Import ruby-activesupport-4.2.8 as devel/ruby-activesupport42

Notable changes since 3.2:
- Replace deprecated memcache-client gem with dalli in
  ActiveSupport::Cache::MemCacheStore.
- Optimize ActiveSupport::Cache::Entry to reduce memory and processing
  overhead.
- Inflections can now be defined per locale. singularize and pluralize
  accept locale as an extra argument.
- Object#try will now return nil instead of raise a NoMethodError if
  the receiving object does not implement the method, but you can still
  get the old behavior by using the new Object#try!.
- String#to_date now raises ArgumentError: invalid date instead of
  NoMethodError: undefined method 'div' for nil:NilClass when given an
  invalid date. It is now the same as Date.parse, and it accepts more
  invalid dates than 3.x.

See the release notes of 4.0, 4.1, and 4.2 for the full list:
- http://edgeguides.rubyonrails.org/4_0_release_notes.html
- http://edgeguides.rubyonrails.org/4_1_release_notes.html
- http://edgeguides.rubyonrails.org/4_2_release_notes.html

(minskim)

BUILD_DEPEND on setuptools_scm for joerg.

(wiz)

Note update of the "mutt" package to version 1.8.1

(tron)

Note update of the "mutt" package to version 1.8.0nb2

(tron)

Update "mutt" package to version 1.8.1:
This is a bug fix release.  In particular, it has fixes for setenv,
sidebar_whitelist, some refresh issues, and a potential segfault.

(tron)

Prepare for the import of Ruby on Rails 4.2

(minskim)

Fix py-cyordereddict's PLIST for python27

(minskim)

Sort PLIST

(minskim)

js2-mode works perfectly fine on emacs25

(pho)

Updated chat/ejabberd to 17.04

(fhajny)

Update chat/ejabberd to 17.04.
Make the Redis support unconditional (no extra dependencies).

Changes in 17.04:

Admin
- Add more examples on config template
- Generate ejabberd lib dir when not available in code server
- Set default prefix to /usr/local
- Start supervisors after ext_mod
- Don't log warning on successful ping reply
- New muc_register_nick command

Core
- Deprecate jlib.erl in favor of misc.erl
- Add support for file-based queues
- ejabberd_sm: Fix routing of headline and groupchat messages
- Fix c2s connection close on demand
- Improve overloaded S2S queue processing

Databases
- Improve Redis related code
- Add Redis pool support
- Improve logging of Redis errors
- Add Redis and SQL as mod_proxy65 RAM backends
- Add Redis and SQL as mod_carboncopy RAM backends
- Add Redis and SQL as mod_bosh RAM backends
- Add Redis and SQL as router RAM backends
- Add SQL as mod_muc RAM backend
- Remove obsolete Pubsub mnesia migration calls

Miscellany
- ejabberd_http: Expand @VERSION@ in custom headers
- ejabberd_http: Add "custom_headers" option
- mod_client_state: Queue stanzas of each full JID
- mod_http_upload: Don't add "Server" header line
- Pubsub: Refactor pubsub's get_last_items
- Pubsub: Fix PEP issues

(fhajny)

Updated misc/erlang-p1_utils to 1.0.8

(fhajny)

Update misc/erlang-p1_utils to 1.0.8.

- Add p1_queue
- Only perform destructive operations in p1_file_queue:in/2
- Add garbage collector for file queues
- Add ram_to_file/1 and file_to_ram/1
- Improve exception names
- Implement limited queues
- Add ownership protection
- Add get_limit/1 and set_limit/2

(fhajny)

Fix bash use.

(joerg)

Python 3.x gets a different name for boost-numpy as well, so
conditionalize the entries accordingly.

(joerg)

Updated converters/erlang-iconv to 1.0.4

(fhajny)

Update converters/erlang-iconv to 1.0.4.

- Update rebar.config.script
- Use p1_utils 1.0.7

(fhajny)

Use USE_GLOBAL_DEPS that some Erlang packages seem to use to rely on system dependencies.

(fhajny)

Use a more explicit libgcrypt reference, fixes joyent/pkgsrc#483. PKGREVISION++

(fhajny)

Various patches to support SunOS.

(jperkin)

Record latest pullups.

(bsiegert)

Revbump all Go packages after the Go 1.8.1 update.

(bsiegert)

Pullup ticket #5275 - requested by taca
mail/dovecot2-pigeonhole: point update

Revisions pulled up:
- mail/dovecot2-pigeonhole/Makefile                            1.34
- mail/dovecot2-pigeonhole/distinfo                            1.25

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Thu Apr 13 02:00:44 UTC 2017

  Modified Files:
  pkgsrc/mail/dovecot2-pigeonhole: Makefile distinfo

  Log Message:
  Update dovecot2-pigeonhole to 0.4.18 for dovecot2 2.2.28.

  v0.4.18 12-04-2017 Stephan Bosch <stephan@rename-it.nl>

  + imapsieve plugin: Implemented the copy_source_after rule action. When this
    is enabled for a mailbox rule, the specified Sieve script is executed for
    the message in the source mailbox during a "COPY" event. This happens only
    after the Sieve script that is executed for the corresponding message in the
    destination mailbox finishes running successfully.
  + imapsieve plugin: Added non-standard Sieve environment items for the source
    and destination mailbox.
  - multiscript: The execution of the discard script had an implicit "keep",
    rather than an implicit "discard".

(bsiegert)

Pullup ticket #5274 - requested by taca
mail/dovecot2: security fix
mail/dovecot2-sqlite: security fix

Revisions pulled up:
- mail/dovecot2-sqlite/Makefile                                1.5
- mail/dovecot2/Makefile.common                                1.6
- mail/dovecot2/PLIST                                          1.53
- mail/dovecot2/distinfo                                        1.72

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Thu Apr 13 01:59:08 UTC 2017

  Modified Files:
  pkgsrc/mail/dovecot2: Makefile.common PLIST distinfo
  pkgsrc/mail/dovecot2-sqlite: Makefile

  Log Message:
  Update dovecot2 to 2.2.29.1.  This release contains security fixes.

  v2.2.29.1 2017-04-12  Timo Sirainen <tss@iki.fi>

  - imapc reconnection fix was forgotten from 2.2.29 release, which also
    made "make check" fail in a unit test
  - dict-sql: Merging multiple UPDATEs to a single statement wasn't
    actually working.
  - Fixed building with vpopmail

  v2.2.29 2017-04-10  Timo Sirainen <tss@iki.fi>

  * passdb/userdb dict: Don't double-expand %variables in keys. If dict
    was used as the authentication passdb, using specially crafted
    %variables in the username could be used to cause DoS (CVE-2017-2669)
  * When Dovecot encounters an internal error, it logs the real error and
    usually logs another line saying what function failed. Previously the
    second log line's error message was a rather uninformative "Internal
    error occurred. Refer to server log for more information." Now the
    real error message is duplicated in this second log line.
  * lmtp: If a delivery has multiple recipients, run autoexpunging only
    for the last recipient. This avoids a problem where a long
    autoexpunge run causes LMTP client to timeout between the DATA
    replies, resulting in duplicate mail deliveries.
  * config: Don't stop the process due to idling. Otherwise the
    configuration is reloaded when the process restarts.
  * mail_log plugin: Differentiate autoexpunges from regular expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (>9000) are no longer visible in logs
  * director: Log vhost count changes and HOST-UP/DOWNte autoexpunges from regular expunges
  * imapc: Use LOGOUT to cleanly disconnect from server.
  * lib-http: Internal status codes (>9000) are no longer visible in logs
  * director: Log vhost count changes and HOST-UP/DOWN

  + quota: Add plugin { quota_max_mail_size } setting to limit the
    maximum individual mail size that can be saved.
  + imapc: Add imapc_features=delay-login. If set, connecting to the
    remote IMAP server isn't done until it's necessary.
  + imapc: Add imapc_connection_retry_count and
    imapc_connection_retry_interval settings.
  + imap, pop3, indexer-worker: Add (deinit) to process title before
    autoexpunging runs.
  + Added %{encrypt} and %{decrypt} variables
  + imap/pop3 proxy: Log proxy state in errors as human-readable string.
  + imap/pop3-login: All forward_* extra fields returned by passdb are
    sent to the next hop when proxying using ID/XCLIENT commands. On the
    receiving side these fields are imported and sent to auth process
    where they're accessible via %{passdb:forward_*}. This is done only
    if the sending IP address matches login_trusted_networks.
  + imap-login: If imap_id_retain=yes, send the IMAP ID string to
    auth process. %{client_id} expands to it in auth process. The ID
    string is also sent to the next hop when proxying.
  + passdb imap: Use ssl_client_ca_* settings for CA validation.
  - fts-tika: Fixed crash when parsing attachment without
    Content-Disposition header. Broken by 2.2.28.
  - trash plugin was broken in 2.2.28
  - auth: When passdb/userdb lookups were done via auth-workers, too much
    data was added to auth cache. This could have resulted in wrong
    replies when using multiple passdbs/userdbs.
  - auth: passdb { skip & mechanisms } were ignored for the first passdb
  - oauth2: Various fixes, including fixes to crashes
  - dsync: Large Sieve scripts (or other large metadata) weren't always
    synced.
  - Index rebuild (e.g. doveadm force-resync) set all mails as \Recent
  - imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
  - doveadm: Exit codes weren't preserved when proxying commands via
    doveadm-server. Almost all errors used exit code 75 (tempfail).
  - ACLs weren't applied to not-yet-existing autocreated mailboxes.
  - Fixed a potential crash when parsing a broken message header.
  - cassandra: Fallback consistency settings weren't working correctly.
  - doveadm director status <user>: "Initial config" was always empty
  - imapc: Various reconnection fixes.

(bsiegert)

mksh-55

(bsiegert)

Update mksh to R55.

R55 is mostly a feature release with summary bugfixes:

  * [komh] Fix OS/2 search_access() and UNC path logic
  * [tg] Undocument printf(1) to avoid user confusion
  * [Jean Delvare, tg] Fix printf builtin -R option
  * [tg] Make ${var@x}, unknown x, fail (thanks izabera)
  * [tg] ${var=x} must evaluate x in scalar context (10x Martijn Dekker)
  * [tg] Fixup relation between lksh and mksh, reduce delta
  * [tg] Improve manpage display; add OS/2 $PATH FAQ
  * [Jean Delvare] Fix bugs in manpage
  * [tg] Review tilde expansion, removing ?odd use of KEEPASN? and introduce
    POSIX ?declaration utility? concept; wait isn?t one
  * [tg] Add \builtin utility, declaration utility forwarder
  * [tg] Make $'\xz' expand to xz, not \0
  * [tg] Use fixed string pooling (requires the above change in host mksh)
  * [tg] POSIX declaration commands can have varassign and redirections
  * [Martijn Dekker] Add typeset -g, replacing homegrown ?global?
  * [Harvey-OS] Disable NOPROSPECTOFWORK, APEX is reportedly fixed now
  * [tg] Display ulimit -a output with flags; improve Haiku
  * [tg] Drop old let] hack, use \builtin internally
  * [tg] Fix padding in Lb64encode in dot.mkshrc
  * [tg] Move FAQ content to a separate, new FAQ section in the manpage
  * [tg] Add new standard variable PATHSEP (?:?, ?;? on OS/2)
  * [Martijn Dekker] Fix LINENO in eval and alias
  * [komh] Fix ?\builtin? on OS/2
  * [tg] Improve (internal) character classes code for speed
  * [tg] Fix: the underscore is no drive letter
  * [tg] No longer hard-disable persistent history support in lksh
  * [tg] Introduce build flag -T for enabling ?textmode? on OS/2 (supporting
    CR+LF line endings, but incompatible with mksh proper)
  * [tg] Merge mksh-os2
  * [tg] Permit changing $OS2_SHELL during a running shell
  * [tg] Fix multibyte handling in ^R (Emacs search-history)
  * [tg] Allow ?typeset -p arrname[2]? to work
  * [tg] Make some error messages more consistent
  * [tg, komh] Disable UTF-8 detection code for OS/2 as unrealistic
  * [tg, sdaoden] Limit alias name chars to POSIX plus non-leading ?-?
  * [tg, Martijn Dekker] Expand aliases at COMSUB parse time
  * [tg] Make ?typeset -f? output alias-resistent
  * [tg, Martijn Dekker] Permit ?eval break? and ?eval continue?
  * [tg] Make -masm=intel safe on i386
  * [tg] Disambiguate $((?)) vs. $((?)?) in ?typeset -f? output
  * [Jean Delvare] Clarify the effect of exit and return in a subshell
  * [tg] Simplify compile-time asserts and make them actually compile-time
  * [tg] Fix ^O in Emacs mode if the line was modified (LP#1675842)
  * [tg] Address Coverity Scan? stuff? now that it builds again
  * [Martijn Dekker, tg] Add test -v
  * [tg] Document set -o posix/sh completely

R54 is a bugfix release with moderate new features:

  * [tg] Simplify and improve code and manual page
  * [tg] Try GCC 5?s new -malign-data=abi
  * [tg] Allow interrupting builtin cat even on fast devices (LP#1616692)
  * [tg] Update to Unicode 9.0.0
  * [Andreas Buschka] Correct English spelling
  * [tg] Handle set -e-related error propagation in || and && constructs
    correctly
  * [tg] Initialise memory for RNG even when not targeting Valgrind
  * [tg] Shrink binary size
  * [Brian Callahan] Improve support for the contemporary pcc compiler
  * [tg] Fix side effects with lazy evaluation; spotted by ormaaj
  * [tg] New flags -c (columnise), -l, -N for the print builtin
  * [Larry Hynes] Fix English, spelling mistakes, typos in the manpage
  * [tg, ormaah] Return 128+SIGALRM if read -t times out, like GNU bash
  * [Martijn Dekker] Install both manpages from Build.sh
  * [Martijn Dekker] Document case changes are ASCII-only
  * [Ronald G. Minnich, Elbing Miss, ?lvaro Jurado, tg] Begin porting to
    Harvey-OS and APEX (similar to Plan 9 and APE)
  * [KO Myung-Hun] More infrastructure for the OS/2 (EMX, KLIBC) port

R53a is a snapshot/feature release:

  * [lintian] Fix spelling
  * [tg] Unbreak multi-line command history broken by history flush
  * [tg] Fix redefining POSIX functions that were Korn functions before
  * [tg, TNF] Fix bounds checks in Vi editing mode
  * [tg] Handle combining characters at end of string or output correctly
  * [tg] Fix ${!#} ${!?} ${!-} (POSIX, prompted by izabera)
  * [tg] Fix shf.c-internal buffer overread on printing digits
  * [J?rg] Fix a typo in the testsuite
  * [arekm] Increase default edit line size (unless MKSH_SMALL)
  * [tg] Improve description of Emacs mode keybindings, especially ^U
  * [tg, arekm, jilles] Abort read builtin in case of read(2) errors
  * [tg, izabera, carstenh] Fix most of the ambiguous corner cases related to $
    {[pfx]var[op[word]]} (${@:-1} still unsupported)
  * [carstenh] Contribute some more testsuite coverage
  * [tg] WDS_TPUTS now emits QCHAR newline reentrant-safe
  * [tg] Fix var=<< implementation (LP#1380389)
  * [tg, FreeBSD] Make XSI test(1) extensions behave as if they were POSIX
  * [tg, izabera] Add $(<<<x) and $(<<EOF?) implementation
  * [tg] Lower minimum screen size accepted as ?sane? from the OS to 4?2
  * [tg, Torsten Sillke] Simplify tilde-expanded parameters
  * [tg, Torsten Sillke] Fix default PS1 for substring matches
  * [tg] Apply defer-builtin-with-arguments logic to realpath builtin
  * [tg] Rework string pooling (own vs. compiler?s) (LP#1580348)
  * [tg] Feature: print -A, prints arguments as characters
  * [tg, izabera] Replace <<< and >>> as ROL and ROR operators with their new ^
    < and ^> spelling as per this proposal
  * [tg, slagtc] Clear-to-EOL under tmux to work around its anti-feature
  * [tg, p120ph37] Remove support for using file descriptors with more than a
    single digit, in preparation for named file descriptors
  * [tg] Correct, but simplify (at the potential cost of more tty I/O than
    strictly necessary, though never redundant and (probably) not more than
    before when it was miscalculated), line clearing and redrawing
  * [slagtc, tg] Implement new evaluate-region editing command Esc+Ctrl-E
  * [tg] Prefer external rename utility over the recovery builtin
  * [tg] Remove redundant full-line redraws
  * [tg, Natureshadow] Fix errorlevel of ?.? (?dot? special builtin) when the
    sourced script does not run any commands, for POSIX compliance
  * [tg] Refactor op tokens and edchars to shave off some more bytes
  * [tg] Fix some bugs in the manpage and some occasional/minor code bugs
  * [tg, Brian Callahan] Mark tests requiring new perl as !need-pass
  * [tg, slagtc] Add $KSH_MATCH and, to make it usable, ${foo@/bar/baz}
  * [tg, Score_Under] Fix bogus patch from OpenBSD: only NULL the global source
    in unwind when actually reclaiming its Area
  * [izabera] Mention in the manpage that integer bases go up to 36
  * [Natureshadow] Fix /= operator broken during refactoring

R52c is a bugfix-only release:

  * [tg] Shave 200 bytes off .text by revisiting string pooling
  * [tg, J?rg] Fix manpage for ditroff on Schillix
  * [tg, wbx] Use sed 1q instead of unportable head(1)
  * [tg] Implement underrun debugging tool for area-based memory allocator
  * [tg] Fix history underrun when first interactive command is entered
  * [tg, bef0rd] Do not misinterpret ?${0/}? as ?${0//?, fixes segfault
  * [tg, St?phane Chazelas] Fix display problems with special parameters
  * [tg, St?phane Chazelas] Catch attempt to trim $* and $@ with ?, fixes
    segfault (Todd Miller did this in 2004 for ${x[*]} already, so just sync)
  * [Martijn Dekker] Fix ?command -p? with -Vv to behave as POSIX requires
  * [tg, jilles, Oleg Bulatov] Fix recusive parser with active heredocs
  * [tg] Flush even syntax-failing or interrupted commands to history
  * [tg, fmunozs] Fix invalid memory access for ?'\0'? in arithmetics
  * [tg] Explicitly reserve SIGEXIT and SIGERR for ksh
  * [tg, izabera] Catch missing here documents at EOF even under ?set -n?
  * [kre, tg] Document Austin#1015 handling (not considered a violation)
  * [tg, fmunozs] Fix buffer overread for empty nameref targets
  * [tg] Fix warnings pointed out by latest Debian gcc-snapshot
  * [tg, Martijn Dekker] Document upcoming set +o changes
  * [Martijn Dekker] Expand testsuite for command/whence

R52b is a strongly recommended bugfix-only release:

  * [tg] Recognise ksh93 compiled scripts and LZIP compressed files as binary
    (i.e. to not run as mksh plaintext script)
  * [tg] Document that we will implement locale tracking later
  * [tg] Add EEXIST to failback strerror(3)
  * [jilles] Make set -C; :>foo race-free
  * [tg] Don?t use unset in portable build script
  * [tg] Plug warning on GNU/kFreeBSD, GNU/Hurd
  * [tg] Document read -a resets the integer base
  * [J?rg] Fix manpage: time is not a builtin but a reserved word
  * [J?rg, tg] Make exit (and return) eat -1
  * [tg] parse ?$( (( ? ) ? ) ? )? correctly (LP#1532621), Jan Palus
  * [tg] reduce memory footprint by free(3)ing more aggressively
  * [tg] fix buffer overrun (LP#1533394), bugreport by izabera
  * [tg] correctly handle nested ADELIM parsing (LP#1453827), Teckids
  * [tg] permit ?read -A/-a arr[idx]? as long as only one element is read; fix
    corruption of array indic?s with this construct (LP#1533396), izabera
  * [tg] Sanitise OS-provided signal number in even more places
  * [tg] As requested by J?rg, be clear manpage advice is for mksh
  * [tg] Revert (as it was a regression) POSIX bugfix from R52/2005 related to
    accent gravis-style command substitution until POSIX decides either way
  * [tg] Handle export et al. after command (Austin#351)
  * [tg] Catch EPIPE in built-in cat and return as SIGPIPE (LP#1532621)
  * [tg] Fix errno in print/echo builtin; optimise that and unbksl
  * [tg] Update documentation, point out POSIX violation (Austin#1015)

R52 is a strongly recommended bugfix release:

  * [_0bitcount] Move moving external link from mksh(1) to the #ksh channel
    homepage linked therein
  * [tg] Make setenv ?set -u?-safe and fix when invoked with no args
  * [tg] Make ?typeset -f? output reentrant if name is a reserved word
  * [oksh] Zero-pad seconds in ?time? output to align columns
  * [tg] Check signals and errorlevels from OS to be within bounds
  * [komh, tg] Quote and document ?;? as PATH separator in some places
  * [oksh, tg] Simplify code to call afree() even if arg is NULL
  * [tg] Fix tree-printing and reentrancy of multiple here documents
  * [tg] Work around LP#1030581 by permitting exactly one space after
  * [tg, oksh] Code quality work, cleanups
  * [tg] New code for here documents/strings with several bugfixes
  * [tg] Stop using issetugid(2) for ?p checks, wrong tool for the job
  * [tg] Reintroduce some -o posix changes lost in 2005, plus fixes
  * [tg] Make ?source? into a built-in command
  * [tg] Drop ?stop? alias, lksh(1) functionality to auto-unalias
  * [tg] Fix \u0000 ignored in $'?' and print
  * [tg] Improve portability of Build.sh
  * [Jilles Tjoelker] Improve portability of testsuite
  * [tg] Fix tilde expansion for some substitutions (izabera, Chet, Geoff)
  * [tg] Improve reparsing of ((?) |?) as ( (?) |?)
  * [Martijn Dekker] Fix test(1) not returning evaluation errors
  * [tg] Fix ${*:+x} constructs (carstenh)
  * [tg] Make (( ? )) into a compound command (ormaaj)
  * [tg] Repair a few parameter substitution expansion mistakes

(bsiegert)

#define CUPS API compatibility options so we can build against newer
CUPS versions, and switch dependency away from cups15.

Update conflicts list.

(hauke)

Update to FriCAS 1.3.1
Detailed changes are not known and not clear (besides regular cleanup).

(asau)

Note updated of lang/php70 package to 7.0.18.

(taca)

Update php70 to 7.0.18.

13 Apr 2017 PHP 7.0.18

- Core:
  . Fixed bug #73370 (falsely exits with "Out of Memory" when using
    USE_ZEND_ALLOC=0). (Nikita)
  . Fixed bug #73960 (Leak with instance method calling static method with
    referenced return). (Nikita)
  . Fixed bug #74265 (Build problems after 7.0.17 release: undefined reference
    to `isfinite'). (Nikita)
  . Fixed bug #74302 (yield fromLABEL is over-greedy). (Sara)

- Apache:
  . Reverted patch for bug #61471, fixes bug #74318. (Anatol)

- Date:
  . Fixed bug #72096 (Swatch time value incorrect for dates before 1970). (mcq8)

- DOM:
  . Fixed bug #74004 (LIBXML_NOWARNING flag ingnored on loadHTML*).
    (somedaysummer)

- iconv:
  . Fixed bug #74230 (iconv fails to fail on surrogates). (Anatol)

- OpenSSL:
  . Fixed bug #72333 (fwrite() on non-blocking SSL sockets doesn't work).
    (Jakub Zelenka)

- PDO MySQL:
  . Fixed bug #71003 (Expose MYSQLI_CLIENT_SSL_DONT_VERIFY_SERVER_CERT to PDO
    interface). (Thomas Orozco)

- Streams:
  . Fixed bug #74216 (Correctly fail on invalid IP address ports). (Sara)

- Zlib:
  . Fixed bug #74240 (deflate_add can allocate too much memory). (Matt Bonneau)

(taca)

Updated devel/p5-BSD-Resource to 1.29.11
Updated devel/p5-CPAN-Perl-Releases to 3.12
Updated devel/p5-CPANPLUS to 0.9166
Updated devel/p5-Class-InsideOut to 1.14

(mef)

Updated devel/p5-Class-InsideOut to 1.14
----------------------------------------
1.14      2017-04-02 13:52:18-04:00 America/New_York
    Fixed:
    - Passes tests when '.' is not in @INC.

(mef)

Updated devel/p5-CPANPLUS to 0.9166
-----------------------------------
0.9166      Wed Apr 12 09:37:20 BST 2017
  * make Autoflush do STDOUT and STDERR
  * switch from PERLWRAPPER to Autoflush

(mef)

Updated devel/p5-CPAN-Perl-Releases to 3.12
-------------------------------------------
version 3.12 at 2017-03-20 21:04:41 +0000
-----------------------------------------
    Updated for v5.25.11

(mef)

Updated devel/p5-BSD-Resource to 1.29.11
----------------------------------------
2017-04-07  Jarkko Hietaniemi  <jhi@iki.fi>
        * Prepend "./" to require-d pathnames in tests,
          in preparation of Perl 5.26.0. [cpan #120993]
        * Add RLIMIT_POSIXLOCKS from DragonFly BSD.
        * Release 1.2911.

(mef)

Updated databases/mysql51-client to 5.1.73

(mef)

Updated databases/mysql51-{client,server} to 5.1.73
------------------------------------------------------------
The ChangeLog since 5.1.72 is too huge, so the beginning some
lines are listed here:
  ------------------------------------------------------------
  timestamp: Fri 2013-11-01 16:39:19 +0100
  message:
    Bug#17617945 BUFFER OVERFLOW IN GET_MERGE_MANY_BUFFS_COST WITH SMALL SORT_BUFFER_SIZE

    get_cost_calc_buff_size() could return wrong value for the size of imerge_cost_buff.
  ------------------------------------------------------------
  timestamp: Thu 2013-10-31 22:53:56 +0000
  message:
    BUG#17662398: REMOVE DUPLICATE TEST CASES

    Remove duplicate test cases.
  ------------------------------------------------------------
  timestamp: Thu 2013-10-31 23:02:44 +0530
  message:
    Bug #12917164 DROP USER CAN'T DROP USERS WITH LEGACY
        UPPER CASE HOST NAME ANYMORE

    Description:
    It is not possible to drop users with host names with upper case
    letters in them. i.e DROP USER 'root'@'Tmp_Host_Name'; is failing
    with error.

    Analysis: Since the fix 11748570 we came up with lower case hostnames
    as standard. But in the current bug the hostname is created by
    mysql_install_db script is still having upper case hostnames.
    So, if we have the hostname with upper case letters like(Tmp_Host_Name)
    then we will have as it is stored in the mysql.user table.
    In this case if use "'DROP USER 'root'@'Tmp_Host_Name';" it gives
    error because we do compare with the lower case of hostname since the
    11748570 fix.

    Fix: We need to convert the hostname to lower case before storing into
    the mysql.user table when we run the mysql_install_db script.
------------------------------------------------------------

(mef)

Change http://bits.xensource.com/oss-xen/release/ to
https://downloads.xenproject.org/release/xen/, as new releases won't
be uploaded to bits.xensource.com

(bouyer)

Handle MACHINE_GNU_PLATFORM when generating PLIST.

(asau)

Record latest branch updates.

(bsiegert)

Pullup ticket #5273 - requested by taca
net/bind99: security fix

Revisions pulled up:
- net/bind99/Makefile                                          1.66
- net/bind99/distinfo                                          1.44

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Thu Apr 13 01:53:35 UTC 2017

  Modified Files:
  pkgsrc/net/bind99: Makefile distinfo

  Log Message:
  Update bind99 to 9.9.9pl8 (BIND 9.9.9-P8).

  Quote from release announce:

      BIND 9.9.9-P8 addresses the security issues described in CVE-2017-3136,
      CVE-2017-3137, and CVE-2017-3138, and updates the built-in trusted keys
      for the root zone.

  Quote from CHANGELOG:

  --- 9.9.9-P8 released ---

  4582. [security] 'rndc ""' could trigger a assertion failure in named.
  (CVE-2017-3138) [RT #44924]

  4580. [bug] 4578 introduced a regression when handling CNAME to
  referral below the current domain. [RT #44850]

  --- 9.9.9-P7 released ---

  4578. [security] Some chaining (CNAME or DNAME) responses to upstream
  queries could trigger assertion failures.
  (CVE-2017-3137) [RT #44734]

  4575. [security] DNS64 with "break-dnssec yes;" can result in an
  assertion failure. (CVE-2017-3136) [RT #44653]

  4564. [maint] Update the built in managed keys to include the
  upcoming root KSK. [RT #44579]

(bsiegert)

Updated lang/sbcl to 1.3.16

(asau)

Update to SBCL 1.3.16

changes in sbcl-1.3.16 relative to sbcl-1.3.15:
  * optimization: various small tweaks give around 5% faster garbage
    collection
  * bug fix: better detection of when an impossible code path does
    not need a warning.  (lp#1668619)
  * bug fix: stronger attempts to disable position-independent
    executable building.  (lp#1668986, patch from Mark Wright)
  * bug fix: OPEN :IF-EXISTS NIL signalled a condition on Windows.
    (lp#1674437, reported by Jan Idzikowski)

changes in sbcl-1.3.15 relative to sbcl-1.3.14:
  * minor incompatible change: the reader will when feasible create
    new symbols using a BASE-STRING for the print name.  Additionally,
    string literals can favor the base-string type if desired, though
    the default is to always return UTF-32 strings for compatibility.
    A preference for base-string does not disable reading Unicode.
    The choice is controlled via (SETF READTABLE-BASE-CHAR-PREFERENCE).
    If Unicode was disabled at build time, this setting does nothing.
  * enhancement: SBCL generates more debug information by default.
  * enhancement: type errors provide context information, such as which
    variable is being bound, which slot of which structure is being set.
  * enhancement: if #+immobile-symbols is in build-time *FEATURES* (not
    enabled by default), then symbols will never be moved in memory
    except by SAVE-LISP-AND-DIE. Immobility has helpful implications for
    code generation as well as interaction with foreign routines.
    This feature can only be enabled if #+immobile-space is enabled.
  * enhancement: undefined function errors can be restarted on x86-64, to
    either retry calling the function again or call a user supplied function.
  * enhancement: sb-ext:restrict-compiler-policy accepts an upper bound in
    addition to a lower bound.
  * enhancement: #+immobile-code improves the speed of function calling.
    Some delay may be noticed when redefining an existing function
    from a saved core file however.
  * defaults change: sb-ext:*disassemble-annotate* default to NIL, due to its
    poor reliability.
  * new feature: SB-LINKABLE-RUNTIME, allowing linking with extra object
    files to help with delivery of executables.  (Thanks to Francois-Rene
    Rideau)
  * bug fix: data race in GENTEMP fixed - it can no longer return the
    same interned symbol to multiple threads if called concurrently
  * bug fix: interrupting LOADing of FASLs does not leave functions without
    source locations. (lp#540276)
  * bug fix: DYNAMIC-EXTENT-declared results of NOTINLINE local functions were
    treated as if they were actually stack allocated (lp#1659964)
  * bug fix: correctly handle the case of a non-local exit within a function
    terminating the extent of dynamic-extent, dynamic-bound variables in the
    presence of multiple-values (lp#1655011)
  * bug fix: handling of SB-SYS:WITH-PINNED-OBJECTS in the interpreters (both
    sb-eval and sb-fasteval) now actually pins objects on gencgc.
  * bug fix: AVX registers are preserved during exceptions on x86-64 macOS.
  * bug fix: (directory "SOMETHING/*/**/MORE") is no longer equivalent to
    (directory "SOMETHING/**/MORE")
  * bug fix: better console IO on Windows (lp#1660906)

changes in sbcl-1.3.14 relative to sbcl-1.3.13:
  * minor incompatible change: the SB-PCL walker no longer recognizes
    macros expanding into a DECLARE expression. This is not a language change,
    since ANSI forbids such usage (X3J13 issue DECLARE-MACROS:FLUSH).
  * enhancement: for several macros such as MULTIPLE-VALUE-{BIND,SETQ}, COND,
    DO{,*,LIST}, {RESTART,HANDLER}-{BIND,CASE}, *CASE, conditions signaled
    during macroexpansion point to the form that caused the problem more
    accurately.
  * enhancement: the "--noinform" command-line option inhibits output from
    save-lisp-and-die in addition to removing the startup banner.
  * bug fix: PROCESS-KILL failed to return errno if the system call failed
  * optimization: slightly more comprehensive treatment of the keyword
    arguments to MAKE-ARRAY in compiler transformations.

changes in sbcl-1.3.13 relative to sbcl-1.3.12:
  * enhancement: SET triggers package locks on undefined variables.
    (lp#1645152)
  * enhancement: new Windows specific option to run-program, :escape-arguments
    (lp#1503496)
  * enhancement: recompiling a MAKE-INSTANCE form with an initarg :INITARG
    CONSTANT where CONSTANT names a constant variable picks up the new value
    of CONSTANT in case it has been redefined. (lp#1644944)
  * optimization: faster TYPEP on undefined at compile-time types and upcoming
    class definitions. (lp#1082967)
  * optimization: memory consumption of each STANDARD-OBJECT instance is
    reduced by 2 words if the compact-instance-header feature is enabled.
  * optimization: CONDITION instances are quicker to allocate.
  * optimization: unoptimized calls to FILL on specialized vectors are now
    just as fast as T vectors.
  * bug fix: get-timezone returns corret DST on 64-bit Windows. (lp#1641058)
  * bug fix: cross reference information in fasls is no longer incompatible
    between different cores (lp#1648186)

(asau)

Pullup ticket #5272 - requested by taca
net/bind910: security fix

Revisions pulled up:
- net/bind910/Makefile                                          1.32
- net/bind910/distinfo                                          1.23

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Thu Apr 13 01:52:42 UTC 2017

  Modified Files:
  pkgsrc/net/bind910: Makefile distinfo

  Log Message:
  Update bind910 to 9.10.4pl8 (BIND 9.10.4-P8).

  Quote from release announce:

      BIND 9.10.4-P8 addresses the security issues described in
      CVE-2017-3136, CVE-2017-3137, and CVE-2017-3138, and updates the
      built-in trusted keys for the root zone.

  From CHANGELOG:

  --- 9.10.4-P8 released ---

  4582. [security] 'rndc ""' could trigger a assertion failure in named.
  (CVE-2017-3138) [RT #44924]

  4580. [bug] 4578 introduced a regression when handling CNAME to
  referral below the current domain. [RT #44850]

  --- 9.10.4-P7 released ---

  4578. [security] Some chaining (CNAME or DNAME) responses to upstream
  queries could trigger assertion failures.
  (CVE-2017-3137) [RT #44734]

  4575. [security] DNS64 with "break-dnssec yes;" can result in an
  assertion failure. (CVE-2017-3136) [RT #44653]

  4564. [maint] Update the built in managed keys to include the
  upcoming root KSK. [RT #44579]

(bsiegert)

Updated comms/deforaos-phone to 0.5.1

(khorben)

Update DeforaOS Phone to version 0.5.1

This release brings:
- parameter database for mobile data access
- additional USSD codes for T-Mobile (Germany)
- build fixes

(khorben)

Pullup ticket #5270 - requested by maya
audio/libsamplerate: security fix

Revisions pulled up:
- audio/libsamplerate/Makefile                                  1.26
- audio/libsamplerate/distinfo                                  1.11

---
  Module Name:    pkgsrc
  Committed By:  maya
  Date:          Wed Apr 12 18:47:39 UTC 2017

  Modified Files:
          pkgsrc/audio/libsamplerate: Makefile distinfo

  Log Message:
  libsamplerate: update to 0.1.9

  Version 0.1.9 (2016-09-23)
    * Relicense under 2 clause BSD license.
    * Minor bug fixes and upates.

  Also fixes CVE-2017-7697: global buffer overflow in calc_output_single

(bsiegert)

Listen on localhost by default.  Patch from plluksie in joyent/pkgsrc#482.

(jperkin)

Pullup ticket #5269 - requested by sevan
multimedia/adobe-flash-player: security fix

Revisions pulled up:
- multimedia/adobe-flash-player/Makefile                        1.3
- multimedia/adobe-flash-player/distinfo                        1.3

---
  Module Name:    pkgsrc
  Committed By:  tsutsui
  Date:          Wed Apr 12 15:31:13 UTC 2017

  Modified Files:
          pkgsrc/multimedia/adobe-flash-player: Makefile distinfo

  Log Message:
  Update adobe-flash-player to 25.0.0.148.

  Upstream announcements:

    https://helpx.adobe.com/security/products/flash-player/apsb17-10.html

  Adobe Security Bulletin

  Security updates available for Adobe Flash Player

  Release date: April 11, 2017

  Vulnerability identifier: APSB17-10

  CVE number: CVE-2017-3058, CVE-2017-3059, CVE-2017-3060, CVE-2017-3061,
    CVE-2017-3062, CVE-2017-3063, CVE-2017-3064

  Platform: Windows, Macintosh, Linux and Chrome OS

(bsiegert)

Pullup ticket #5243 (second part) - requested by sevan
(various packages): build fix

Revisions pulled up:
- benchmarks/phoronix-test-suite/Makefile                      1.8
- finance/magento/Makefile                                      1.9
- mail/roundcube/Makefile                                      1.87
- meta-pkgs/php56-extensions/Makefile                          1.7
- meta-pkgs/php70-extensions/Makefile                          1.2
- meta-pkgs/php71-extensions/Makefile                          1.2
- mk/defaults/options.description                              1.526
- net/php-baikal/Makefile                                      1.10
- textproc/php-xsl/MESSAGE                                      deleted
- textproc/php-xsl/Makefile                                    1.10
- www/contao35/Makefile                                        1.28
- www/contao43/Makefile                                        1.10
- www/drupal7/Makefile                                          1.44
- www/drupal7/options.mk                                        1.4
- www/fengoffice/Makefile                                      1.38
- www/horde/Makefile                                            1.81
- www/mediawiki/Makefile                                        1.63
- www/moodle/Makefile                                          1.55
- www/php-concrete5/MESSAGE                                    1.8
- www/php-concrete5/Makefile                                    1.16
- www/php-nextcloud/MESSAGE                                    1.2
- www/php-nextcloud/Makefile                                    1.4
- www/php-owncloud/MESSAGE                                      1.20
- www/php-owncloud/Makefile                                    1.63
- www/php-tt-rss/MESSAGE                                        1.6
- www/php-tt-rss/Makefile                                      1.11
- www/phraseanet/MESSAGE                                        1.4
- www/phraseanet/Makefile                                      1.20

---
  Module Name:    pkgsrc
  Committed By:  fhajny
  Date:          Wed Apr  5 12:33:49 UTC 2017

  Modified Files:
          pkgsrc/benchmarks/phoronix-test-suite: Makefile
          pkgsrc/finance/magento: Makefile
          pkgsrc/mail/roundcube: Makefile
          pkgsrc/meta-pkgs/php56-extensions: Makefile
          pkgsrc/meta-pkgs/php70-extensions: Makefile
          pkgsrc/meta-pkgs/php71-extensions: Makefile
          pkgsrc/mk/defaults: options.description
          pkgsrc/net/php-baikal: Makefile
          pkgsrc/textproc/php-xsl: Makefile
          pkgsrc/www/contao35: Makefile
          pkgsrc/www/contao43: Makefile
          pkgsrc/www/drupal7: Makefile options.mk
          pkgsrc/www/fengoffice: Makefile
          pkgsrc/www/horde: Makefile
          pkgsrc/www/mediawiki: Makefile
          pkgsrc/www/moodle: Makefile
          pkgsrc/www/php-concrete5: MESSAGE Makefile
          pkgsrc/www/php-nextcloud: MESSAGE Makefile
          pkgsrc/www/php-owncloud: MESSAGE Makefile
          pkgsrc/www/php-tt-rss: MESSAGE Makefile
          pkgsrc/www/phraseanet: MESSAGE Makefile
  Removed Files:
          pkgsrc/textproc/php-xsl: MESSAGE

  Log Message:
  Remove traces of textproc/php-dom which is not needed anymore, now that
  dom is built into PHP. Bump resp. PKGREVISION.

(bsiegert)

Updated audio/deforaos-mixer to 0.2.2

(khorben)

Update DeforaOS Mixer to version 0.2.2

This release brings:
- license switch to BSD
- build fix for embedded mode
- minor improvements

(khorben)

Add a bunch more compatibility defines.  Fixes SunOS.

(jperkin)

Don't assume _BIG_ENDIAN and _LITTLE_ENDIAN have values.  Fixes SunOS.

(jperkin)

sort

(jnemeth)

Fix PLIST for the nls option: he_IL.UTF-8 was missing

(pho)

Updated devel/nss to 3.30.1

(ryoon)

Update to 3.30.1

Changelog:
Not available.

(ryoon)

Note update of dovecot2 and related pacakges:

mail/dovecot2 2.2.29.1
mail/dovecot2-gssapi 2.2.29.1
mail/dovecot2-ldap 2.2.29.1
mail/dovecot2-mysql 2.2.29.1
mail/dovecot2-pgsql 2.2.29.1
mail/dovecot2-sqlite 2.2.29.1
mail/dovecot2-pigeonhole 0.4.18

(taca)

Update dovecot2-pigeonhole to 0.4.18 for dovecot2 2.2.28.

v0.4.18 12-04-2017 Stephan Bosch <stephan@rename-it.nl>

+ imapsieve plugin: Implemented the copy_source_after rule action. When this
  is enabled for a mailbox rule, the specified Sieve script is executed for
  the message in the source mailbox during a "COPY" event. This happens only
  after the Sieve script that is executed for the corresponding message in the
  destination mailbox finishes running successfully.
+ imapsieve plugin: Added non-standard Sieve environment items for the source
  and destination mailbox.
- multiscript: The execution of the discard script had an implicit "keep",
  rather than an implicit "discard".

(taca)

Update dovecot2 to 2.2.29.1.  This release contains security fixes.

v2.2.29.1 2017-04-12  Timo Sirainen <tss@iki.fi>

- imapc reconnection fix was forgotten from 2.2.29 release, which also
  made "make check" fail in a unit test
- dict-sql: Merging multiple UPDATEs to a single statement wasn't
  actually working.
- Fixed building with vpopmail

v2.2.29 2017-04-10  Timo Sirainen <tss@iki.fi>

* passdb/userdb dict: Don't double-expand %variables in keys. If dict
  was used as the authentication passdb, using specially crafted
  %variables in the username could be used to cause DoS (CVE-2017-2669)
* When Dovecot encounters an internal error, it logs the real error and
  usually logs another line saying what function failed. Previously the
  second log line's error message was a rather uninformative "Internal
  error occurred. Refer to server log for more information." Now the
  real error message is duplicated in this second log line.
* lmtp: If a delivery has multiple recipients, run autoexpunging only
  for the last recipient. This avoids a problem where a long
  autoexpunge run causes LMTP client to timeout between the DATA
  replies, resulting in duplicate mail deliveries.
* config: Don't stop the process due to idling. Otherwise the
  configuration is reloaded when the process restarts.
* mail_log plugin: Differentiate autoexpunges from regular expunges
* imapc: Use LOGOUT to cleanly disconnect from server.
* lib-http: Internal status codes (>9000) are no longer visible in logs
* director: Log vhost count changes and HOST-UP/DOWN

+ quota: Add plugin { quota_max_mail_size } setting to limit the
  maximum individual mail size that can be saved.
+ imapc: Add imapc_features=delay-login. If set, connecting to the
  remote IMAP server isn't done until it's necessary.
+ imapc: Add imapc_connection_retry_count and
  imapc_connection_retry_interval settings.
+ imap, pop3, indexer-worker: Add (deinit) to process title before
  autoexpunging runs.
+ Added %{encrypt} and %{decrypt} variables
+ imap/pop3 proxy: Log proxy state in errors as human-readable string.
+ imap/pop3-login: All forward_* extra fields returned by passdb are
  sent to the next hop when proxying using ID/XCLIENT commands. On the
  receiving side these fields are imported and sent to auth process
  where they're accessible via %{passdb:forward_*}. This is done only
  if the sending IP address matches login_trusted_networks.
+ imap-login: If imap_id_retain=yes, send the IMAP ID string to
  auth process. %{client_id} expands to it in auth process. The ID
  string is also sent to the next hop when proxying.
+ passdb imap: Use ssl_client_ca_* settings for CA validation.
- fts-tika: Fixed crash when parsing attachment without
  Content-Disposition header. Broken by 2.2.28.
- trash plugin was broken in 2.2.28
- auth: When passdb/userdb lookups were done via auth-workers, too much
  data was added to auth cache. This could have resulted in wrong
  replies when using multiple passdbs/userdbs.
- auth: passdb { skip & mechanisms } were ignored for the first passdb
- oauth2: Various fixes, including fixes to crashes
- dsync: Large Sieve scripts (or other large metadata) weren't always
  synced.
- Index rebuild (e.g. doveadm force-resync) set all mails as \Recent
- imap-hibernate: %{userdb:*} wasn't expanded in mail_log_prefix
- doveadm: Exit codes weren't preserved when proxying commands via
  doveadm-server. Almost all errors used exit code 75 (tempfail).
- ACLs weren't applied to not-yet-existing autocreated mailboxes.
- Fixed a potential crash when parsing a broken message header.
- cassandra: Fallback consistency settings weren't working correctly.
- doveadm director status <user>: "Initial config" was always empty
- imapc: Various reconnection fixes.

(taca)

Note update of BIND packages:

net/bind910 9.10.4pl8
net/bind99 9.9.9pl8

(taca)

Update bind99 to 9.9.9pl8 (BIND 9.9.9-P8).

Quote from release announce:

  BIND 9.9.9-P8 addresses the security issues described in CVE-2017-3136,
  CVE-2017-3137, and CVE-2017-3138, and updates the built-in trusted keys
  for the root zone.

Quote from CHANGELOG:

--- 9.9.9-P8 released ---

4582. [security] 'rndc ""' could trigger a assertion failure in named.
(CVE-2017-3138) [RT #44924]

4580. [bug] 4578 introduced a regression when handling CNAME to
referral below the current domain. [RT #44850]

--- 9.9.9-P7 released ---

4578. [security] Some chaining (CNAME or DNAME) responses to upstream
queries could trigger assertion failures.
(CVE-2017-3137) [RT #44734]

4575. [security] DNS64 with "break-dnssec yes;" can result in an
assertion failure. (CVE-2017-3136) [RT #44653]

4564. [maint] Update the built in managed keys to include the
upcoming root KSK. [RT #44579]

(taca)

Update bind910 to 9.10.4pl8 (BIND 9.10.4-P8).

Quote from release announce:

  BIND 9.10.4-P8 addresses the security issues described in
  CVE-2017-3136, CVE-2017-3137, and CVE-2017-3138, and updates the
  built-in trusted keys for the root zone.

>From CHANGELOG:

--- 9.10.4-P8 released ---

4582. [security] 'rndc ""' could trigger a assertion failure in named.
(CVE-2017-3138) [RT #44924]

4580. [bug] 4578 introduced a regression when handling CNAME to
referral below the current domain. [RT #44850]

--- 9.10.4-P7 released ---

4578. [security] Some chaining (CNAME or DNAME) responses to upstream
queries could trigger assertion failures.
(CVE-2017-3137) [RT #44734]

4575. [security] DNS64 with "break-dnssec yes;" can result in an
assertion failure. (CVE-2017-3136) [RT #44653]

4564. [maint] Update the built in managed keys to include the
upcoming root KSK. [RT #44579]

(taca)

Updated x11/deforaos-keyboard to 0.3.1

(khorben)

Updated x11/deforaos-libdesktop to 0.2.2

(khorben)

Update DeforaOS Keyboard to version 0.3.1

This release brings:
- license update to BSD
- fix for widget mode

(khorben)

Update DeforaOS libDesktop to version 0.2.2

This release brings:
- support for SOURCE_DATE_EPOCH in tests
- minor fixes and improvements

(khorben)

Updated devel/deforaos-libsystem to 0.3.1

(khorben)

Update DeforaOS libSystem to version 0.3.1

This release brings:
- build fixes with OBJDIR
- minor API update in <System/string.h>
- support for SOURCE_DATE_EPOCH in tests
- minor fixes and improvements

(khorben)

Note libsamplerate.

(maya)

libsamplerate: update to 0.1.9

Version 0.1.9 (2016-09-23)
  * Relicense under 2 clause BSD license.
  * Minor bug fixes and upates.

Also fixes CVE-2017-7697: global buffer overflow in calc_output_single

(maya)

Pullup ticket #5243 - requested by sevan
lang/php56: build fix
lang/php70: build fix
lang/php71: build fix

Revisions pulled up:
- lang/php56/Makefile                                          1.13
- lang/php56/Makefile.php                                      1.2
- lang/php56/PLIST                                              1.3
- lang/php56/distinfo                                          1.41
- lang/php56/patches/patch-ext_xsl_php__xsl.h                  1.1
- lang/php70/Makefile                                          1.6
- lang/php70/Makefile.php                                      1.3
- lang/php70/PLIST                                              1.3
- lang/php70/distinfo                                          1.31
- lang/php70/patches/patch-ext_xsl_php__xsl.h                  1.1
- lang/php71/Makefile                                          1.9
- lang/php71/Makefile.php                                      1.2
- lang/php71/PLIST                                              1.3
- lang/php71/distinfo                                          1.17
- lang/php71/patches/patch-ext_xsl_php__xsl.h                  1.1
- textproc/Makefile                                            1.918
- textproc/php-dom/DESCR                                        deleted
- textproc/php-dom/Makefile                                    deleted

---
  Module Name:    pkgsrc
  Committed By:  fhajny
  Date:          Wed Apr  5 12:28:59 UTC 2017

  Modified Files:
          pkgsrc/lang/php56: Makefile Makefile.php PLIST distinfo
          pkgsrc/lang/php70: Makefile Makefile.php PLIST distinfo
          pkgsrc/lang/php71: Makefile Makefile.php PLIST distinfo
  Added Files:
          pkgsrc/lang/php56/patches: patch-ext_xsl_php__xsl.h
          pkgsrc/lang/php70/patches: patch-ext_xsl_php__xsl.h
          pkgsrc/lang/php71/patches: patch-ext_xsl_php__xsl.h

  Log Message:
  Build the dom extension embedded. This enables full functionality in xmlreader and fixes joyent/pkgsrc/issues/477. Bump PKREVISION.

---
  Module Name:    pkgsrc
  Committed By:  fhajny
  Date:          Wed Apr  5 12:34:47 UTC 2017

  Modified Files:
          pkgsrc/textproc: Makefile
  Removed Files:
          pkgsrc/textproc/php-dom: DESCR Makefile

  Log Message:
  Remove textproc/php-dom, the module is now built into the resp. PHP packages.

(bsiegert)

Pullup ticket #5247 - requested by sevan
pkgtools/pkglint: bugfix

Revisions pulled up:
- pkgtools/pkglint/Makefile                                    1.513
- pkgtools/pkglint/files/vardefs.go                            1.23

---
  Module Name:    pkgsrc
  Committed By:  rillig
  Date:          Wed Apr  5 19:17:19 UTC 2017

  Modified Files:
          pkgsrc/pkgtools/pkglint: Makefile
          pkgsrc/pkgtools/pkglint/files: vardefs.go

  Log Message:
  Updated pkglint to 5.4.20.

  Changes since 5.4.19:
  * Updated allowed Python versions to include py36.

(bsiegert)

Pullup ticket #5241 - requested by sevan
www/serf: build fix

Revisions pulled up:
- www/serf/Makefile                                            1.37

---
  Module Name:    pkgsrc
  Committed By:  gdt
  Date:          Tue Apr  4 23:40:06 UTC 2017

  Modified Files:
          pkgsrc/www/serf: Makefile

  Log Message:
  Fix permissions after extraction

  The upstream distfile incorrectly has world-writable files.

(bsiegert)

Updated multimedia/adobe-flash-player to 25.0.0.148

(tsutsui)

Update adobe-flash-player to 25.0.0.148.

Upstream announcements:

https://helpx.adobe.com/security/products/flash-player/apsb17-10.html

Adobe Security Bulletin

Security updates available for Adobe Flash Player

Release date: April 11, 2017

Vulnerability identifier: APSB17-10

CVE number: CVE-2017-3058, CVE-2017-3059, CVE-2017-3060, CVE-2017-3061,
CVE-2017-3062, CVE-2017-3063, CVE-2017-3064

Platform: Windows, Macintosh, Linux and Chrome OS

(tsutsui)

Retroactively record the first batch of pullup tickets.

(bsiegert)

Updated www/vimb to 2.12

(leot)

Update www/vimb to 2.12

Changes:
## 2.12 - 2017-04-11
### Added
* Queueing of key events - fixes swalled chars in case of some imap bindings
  #258 (thanks to Michael Mackus)
* Allow to disable xembed by `FEATURE_NO_XEMBED` to compile on wayland only
  platforms (thanks to Patrick Steinhardt)
* Custom default_zoom setting disables HIGH_DPI logic (thanks to Robert Timm)
* Allow link activation from search result via `<CR>` #131

### Changed
* Allow shortcuts without parameters #329
* Write soup cache to disk after each page load to allow other instances to
  pick this up.
* Use the beginning position of links for hinting (thanks to Yutao Yuan)

### Fixed
* Fix path expansion to accept only valid POSIX.1-2008 usernames (thanks to
  Manzur Mukhitdinov)
* Fix default previouspattern (thanks to Nicolas Porcel)

Please note that this is the last release of the vimb for WebKit1. WebKit1 is not
supported anymore and is considered unsecure.
So this release is a way to end the WebKit1 version of vimb gracefully.
I hope the WebKit2 branch will be in alpha state soon. Hope some developer
will help to migrate the known features to the new WebKit2 process model.
Help is appreciated.

(leot)

Updated devel/p5-Path-FindDev to 0.5.3

(wen)

Fix PKGNAME

(wen)

Update to 0.5.3

Upstream changes:
v0.5.3 2017-03-10T07:02:09Z c9c9198
- Bugfix: Avoid test failures due to -Ddefault_inc_excludes_dot
- Add "v" to version due to upstream requirements
- Tests made more portable to older Test::More

(wen)

Updated print/zathura-pdf-mupdf to 0.3.1nb4

(leot)

Bump PKGREVISION for mupdf-1.11 update

(leot)