ANSI Color formatting of output.

(joerg)

gdb6: Remove this package

gdb6 has been eliminated from pkgsrc and moved to pkgsrc-wip/gdb6 for those
who still may care about it. pkgsrc developers no longer intend to maintain
this version in the main repository.

(kamil)

gdb5: Remove this package

gdb5 has been eliminated from pkgsrc and moved to pkgsrc-wip/gdb5 for those
who still may care about it. pkgsrc developers no longer intend to maintain
this version in the main repository.

(kamil)

+ py-tzdata

(joerg)

Add pytzdata-2017.2.2:

Official timezone database for Python.

(joerg)

devel/Makefile: Detach gdb5 and gdb6

These packages are going to be eliminated soon.

(kamil)

+ py-xmlttodict

(joerg)

Add py-xmltodict-0.11.0:

xmltodict is a Python module that makes working with XML feel like you
are working with JSON. It has optional namespace and streaming support.

(joerg)

+ py-regex

(joerg)

Add regex-2017.07.28:

This regex implementation is backwards-compatible with the standard ���re���
module, but offers additional functionality.

(joerg)

+ py-jsonref

(joerg)

Add py-jsonref-0.1:

jsonref is a library for automatic dereferencing of JSON Reference
objects for Python (supporting 2.6+ including Python 3).

This library lets you use a data structure with JSON reference objects,
as if the references had been replaced with the referent data.

(joerg)

+ py-pyaml

(joerg)

Add py-pyaml-17.8.0:

pyaml produces pretty and readable YAML-serialized data on top of py-yaml.

(joerg)

+ py-dicttoxml

(joerg)

Add py-dicttoxml-1.7.4:

This module converts a Python dictionary or other native data type into a
valid XML string.

Supported item are int, float, long, decimal.Decimal, bool, str, unicode,
datetime, None and other number-like objects. Supported collection are
list, set, tuple and dict, as well as iterable and dict-like objects.
Items with a datetime type are converted to ISO format strings. Items
with a None type become empty XML elements.

(joerg)

Allow narrowing of the data tables GCC 5+.

(joerg)

doc: Updated devel/p5-Alien-Build to 1.18

(wiz)

p5-Alien-Build: update to 1.18.

1.18      2017-09-22 06:40:51 -0400
  - Fixed bug where Probe::CBuilder plugin might not play nice with other
    probes.

1.17_01  2017-09-20 14:36:41 -0400
  - Add apply_plugin to Alien::Build::Meta
  - Deprecated Alien::Build::Plugin subplugin method (use apply_plugin instead)

(wiz)

doc: Added devel/p5-Alien-Base-ModuleBuild version 0.046

(wiz)

devel/Makefile: + p5-Alien-Base-ModuleBuild

(wiz)

doc: Added devel/p5-Shell-Config-Generate version 0.29

(wiz)

devel/p5-Alien-Base-ModuleBuild: import p5-Alien-Base-ModuleBuild-0.046

This module provides tools for building external (non-CPAN)
dependencies for CPAN. It is mainly designed to be used at install
time of a CPAN client, and work closely with Alien::Base which is
used at runtime.

(wiz)

devel/Makefile: + blosc, p5-Shell-Config-Generate

(wiz)

devel/p5-Shell-Config-Generate: import p5-Shell-Config-Generate-0.29

This module provides an interface for specifying shell configurations
for different shell environments without having to worry about the
arcane differences between shells such as csh, sh, cmd.exe and
command.com.

(wiz)

doc: Added devel/p5-Shell-Guess version 0.07

(wiz)

devel/Makefile: + p5-Shell-Guess

(wiz)

devel/p5-Shell-Guess: import p5-Shell-Guess-0.07

Shell::Guess makes a reasonably aggressive attempt to determine the
shell being employed by the user, either the shell that executed
the perl script directly (the "running" shell), or the users' login
shell (the "login" shell). It does this by a variety of means
available to it, depending on the platform that it is running on.

(wiz)

doc: Added sysutils/p5-Unix-Process version 1.3101

(wiz)

sysutils/Makefile: + p5-Unix-Process

(wiz)

sysutils/p5-Unix-Process: import p5-Unix-Process-1.3101

Perl extension to get pid info from (/bin/ps).

All fields from the ps command can be fetched by calling a function
of their name. If the pid is not given as an argument to the function,
$$ (cur pid) is assumed.

(wiz)

devel/ruby-redmine: Fix usage ofRUBY_VERSIONS_ACCEPTED

Define RUBY_VERSIONS_ACCEPTED before including rubyversion.mk.
Should be fix pbulk problem.

(taca)

p5-MooseX-Types-Path-Class: fix PERL5_MODULE_TYPE

(wiz)

Updated textproc/py-phonenumbers, mail/py-aiosmtpd

(adam)

py-aiosmtpd: update to 1.1

1.1:
Drop support for Python 3.4.
As per RFC 5321, 則4.1.4, multiple HELO / EHLO commands in the same session are semantically equivalent to RSET.
As per RFC 5321, $4.1.1.9, NOOP takes an optional argument, which is ignored. API BREAK If you have a handler that implements handle_NOOP(), it previously took zero arguments but now requires a single argument.
The command line options --version / -v has been added to print the package���s current version number.
General improvements in the Controller class.
When aiosmtpd handles a STARTTLS it must arrange for the original transport to be closed when the wrapped transport is closed. This fixes a hidden exception which occurs when an EOF is received on the original tranport after the connection is lost.
Widen the catch of ConnectionResetError and CancelledError to also catch such errors from handler methods.
Added a manpage for the aiosmtpd command line script.
Added much better support for the HELP. There���s a new decorator called @syntax() which you can use in derived classes to decorate smtp_*() methods. These then show up in HELP responses. This also fixes HELP responses for the LMTP subclass.
The Controller class now takes an optional keyword argument ssl_context which is passed directly to the asyncio create_server() call.

(adam)

emacs22*, emacs23*, emacs24*: remove unmaintained emacs versions

As announced in
https://mail-index.netbsd.org/pkgsrc-users/2017/09/11/msg025563.html

This still leaves emacs20, emacs21, and the current version, emacs25.

(wiz)

py-phonenumbers: update to 8.8.2

v8.8.2
Metadata changes:
- Updated phone metadata for region code(s):
  CA, CR, EG, FI, HN, IS, KM, KR, LU, MV, PA, TW, UG, US, VN
- Updated short number metadata for region code(s): IE, IR, KE, TR
- New geocoding data for country calling code(s): 1223 (en)
- Updated geocoding data for country calling code(s): 84 (en, vi)
- Updated carrier data for country calling code(s): 20 (en)

(adam)

Added textproc/py-jsonpickle; Updated textproc/py-deepdiff

(adam)

py-deepdiff: update to 3.3.0

v3.3.0: Searching for objects and class attributes

(adam)

Added textproc/py-jsonpickle version 0.9.5

jsonpickle converts complex Python objects to and from JSON.

(adam)

doc: Added time/py-ligotimegps version 1.1

(wiz)

time/Makefile: py-ligotimegps

(wiz)

time/py-ligotimegps: import py-ligotimegps-1.1

This module provides a pure-python version of the LIGOTimeGPS class,
used to represent GPS times (number of seconds elapsed since GPS
epoch) with nanoseconds precision.

(wiz)

Updated www/mini_httpd to 1.27

(wen)

Update to 1.27

Upstream changes:
New in version 1.27:

    Fixed bug that prevented binary CGI results from working. This bug was introduced in 1.23. Noticed and diagnosed by Qipeng Zhang.

New in version 1.26:

    Long-standing bug on FreeBSD using http but not https. Files were getting truncated at 1MB. This was due to improper usage of sendfile(2), and not testing the http path since I only use mini_httpd for https. Since Linux has a completely different sendfile(2) call, it was not affected. And since https does not use sendfile(2), it also was not affected.

New in version 1.25:

    Improvements to the FreeBSD startup script. (Craig Leres)
    Improvement to SSL support.

New in version 1.24:

    Disable SSLv2 to prevent DROWN attack.
    Fix binary POST request reading. (Erik Waling)

New in version 1.23:

    Fixed CVE-2015-1548, a buffer overflow via snprintf.

New in version 1.22:

    Don't do TCP_NOPUSH on SSL connections. It doesn't help and causes problems.
    Use memmove() for self-overlapping string copies instead of strcpy().

(wen)

Updated textproc/p5-XML-SemanticDiff to 1.0006

(wen)

Update to 1.0006

Upstream changes:
1.0006 2017-09-27
    - Fixed bug: https://rt.cpan.org/Public/Bug/Display.html?id=84546
      where the code was failing to find the difference in this scenario
      Before: <element>0</element> After: <element></element>

(wen)

Updated devel/p5-Log-Any to 1.700

(wen)

Update to 1.700

Upstream changes:
1.700    2017-09-28 16:59:22-05:00 America/Chicago

    [Fixed]

    - Fixed version of Log::Any::Adapter::Syslog so that installing it
      will also install the rest of Log-Any.

    - Fixed method aliasing in Log::Any::Adapter::Syslog for "error"
      log method. Thanks @legaultp for the patch!

1.051    2017-08-06 20:41:53-05:00 America/Chicago (TRIAL RELEASE)

    [Fixed]

    - LOG_ANY_DEFAULT_ADAPTER now correctly logs to the given adapter.

      Previously, if no other adapter was set, Log::Any used it's
      default, super-fast "Null" proxy that simply drops all messages
      without checking adapters. Now Log::Any will correctly detect the
      environment variable and create the correct, normal proxy object.

      Thanks @tm604 for the report and @mephinet for the patch!

1.050    2017-08-03 22:28:37-05:00 America/Chicago (TRIAL RELEASE)

    [Added]

    - Added structured logging to easily log single hash references in
      a parsable format. Thanks @mephinet!

    - Added contextual logging to attach information to log messages
      based on the current context.

      For example, all log messages being generated by a particular HTTP
      request could be logged with the URL, even if they're from a part
      of the application that doesn't know what HTTP is.

      This is very similar to Log::Log4perl's Mapped Diagnostic Context.

      Thanks @mephinet!

(wen)

doc: Fix go-ed25519 PKGPATH

Pointed out by update.changes script via www@.

(leot)

Updated devel/py-click-threading, devel/py-faker

(adam)

py-faker: update to 0.8.4

0.8.4:
Move email_validator to test_requires and unpinned the version number.
Date feature parity with datetime.
Add MSISDN in the phone_number provider.
Add Arabic locales.
Fix datetime issue on Windows.

(adam)

py-click-threading: update to 0.4.4

0.4.4:
Bug fixes.

(adam)

Updated net/lftp, security/py-asn1crypto

(adam)

py-asn1crypto: update to 0.23.0

0.23.0:
Backwards compatibility break: the tag_type, explicit_tag and explicit_class attributes on core.Asn1Value no longer exist and were replaced by the implicit and explicit attributes. Field param dicts may use the new explicit and implicit keys, or the old tag_type and tag keys. The attribute changes will likely to have little to no impact since they were primarily an implementation detail.
Teletex strings used inside of X.509 certificates are now interpreted using Windows-1252 (a superset of ISO-8859-1). This enables compatibility with certificates generated by OpenSSL. Strict parsing of Teletex strings can be retained by using the x509.strict_teletex() context manager.
Added support for nested explicit tagging, supporting values that are defined with explicit tagging and then added as a field of another structure using explicit tagging.
Fixed a UnicodeDecodeError when trying to find the (optional) dependency OpenSSL on Python 2
Fixed next_update field of crl.TbsCertList to be optional
Added the x509.Certificate.sha256_fingerprint property
x509.Certificate.ocsp_urls and x509.DistributionPoint.url will now return https://, ldap:// and ldaps:// URLs in addition to http://.
Added CMS Attribute Protection definitions from RFC 6211
Added OIDs from RFC 6962

(adam)

lftp: update to 4.8.2

Version 4.8.2:
* fixed compilation on FreeBSD and OS X.
* fixed a memory leak.
* fixed a core dump on exit.

(adam)

Added net/obfs4proxy version 0.0.7.

(alnsn)

Add obfs4proxy.

(alnsn)

Added go-ed25519, go-siphash and go-goptlib.

(alnsn)

Add go-ed25519, go-siphash and go-goptlib.

(alnsn)

remove ftp variant when http server already exists

pretty sure these are the same server but ftp is considerably slower on
a high latency connection

(maya)

Fix build on SunOS.

(schmonz)

dupeguru: remove orig for patched file to fix PLIST

(wiz)

gnupg2: drop DESCR claim about gnupg 1.4/gpg-agent

(gdt)

doc: Added mail/qmail-autoresponder version 1.0

(schmonz)

Add and enable qmail-autoresponder.

(schmonz)

Add qmail-autoresponder, a rate-limited autoresponder for qmail.

Features:

- Limits rate of automatic responses (defaults to a maximum of one
  message every hour).
- Will not respond to nearly every type of mailing list or bulk email.
- Will not respond to bounce messages or MAILER-DAEMON.
- Bounces looping messages.
- Can insert the original subject into the response.
- Can copy original message into response.
- Can use links in the rate-limiting data directory to limit inode usage
  to a single inode.
- Can limit responses to a certain date/time range.

(schmonz)

Updated textproc/py-cjson to 1.2.1

(adam)

py-cjson: update to 1.2.1

Changes in version 1.2.1
* Updated project homepage

Changes in version 1.2.0
* Implemented recursion limit check for encoding/decoding arrays and objects
* Updated copyright years and stripped licensing info from source code

Changes in version 1.1.0
* Use repr instead of str when encoding floats to preserve full preicision
* Fixed windows compilation problem introduced in 1.0.5
* Fixed float write test to work with latest high precision float encoding
* Fixed some list/dict decoding bugs. Use a state machine for decoding them.
* Improved decoding speed by using PyString_GET_SIZE instead of strlen
* Integrate modified 0001-fix-for-CVE-2010-1666 patch from Debian

(adam)

Replace LOCALBASE usage with PREFIX.

(schmonz)

libretro-mupen64plus: Fix DOS line endings.

(jperkin)

FlightCrew: Fix DOS line endings on all patched files.

(jperkin)

py-scipy: Remove references to non-existent files

(wiz)

doc: Updated www/contao44 to 4.4.6

(taca)

Update contao44 to 4.4.6.

Contao 4.4.6 is available 2017/09/28 10:32 by Leo Feyer

Contao version 4.4.6 is available. The bugfix release fixes several minor
issues and also includes the changes from Contao 3.5.

(taca)

qpdf: Update LICENSE for 7.0.0

(wiz)

Updated devel/gtexinfo to 6.5

(ryoon)

Update to 6.5

Changelog:
6.5 (12 September 2017)
* info:
  . some bugs fixed:
    . a bug where a segfault could happen in the regex search, for
      example when the user entered a single \ as the search string
    . another bug which could make nodes inaccessible in long "split"
      info files
    . a bug where it was not possible to follow a cross-reference
      that was split across more than one line has been fixed
  . do not fall back to a man page if following a cross-reference in an
    info file failed
  . if looking for a file failed, do not convert the name of a file to
    lower-case and look for it again

* texinfo.tex
  . some faulty definitions for Unicode characters have been changed or
    removed
  . fix indentation in table of contents for entries that are split
    across multiple lines

* texi2dvi
  . a bug that broke the processing of LaTeX files that did not
    use BibTeX has been fixed

* texi2any
  . output the encoding declaration of a HTML file earlier so it
    will always occur within first 1024 bytes of file
  . `INLINE_INSERTCOPYING' removed as a customization variable

6.4 (23 June 2017)
* texi2any:
  . for HTML output, place section names before the manual in page
    titles, instead of after them, so it is easier to distinguish pages
    if titles are truncated
  . starting points for ordered lists beginning with 0 or a letter of
    the alphabet are output as attributes on the <ol> tag, as was
    case for Texinfo 4.13 and earlier
  . a bit faster
  . some discrepancies in paragraph formatting between Perl extension
    modules and interpreted Perl modules have been fixed
  . `MACRO_BODY_IGNORES_LEADING_SPACE' customization variable removed,
    and `indent_menu_descriptions' is no longer a possible value for
    `TREE_TRANSFORMATIONS' (as these features did not work as
    documented)

* info:
  . the `up-line' and `down-line' commands now are like the other
    scrolling commands and are no longer confined to a single node
    (depending on the value of `scroll-behaviour')
  . supplying the --all option with --index-search displays a list
    of matching index entries
  . the style variables like `link-style' can now be set while info
    is running
  . display bug fixed where color could be turned off prematurely
  . several other bugs fixed
  . better portability in test suite
  . do not fall back to showing the dir node if a manual isn't found
  . Do not attempt any kind of conversion of CR LF line endings,
    except on MS-DOS/Windows, when it is done unconditionally.  (This
    replaces a more complicated approach, where this conversion would
    take place if there was a problem finding a node in a file.)  The
    main effect of this change is that Info files with CR LF line
    endings, which would have been produced on MS-DOS/Windows with old
    versions of makeinfo, are only supported on such operating systems.
  . a few of the key bindings under --vi-keys have been changed for
    consistency or to match the documentation

* texinfo.tex
  . a DVI file with a single empty page can be output again, which
    restores the behavior from Texinfo 6.0 and earlier

* Distribution
  . autoconf 2.69, automake 1.15, gettext 0.19.8

(ryoon)

Updated print/qpdf to 7.0.0

(ryoon)

Update to 7.0.0

Changelog:
2017-09-15  Jay Berkenbilt  <ejb@ql.org>

* 7.0.0: release

2017-09-12  Jay Berkenbilt  <ejb@ql.org>

* Relicense qpdf under version 2.0 of the Apache License rather
than version 2.0 of the Artistic License. Both are fine, but the
Apache License is in more widespread use, and I like it a little
better than Artistic-2.0. It is my intention that there be no
change in what you can or can't do with qpdf. Versions of qpdf
prior to version 7 were released under the terms of version 2.0 of
the Artistic License. At your option, you may continue to consider
qpdf to be licensed under those terms. Please see the manual for
additional information.

* Improve the error message that is issued when QPDFWriter
encounters a stream that can't be decoded. In particular, mention
that the stream will be copied without filtering to avoid data
loss.

* Add new methods to the C API to correspond to new additions to
QPDFWriter:
- qpdf_set_compress_streams
- qpdf_set_decode_level
- qpdf_set_preserve_unreferenced_objects
- qpdf_set_newline_before_endstream

2017-08-25  Jay Berkenbilt  <ejb@ql.org>

* Re-implement parser iteratively to avoid stack overflow on very
deeply nested arrays and dictionaries. Fixes #146.

* Detect infinite loop while finding additional xref tables. Fixes
#149.

2017-08-22  Jay Berkenbilt  <ejb@ql.org>

* 7.0.b1: release

* Convert all README files to markdown. Names changed as follows:
  - README --> README.md
  - README.hardening --> README-hardening.md
  - README.maintainer --> README-maintainer.md
  - README-what-to-download.txt --> README-what-to-download.md
  - README-windows.txt --> README-windows.md
  The file README-windows-install.txt remains a text file.

2017-08-21  Jay Berkenbilt  <ejb@ql.org>

* Add support for writing PCLm files. Most of the work was done by
Sahil Arora <sahilarora.535@gmail.com> as part of a Google Summer
of Code project in 2017. PCLm support is useful only for clients
that specifically know how to create PCLm files. Support in qpdf
is just for ensuring that objects are written in the correct order
and for including some additional material in the output that is
required by the PCLm standard.

2017-08-19  Jay Berkenbilt  <ejb@ql.org>

* Remove --precheck-streams. This is enabled by default now
without any efficiency cost. This feature was never released.

* Update pdf-create example to illustrate use of additional image
compression filters.

* Add support for /RunLengthDecode and /DCTDecode:
  - New pipeline types Pl_RunLength and Pl_DCT
  - New command-line flags --compress-streams and --decode-level
    to replace/enhance --stream-data
  - New QPDFWriter::setCompressStreams and
    QPDFWriter::setDecodeLevel methods
  Please see documentation, header files, and help messages for
  details on these new features.

2017-08-12  Jay Berkenbilt  <ejb@ql.org>

* Add QPDFObjectHandle::rotatePage to apply rotation to a page
object. Add --rotate option to qpdf to specify page rotation from
the command line.

* Provide --verbose option that causes qpdf to print an indication
of what files it is writing.

* Change --single-pages to --split-pages and make it take an
optional argument specifying the number of pages per file.

2017-08-11  Jay Berkenbilt  <ejb@ql.org>

* Fix --newline-before-endstream to always add a newline before
endstream even if the last character was already a newline. This
is actually what's required by PDF/A. Fixes #133.

* Handle encrypted files whose encryption parameters are too
short. Fixes #96.

2017-08-10  Jay Berkenbilt  <ejb@ql.org>

* Remove dependency on libpcre.

* Be more forgiving of certain types of errors in the xref table
that don't interfere with interpreting the table.

* Remove unused "tracing" parameter from PointerHolder's
(T*, bool) constructor. This change breaks source code
compatibility, but since this argument to PointerHolder has not
used for a long time and the presence of a boolean parameter in
the primary constructor makes it too easy to use that by mistake
when trying to use PointerHolder for arrays, it seems like it's
finally time to take it out. If you have a compile error because
of this change, please check to see whether you intended to use
the (bool, T*) version of the constructor instead. If not, just
remove the second parameter.

2017-08-09  Jay Berkenbilt  <ejb@ql.org>

* When recovering stream length, find endobj without endstream as
well as just looking for endstream. Be a little more lax about
where we allow it to be found.

2017-08-05  Jay Berkenbilt  <ejb@ql.org>

* Add --single-pages option to cause output to be written to a
separate file for each page rather than one big file.

* Process --pages options earlier so that certain inspection
options, like --show-pages, can show the state after the merging
operations.

2017-08-02  Jay Berkenbilt  <ejb@ql.org>

* Fix off-by-one error in parsing pages options. Fixes #129.

2017-07-29  Jay Berkenbilt  <ejb@ql.org>

* Support @filename and @- in the qpdf command-line tool to read
command-line arguments, one per line, from the named file. @-
reads from standard input. Fixes #16.

* Detect when input file and output file are the same and exit to
avoid overwriting and losing input file. Fixes #29.

* When passing multiple inspection arguments, run --check first,
and defer exit until after all the checks have been run. This
makes it possible to force operations such as --show-xref to be
delayed until after recovery attempts have been made. For example,
if you have a file with a syntactically valid xref table that has
some offsets that are incorrect, running qpdf --check --show-xref
on that file will first recover the xref and the dump the
recovered xref, while just running qpdf --show-xref will show the
xref table as present in the file. Fixes #42.

* When recovering stream length, indicate the recovered length.
Fixes #44.

* Add --newline-before-endstream command-line option and
setNewlineBeforeEndstream method to QPDFWriter. This forces qpdf
to always add a newline before the endstream keyword. It is a
necessary but not sufficient condition for PDF/A compliance. Fixes
#103.

* Handle zlib data errors when decoding streams. Fixes #106.

* Improve handling of files where the "stream" keyword is not
followed by proper line terminators. Fixes #104.

* Fix content stream parsing to handle cases of structures within
the stream split across stream boundaries. Fixes #73.

2017-07-28  Jay Berkenbilt  <ejb@ql.org>

* Add --preserve-unreferenced command-line option and
setPreserveUnreferencedObjects method to QPDFWriter. This option
causes QPDFWriter to write all objects from the input file to the
output file regardless of whether the objects are referenced.
Objects are written to the output file in numerical order from the
input file. This option has no effect for linearized files.

2017-07-27  Jay Berkenbilt  <ejb@ql.org>

* Add --precheck-streams command-line option and setStreamPrecheck
method to QPDFWriter to tell QPDFWriter to attempt decoding a
stream fully before deciding whether to filter it or not.

* Recover gracefully from streams that aren't filterable because
the filter parameters are invalid in the stream dictionary or the
dictionary itself is invalid.

* Significantly improve recoverability from invalid qpdf objects.
Most conditions in basic object parsing that used to cause qpdf to
exit are now warnings. There are still many more opportunities for
improvements of this sort beyond just object parsing.

2017-07-26  Jay Berkenbilt  <ejb@ql.org>

* Fixes to infinite loops below also fix problems reported in
other issues and cover CVE-2017-11624, CVE-2017-11625,
CVE-2017-11626, and CVE-2017-11627.

* Don't attempt to interpret syntactic keywords (like R and
endobj) found while parsing content streams.

* Detect infinite loops while resolving objects. This could happen
if something inside an object that had to be resolved during
parsing, such as a stream length, recursively referenced the
object being resolved.

* CVE-2017-9208: Handle references to and appearance of object 0
as a special case. Object 0 is not allowed, and qpdf was using it
internally to represent direct objects.

* CVE-2017-9209: Fix infinite loop caused by attempting to
reconstruct the xref table while already in the process of
reconstructing the xref table.

* CVE-2017-9210: Fix infinite loop caused by attempting to unparse
an object for inclusion in the text of an exception.

(ryoon)

doc: Updated www/contao35 to 3.5.29

(taca)

www/contao35: update to 3.5.29

Version 3.5.29 (2017-09-27)
---------------------------

### Fixed
Correctly handle unencoded data images in the Combiner (see #8788).

### Fixed
Correctly show multi-day events if the shortened view is disabled (see #8782).

### Fixed
Do not add a suffix when copying if the "doNotCopy" flag is set (see #8610).

### Fixed
Use the module type as group header if sorted by type (see #8402).

### Fixed
Always show the "show from" and "show until" fields (see #8766).

### Fixed
Encode the username when opening the front end preview as a member (see #8762).

(taca)

Updated print/pdf2djvu to 0.9.7

(ryoon)

Update to 0.9.7

Changelog:
pdf2djvu (0.9.7) unstable; urgency=low

  * Fix build failure with Poppler ≥ 0.58.
  * Improve the build system:
    + Fix non-portable sed(1) calls in the manpage translations makefile.
    + Use relative paths when building OpenJPEG for Windows (so that absolute
      paths are not included in the binary).
  * Upgrade libraries bundled with the Windows package:
    - Poppler 0.59.

-- Jakub Wilk <jwilk@jwilk.net>  Mon, 04 Sep 2017 21:15:05 +0200

pdf2djvu (0.9.6) unstable; urgency=low

  * Port the code to C++11.
    Incidentally, this fixes build failure with Poppler ≥ 0.57.
  * Fix GCC 8 warnings about catching polymorphic type by value.
    https://github.com/jwilk/pdf2djvu/issues/122
  * Upgrade libraries bundled with the Windows package:
    - Poppler 0.57;
    - GraphicsMagick 1.3.26;
    - Expat 2.2.3;
    - FreeType 2.8;
    - fontconfig 2.12.4.
  * Windows: build Poppler against OpenJPEG 2.1.2.
  * Improve the test suite.

-- Jakub Wilk <jwilk@jwilk.net>  Mon, 07 Aug 2017 14:52:02 +0200

(ryoon)

Updated net/py-netaddr, devel/py-click-log

(adam)

py-click-log: update to 0.2.1

0.2.1:
Bug fixes.

(adam)

py-netaddr: update to 0.7.19

Release: 0.7.19:

* added a new SubnetSplitter class for those looking to divide up subnets.
  Thanks alanwill and RyPeck and those on (Stack Overflow discussion).

* removed bundled pytest dependency code for "python setup.py test".

* setup.py now uses setuptools only (no more distutils) and setup_egg.py removed.

* cleaned up INSTALL docs so they accurately reflect current Python packaging.

* fixed broken parsing, generating and reading of IEEE index files when switching
  between Python 2.x and 3.x.

(adam)

gama: Revert commit on wrong branch

(gdt)

Updated textproc/py-sphinx

(adam)

py-sphinx: update to 1.6.4

Release 1.6.4:

Features added
* 3926: Add autodoc_warningiserror to suppress the behavior of -W option during importing target modules on autodoc

Bugs fixed
* 3924: docname lost after dynamically parsing RST in extension
* 3946: Typo in sphinx.sty (this was a bug with no effect in default context)
* pep: and :rfc: does not supports default-role directive (refs: 3960)
* 3960: default_role = ���guilabel��� not functioning
* Missing texinputs_win/Makefile to be used in latexpdf builder on windows.
* 4026: nature: Fix macOS Safari scrollbar color
* 3877: Fix for C++ multiline signatures.
* 4006: Fix crash on parallel build
* 3969: private instance attributes causes AttributeError
* 4041: C++, remove extra name linking in function pointers.
* 4038: C, add missing documentation of member role.
* 4044: An empty multicolumn cell causes extra row height in PDF output
* 4049: Fix typo in output of sphinx-build -h
* 4062: hashlib.sha1() must take bytes, not unicode on Python 3
* Avoid indent after index entries in latex (refs: 4066)
* 4070: crashes when the warning message contains format strings
* 4067: Return non-zero exit status when make subprocess fails
* 4055: graphviz: the :align: option does not work for SVG output
* 4055: graphviz: the :align: center option does not work for latex output
* 4051: warn() function for HTML theme outputs ���None��� string

(adam)

patch the Makefiles so RELRO flags work

(spz)

Updated textproc/py-alabaster, security/py-m2crypto

(adam)

py-m2crypto: update to 0.26.4

0.26.3:
- Fix a syntax typo.

0.26.2:
- port to support OpenSSL 1.1.0 API
- add generated Sphinx documentation
- another set of cleanups

(adam)

update xymon + xymonclient to 4.3.28

notable changes: OpenSSL 1.1.0 is now supported, and c-ares has been updated

While touching the package anyhow, it has been taught to pass down hardening
flags, so that the various PKGSRC_USE_ flags now have effect.

(spz)

py-alabaster: update to 0.7.10

0.7.10:
[Bug] 95: Independently ran across sphinx-doc/sphinx 3276, namely that parameter lists become squashed together if one is running on Sphinx 1.4.x. While that fix was merged in Sphinx itself, we felt it prudent to include it in our own stylesheet as well, for immediate relief.
[Bug] 96: admonition_xref had a template typo preventing it from receiving styling; this has been fixed. Credit: Kenzie Togami.
[Bug] 32: Update styling of various block-level elements such as admonitions (.. note::, .. warning::, etc) and code blocks (.. code::) so they are no longer 窶賄edented窶� outside the main column of text they窶决e embedded in. This is both a stylistic change and a bugfix, since e.g. nesting code blocks within note blocks looks actively broken.

(adam)

Eat some whitespace.

(markd)