pkgsrc Source-Changes / commit log search

HTTP client/server for asyncio (PEP 3156).

Features:
* Supports both Client and HTTP Server.
* Supports both Server WebSockets and Client WebSockets out-of-the-box.
* Web-server has Middlewares, Signals and pluggable routing.

(adam)

2017-07-16 16:51:48 UTC MAIN commitmail json YAML

pkgsrc/pkgtools/pkg_install/files/lib/pkg_io.c@1.13 / diff

Undef bootstrap hack.

(joerg)

2017-07-16 16:36:09 UTC MAIN commitmail json YAML

pkgsrc/emulators/gxemul/distinfo@1.49 / diff
pkgsrc/emulators/gxemul/patches/patch-src_console_console.cc@1.2 / diff
pkgsrc/emulators/gxemul/patches/patch-src_devices_dev__sh4.cc@1.2 / diff

fix paths in patches.

(christos)

2017-07-16 16:10:05 UTC MAIN commitmail json YAML

pkgsrc/devel/lldb/Makefile@1.12 / diff

Fix building with older compilers

(adam)

2017-07-16 15:30:50 UTC MAIN commitmail json YAML

pkgsrc/misc/calibre/Makefile@1.182 / diff

Honor LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-16 14:22:58 UTC MAIN commitmail json YAML

pkgsrc/chat/swift/Makefile@1.25 / diff

Honor LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-16 14:10:58 UTC MAIN commitmail json YAML

pkgsrc/emulators/gxemul/Makefile@1.58 / diff
pkgsrc/emulators/gxemul/distinfo@1.48 / diff
pkgsrc/emulators/gxemul/patches/patch-src_console_console.cc@1.1 / diff
pkgsrc/emulators/gxemul/patches/patch-src_devices_dev__sh4.cc@1.1 / diff

Fix dropped characters on landisk (sh4). Now the arrow keys work in the
installer.

(christos)

2017-07-16 12:06:46 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2910 / diff

Updated multimedia/mpv to 0.25.0nb1

(leot)

2017-07-16 12:06:25 UTC MAIN commitmail json YAML

pkgsrc/multimedia/mpv/Makefile@1.56 / diff
pkgsrc/multimedia/mpv/distinfo@1.35 / diff
pkgsrc/multimedia/mpv/options.mk@1.14 / diff
pkgsrc/multimedia/mpv/patches/patch-audio_out_ao__oss.c@1.4 / diff

Add stereo/mono fallback logic for `oss' audio output.

Previously playing files with more audio channels available than the ones
provided by audio device resulted in muted audio. A possible workaround to that
was forcing the `--audio-channels=2' or similar.

Thanks to <mrg> for kindly provided a reliable test (file|case) for that!

While here also get rid of a trailing whitespace in options.mk (spotted by
pkglint!)

Bump PKGREVISION.

(leot)

2017-07-16 11:42:59 UTC MAIN commitmail json YAML

pkgsrc/x11/tk/distinfo@1.49 / diff
pkgsrc/x11/tk/patches/patch-unix_configure@1.11 / diff

Honor LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-16 11:37:52 UTC MAIN commitmail json YAML

pkgsrc/graphics/hugin/Makefile@1.68 / diff
pkgsrc/graphics/hugin/distinfo@1.19 / diff

Fix DISTNAME.

(wiz)

2017-07-16 10:48:17 UTC MAIN commitmail json YAML

pkgsrc/www/firefox52/Makefile@1.5 / diff
pkgsrc/www/firefox52/distinfo@1.4 / diff
pkgsrc/www/firefox52/patches/patch-ipc_chromium_src_base_atomicops__internals__arm__gcc.h@1.1 / diff
pkgsrc/www/firefox52/patches/patch-toolkit_components_protobuf_src_google_protobuf_stubs_atomicops__internals__arm__gcc.h@1.1 / diff

Adopt ARM patches from devel/protobuf; makes firefox work on NetBSD/evbarm

(jmcneill)

2017-07-16 10:05:21 UTC MAIN commitmail json YAML

pkgsrc/doc/TODO@1.17528 / diff

Delete webkit24-gtk entry (it's already present as webkit-gtk).

(leot)

2017-07-16 10:00:58 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2909 / diff

Updated multimedia/libass to 0.13.7

(adam)

2017-07-16 10:00:38 UTC MAIN commitmail json YAML

pkgsrc/multimedia/libass/Makefile@1.19 / diff
pkgsrc/multimedia/libass/distinfo@1.11 / diff

Release 0.13.7
Fix invalid memory accesses with BorderStyle=4
Fix change detection bug on frame resizes
Fix cache bugs with border size
Reduce precision of border width in font outline caching
Don't treat :;<=>? as hexadecimal digits in color headers
Fix parsing of unusual Alignment values in ASS style definitions
Fix potential truncation in timestamp parsing
Treat negative PlayResX/PlayResY like VSFilter
Fixes to parsing of embedded fonts
Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
Allow using shadow offset to adjust size of background with BorderStyle=4
Fix TrueType/OpenType font collection handling with the DirectWrite backend

(adam)

2017-07-16 09:56:10 UTC MAIN commitmail json YAML

pkgsrc/doc/TODO@1.17527 / diff

+ ImageMagick-7.0.6.1, afl-2.47b, bsdtar-3.3.2, calibre-3.4,
evince-3.24.0, filezilla-3.26.2, gstreamer1-1.12.2, libarchive-3.3.2,
libfilezilla-0.10.0, mpg123-1.25.2, ocaml-4.05.0,
p5-Algorithm-Permute-0.15, p5-Exception-Class-1.43, p5-Image-Info-1.41,
p5-Module-Runtime-0.015, p5-Mojolicious-7.36, p5-Tie-Cycle-1.225,
py-decorator-4.1.1, py-setuptools-36.2.0, py-tortoisehg-4.2.2,
screen-4.6.1, syncthing-0.14.32, vim-8.0.0717, vim-share-8.0.0717,
webkit24-gtk-2.16.5.

(wiz)

2017-07-16 09:42:39 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2908 / diff

Updated devel/py-decorator to 4.1.1, graphics/py-cairocffi to 0.8.0; Added databases/py-multidict version 3.1.3, www/py-yarl version 0.12.0

(adam)

2017-07-16 09:41:18 UTC MAIN commitmail json YAML

pkgsrc/www/Makefile@1.1257 / diff
pkgsrc/www/py-yarl/DESCR@1.1 / diff
pkgsrc/www/py-yarl/Makefile@1.1 / diff
pkgsrc/www/py-yarl/PLIST@1.1 / diff
pkgsrc/www/py-yarl/distinfo@1.1 / diff

The module provides handy URL class for url parsing and changing.

(adam)

2017-07-16 09:37:09 UTC MAIN commitmail json YAML

pkgsrc/databases/Makefile@1.529 / diff
pkgsrc/databases/py-multidict/DESCR@1.1 / diff
pkgsrc/databases/py-multidict/Makefile@1.1 / diff
pkgsrc/databases/py-multidict/PLIST@1.1 / diff
pkgsrc/databases/py-multidict/distinfo@1.1 / diff

Multidict is dict-like collection of key-value pairs where key might be
occurred more than once in the container.

HTTP Headers and URL query string require specific data structure: multidict.
It behaves mostly like a regular dict but it may have several values for the
same key and preserves insertion ordering.

(adam)

2017-07-16 09:29:58 UTC MAIN commitmail json YAML

pkgsrc/graphics/py-cairocffi/Makefile@1.10 / diff
pkgsrc/graphics/py-cairocffi/PLIST@1.3 / diff
pkgsrc/graphics/py-cairocffi/distinfo@1.5 / diff

Version 0.8.0
* Follow semver
* Avoid implicit relative import
* Use utf-8 instead of utf8 in headers
* Keep cairo library loaded until all relevant objects are freed
* Add cairo_quartz_* functions for MacOS
* Use the default ReadTheDocs theme
* Fix implicit casts

(adam)

2017-07-16 09:25:34 UTC MAIN commitmail json YAML

pkgsrc/devel/py-decorator/Makefile@1.12 / diff
pkgsrc/devel/py-decorator/distinfo@1.9 / diff

4.1.1:
Changed the documentation build system to sphinx and uploaded the docs on readthedocs.org.

4.1.0:
Support for Python 3.5 coroutines defined with async def, thanks to Victor-Nicolae Savu who raised the issue of iscoroutinefunction not giving the right answer for coroutines decorated with the decorator module.

(adam)

2017-07-16 09:06:45 UTC MAIN commitmail json YAML

Add upstream bug report for previous.

(wiz)

2017-07-16 08:51:46 UTC MAIN commitmail json YAML

pkgsrc/lang/tcl/distinfo@1.71 / diff
pkgsrc/lang/tcl/patches/patch-pkgs_itcl4.0.5_configure@1.3 / diff

LDFLAGS_DEFAULT, not LDFLAGS.

(wiz)

2017-07-16 08:50:18 UTC MAIN commitmail json YAML

Honor LDFLAGS on NetBSD. Fixes RELRO build.

Every OPSYS has its own case for this. Please fix your
favorite operating system similarly.

(wiz)

2017-07-16 08:36:39 UTC pkgsrc-2017Q2 commitmail json YAML

pkgsrc/doc/CHANGES-pkgsrc-2017Q2@1.1.2.4 / diff

Last group of pullup tickets

(bsiegert)

2017-07-16 08:36:06 UTC pkgsrc-2017Q2 commitmail json YAML

pkgsrc/print/evince3/Makefile@1.61.2.1 / diff
pkgsrc/print/evince3/distinfo@1.12.6.1 / diff
pkgsrc/print/evince3/patches/patch-backend_comics_comics-document.c@1.1.2.2 / diff
pkgsrc/print/evince3/patches/patch-configure@1.1.2.2 / diff
pkgsrc/print/evince3/patches/patch-configure.ac@1.1.2.2 / diff

Pullup ticket #5515 - requested by maya
print/evince3: security fix

Revisions pulled up:
- print/evince3/Makefile 1.62
- print/evince3/distinfo 1.13
- print/evince3/patches/patch-backend_comics_comics-document.c 1.1
- print/evince3/patches/patch-configure 1.1
- print/evince3/patches/patch-configure.ac 1.1

---
Module Name: pkgsrc
Committed By: maya
Date: Fri Jul 14 05:31:21 UTC 2017

Modified Files:
pkgsrc/print/evince3: Makefile distinfo
Added Files:
pkgsrc/print/evince3/patches: patch-backend_comics_comics-document.c
patch-configure patch-configure.ac

Log Message:
Patch CVE-2017-1000083

From 717df38fd8509bf883b70d680c9b1b3cf36732ee Mon Sep 17 00:00:00 2001
From: Bastien Nocera <hadess@hadess.net>
Date: Thu, 6 Jul 2017 20:02:00 +0200
Subject: [PATCH] comics: Remove support for tar and tar-like commands

When handling tar files, or using a command with tar-compatible syntax,
to open comic-book archives, both the archive name (the name of the
comics file) and the filename (the name of a page within the archive)
are quoted to not be interpreted by the shell.

But the filename is completely with the attacker's control and can start
with "--" which leads to tar interpreting it as a command line flag.

This can be exploited by creating a CBT file (a tar archive with the
.cbt suffix) with an embedded file named something like this:
"--checkpoint-action=exec=bash -c 'touch ~/hacked;'.jpg"

CBT files are infinitely rare (CBZ is usually used for DRM-free
commercial releases, CBR for those from more dubious provenance), so
removing support is the easiest way to avoid the bug triggering. All
this code was rewritten in the development release for GNOME 3.26 to not
shell out to any command, closing off this particular attack vector.

This also removes the ability to use libarchive's bsdtar-compatible
binary for CBZ (ZIP), CB7 (7zip), and CBR (RAR) formats. The first two
are already supported by unzip and 7zip respectively. libarchive's RAR
support is limited, so unrar is a requirement anyway.

Discovered by Felix Wilhelm from the Google Security Team.

https://bugzilla.gnome.org/show_bug.cgi?id=784630

Bump PKGREVISION

(bsiegert)

2017-07-16 08:30:07 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2907 / diff

Updated print/mupdf to 1.11nb2

(leot)

2017-07-16 08:29:53 UTC MAIN commitmail json YAML

pkgsrc/print/mupdf/Makefile@1.50 / diff
pkgsrc/print/mupdf/distinfo@1.36 / diff
pkgsrc/print/mupdf/patches/patch-ac@1.17 / diff

Do not possibly (re)initialize LDFLAGS and pass it also to AR_CMD.
This fixes RELRO build.

Bump PKGREVISION

(leot)

2017-07-16 08:28:34 UTC pkgsrc-2017Q2 commitmail json YAML

pkgsrc/chat/irssi-icb/distinfo@1.29.2.1 / diff
pkgsrc/chat/irssi-xmpp/distinfo@1.11.2.1 / diff
pkgsrc/chat/irssi/Makefile.common@1.23.2.1 / diff
pkgsrc/chat/irssi/distinfo@1.42.2.1 / diff

Pullup ticket #5510 - requested by maya
chat/irssi: security fix

Revisions pulled up:
- chat/irssi-icb/distinfo 1.30
- chat/irssi-xmpp/distinfo 1.12
- chat/irssi/Makefile.common 1.24
- chat/irssi/distinfo 1.43

---
Module Name: pkgsrc
Committed By: maya
Date: Fri Jul 7 12:33:43 UTC 2017

Modified Files:
pkgsrc/chat/irssi: Makefile.common distinfo

Log Message:
irssi: update to 1.0.4. security fix.

v1.0.4 2017-07-07 The Irssi team <staff@irssi.org>
- Fix null pointer dereference when parsing invalid timestamp (GL#10,
GL!15). Reported by Brian 'geeknik' Carpenter.
- Fix use-after-free condition when removing nicks from the internal
nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
- Fix incorrect string comparison in DCC file names (#714).
- Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
(#716, #722).
- Fix a bug when using \n to separate lines with expand_escapes (#723).
- Retain screen output on improper exit, to better see any error
messages (#287, #721).
- Minor help update (#729).

---
Module Name: pkgsrc
Committed By: maya
Date: Fri Jul 7 12:35:37 UTC 2017

Modified Files:
pkgsrc/chat/irssi-icb: distinfo

Log Message:
Catch up with irssi version update

---
Module Name: pkgsrc
Committed By: maya
Date: Fri Jul 7 12:35:59 UTC 2017

Modified Files:
pkgsrc/chat/irssi-xmpp: distinfo

Log Message:
catch up with irssi update.

(bsiegert)

2017-07-16 08:17:02 UTC pkgsrc-2017Q2 commitmail json YAML

pkgsrc/www/contao44/Makefile@1.1.2.1 / diff
pkgsrc/www/contao44/PLIST@1.1.2.1 / diff
pkgsrc/www/contao44/distinfo@1.1.2.1 / diff

Pullup ticket #5514 - requested by taca
www/contao44: security fix

Revisions pulled up:
- www/contao44/Makefile 1.2
- www/contao44/PLIST 1.2
- www/contao44/distinfo 1.2

---
Module Name: pkgsrc
Committed By: taca
Date: Wed Jul 12 14:52:02 UTC 2017

Modified Files:
pkgsrc/www/contao44: Makefile PLIST distinfo

Log Message:
Update contao44 to 4.4.1.

### 4.4.1 (2017-07-12)

* Prevent arbitrary PHP file inclusions in the back end (see CVE-2017-10993).
* Correctly handle subpalettes in "edit multiple" mode (see #946).
* Correctly show the DCA picker in the site structure (see #906).
* Correctly update the style sheets if a format definition is
enabled/disabled (see #893).
* Always show the "show from" and "show until" fields (see #908).
* Correctly set the "overwriteMeta" field during the database update (see
contao/core-bundle#888).

(bsiegert)

2017-07-16 08:16:42 UTC pkgsrc-2017Q2 commitmail json YAML

pkgsrc/www/contao35/Makefile@1.30.2.1 / diff
pkgsrc/www/contao35/distinfo@1.23.2.1 / diff

Pullup ticket #5513 - requested by taca
www/contao35: security fix

Revisions pulled up:
- www/contao35/Makefile 1.31
- www/contao35/distinfo 1.24

---
Module Name: pkgsrc
Committed By: taca
Date: Wed Jul 12 14:42:55 UTC 2017

Modified Files:
pkgsrc/www/contao35: Makefile distinfo

Log Message:
Update contao35 to 3.5.28.

Version 3.5.28 (2017-07-12)
---------------------------

### Fixed
Prevent arbitrary PHP file inclusions in the back end (see CVE-2017-10993).

### Fixed
Improve the accessibility of the CAPTCHA widget (see #8709).

### Fixed
Fixed the iOS scrolling bug in the simple modal script (see #8708).

### Fixed
Correctly cache the unique keys in the SQL cache (see #8712).

(bsiegert)

2017-07-16 08:09:56 UTC pkgsrc-2017Q2 commitmail json YAML

pkgsrc/net/bind99/Makefile@1.69.2.1 / diff
pkgsrc/net/bind99/distinfo@1.47.2.1 / diff

Pullup ticket #5512 - requested by taca
net/bind99: security fix

Revisions pulled up:
- net/bind99/Makefile 1.70
- net/bind99/distinfo 1.48

---
Module Name: pkgsrc
Committed By: taca
Date: Sat Jul 8 04:30:33 UTC 2017

Modified Files:
pkgsrc/net/bind99: Makefile distinfo

Log Message:
Update bind99 to 9.9.10pl3 (BIND 9.9.10-P3).

--- 9.9.10-P3 released ---

4647. [bug] Change 4643 broke verification of TSIG signed TCP
message sequences where not all the messages contain
TSIG records. These may be used in AXFR and IXFR
responses. [RT #45509]

(bsiegert)

2017-07-16 08:09:48 UTC pkgsrc-2017Q2 commitmail json YAML

pkgsrc/net/bind910/Makefile@1.35.2.1 / diff
pkgsrc/net/bind910/distinfo@1.26.2.1 / diff

Pullup ticket #5511 - requested by taca
net/bind910: security fix

Revisions pulled up:
- net/bind910/Makefile 1.36
- net/bind910/distinfo 1.27

---
Module Name: pkgsrc
Committed By: taca
Date: Sat Jul 8 04:29:00 UTC 2017

Modified Files:
pkgsrc/net/bind910: Makefile distinfo

Log Message:
Update bind910 to 9.10.5pl3 (BIND 9.10.5-P3).

--- 9.10.5-P3 released ---

4647. [bug] Change 4643 broke verification of TSIG signed TCP
message sequences where not all the messages contain
TSIG records. These may be used in AXFR and IXFR
responses. [RT #45509]

(bsiegert)

2017-07-16 07:34:51 UTC MAIN commitmail json YAML

pkgsrc/x11/py-qt5/Makefile@1.20 / diff

Pass LDFLAGS to build. Fixes RELRO build.

(wiz)

2017-07-16 03:50:52 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2906 / diff

Updated mail/getmail to 5.1

(schmonz)

2017-07-16 03:50:46 UTC MAIN commitmail json YAML

pkgsrc/mail/getmail/Makefile@1.155 / diff
pkgsrc/mail/getmail/distinfo@1.132 / diff

Update to 5.1. From the changelog:

- bugfix: if password_command parameter was used with a non-existent program,
getmail would error out during the handling of that condition and not report
the problem correctly.

(schmonz)

2017-07-16 00:16:49 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2905 / diff

Updated mail/getmail to 5.0

(schmonz)

2017-07-16 00:16:43 UTC MAIN commitmail json YAML

pkgsrc/mail/getmail/Makefile@1.154 / diff
pkgsrc/mail/getmail/distinfo@1.131 / diff
pkgsrc/mail/getmail/patches/patch-aa deleted
pkgsrc/mail/getmail/patches/patch-setup.py@1.1 / diff

Update to 5.0. From the changelog:

- new release numbering scheme; previous version numbers were just getting
too high.
- catch and ignore/exit cleanly after reset connection in IMAP IDLE mode.
Thanks: Stephan Schulz.
- allow specifying an expected SSL certificate hostname, for when the
server's certificate does not match the domain name used to connect to
it. Thanks: "Andre".
- fix error message not actually giving the header field name incorrectly
specified as containing the envelope recipient address. Thanks: Hardy
Braunsdorf.
- add new password_command configuration parameter for retrievers, allowing
getmail to retrieve the account password from any arbitrary external
command. Suggestion: "ng0".

(schmonz)

2017-07-15 19:23:44 UTC pkgsrc-2017Q2 commitmail json YAML

pkgsrc/lang/php/phpversion.mk@1.181.2.3 / diff
pkgsrc/lang/php56/Makefile@1.13.2.1 / diff
pkgsrc/lang/php56/distinfo@1.41.2.1 / diff

Pullup ticket #5509 - requested by taca
lang/php56: security fix

Revisions pulled up:
- lang/php/phpversion.mk 1.184
- lang/php56/Makefile 1.14
- lang/php56/distinfo 1.42

---
Module Name: pkgsrc
Committed By: taca
Date: Fri Jul 7 03:13:48 UTC 2017

Modified Files:
pkgsrc/lang/php: phpversion.mk
pkgsrc/lang/php56: Makefile distinfo

Log Message:
Update php56 to 5.6.31.

06 Jul 2017, PHP 5.6.31

- Core:
. Fixed bug #73807 (Performance problem with processing post request over
2000000 chars). (Nikita)
. Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from
unserialize). (Nikita)
. Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
(Stas)
. Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via
php_parse_date()). (Derick)

- GD:
. Fixed bug #74435 (Buffer over-read into uninitialized memory). (cmb)

- mbstring:
. Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227,
CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)

- OpenSSL:
. Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
(Stas)

- PCRE:
. Fixed bug #74087 (Segmentation fault in PHP7.1.1(compiled using the bundled PCRE library)).
(Stas)

- WDDX:
. Fixed bug #74145 (wddx parsing empty boolean tag leads to SIGSEGV). (Stas)

(bsiegert)

2017-07-15 19:23:15 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2904 / diff

amath update

(bsiegert)

2017-07-15 19:22:42 UTC MAIN commitmail json YAML

pkgsrc/math/amath/Makefile@1.4 / diff
pkgsrc/math/amath/distinfo@1.4 / diff

Update amath to 1.8.2. From Carsten Larsen in PR pkg/52407.

- Improved endianness detection
- MIPS support

(bsiegert)

2017-07-15 19:16:20 UTC pkgsrc-2017Q2 commitmail json YAML

pkgsrc/lang/php/phpversion.mk@1.181.2.2 / diff
pkgsrc/lang/php71/distinfo@1.22.2.1 / diff

Pullup ticket #5508 - requested by taca
lang/php71: security fix

Revisions pulled up:
- lang/php/phpversion.mk 1.183
- lang/php71/distinfo 1.23

---
Module Name: pkgsrc
Committed By: taca
Date: Fri Jul 7 03:12:23 UTC 2017

Modified Files:
pkgsrc/lang/php: phpversion.mk
pkgsrc/lang/php71: distinfo

Log Message:
Update php71 to 7.1.7.

06 Jul 2017, PHP 7.1.7

- Core:
. Fixed bug #74738 (Multiple [PATH=] and [HOST=] sections not properly
parsed). (Manuel Mausz)
. Fixed bug #74658 (Undefined constants in array properties result in broken
properties). (Laruence)
. Fixed misparsing of abstract unix domain socket names. (Sara)
. Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
(Stas)
. Fixed bug #74101, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in
zval_get_type). (Nikita)
. Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from
unserialize). (Nikita)
. Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via
php_parse_date()). (Derick)

- Date:
. Fixed bug #74639 (implement clone for DatePeriod and DateInterval).
(andrewnester)

- DOM:
. Fixed bug #69373 (References to deleted XPath query results). (ttoohey)

- GD:
. Fixed bug #74435 (Buffer over-read into uninitialized memory). (cmb)

- Intl:
. Fixed bug #73473 (Stack Buffer Overflow in msgfmt_parse_message). (libnex)
. Fixed bug #74705 (Wrong reflection on Collator::getSortKey and
collator_get_sort_key). (Tyson Andre, Remi)

- Mbstring:
. Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227,
CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)

- OCI8:
. Add TAF callback (PR #2459). (KoenigsKind)

- Opcache:
. Fixed bug #74663 (Segfault with opcache.memory_protect and
validate_timestamp). (Laruence)
. Revert opcache.enable_cli to default disabled. (Nikita)

- OpenSSL:
. Fixed bug #74720 (pkcs7_en/decrypt does not work if \x1a is used in
content). (Anatol)
. Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
(Stas)

- PDO_OCI:
. Support Instant Client 12.2 in --with-pdo-oci configure option.
(Tianfang Yang)

- Reflection:
. Fixed bug #74673 (Segfault when cast Reflection object to string with
undefined constant). (Laruence)

- SPL:
. Fixed bug #74478 (null coalescing operator failing with SplFixedArray).
(jhdxr)

- FTP:
. Fixed bug #74598 (ftp:// wrapper ignores context arg). (Sara)

- PHAR:
. Fixed bug #74386 (Phar::__construct reflection incorrect). (villfa)

- SOAP
. Fixed bug #74679 (Incorrect conversion array with WSDL_CACHE_MEMORY).
(Dmitry)

- Streams:
. Fixed bug #74556 (stream_socket_get_name() returns '\0'). (Sara)

(bsiegert)

2017-07-15 19:10:57 UTC MAIN commitmail json YAML

pkgsrc/x11/wxGTK30/distinfo@1.8 / diff
pkgsrc/x11/wxGTK30/patches/patch-Makefile.in@1.1 / diff

Honor LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-15 19:10:31 UTC MAIN commitmail json YAML

pkgsrc/x11/wxGTK30/Makefile@1.21 / diff
pkgsrc/x11/wxGTK30/hacks.mk@1.6 / diff

Fix pkglint warnings.

(wiz)

2017-07-15 18:58:04 UTC pkgsrc-2017Q2 commitmail json YAML

pkgsrc/lang/php/phpversion.mk@1.181.2.1 / diff
pkgsrc/lang/php70/distinfo@1.34.2.1 / diff

Pullup ticket #5507 - requested by taca
lang/php70: security fix

Revisions pulled up:
- lang/php/phpversion.mk 1.182
- lang/php70/distinfo 1.35

---
Module Name: pkgsrc
Committed By: taca
Date: Thu Jul 6 13:32:02 UTC 2017

Modified Files:
pkgsrc/lang/php: phpversion.mk
pkgsrc/lang/php70: distinfo

Log Message:
Update php70 to 7.0.21.

06 Jul 2017 PHP 7.0.21

- Core:
. Fixed bug #74738 (Multiple [PATH=] and [HOST=] sections not properly
parsed). (Manuel Mausz)
. Fixed bug #74658 (Undefined constants in array properties result in broken
properties). (Laruence)
. Fixed misparsing of abstract unix domain socket names. (Sara)
. Fixed bug #74101, bug #74614 (Unserialize Heap Use-After-Free (READ: 1) in
zval_get_type). (Nikita)
. Fixed bug #74111 (Heap buffer overread (READ: 1) finish_nested_data from
unserialize). (Nikita)
. Fixed bug #74603 (PHP INI Parsing Stack Buffer Overflow Vulnerability).
(Stas)
. Fixed bug #74819 (wddx_deserialize() heap out-of-bound read via
php_parse_date()). (Derick)

- DOM:
. Fixed bug #69373 (References to deleted XPath query results). (ttoohey)

- GD:
. Fixed bug #74435 (Buffer over-read into uninitialized memory). (cmb)

- Intl:
. Fixed bug #73473 (Stack Buffer Overflow in msgfmt_parse_message). (libnex)
. Fixed bug #74705 (Wrong reflection on Collator::getSortKey and
collator_get_sort_key). (Tyson Andre, Remi)
. Fixed bug #73634 (grapheme_strpos illegal memory access). (Stas)

- Mbstring:
. Add oniguruma upstream fix (CVE-2017-9224, CVE-2017-9226, CVE-2017-9227,
CVE-2017-9228, CVE-2017-9229) (Remi, Mamoru TASAKA)

- OCI8:
. Add TAF callback (PR #2459). (KoenigsKind)

- Opcache:
. Fixed bug #74663 (Segfault with opcache.memory_protect and
validate_timestamp). (Laruence)

- OpenSSL:
. Fixed bug #74651 (negative-size-param (-1) in memcpy in zif_openssl_seal()).
(Stas)

- PCRE:
. Fixed bug #74087 (Segmentation fault in PHP7.1.1(compiled using the bundled PCRE library)).
(Stas)

- PDO_OCI:
. Support Instant Client 12.2 in --with-pdo-oci configure option.
(Tianfang Yang)

- Reflection:
. Fixed bug #74673 (Segfault when cast Reflection object to string with
undefined constant). (Laruence)

- SPL:
. Fixed bug #74478 (null coalescing operator failing with SplFixedArray).
(jhdxr)

- Standard:
. Fixed bug #74708 (Invalid Reflection signatures for random_bytes and
random_int). (Tyson Andre, Remi)
. Fixed bug #73648 (Heap buffer overflow in substr). (Stas)

- FTP:
. Fixed bug #74598 (ftp:// wrapper ignores context arg). (Sara)

- PHAR:
. Fixed bug #74386 (Phar::__construct reflection incorrect). (villfa)

- SOAP
. Fixed bug #74679 (Incorrect conversion array with WSDL_CACHE_MEMORY).
(Dmitry)

- Streams:
. Fixed bug #74556 (stream_socket_get_name() returns '\0'). (Sara)

(bsiegert)

2017-07-15 18:53:12 UTC pkgsrc-2017Q2 commitmail json YAML

pkgsrc/net/exabgp/Makefile@1.20.2.1 / diff
pkgsrc/net/exabgp/distinfo@1.12.2.1 / diff
pkgsrc/net/exabgp/patches/patch-lib_exabgp_application_healthcheck.py@1.1.2.2 / diff

Pullup ticket #5506 - requested by he
net/exabgp: NetBSD build fix

Revisions pulled up:
- net/exabgp/Makefile 1.21
- net/exabgp/distinfo 1.13
- net/exabgp/patches/patch-lib_exabgp_application_healthcheck.py 1.1

---
Module Name: pkgsrc
Committed By: he
Date: Tue Jul 4 12:35:12 UTC 2017

Modified Files:
pkgsrc/net/exabgp: Makefile distinfo
Added Files:
pkgsrc/net/exabgp/patches: patch-lib_exabgp_application_healthcheck.py

Log Message:
Patch the healthcheck.py script in its proper place.
Provide a default syslog target of /var/run/log for NetBSD, so
that the healthcheck.py script can run on NetBSD.
Bump PKGREVISION.

(bsiegert)

2017-07-15 18:51:00 UTC pkgsrc-2017Q2 commitmail json YAML

pkgsrc/devel/libbson/distinfo@1.23.2.1 / diff
pkgsrc/devel/libbson/patches/patch-configure@1.3.2.2 / diff

Pullup ticket #5505 - requested by joerg
devel/libbson: build fix

Revisions pulled up:
- devel/libbson/distinfo 1.24
- devel/libbson/patches/patch-configure 1.3

---
Module Name: pkgsrc
Committed By: joerg
Date: Mon Jul 3 18:11:27 UTC 2017

Modified Files:
pkgsrc/devel/libbson: distinfo
Added Files:
pkgsrc/devel/libbson/patches: patch-configure

Log Message:
Fix nonsense shell syntax. From Robert Elz.

(bsiegert)

2017-07-15 18:43:57 UTC pkgsrc-2017Q2 commitmail json YAML

pkgsrc/math/octave/Makefile@1.151.2.1 / diff
pkgsrc/math/octave/PLIST@1.29.6.1 / diff

Pullup ticket #5504 - requested by maya
math/octave: build fix

Revisions pulled up:
- math/octave/Makefile 1.152
- math/octave/PLIST 1.30

---
Module Name: pkgsrc
Committed By: maya
Date: Mon Jul 3 13:40:00 UTC 2017

Modified Files:
pkgsrc/math/octave: Makefile PLIST

Log Message:
Get rid of charset.alias. it creates conflicts with other packages (gdb
being one example), and the logic for building it is conditional, causing
PLIST mismatches for GLIBC users.

Reported by Jason Bacon in pkgsrc-users.
Bump PKGREVISION

(bsiegert)

2017-07-15 18:12:51 UTC MAIN commitmail json YAML

pkgsrc/audio/ladspa/Makefile@1.13 / diff
pkgsrc/audio/ladspa/distinfo@1.11 / diff
pkgsrc/audio/ladspa/patches/patch-aa@1.5 / diff

Fix LDFLAGS handling. Fixes RELRO build.

Funny how LDFLAGS passed to ld(1) doesn't work.

(wiz)

2017-07-15 17:41:10 UTC MAIN commitmail json YAML

pkgsrc/net/py-gevent/PLIST@1.4 / diff

Fix PLIST for python-2.x and python-3.x on NetBSD.

Neither installs ${PYSITELIB}/gevent/libev/_corecffi.abi3.so, so remove
it from PLIST, might need more magic for that.

(wiz)

2017-07-15 17:23:04 UTC MAIN commitmail json YAML

pkgsrc/security/libtomcrypt/distinfo@1.7 / diff
pkgsrc/security/libtomcrypt/patches/patch-ab@1.3 / diff
pkgsrc/security/libtomcrypt/patches/patch-ac@1.2 / diff

Honor LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-15 17:22:53 UTC MAIN commitmail json YAML

pkgsrc/security/libtomcrypt/DESCR@1.3 / diff

Shorten.

(wiz)

2017-07-15 17:15:17 UTC MAIN commitmail json YAML

pkgsrc/net/libcares/Makefile@1.22 / diff
pkgsrc/net/libcares/distinfo@1.14 / diff
pkgsrc/net/libcares/patches/patch-configure deleted
pkgsrc/net/libcares/patches/patch-configure.ac@1.1 / diff
pkgsrc/net/libcares/patches/patch-m4_xc-cc-check.m4@1.1 / diff

Do not prescribe what should be in CFLAGS/CPPFLAGS.

While here, remove patch that does nothing since autoreconf is used.

(wiz)

2017-07-15 17:03:53 UTC MAIN commitmail json YAML

pkgsrc/sysutils/lockf/Makefile@1.3 / diff

Honor (CFLAGS and) LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-15 16:13:09 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2903 / diff

Updated net/youtube-dl to 20170715

(adam)

2017-07-15 16:11:44 UTC MAIN commitmail json YAML

pkgsrc/net/youtube-dl/Makefile@1.115 / diff
pkgsrc/net/youtube-dl/PLIST@1.45 / diff
pkgsrc/net/youtube-dl/distinfo@1.101 / diff

youtube-dl 2017.07.15

Core
[YoutubeDL] Don't expand environment variables in meta fields

Extractors
[spiegeltv] Delegate extraction to nexx extractor
[nexx] Add support for nexx.cloud
[generic] Fix rutube embeds extraction
[karrierevideos] Fix title extraction
[youtube] Don't capture YouTube Red ad for creator meta field
[slideshare] Fix extraction
[5tv] Add another video URL pattern
[drtv] Make HLS and HDS extraction non fatal
[ted] Fix subtitles extraction
[vine] Make sure the title won't be empty
[twitter] Support HLS streams in vmap URLs
[periscope] Support pscp.tv URLs in embedded frames
[twitter] Extract mp4 urls via mobile API
[niconico] Fix authentication error handling
[giantbomb] Extract m3u8 formats
[vlive:playlist] Add support for playlists

(adam)

2017-07-15 14:34:15 UTC MAIN commitmail json YAML

pkgsrc/textproc/openjade/distinfo@1.16 / diff
pkgsrc/textproc/openjade/patches/patch-ab@1.4 / diff

Honor LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-15 14:10:52 UTC MAIN commitmail json YAML

pkgsrc/net/wmpload/distinfo@1.9 / diff
pkgsrc/net/wmpload/patches/patch-ab@1.4 / diff

Honor LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-15 14:09:23 UTC MAIN commitmail json YAML

pkgsrc/print/transfig/distinfo@1.23 / diff
pkgsrc/print/transfig/patches/patch-aa@1.12 / diff
pkgsrc/print/transfig/patches/patch-ac@1.5 / diff

Honor LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-15 13:20:50 UTC MAIN commitmail json YAML

pkgsrc/x11/py-sip/Makefile@1.48 / diff

Pass LDFLAGS to build. Fixes RELRO.

(wiz)

2017-07-15 10:18:33 UTC MAIN commitmail json YAML

pkgsrc/textproc/ocaml-csv/Makefile@1.13 / diff

Added needed dependency on ocaml-oasis

(jaapb)

2017-07-15 10:15:06 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2902 / diff

Updated devel/ocaml-yojson to 1.3.3nb1

(jaapb)

2017-07-15 10:13:59 UTC MAIN commitmail json YAML

pkgsrc/devel/ocaml-yojson/Makefile@1.2 / diff
pkgsrc/devel/ocaml-yojson/PLIST@1.2 / diff
pkgsrc/devel/ocaml-yojson/distinfo@1.2 / diff
pkgsrc/devel/ocaml-yojson/patches/patch-Makefile@1.1 / diff

Updated package to install ydump if warranted

(jaapb)

2017-07-15 09:32:55 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2901 / diff

Updated multimedia/adobe-flash-player to 26.0.0.137

(tsutsui)

2017-07-15 09:31:00 UTC MAIN commitmail json YAML

pkgsrc/multimedia/adobe-flash-player/Makefile@1.6 / diff
pkgsrc/multimedia/adobe-flash-player/distinfo@1.6 / diff

Update adobe-flash-player to 26.0.0.137.

Upstream announcemnt:

https://helpx.adobe.com/security/products/flash-player/apsb17-21.html

Adobe Security Bulletin
Security updates available for Flash Player | APSB17-21

(tsutsui)

2017-07-15 06:48:45 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2900 / diff

Updated games/ruby-squib to 0.13.3

(wiz)

2017-07-15 06:48:35 UTC MAIN commitmail json YAML

pkgsrc/games/ruby-squib/Makefile@1.7 / diff
pkgsrc/games/ruby-squib/distinfo@1.6 / diff

Updated ruby23-squib to 0.13.3.

## v0.13.3 / 2017-07-15

Bugs:
* Fix `undefined method [] for nil:NilClass` error on `svg` (was a regression error in librsvg that we worked around.)
* Bump dependencies to latest stable versions. Pango et al. to 3.1.7 and Cairo to 1.15.9. This fixes some compatibility issues.

(wiz)

2017-07-15 06:12:06 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2899 / diff

Updated sysutils/tarsnap to 1.0.38

(wiz)

2017-07-15 06:11:56 UTC MAIN commitmail json YAML

pkgsrc/sysutils/tarsnap/Makefile@1.14 / diff
pkgsrc/sysutils/tarsnap/distinfo@1.10 / diff

Updated tarsnap to 1.0.38.

Tarsnap 1.0.38 is now available. This version brings several new features
compared to tarsnap 1.0.37:

* Tarsnap now supports OpenSSL 1.1.

* tarsnap accepts an --iso-dates option, which causes times to be printed in
YYYY-MM-DD HH:MM:SS format rather than the traditional unix "ls -l" style.

* tarsnap accepts a --force-resources option to proceed with decryption of a
passphrase-encrypted key file even if it is anticipated to use an excessive
amount of memory or CPU time. (This may be useful if tarsnap inaccurately
estimates the amount of memory your system has available.)

* tarsnap accepts an --archive-names <file> option, which reads a list of
archive names to operate on when operating in -d and --print-stats modes.
(This should make some scripts simpler; no more need to construct a command
line which has '-f' inserted before each archive name.)

Potentially (but unlikely) breaking changes in this code compared to tarsnap
1.0.37:

* tarsnap now applies the --humanize-numbers option to the "progress" output
printed by SIGINFO / SIGUSR1. If you have scripts which send signals to
tarsnap and parse its output, they may need to be updated.

* tarsnap -v now prints 'Deleting archive "foo"' even if only one archive is
being deleted. If you have scripts which parse the output of tarsnap -v,
they may need to be updated.

* tarsnap now prints a warning if you pass '--configfile /nosuchfile'. If you
have scripts which rely on being able to specify nonexistent configuration
files and not get any warnings from tarsnap, they may need to be updated.
(Also, if you were doing that, I *really* want to know why.)

There are also two changes which most users should not encounter:

* tarsnap now has an --initialize-cachedir mode; this is intended for use by
the GUI. (The cache directory will be initialized automatically in normal
usage of the tarsnap command-line utility.)

* tarsnap's configure script takes a --with-conf-no-sample option which
results in the sample tarsnap configuration file being installed as
"tarsnap.conf" rather than "tarsnap.conf.sample". This is intended for use in
some packaging systems which have mechanisms for managing configuration files,
and should probably not be used by hand (since it will overwrite your existing
tarsnap.conf).

(wiz)

2017-07-14 18:18:57 UTC MAIN commitmail json YAML

pkgsrc/devel/boost-jam/bjam.mk@1.19 / diff

Pass LDFLAGS when building using bjam. Fixes RELRO for at least boost-libs.

(wiz)

2017-07-14 17:35:07 UTC MAIN commitmail json YAML

pkgsrc/meta-pkgs/boost/distinfo@1.102 / diff
pkgsrc/meta-pkgs/boost/patches/patch-ae@1.9 / diff
pkgsrc/meta-pkgs/boost/patches/patch-ag@1.9 / diff

Pass CFLAGS and LDFLAGS to compiler. Fixes RELRO build.

(wiz)

2017-07-14 17:28:53 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2898 / diff

Updated devel/snappy to 1.1.6

(adam)

2017-07-14 17:27:41 UTC MAIN commitmail json YAML

pkgsrc/devel/snappy/Makefile@1.10 / diff
pkgsrc/devel/snappy/PLIST@1.4 / diff
pkgsrc/devel/snappy/distinfo@1.8 / diff
pkgsrc/devel/snappy/patches/patch-CMakeLists.txt@1.1 / diff
pkgsrc/devel/snappy/patches/patch-snappy.cc deleted
pkgsrc/devel/snappy/patches/patch-snappy__unittest.cc deleted

Snappy v1.1.6:

This is a re-release of v1.1.5 with proper SONAME / SOVERSION values.

Snappy v1.1.5:

This release has broken SONAME / SOVERSION values. Users of snappy as a shared
library should avoid 1.1.5 and use 1.1.6 instead. SONAME / SOVERSION errors will
manifest as the dynamic library loader complaining that it cannot find snappy's
shared library file (libsnappy.so / libsnappy.dylib), or that the library it
found does not have the required version. 1.1.6 has the same code as 1.1.5, but
carries build configuration fixes for the issues above.

* Add CMake build support. The autoconf build support is now deprecated, and
will be removed in the next release.

* Add AppVeyor configuration, for Windows CI coverage.

* Small performance improvement on little-endian PowerPC.

* Small performance improvement on LLVM with position-independent executables.

* Fix a few issues with various build environments.

(adam)

2017-07-14 17:04:29 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2897 / diff

Updated converters/py-cairosvg to 2.0.3, graphics/py-pygal to 2.4.0

(adam)

2017-07-14 17:03:40 UTC MAIN commitmail json YAML

pkgsrc/graphics/py-pygal/Makefile@1.8 / diff
pkgsrc/graphics/py-pygal/PLIST@1.6 / diff
pkgsrc/graphics/py-pygal/distinfo@1.6 / diff
pkgsrc/graphics/py-pygal/options.mk deleted

2.4.0
Generalized fix solidgauge squares algorithm
Fix secondary series ��stroke_style�� property
Fix wrong label colors when there are more series than colors
Show y guides in horizontal chart
Fix nomenclature of Taiwan
Better None values handling in logarithmic charts

(adam)

2017-07-14 17:02:21 UTC MAIN commitmail json YAML

pkgsrc/converters/py-cairosvg/Makefile@1.9 / diff
pkgsrc/converters/py-cairosvg/PLIST@1.2 / diff
pkgsrc/converters/py-cairosvg/distinfo@1.7 / diff

Version 2.0.3:
* Add ``python_requires`` in ``setup.py``

Version 2.0.2:
* Handle ``text-align`` in textPath tags
* Test with Python 3.6

Version 2.0.1:
* Don't crash on relative refs with no input URL

Version 2.0.0:
* Drop Python 2 support
* Drop pycairo support
* Rely on cairocffi, lxml, cssselect, pillow and tinycss
* Fix markers
* Fix URL/id handling
* Use bounding boxes for gradients
* Split deployment and development tests
* Add a scale option
* Add a parent size option
* Test with Travis

(adam)

2017-07-14 16:50:28 UTC MAIN commitmail json YAML

pkgsrc/devel/py-isort/Makefile@1.2 / diff
pkgsrc/devel/py-isort/PLIST@1.2 / diff
pkgsrc/devel/py-isort/distinfo@1.2 / diff

4.2.15 - hotfix release
IMPORTANT NOTE: This will be the last release with Python 2.6 support, subsequent releases will be 2.7+ only
- Fixed certain one line imports not being successfully wrapped

(adam)

2017-07-14 15:34:07 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2896 / diff

Added graphics/py-seaborn version 0.8; Updated graphics/py-dot to 1.2.3

(adam)

2017-07-14 15:33:19 UTC MAIN commitmail json YAML

pkgsrc/graphics/py-dot/Makefile@1.6 / diff
pkgsrc/graphics/py-dot/PLIST@1.3 / diff
pkgsrc/graphics/py-dot/distinfo@1.4 / diff

1.2.3:
- support Python 2.6
- several corrections
- quote empty strings to avoid graphviz errors

(adam)

2017-07-14 15:00:01 UTC MAIN commitmail json YAML

pkgsrc/graphics/Makefile@1.766 / diff
pkgsrc/graphics/py-seaborn/DESCR@1.1 / diff
pkgsrc/graphics/py-seaborn/Makefile@1.1 / diff
pkgsrc/graphics/py-seaborn/PLIST@1.1 / diff
pkgsrc/graphics/py-seaborn/distinfo@1.1 / diff

Seaborn is a library for making attractive and informative statistical graphics
in Python. It is built on top of matplotlib and tightly integrated with the
PyData stack, including support for numpy and pandas data structures and
statistical routines from scipy and statsmodels.

Some of the features that seaborn offers are
* Several built-in themes that improve on the default matplotlib aesthetics
* Tools for choosing color palettes to make beautiful plots that reveal
patterns in your data
* Functions for visualizing univariate and bivariate distributions or for
comparing them between subsets of data
* Tools that fit and visualize linear regression models for different kinds
of independent and dependent variables
* Functions that visualize matrices of data and use clustering algorithms to
discover structure in those matrices
* A function to plot statistical timeseries data with flexible estimation and
representation of uncertainty around the estimate
* High-level abstractions for structuring grids of plots that let you easily
build complex visualizations

(adam)

2017-07-14 13:22:07 UTC MAIN commitmail json YAML

pkgsrc/www/seamonkey/options.mk@1.38 / diff

Remove chatzilla option

* chatzilla is not shipped with seamonkey anymore

(ryoon)

2017-07-14 13:08:31 UTC MAIN commitmail json YAML

pkgsrc/net/netatalk30/Makefile@1.13 / diff
pkgsrc/net/netatalk30/distinfo@1.5 / diff
pkgsrc/net/netatalk30/patches/patch-libatalk_bstring_bstrlib.c@1.1 / diff

When a compiler complains about a missing prototype for a libc
function, just inserting one for what you think the interface might be
is probably not a good idea. (Same patch as for netatalk22, btw.)

(hauke)

2017-07-14 12:59:23 UTC MAIN commitmail json YAML

pkgsrc/net/unison2.40/distinfo@1.4 / diff
pkgsrc/net/unison2.40/patches/patch-system_system__generic.ml@1.1 / diff

Merge Ocaml compatibility fix from newer Unison.

(joerg)

2017-07-14 12:58:52 UTC MAIN commitmail json YAML

pkgsrc/net/unison/Makefile@1.109 / diff

Not MAKE_JOBS safe, mark as such.

(joerg)

2017-07-14 12:58:25 UTC MAIN commitmail json YAML

pkgsrc/net/tcpflow/distinfo@1.9 / diff
pkgsrc/net/tcpflow/patches/patch-src_be13__api_beregex.cpp@1.1 / diff
pkgsrc/net/tcpflow/patches/patch-src_dfxml_src_dfxml__writer.cpp@1.1 / diff

Deal with libtre without tre.h.

(joerg)

2017-07-14 12:57:23 UTC MAIN commitmail json YAML

pkgsrc/misc/gnome-utils/distinfo@1.23 / diff
pkgsrc/misc/gnome-utils/patches/patch-gnome-dictionary_libgdict_gdict-client-context.h@1.1 / diff

Add missing header.

(joerg)

2017-07-14 12:56:41 UTC MAIN commitmail json YAML

pkgsrc/misc/fep/Makefile@1.26 / diff
pkgsrc/misc/fep/distinfo@1.22 / diff
pkgsrc/misc/fep/patches/patch-ai@1.7 / diff

Needs -lcompat on NetBSD, but also include the right header.

(joerg)

2017-07-14 12:55:45 UTC MAIN commitmail json YAML

pkgsrc/textproc/p5-Xapian/PLIST@1.2 / diff
pkgsrc/textproc/py-xapian/Makefile@1.2 / diff
pkgsrc/textproc/xapian/distinfo@1.28 / diff
pkgsrc/textproc/xapian/distinfo-bindings@1.1 / diff
pkgsrc/textproc/xapian/module.mk@1.2 / diff
pkgsrc/textproc/xapian/patches-bindings/patch-configure@1.1 / diff

Collect patches for xapian in a common subdirectory. Put distinfo for
modules into a separate file as well. Don't hard-code -lstdc++ for
broken ancient OpenBSD versions of GCC. Sync p5-Xapian PLIST with
reality.

(joerg)

2017-07-14 12:52:49 UTC MAIN commitmail json YAML

pkgsrc/wm/afterstep/distinfo@1.22 / diff
pkgsrc/wm/afterstep/patches/patch-libAfterBase_selfdiag.c@1.1 / diff
pkgsrc/wm/afterstep/patches/patch-libAfterStep_colorscheme.c@1.1 / diff

Fix unused function to at least compile on NetBSD. Fix C99 inline use.

(joerg)

2017-07-14 11:39:32 UTC MAIN commitmail json YAML

pkgsrc/net/py-eventlib/Makefile@1.13 / diff

Renamed databases/py-redis-py to databases/py-redis

(adam)

2017-07-14 11:39:17 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2895 / diff

Renamed databases/py-redis-py to databases/py-redis; Updated databases/py-redis to 2.10.5

(adam)

2017-07-14 11:36:27 UTC MAIN commitmail json YAML

pkgsrc/databases/Makefile@1.528 / diff
pkgsrc/databases/py-redis-py/DESCR deleted
pkgsrc/databases/py-redis-py/Makefile deleted
pkgsrc/databases/py-redis-py/PLIST deleted
pkgsrc/databases/py-redis-py/distinfo deleted
pkgsrc/databases/py-redis/DESCR@1.1 / diff
pkgsrc/databases/py-redis/Makefile@1.1 / diff
pkgsrc/databases/py-redis/PLIST@1.1 / diff
pkgsrc/databases/py-redis/distinfo@1.1 / diff

PkgSrc:
renamed py-redis-py to py-redis

2.10.5
* Allow URL encoded parameters in Redis URLs. Characters like a "/" can
now be URL encoded and redis-py will correctly decode them.
* Added support for the WAIT command.
* Better shutdown support for the PubSub Worker Thread. It now properly
cleans up the connection, unsubscribes from any channels and patterns
previously subscribed to and consumes any waiting messages on the socket.
* Added the ability to sleep for a brief period in the event of a
WatchError occuring.
* Fixed a bug with pipeline error reporting when dealing with characters
in error messages that could not be encoded to the connection's
character set.
* Fixed a bug in Sentinel connections that would inadvertantly connect
to the master when the connection pool resets.
* Better timeout support in Pubsub get_message.
* Fixed a bug with the HiredisParser that would cause the parser to
get stuck in an endless loop if a specific number of bytes were
delivered from the socket. This fix also increases performance of
parsing large responses from the Redis server.
* Added support for ZREVRANGEBYLEX.
* ConnectionErrors are now raised if Redis refuses a connection due to
the maxclients limit being exceeded.
* max_connections can now be set when instantiating client instances.

(adam)

2017-07-14 11:02:41 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2894 / diff

Added net/py-geventhttpclient version 1.3.1; Updated devel/py-dulwich to 0.17.3, time/py-icalendar to 3.11.5, net/py-xandikos to 0.0.6

(adam)

2017-07-14 11:01:08 UTC MAIN commitmail json YAML

pkgsrc/net/py-xandikos/ALTERNATIVES@1.1 / diff
pkgsrc/net/py-xandikos/Makefile@1.2 / diff
pkgsrc/net/py-xandikos/PLIST@1.2 / diff
pkgsrc/net/py-xandikos/distinfo@1.2 / diff

0.0.6:
Bug fixes

(adam)

2017-07-14 10:55:54 UTC MAIN commitmail json YAML

pkgsrc/time/py-icalendar/Makefile@1.26 / diff
pkgsrc/time/py-icalendar/PLIST@1.13 / diff
pkgsrc/time/py-icalendar/distinfo@1.18 / diff

3.11.5:

Bug fixes:
- added an assertion that VTIMEZONE sub-components' DTSTART must be of type
DATETIME
- Fix handling of VTIMEZONEs with subcomponents with the same DTSTARTs and
OFFSETs but which are of different types

(adam)

2017-07-14 10:53:35 UTC MAIN commitmail json YAML

pkgsrc/devel/py-dulwich/ALTERNATIVES@1.1 / diff
pkgsrc/devel/py-dulwich/Makefile@1.20 / diff
pkgsrc/devel/py-dulwich/PLIST@1.10 / diff
pkgsrc/devel/py-dulwich/distinfo@1.17 / diff

0.17.3:

PLATFORM SUPPORT
* List Python 3.3 as supported.

BUG FIXES
* Fix compatibility with pypy 3.

(adam)

2017-07-14 10:44:59 UTC MAIN commitmail json YAML

pkgsrc/net/Makefile@1.1168 / diff
pkgsrc/net/py-geventhttpclient/DESCR@1.1 / diff
pkgsrc/net/py-geventhttpclient/Makefile@1.1 / diff
pkgsrc/net/py-geventhttpclient/PLIST@1.1 / diff
pkgsrc/net/py-geventhttpclient/distinfo@1.1 / diff

A high performance, concurrent HTTP client library for python using gevent.

gevent.httplib support was removed in gevent 1.0, geventhttpclient now provides
that missing functionality.

geventhttpclient uses a fast http parser, written in C, originating from nginx,
extracted and modified by Joyent.

geventhttpclient has been specifically designed for high concurrency, streaming
and support HTTP 1.1 persistent connections. More generally it is designed for
efficiently pulling from REST APIs and streaming APIs like Twitter's.

Safe SSL support is provided by default. geventhttpclient depends on the
certifi CA Bundle. This is the same CA Bundle which ships with the Requests
codebase, and is derived from Mozilla Firefox's canonical set.

(adam)

2017-07-14 10:30:25 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2893 / diff
pkgsrc/doc/TODO@1.17526 / diff

Updated devel/libev to 4.24, math/py-pandas to 0.20.3, devel/py-fastimport to 0.9.6, net/py-gevent to 1.2.2

(adam)

2017-07-14 10:26:50 UTC MAIN commitmail json YAML

pkgsrc/devel/py-fastimport/Makefile@1.5 / diff
pkgsrc/devel/py-fastimport/distinfo@1.3 / diff

0.9.6:
* Add python3.4 support

0.9.5:
* Add python3.5 support.

(adam)

2017-07-14 10:19:36 UTC MAIN commitmail json YAML

pkgsrc/net/py-gevent/Makefile@1.7 / diff
pkgsrc/net/py-gevent/PLIST@1.3 / diff
pkgsrc/net/py-gevent/buildlink3.mk deleted
pkgsrc/net/py-gevent/distinfo@1.5 / diff
pkgsrc/net/py-gevent/patches/patch-libev_ev.c deleted

1.2.2:
- Testing on Python 3.5 now uses Python 3.5.3 due to SSL changes. See
:issue:`943`.
- Linux CI has been updated from Ubuntu 12.04 to Ubuntu 14.04 since
the former has reached EOL.
- Linux CI now tests on PyPy2 5.7.1, updated from PyPy2 5.6.0.
- Linux CI now tests on PyPy3 3.5-5.7.1-beta, updated from PyPy3
3.3-5.5-alpha.
- Python 2 sockets are compatible with the ``SOCK_CLOEXEC`` flag found
on Linux. They no longer pass the socket type or protocol to
``getaddrinfo`` when ``connect`` is called. Reported in :issue:`944`
by Bernie Hackett.
- Replace ``optparse`` module with ``argparse``. See :issue:`947`.
- Update to version 1.3.1 of ``tblib`` to fix :issue:`954`,
reported by ml31415.
- Fix the name of the ``type`` parameter to
:func:`gevent.socket.getaddrinfo` to be correct on Python 3. This
would cause callers using keyword arguments to raise a :exc:`TypeError`.
Reported in :issue:`960` by js6626069. Likewise, correct the
argument names for ``fromfd`` and ``socketpair`` on Python 2,
although they cannot be called with keyword arguments under CPython.

.. note:: The ``gethost*`` functions take different argument names
under CPython and PyPy. gevent follows the CPython
convention, although these functions cannot be called with
keyword arguments on CPython.
- The previously-singleton exception objects ``FileObjectClosed`` and
``cancel_wait_ex`` were converted to classes. On Python 3, an
exception object is stateful, including references to its context
and possibly traceback, which could lead to objects remaining alive
longer than intended.
- Make sure that ``python -m gevent.monkey <script>`` runs code in the
global scope, not the scope of the ``main`` function.

(adam)

2017-07-14 10:17:02 UTC MAIN commitmail json YAML

pkgsrc/math/py-pandas/Makefile@1.17 / diff
pkgsrc/math/py-pandas/PLIST@1.12 / diff
pkgsrc/math/py-pandas/distinfo@1.13 / diff

0.20.3

Bug Fixes
* Fixed a bug in failing to compute rolling computations of a column-MultiIndexed DataFrame
* Fixed a pytest marker failing downstream packages�� tests suites

Conversion
* Bug in pickle compat prior to the v0.20.x series, when UTC is a timezone in a Series/DataFrame/Index
* Bug in Series construction when passing a Series with dtype='category'.
* Bug in DataFrame.astype() when passing a Series as the dtype kwarg..

Indexing
* Bug in Float64Index causing an empty array instead of None to be returned from .get(np.nan) on a Series whose index did not contain any NaN s
* Bug in MultiIndex.isin causing an error when passing an empty iterable
* Fixed a bug in a slicing DataFrame/Series that have a TimedeltaIndex

I/O
* Bug in read_csv() in which files weren��t opened as binary files by the C engine on Windows, causing EOF characters mid-field, which would fail
* Bug in read_hdf() in which reading a Series saved to an HDF file in ��fixed�� format fails when an explicit mode='r' argument is supplied
* Bug in DataFrame.to_latex() where bold_rows was wrongly specified to be True by default, whereas in reality row labels remained non-bold whatever parameter provided.
* Fixed an issue with DataFrame.style() where generated element ids were not unique
* Fixed loading a DataFrame with a PeriodIndex, from a format='fixed' HDFStore, in Python 3, that was written in Python 2

Plotting
* Fixed regression that prevented RGB and RGBA tuples from being used as color arguments
* Fixed an issue with DataFrame.plot.scatter() that incorrectly raised a KeyError when categorical data is used for plotting

Reshaping
* PeriodIndex / TimedeltaIndex.join was missing the sort= kwarg
* Bug in joining on a MultiIndex with a category dtype for a level.
* Bug in merge() when merging/joining with multiple categorical columns

Categorical
* Bug in DataFrame.sort_values not respecting the kind parameter with categorical data

(adam)

2017-07-14 10:10:39 UTC MAIN commitmail json YAML

pkgsrc/graphics/darktable/patches/patch-tools_noise_benchmark.sh@1.3 / diff

I forgot to add a patch file - here it is.

(hauke)

2017-07-14 10:03:12 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2892 / diff
pkgsrc/doc/TODO@1.17525 / diff

Updated graphics/darktable to 2.2.5

(hauke)

2017-07-14 10:02:28 UTC MAIN commitmail json YAML

pkgsrc/graphics/darktable/Makefile@1.73 / diff
pkgsrc/graphics/darktable/PLIST@1.13 / diff
pkgsrc/graphics/darktable/distinfo@1.28 / diff
pkgsrc/graphics/darktable/patches/patch-src_develop_blend.c deleted

update graphics/darktable to 2.2.5.

From the changelog against 2.2.4:

## New features:

- When appending EXIF data to an exported image, do not fail if reading of EXIF from the original file fails
- Support XYZ as proofing profile
- Clear DerivedFrom from XMP before writing it
- bauhaus: when using soft bounds, keep slider step constant

## Bugfixes:

- Some GCC7 build fixes
- cmstest: fix crash when missing XRandR extension.
- Fix crash in Lua libs when collapsing libs
- Mac packaging: some fixes
- RawSpeed: TiffIFD: avoid double-free
- Fix a few alloc-dealloc mismatches

## Base Support:

- Canon EOS 77D
- Canon EOS 9000D
- Nikon D500 (14bit-uncompressed, 12bit-uncompressed)
- Nikon D5600 (12bit-compressed, 12bit-uncompressed, 14bit-compressed, 14bit-uncompressed)
- Panasonic DC-FZ82 (4:3)
- Panasonic DMC-FZ80 (4:3)
- Panasonic DMC-FZ85 (4:3)
- Panasonic DC-GH5 (4:3)

## White Balance Presets:

- Pentax K-3 II

## Noise Profiles:

- Nikon D500
- Panasonic DMC-FZ300
- Panasonic DMC-LX100
- Pentax K-70
- Sony ILCE-5000

(hauke)

2017-07-14 09:54:59 UTC MAIN commitmail json YAML

pkgsrc/devel/libev/Makefile@1.16 / diff
pkgsrc/devel/libev/distinfo@1.12 / diff

4.24:
- bump version to 4.24, as the release tarball inexplicably
didn't have the right version in ev.h, even though the cvs-tagged
version did have the right one

4.23:
- move some declarations at the beginning to help certain retarded
microsoft compilers, even though their documentation claims
otherwise

(adam)

2017-07-14 08:45:17 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2891 / diff
pkgsrc/doc/TODO@1.17524 / diff

Updated net/py-amqp to 2.2.1, multimedia/x265 to 2.5, net/py-botocore to 1.5.82, net/py-awscli to 1.11.119, multimedia/x264-devel to 20170712

(adam)

2017-07-14 08:12:34 UTC MAIN commitmail json YAML

pkgsrc/multimedia/x264-devel/Makefile@1.63 / diff
pkgsrc/multimedia/x264-devel/buildlink3.mk@1.14 / diff
pkgsrc/multimedia/x264-devel/distinfo@1.47 / diff
pkgsrc/multimedia/x264-devel/patches/patch-encoder_analyse.c@1.2 / diff

20170712:
x86: AVX-512 pixel_avg_weight_w8
x86: AVX-512 pixel_avg_weight_w16
x86: AVX-512 sub8x16_dct_dc
x86: AVX-512 sub8x8_dct_dc
x86: AVX-512 add8x8_idct
x86: AVX-512 sub16x16_dct
x86: AVX-512 sub8x8_dct
x86: AVX-512 sub4x4_dct
x86: AVX-512 mbtree_propagate_list
x86inc: Add aesni cpuflag define

(adam)

2017-07-14 08:02:30 UTC MAIN commitmail json YAML

pkgsrc/net/py-awscli/Makefile@1.5 / diff
pkgsrc/net/py-awscli/distinfo@1.5 / diff

1.11.119:
api-change:apigateway: Update apigateway command to latest version
api-change:ec2: Update ec2 command to latest version
api-change:lex-models: Update lex-models command to latest version

(adam)

2017-07-14 07:59:29 UTC MAIN commitmail json YAML

pkgsrc/net/py-botocore/Makefile@1.5 / diff
pkgsrc/net/py-botocore/distinfo@1.5 / diff

1.5.82:
api-change:ec2: Update ec2 client to latest version
api-change:apigateway: Update apigateway client to latest version
api-change:lex-models: Update lex-models client to latest version

(adam)

2017-07-14 07:56:57 UTC MAIN commitmail json YAML

pkgsrc/multimedia/x265/Makefile@1.19 / diff
pkgsrc/multimedia/x265/PLIST@1.16 / diff
pkgsrc/multimedia/x265/distinfo@1.19 / diff

Version 2.5

Encoder enhancements
--------------------
1. Improved grain handling with :option:`--tune` grain option by throttling VBV operations to limit QP jumps.
2. Frame threads are now decided based on number of threads specified in the :option:`--pools`, as opposed to the number of hardware threads available. The mapping was also adjusted to improve quality of the encodes with minimal impact to performance.
3. CSV logging feature (enabled by :option:`--csv`) is now part of the library; it was previously part of the x265 application. Applications that integrate libx265 can now extract frame level statistics for their encodes by exercising this option in the library.
4. Globals that track min and max CU sizes, number of slices, and other parameters have now been moved into instance-specific variables. Consequently, applications that invoke multiple instances of x265 library are no longer restricted to use the same settings for these parameter options across the multiple instances.
5. x265 can now generate a seprate library that exports the HDR10+ parsing API. Other libraries that wish to use this API may do so by linking against this library. Enable ENABLE_HDR10_PLUS in CMake options and build to generate this library.
6. SEA motion search receives a 10% performance boost from AVX2 optimization of its kernels.
7. The CSV log is now more elaborate with additional fields such as PU statistics, average-min-max luma and chroma values, etc. Refer to documentation of :option:`--csv` for details of all fields.
8. x86inc.asm cleaned-up for improved instruction handling.

API changes
-----------
1. New API x265_encoder_ctu_info() introduced to specify suggested partition sizes for various CTUs in a frame. To be used in conjunction with :option:`--ctu-info` to react to the specified partitions appropriately.
2. Rate-control statistics passed through the x265_picture object for an incoming frame are now used by the encoder.
3. Options to scale, reuse, and refine analysis for incoming analysis shared through the x265_analysis_data field in x265_picture for runs that use :option:`--analysis-reuse-mode` load; use options :option:`--scale`, :option:`--refine-mv`, :option:`--refine-inter`, and :option:`--refine-intra` to explore.
4. VBV now has a deterministic mode. Use :option:`--const-vbv` to exercise.

Bug fixes
---------
1. Several fixes for HDR10+ parsing code including incompatibility with user-specific SEI, removal of warnings, linking issues in linux, etc.
2. SEI messages for HDR10 repeated every keyint when HDR options (:option:`--hdr-opt`, :option:`--master-display`) specified.

(adam)

2017-07-14 07:52:39 UTC MAIN commitmail json YAML

pkgsrc/net/py-amqp/Makefile@1.14 / diff
pkgsrc/net/py-amqp/distinfo@1.12 / diff

2.2.1:
- Fix implicit conversion from bytes to string on the connection object.
This issue has caused Celery to crash on connection to RabbitMQ.

(adam)

2017-07-14 05:49:44 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2890 / diff

mpg123

(maya)

2017-07-14 05:46:47 UTC MAIN commitmail json YAML

pkgsrc/audio/mpg123/Makefile.common@1.44 / diff
pkgsrc/audio/mpg123/distinfo@1.44 / diff
pkgsrc/audio/mpg123/patches/patch-Makefile.in@1.2 / diff

mpg123: update to 1.25.2

1.25.2
------

- libmpg123:
-- Extend pow tables for layer III to properly handle files with i-stereo and
5-bit scalefactors. Never observed them for real, just as fuzzed input to
trigger the read overflow. Note: This one goes on record as CVE-2017-11126,
calling remote denial of service. While the accesses are out of bounds for
the pow tables, they still are safely within libmpg123's memory (other
static tables). Just wrong values are used for computation, no actual crash
unless you use something like GCC's AddressSanitizer, nor any information
disclosure.
-- Avoid left-shifts of negative integers in layer I decoding.

1.25.1: Hot Fuzz
-------
- libmpg123:
-- Avoid memset(NULL, 0, 0) to calm down the paranoid.
-- Fix bug 252, invalid read of size 1 in ID3v2 parser due to forgotten
offset from the frame flag bytes (unnoticed in practice for a long
time). Fuzzers are in the house again. This one got CVE-2017-10683.
-- Avoid a mostly harmless conditional jump depending on uninitialised
fr->lay in compute_bpf() (mpg123_position()) when track is not ready yet.
-- Fix undefined shifts on signed long mask in layer3.c (worked in practice,
never right in theory). Code might be a bit faster now, even.
Thanks to Agostino Sarubbo for reporting.

1.25.0: MP3 now patent-free worldwide!
-------
- Silence test for artsc-config if it is not there.
- Make sure -static-libgcc from LDFLAGS gets through libtool,
fixing 32 bit Windows builds (depend on libgcc DLL otherwise).
- Fix build with non-GNU make by using plain rm -f instead of silly $(RM)
in libout123/modules makefile fragment.
- Make build work on iOS, including coreaudio backend.
- libmpg123:
-- Finally provide position-independent code for x86 with assembly
optimisations.The textrels are gone thanks to Won Kyu Park and Taihei Momma.
-- Clarify some license language in files descending from the original MMX
optimisation.
-- Fix return value overflow check for MPG123_BUFFERFILL.
-- Introduced mpg123_getformat2() to enable the FORMAT command
for the generic control not stealing MPG123_NEW_FORMAT from the main
playback loop. The sequence LOADPAUSED-FORMAT-PAUSE (play) is supposed
to work now.
-- Enable aarch64 optimisations on *BSD by default, too. You can always
override that stupid OS whitelist using --with-optimization, anyway.
-- Use of the i486 decoder is now discouraged more prominently, in configure
output.
- out123: Fix stupid crash with verbose mode and tone generation (print
the string if the pointer is non-null, not if it is null).
- libout123: More consistent error messages for dynamic and legacy
(built-in) modules. Namely, you get a hint how if you choose a different
module than the built-in ones for a static libout123.

(maya)

2017-07-14 05:32:03 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2889 / diff

evince

(maya)

2017-07-14 05:31:21 UTC MAIN commitmail json YAML

pkgsrc/print/evince3/Makefile@1.62 / diff
pkgsrc/print/evince3/distinfo@1.13 / diff
pkgsrc/print/evince3/patches/patch-backend_comics_comics-document.c@1.1 / diff
pkgsrc/print/evince3/patches/patch-configure@1.1 / diff
pkgsrc/print/evince3/patches/patch-configure.ac@1.1 / diff

Patch CVE-2017-1000083

From 717df38fd8509bf883b70d680c9b1b3cf36732ee Mon Sep 17 00:00:00 2001
From: Bastien Nocera <hadess@hadess.net>
Date: Thu, 6 Jul 2017 20:02:00 +0200
Subject: [PATCH] comics: Remove support for tar and tar-like commands

When handling tar files, or using a command with tar-compatible syntax,
to open comic-book archives, both the archive name (the name of the
comics file) and the filename (the name of a page within the archive)
are quoted to not be interpreted by the shell.

But the filename is completely with the attacker's control and can start
with "--" which leads to tar interpreting it as a command line flag.

This can be exploited by creating a CBT file (a tar archive with the
.cbt suffix) with an embedded file named something like this:
"--checkpoint-action=exec=bash -c 'touch ~/hacked;'.jpg"

CBT files are infinitely rare (CBZ is usually used for DRM-free
commercial releases, CBR for those from more dubious provenance), so
removing support is the easiest way to avoid the bug triggering. All
this code was rewritten in the development release for GNOME 3.26 to not
shell out to any command, closing off this particular attack vector.

This also removes the ability to use libarchive's bsdtar-compatible
binary for CBZ (ZIP), CB7 (7zip), and CBR (RAR) formats. The first two
are already supported by unzip and 7zip respectively. libarchive's RAR
support is limited, so unrar is a requirement anyway.

Discovered by Felix Wilhelm from the Google Security Team.

https://bugzilla.gnome.org/show_bug.cgi?id=784630

Bump PKGREVISION

(maya)

2017-07-13 17:55:30 UTC MAIN commitmail json YAML

pkgsrc/editors/xemacs/Makefile.common@1.26 / diff

wiz says we bump revision when binary packages change.

(hauke)

2017-07-13 15:36:05 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2888 / diff

Note update of devel/ruby-test-unit package to 3.2.5.

(taca)

2017-07-13 15:35:32 UTC MAIN commitmail json YAML

pkgsrc/devel/ruby-test-unit/Makefile@1.30 / diff
pkgsrc/devel/ruby-test-unit/distinfo@1.25 / diff

Update ruby-test-unit to 3.2.5.

## 3.2.5 - 2017-06-24 {#version-3-2-5}

### Improvements

* Supported `--enable-frozen-string-literal` `ruby` option.
[GitHub#149][Reported by Pat Allan]

### Thanks

* Pat Allan

(taca)

2017-07-13 15:34:36 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2887 / diff

Note update of devel/ruby-iniparse package to 1.4.4.

(taca)

2017-07-13 15:34:08 UTC MAIN commitmail json YAML

pkgsrc/devel/ruby-iniparse/Makefile@1.2 / diff
pkgsrc/devel/ruby-iniparse/distinfo@1.2 / diff

Update ruby-iniparse to 1.4.4.

1.4.4 2017/07/04

* Fix handling files with DOS line endings
* Improve error message with unparseable lines

(taca)

2017-07-13 15:32:09 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2886 / diff

Note update of devel/ruby-i18n package to 0.8.6.

(taca)

2017-07-13 15:31:35 UTC MAIN commitmail json YAML

pkgsrc/devel/ruby-i18n/Makefile@1.13 / diff
pkgsrc/devel/ruby-i18n/PLIST@1.9 / diff
pkgsrc/devel/ruby-i18n/distinfo@1.13 / diff

Update ruby-i18n to 0.8.6.

v0.8.5 2017/07/10

* Improved error message for MissingPluralizationKey error - See #371
* Fixed a thread issue when calling translate when fallbacks were enabled -
See #369

v0.8.6 2017/07/10

* Fixed a small regression introduced in v0.8.5 when using fallbacks - See
#378

(taca)

2017-07-13 15:28:34 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2885 / diff

Note update of devel/ruby-gettext-setup package to 0.26.

(taca)

2017-07-13 15:28:06 UTC MAIN commitmail json YAML

pkgsrc/devel/ruby-gettext-setup/Makefile@1.2 / diff
pkgsrc/devel/ruby-gettext-setup/PLIST@1.2 / diff
pkgsrc/devel/ruby-gettext-setup/distinfo@1.2 / diff

Update ruby-gettext-setup to 0.26.

* When negotiating locale, only consider language, but not country variant.
* Fix ordering of language var assignment from env.

(taca)

2017-07-13 15:23:39 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2884 / diff

Note update of devel/ruby-gettext package to 3.2.3.

(taca)

2017-07-13 15:23:13 UTC MAIN commitmail json YAML

pkgsrc/devel/ruby-gettext/Makefile@1.32 / diff
pkgsrc/devel/ruby-gettext/distinfo@1.27 / diff

Update ruby-gettext to 3.2.3.

## 3.2.3: 2017-06-24 {#version-3-2-3}

### Improvements

* Disabled unmaintainable Ruby from CI.
[GitHub#48][Reported by JP Hastings-Spital]

* Supported `--enable-frozen-string-literal` `ruby` option.
[GitHub#52][Reported by Pat Allan]

### Thanks

* JP Hastings-Spital

* Pat Allan

(taca)

2017-07-13 15:22:20 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2883 / diff

Note update of devel/ruby-ffi-yajl package to 2.3.1.

(taca)

2017-07-13 15:21:47 UTC MAIN commitmail json YAML

pkgsrc/devel/ruby-ffi-yajl/Makefile@1.8 / diff
pkgsrc/devel/ruby-ffi-yajl/distinfo@1.8 / diff

Update ruby-ffi-yajl to 2.3.1.

* Fix license in gemspec.
* Improve format of README.
* Remove duplicated code.

(taca)

2017-07-13 14:50:55 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2882 / diff

Note update of devel/ruby-curses package to 1.2.3.

(taca)

2017-07-13 14:50:19 UTC MAIN commitmail json YAML

pkgsrc/devel/ruby-curses/Makefile@1.24 / diff
pkgsrc/devel/ruby-curses/distinfo@1.23 / diff

Update ruby-curses to 1.2.3.

### 1.2.3 / 2017-07-03

Bug fixes:

* Fixes for mswin. Pull requests #30, #31, #32 and #33 by unak.

(taca)

2017-07-13 14:37:53 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2881 / diff

Note addition of devel/ruby-byebug package version 9.0.6.

(taca)

2017-07-13 14:37:30 UTC MAIN commitmail json YAML

pkgsrc/devel/Makefile@1.2463 / diff

Add and enable ruby-byebug.

(taca)

2017-07-13 14:36:27 UTC MAIN commitmail json YAML

pkgsrc/devel/ruby-byebug/ALTERNATIVES@1.1 / diff
pkgsrc/devel/ruby-byebug/DESCR@1.1 / diff
pkgsrc/devel/ruby-byebug/Makefile@1.1 / diff
pkgsrc/devel/ruby-byebug/PLIST@1.1 / diff
pkgsrc/devel/ruby-byebug/distinfo@1.1 / diff

Add ruby-byebug package version 9.0.6.

Byebug is a simple to use, feature rich debugger for Ruby 2. It uses the new
TracePoint API for execution control and the new Debug Inspector API for call
stack navigation, so it doesn't depend on internal core sources. It's developed
as a C extension, so it's fast. And it has a full test suite so it's reliable.

It allows you to see what is going on _inside_ a Ruby program while it executes
and offers many of the traditional debugging features such as:

* Stepping: Running your program one line at a time.
* Breaking: Pausing the program at some event or specified instruction, to
examine the current state.
* Evaluating: Basic REPL functionality, although [pry] does a better job at
that.
* Tracking: Keeping track of the different values of your variables or the
different lines executed by your program.

(taca)

2017-07-13 14:30:23 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2880 / diff

Note update of databases/ruby-sequel package to 4.48.0.

(taca)

2017-07-13 14:29:55 UTC MAIN commitmail json YAML

pkgsrc/databases/ruby-sequel/Makefile@1.54 / diff
pkgsrc/databases/ruby-sequel/PLIST@1.51 / diff
pkgsrc/databases/ruby-sequel/distinfo@1.52 / diff

Update ruby-sequel to 4.48.0.

=== 4.48.0 (2017-07-01)

* Deprecate Model.<< (jeremyevans)
* Deprecate Dataset#{and,exclude_where,range,interval}, move to
sequel_4_dataset_methods extension (jeremyevans)
* Make Database#indexes not include partial indexes on SQLite 3.8.8+
(jeremyevans)
* Make Database#indexes include indexes created automatically from unique
constraints on SQLite 3.8.8+ (jeremyevans)
* Deprecate Sequel::Postgres::PG_TYPES, conversion procs should not be
registered per-Database (jeremyevans)
* Add Database#add_conversion_proc method on PostgreSQL for registering
conversion procs (jeremyevans)
* Deprecate unexpected values passed to Dataset#insert_conflict on SQLite
(jeremyevans)
* Deprecate Sequel::SqlAnywhere::Dataset#convert_smallint_to_bool= method
(jeremyevans)
* Deprecate Sequel::SqlAnywhere.convert_smallint_to_bool accessor
(jeremyevans)
* Use savepoints around index creation if creating table inside transaction if
ignore_index_errors is used (jeremyevans)
* Deprecate treating :natrual_inner join type on MySQL as NATURAL LEFT JOIN
(jeremyevans)
* Deprecate Dataset#mssql_unicode_strings= on Microsoft SQL Server
(jeremyevans)
* Preserve encoding when parsing PostgreSQL arrays (jeltz) (#1387)
* Deprecate external modification of Sequel::JDBC::TypeConvertor (jeremyevans)
* Deprecate Sequel::DB2.use_clob_as_blob accessor (jeremyevans)
* Add Database#use_clob_as_blob accessor on DB2 (jeremyevans)
* Deprecate SEQUEL_POSTGRES_USES_PG constant (jeremyevans)
* Do not swallow original exception if exception is raised inside
Database#copy_table on PostgreSQL (jeremyevans)
* Deprecate Sequel::Postgres.client_min_messages and force_standard_strings
accessors (jeremyevans)
* Deprecate Sequel::Postgres.use_iso_date_format accessor (jeremyevans)
* Do not allow connection in postgres adapter if postgres-pr driver is used
and force_standard_strings is false (jeremyevans)
* Drop support for ancient postgres driver in postgres adapter, now only pg
and postgres-pr drivers are supported (jeremyevans)
* Deprecate Sequel::MySQL.convert_invalid_date_time accessor (jeremyevans)
* Deprecate Sequel::MySQL.convert_tinyint_to_bool accessor (jeremyevans)
* Deprecate Sequel::MySQL.default_{charset,collate,engine} accessors
(jeremyevans)
* Add Database#default_{charset,collate,engine} accessors on MySQL
(jeremyevans)
* Make mock adapter thread safe (jeremyevans)
* Deprecate Sequel::JDBC::Dataset#convert_types accessor (jeremyevans)
* Add Dataset#with_convert_types in jdbc adapter (jeremyevans)
* Deprecate Sequel::IBMDB::Dataset#convert_smallint_to_bool= method
(jeremyevans)
* Deprecate Sequel::IBMDB.convert_smallint_to_bool accessor (jeremyevans)
* Add Database#convert_smallint_to_bool accessor in the ibmdb adapter
(jeremyevans)
* Deprecate sequel_3_dataset_methods extension (jeremyevans)
* Deprecate query_literals extension (jeremyevans)
* Deprecate using subtype conversion procs added after registering composite
type in the pg_row extension (jeremyevans)
* Don't try canceling copy in Database#copy_into if copier is not created yet
(aakashAu) (#1384)
* Deprecate global conversion procs added by pg_* extensions, when extension
isn't loaded into Database instance (jeremyevans)
* Deprecate Sequel::Postgres::PGRange.register in the pg_range extension
(jeremyevans)
* Deprecate Sequel::Postgres::PGArray.register in the pg_array extension
(jeremyevans)
* Deprecate Database#copy_conversion_procs (private method) on PostgreSQL
(jeremyevans)
* Deprecate Database#reset_conversion_procs on PostgreSQL (jeremyevans)
* Deprecate meta_def extension (jeremyevans)
* Make class_table_inheritance plugin with :alias option not use subquery for
datasets that don't join (jeremyevans)
* Deprecate hash_aliases extension (jeremyevans)
* Deprecate filter_having extension (jeremyevans)
* Deprecate empty_array_ignore_nulls extension (jeremyevans)
* Deprecate Array#sql_array in the core_extensions extension (jeremyevans)
* Make validation_helpers plugin :allow_blank option work correctly when the
blank extension is not loaded (jeremyevans)
* Make validation_class_methods plugin no longer require the blank extension
(jeremyevans)
* Clear cached associations when touching associations in the touch plugin
(jeremyevans)
* Make pg_array_associations model plugin load pg_array extension into
database (jeremyevans)
* Remove support for :strict option in nested_attributes plugin, use
:unmatched_pk option instead (jeremyevans)
* Make to_json class/dataset method in json_serializer plugin accept
:instance_block option to pass block to Model#to_json (jeremyevans)
* Make to_json methods in json_serializer plugin accept blocks that are used
to transform values before serializing to JSON (jeremyevans)
* Make Sequel.object_to_json pass block to #to_json (jeremyevans)
* Deprecate identifier_columns plugin, not needed with Sequel.split_symbols =
false (jeremyevans)
* Make reloading column_conflicts plugin not remove existing conflict markings
(jeremyevans)
* Deprecate cti_base_model, cti_key, and cti_model_map class methods in
class_table_inheritance plugin (jeremyevans)
* Make Model.skip_auto_validations(:not_null) in the auto_validations plugin
skip not null checks for columns with default values (jeremyevans)
* Make Database#copy_into in jdbc/postgresql adapter respect :server option
(jeremyevans)
* Make #to_hash and #to_hash_groups handle options in the static_cache plugin,
and add rename #to_hash to #as_hash (jeremyevans)
* Rename Dataset#to_hash to #as_hash, and add #to_hash as an alias, to allow
undefing #to_hash to fix ruby calling it implicitly (jeremyevans) (#1375)
* Handle PG* constants deprecated in pg 0.21.0 in the postgres adapter
(jeremyevans) (#1377, #1378)
* Support :association_pks_use_associated_table association option in
association_pks plugin (jeremyevans)
* Make pg_hstore extension reset hstore conversion proc when running
Database#reset_conversion_procs (jeremyevans)
* Fix incorrect SQL used for inserting into a CTI subclass sharing the primary
table when using the :alias option (jeremyevans)

(taca)

2017-07-13 14:19:06 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2879 / diff

Note update of databases/ruby-mysql2 package to 0.4.8.

(taca)

2017-07-13 14:18:03 UTC MAIN commitmail json YAML

pkgsrc/databases/ruby-mysql2/Makefile@1.16 / diff
pkgsrc/databases/ruby-mysql2/distinfo@1.14 / diff

Update ruby-mysql2 to 0.4.8.

0.4.7

* Adding support for MYSQL_ENABLE_CLEARTEXT_PLUGIN flag (#845)
* Avoid invalidating re-assigned socket fd by fixing connected check (#847)
* Wait for close to be processed by server in test for Threads_connected (#850)
* Fix flaky test that used Process.wait without specifying a pid (#849)
* Add a Mysql2::Client#closed? method (#796)
* Fix use after free of client field when closing with reconnect option (#846)
* Fix leaky test that caused a re-assigned socket to be closed on GC. (#853)
* Close several unclosed clients in tests (#848)
* Fix spec that expected Client#socket on all platforms, it's not available on
WIndows
* Docs: Fix link in readme (#854)
* English grammar: Fix incorrect use of word "deprecated" (#855)
* Minimal required changes to make it work for mariadb 10.2 (#857)
* Fix segfault for Mysql2::Statement#fields on non-SELECT queries
* Fix for name change of struct NET.vio to .pvio in MariaDB Connector/C 3.x.
* Fix for MariaDB 10.2 which does not define CLIENT_LONG_PASSWORD
* Add README section to discuss the special meaning of localhost
* Move the section for Multple Result Sets
* Update MySQL Connector/C version for Windows
* Change the quoting for unzipping MySQL Connector/C for Windows

0.4.8

* Add ifdefs for MySQL 5.1 without MYSQL_ENABLE_CLEARTEXT_PLUGIN

(taca)

2017-07-13 14:16:23 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2878 / diff

Added devel/py-case version 1.5.3; Updated net/py-amqp to 2.2.0

(adam)

2017-07-13 14:15:20 UTC MAIN commitmail json YAML

pkgsrc/net/py-amqp/Makefile@1.13 / diff
pkgsrc/net/py-amqp/PLIST@1.3 / diff
pkgsrc/net/py-amqp/distinfo@1.11 / diff

2.2.0:
- Fix random delays in task execution.
- Calling ``conn.collect()`` multiple times will no longer raise an ``AttributeError`` when no channels exist.
- Fix compatibility code for Python 2.7.6.
- When running in Windows, py-amqp will no longer use the unsupported TCP option TCP_MAXSEG.
- Added support for setting the SNI hostname header.
- Authentication mechanisms were refactored to be more modular. GSSAPI authentication is now supported.
- Do not reconnect on collect.

(adam)

2017-07-13 14:13:56 UTC MAIN commitmail json YAML

pkgsrc/devel/Makefile@1.2462 / diff
pkgsrc/devel/py-case/DESCR@1.1 / diff
pkgsrc/devel/py-case/Makefile@1.1 / diff
pkgsrc/devel/py-case/PLIST@1.1 / diff
pkgsrc/devel/py-case/distinfo@1.1 / diff

Python unittest utilities.

(adam)

2017-07-13 13:38:59 UTC MAIN commitmail json YAML

pkgsrc/net/transmission/distinfo@1.12 / diff
pkgsrc/net/transmission/patches/patch-qt_qtr.pro@1.5 / diff

Honor LDFLAGS for qt frontend. Fixes RELRO build.

(wiz)

2017-07-13 13:19:59 UTC MAIN commitmail json YAML

pkgsrc/net/rtmpdump/distinfo@1.7 / diff
pkgsrc/net/rtmpdump/patches/patch-Makefile@1.5 / diff
pkgsrc/net/rtmpdump/patches/patch-librtmp_Makefile@1.4 / diff

Honor LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-13 13:15:25 UTC MAIN commitmail json YAML

pkgsrc/net/liblive/distinfo@1.17 / diff
pkgsrc/net/liblive/files/config.netbsd@1.4 / diff
pkgsrc/net/liblive/patches/patch-ba@1.5 / diff
pkgsrc/net/liblive/patches/patch-config.solaris-64bit@1.3 / diff

Honor LDFLAGS, fixes RELRO build.

(wiz)

2017-07-13 13:11:15 UTC MAIN commitmail json YAML

pkgsrc/misc/kchmviewer/distinfo@1.15 / diff
pkgsrc/misc/kchmviewer/patches/patch-src_src.pro@1.2 / diff

Honor LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-13 13:02:43 UTC MAIN commitmail json YAML

pkgsrc/math/lp_solve/distinfo@1.6 / diff
pkgsrc/math/lp_solve/patches/patch-demo_ccc@1.2 / diff
pkgsrc/math/lp_solve/patches/patch-lp__solve_ccc@1.3 / diff
pkgsrc/math/lp_solve/patches/patch-lpsolve55_ccc@1.3 / diff

Honor LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-13 12:39:08 UTC MAIN commitmail json YAML

pkgsrc/lang/sun-jre7/Makefile.common@1.13 / diff

Disable RELRO check.

Not useful for pre-built binaries.

(wiz)

2017-07-13 12:37:03 UTC MAIN commitmail json YAML

pkgsrc/graphics/glut/Makefile@1.58 / diff

Honor LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-13 12:33:37 UTC MAIN commitmail json YAML

pkgsrc/games/puzzles/Makefile@1.54 / diff

Honor LDFLAGS, fixes RELRO build.

(wiz)

2017-07-13 12:29:09 UTC MAIN commitmail json YAML

pkgsrc/games/monsterz/distinfo@1.5 / diff
pkgsrc/games/monsterz/patches/patch-aa@1.3 / diff
pkgsrc/games/monsterz/patches/patch-ab@1.2 / diff

Honor LDFLAGS, fixes RELRO build.

While here, also honor CFLAGS and remove an unnecessary chunk.

(wiz)

2017-07-13 12:25:01 UTC MAIN commitmail json YAML

pkgsrc/games/einstein-puzzle/distinfo@1.3 / diff
pkgsrc/games/einstein-puzzle/patches/patch-Makefile@1.3 / diff

Honor LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-13 12:21:39 UTC MAIN commitmail json YAML

pkgsrc/devel/ffcall/distinfo@1.14 / diff
pkgsrc/devel/ffcall/patches/patch-aa@1.4 / diff
pkgsrc/devel/ffcall/patches/patch-callback_Makefile.in@1.1 / diff

Honor LDFLAGS.

(wiz)

2017-07-13 12:16:27 UTC MAIN commitmail json YAML

pkgsrc/audio/sfxr/Makefile@1.27 / diff
pkgsrc/audio/sfxr/distinfo@1.4 / diff
pkgsrc/audio/sfxr/patches/patch-Makefile@1.1 / diff

Honor LDFLAGS (and CXXFLAGS while I'm here). Fixes RELRO build.

(wiz)

2017-07-13 12:10:29 UTC MAIN commitmail json YAML

pkgsrc/x11/ocaml-lablgtk/distinfo@1.9 / diff

Updated checksums (oops!)

(jaapb)

2017-07-13 12:04:37 UTC MAIN commitmail json YAML

pkgsrc/audio/ocp/Makefile@1.21 / diff
pkgsrc/audio/ocp/distinfo@1.9 / diff
pkgsrc/audio/ocp/patches/patch-ad@1.2 / diff

Honor LDFLAGS. Fixes RELRO build.

(wiz)

2017-07-13 11:53:16 UTC MAIN commitmail json YAML

pkgsrc/x11/ocaml-lablgtk/Makefile@1.26 / diff
pkgsrc/x11/ocaml-lablgtk/distinfo@1.8 / diff
pkgsrc/x11/ocaml-lablgtk/patches/patch-configure@1.1 / diff
pkgsrc/x11/ocaml-lablgtk/patches/patch-src_Makefile@1.2 / diff

Updated package to deal with changes to ocamlfind wrapper

(jaapb)

2017-07-13 11:49:45 UTC MAIN commitmail json YAML

pkgsrc/doc/TODO@1.17523 / diff

darktable is at version 2.2.5 now.

(hauke)

2017-07-13 10:45:57 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2877 / diff

Updated devel/ocaml-biniou to 1.0.13nb1

(jaapb)

2017-07-13 10:41:33 UTC MAIN commitmail json YAML

pkgsrc/devel/ocaml-biniou/Makefile@1.2 / diff
pkgsrc/devel/ocaml-biniou/PLIST@1.2 / diff
pkgsrc/devel/ocaml-biniou/distinfo@1.2 / diff
pkgsrc/devel/ocaml-biniou/patches/patch-Makefile@1.1 / diff

Added patch so that bin/bdump gets installed. Thanks to joerg@ for
reporting this.

(jaapb)

2017-07-13 10:27:27 UTC MAIN commitmail json YAML

pkgsrc/misc/ocaml-opam/Makefile@1.14 / diff

Added bash to USE_TOOLS. Thanks to joerg@ for pointing out that it's
needed.

(jaapb)

2017-07-13 08:51:31 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2876 / diff

Updated net/py-botocore to 1.5.81, net/py-awscli to 1.11.118

(adam)

2017-07-13 08:50:25 UTC MAIN commitmail json YAML

pkgsrc/net/py-awscli/Makefile@1.4 / diff
pkgsrc/net/py-awscli/distinfo@1.4 / diff

1.11.118:
bugfix:Aliases: Properly quote alias parameters that have spaces in them.
api-change:swf: Update swf command to latest version
api-change:autoscaling: Update autoscaling command to latest version
enhancement:Cloudformation: Reduce polling delay for cloudformation deploy.

(adam)

2017-07-13 08:48:59 UTC MAIN commitmail json YAML

pkgsrc/net/py-botocore/Makefile@1.4 / diff
pkgsrc/net/py-botocore/distinfo@1.4 / diff

1.5.81:
enhancement:SSM: Added a paginator for describe_parameters.
enchancement:Organizations: Added paginators for Organizations.
enhancement:IoT: Add paginators for IoT.
api-change:swf: Update swf client to latest version
api-change:autoscaling: Update autoscaling client to latest version
enhancement:Athena: Added paginators for Athena.

(adam)

2017-07-13 07:01:01 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2875 / diff

Updated devel/git to 2.13.3, databases/py-ldap to 2.4.41

(adam)

2017-07-13 07:00:37 UTC MAIN commitmail json YAML

pkgsrc/databases/py-ldap/Makefile@1.75 / diff
pkgsrc/databases/py-ldap/distinfo@1.36 / diff

2.4.41:
Lib/
* Added support for increment: lines in LDIF changes records

(adam)

2017-07-13 06:55:19 UTC MAIN commitmail json YAML

pkgsrc/devel/git-base/distinfo@1.67 / diff
pkgsrc/devel/git/Makefile.version@1.58 / diff

Git v2.13.3:

* The "collision detecting" SHA-1 implementation shipped with 2.13.2
was still broken on some platforms. Update to the upstream code
again to take their fix.

* The 'diff-highlight' program (in contrib/) has been restructured
for easier reuse by an external project 'diff-so-fancy'.

* "git mergetool" learned to work around a wrapper MacOS X adds
around underlying meld.

* An example in documentation that does not work in multi worktree
configuration has been corrected.

* The pretty-format specifiers like '%h', '%t', etc. had an
optimization that no longer works correctly. In preparation/hope
of getting it correctly implemented, first discard the optimization
that is broken.

* The code to pick up and execute command alias definition from the
configuration used to switch to the top of the working tree and
then come back when the expanded alias was executed, which was
unnecessarilyl complex. Attempt to simplify the logic by using the
early-config mechanism that does not chdir around.

* "git add -p" were updated in 2.12 timeframe to cope with custom
core.commentchar but the implementation was buggy and a
metacharacter like $ and * did not work.

* Fix a recent regression to "git rebase -i" and add tests that would
have caught it and others.

* An unaligned 32-bit access in pack-bitmap code ahs been corrected.

* Tighten error checks for invalid "git apply" input.

* The split index code did not honor core.sharedrepository setting
correctly.

* The Makefile rule in contrib/subtree for building documentation
learned to honour USE_ASCIIDOCTOR just like the main documentation
set does.

* A few tests that tried to verify the contents of push certificates
did not use 'git rev-parse' to formulate the line to look for in
the certificate correctly.

* After "git branch --move" of the currently checked out branch, the
code to walk the reflog of HEAD via "log -g" and friends
incorrectly stopped at the reflog entry that records the renaming
of the branch.

* The rewrite of "git branch --list" using for-each-ref's internals
that happened in v2.13 regressed its handling of color.branch.local;
this has been fixed.

(adam)

2017-07-13 06:12:40 UTC MAIN commitmail json YAML

pkgsrc/devel/py-clickclick/Makefile@1.4 / diff

Added BUILD_DEPENDENCIES (setup.py requires those)

(adam)

2017-07-13 06:09:38 UTC MAIN commitmail json YAML

pkgsrc/www/py-WebTest/distinfo@1.2 / diff
pkgsrc/www/py-WebTest/patches/patch-setup.py@1.2 / diff

Fixed patch-setup.py

(adam)

2017-07-12 14:52:36 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2874 / diff

Note update of www/contao44 package to 4.4.1.

(taca)

2017-07-12 14:52:02 UTC MAIN commitmail json YAML

pkgsrc/www/contao44/Makefile@1.2 / diff
pkgsrc/www/contao44/PLIST@1.2 / diff
pkgsrc/www/contao44/distinfo@1.2 / diff

Update contao44 to 4.4.1.

### 4.4.1 (2017-07-12)

* Prevent arbitrary PHP file inclusions in the back end (see CVE-2017-10993).
* Correctly handle subpalettes in "edit multiple" mode (see #946).
* Correctly show the DCA picker in the site structure (see #906).
* Correctly update the style sheets if a format definition is
enabled/disabled (see #893).
* Always show the "show from" and "show until" fields (see #908).
* Correctly set the "overwriteMeta" field during the database update (see
contao/core-bundle#888).

(taca)

2017-07-12 14:43:26 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2873 / diff

Note update of www/contao35 package to 3.5.28.

(taca)

2017-07-12 14:42:55 UTC MAIN commitmail json YAML

pkgsrc/www/contao35/Makefile@1.31 / diff
pkgsrc/www/contao35/distinfo@1.24 / diff

Update contao35 to 3.5.28.

Version 3.5.28 (2017-07-12)
---------------------------

### Fixed
Prevent arbitrary PHP file inclusions in the back end (see CVE-2017-10993).

### Fixed
Improve the accessibility of the CAPTCHA widget (see #8709).

### Fixed
Fixed the iOS scrolling bug in the simple modal script (see #8708).

### Fixed
Correctly cache the unique keys in the SQL cache (see #8712).

(taca)

2017-07-12 14:33:40 UTC MAIN commitmail json YAML

pkgsrc/net/Radicale2/Makefile@1.4 / diff

Avoid PKG_FAIL

(prlw1)

2017-07-12 13:58:12 UTC MAIN commitmail json YAML

pkgsrc/doc/CHANGES-2017@1.2872 / diff

Updated net/netatalk22 to 2.2.6

(hauke)

2017-07-12 13:56:00 UTC MAIN commitmail json YAML

Update netatalk22 to patch release 2.2.6.

For changes see
<https://github.com/Netatalk/Netatalk/commits/branch-netatalk-2-2>
- the upstream release branch does not have a changelog.

Upstream took a lot of our patches - thanks, guys!

Package changes include untangling ldap support, so that the package
builds with it. There has been confusion between acl and ldap support
upstream as well as in the package - see
patch-include_atalk_ldapconfig.h and
<https://github.com/Netatalk/Netatalk/commits/branch-netatalk-2-2/include/atalk/ldapconfig.h>.

(hauke)