Note update of net/haproxy

(morr)

Update to newest stable version 1.7.3.

ChangeLog to long to include here, please take a look at
http://www.haproxy.org/download/1.7/src/CHANGELOG

Fixes PR pkg/52014

(morr)

Note update of www/wordpress

(morr)

Security update to version 4.7.3.

Fixed security bugs:

* Cross-site scripting (XSS) via media file metadata. Reported by Chris Andr竪
  Dale, Yorick Koster, and Simon P. Briggs.
* Control characters can trick redirect URL validation. Reported by Daniel
  Chatfield.
* Unintended files can be deleted by administrators using the plugin deletion
  functionality. Reported by xuliang.
* Cross-site scripting (XSS) via video URL in YouTube embeds. Reported by Marc
  Montpas.
* Cross-site scripting (XSS) via taxonomy term names. Reported by Delta.
* Cross-site request forgery (CSRF) in Press This leading to excessive use of
  server resources. Reported by Sipke Mellema.

More information here: https://codex.wordpress.org/Version_4.7.3

(morr)

Updated security/py-cryptodome to 3.4.5

(maya)

py-cryptodome: update to 3.4.5

The library can also be compiled using MinGW.
Removed use of alloca().
[Security] Removed implementation of deprecated "quick check" feature of PGP block cipher mode.
Improved the performance of scrypt by converting some Python to C.

(maya)

Updated mail/neomutt to 20170306

(wiz)

Updated neomutt to 20170306.

2017-03-06  Richard Russon  <rich@flatcap.org>
* Bug Fixes
  - Get the correct buffer size under fmemopen/torify (#441)
  - Use static inlines to make gcc 4.2.1 happy
  - getdnsdomainname: cancel getaddrinfo_a if needed
  - imap: remove useless code (#434) (origin/master)
  - Fixes missing semi-colon compilation issue (#433)
* Docs
  - github: added template for Pull Requests, issues and a CONTRIBUTION.md (#339)
  - editorconfig: support for new files, fix whitespace (#439)
  - add blocking fmemopen bug on debian to manual (#422)
* Upstream
  - Increase ACCOUNT.pass field size. (closes #3921)
  - SSL: Fix memory leak in subject alternative name code. (closes #3920)
  - Prevent segv if open-appending to an mbox fails. (closes #3918)
  - Clear out extraneous errors before SSL_connect() (see #3916)

2017-02-25  Richard Russon  <rich@flatcap.org>
* Features
  - Add option $show_multipart_alternative
  - notmuch: Allow to use untransformed tag for color
  - Use getaddrinfo_a if possible (#420)
* Bug Fixes
  - handle sigint within socket operations (#411)
  - Avoid browsing the remote spoolfile by setting MUTT_SELECT_MULTI attach
  - notmuch: fix crash when completing tags (#395)
  - Fixes missing failure return of notmuch msg open (#401)
  - Fix latest Coverity issues (#387)
  - Advance by the correct number of position even for unknown characters (#368)
  - Release KyotoCabinet data with kcfree() (#384)
  - 22 resource leaks
* Translations
  - Update translations
  - Update the german translation (#397)
* Docs
  - fix typo in notmuch example
  - remove duplicate "default" in the sidebar intro
  - fix confusing description of notmuch operators (#371)
  - correct spelling mistakes (#412)
* Website
  - link to clang-format config in main repo (#28)
  - updated list of useful programs
  - update/improve list of useful programs
  - sidebar_format has a single default value
  - fix name of GNU Guix
  - added guix distro
  - added link to new afew maintainers
  - add code of conduct
  - add mutt-addressbook to useful
  - remove unnecessary unicode non-breaking spaces
  - github merging
* Build
  - Enable and run unit-tests on the feature/unit-test branch
  - add notmuch to default, feature
  - new dbs for mutt
  - master is now the main branch
  - streamline builds
  - fix doc generator
  - add a few includes (prelude to clang-format)
  - slcurses.h defines its own bool type
  - travis: use container build
  - add clang-format file
  - Remove ugly macros and casts from crypt-gpgme.c
  - fix minor reflow issues in some comments
  - editorconfig: use spaces to indent in *.[ch] files
  - added comment-blocks for clang-format to ignore
  - fix 80 column limit, align statements
  - Remove snprintf.c from EXTRA_DIST (#406)
  - Kill homebrew (v)snprintf implementations, as they are C99 (#402)
  - Display charset + small refactoring
  - Do not cast or check returns from safe_calloc (#396)
  - refactor: create a generic base64 encode/decode
  - debug: remove dprint in favor of mutt_debug (#375)
  - Fix dubious use macro for _() / gettext() (#376)
  - Use mutt_buffer_init instead of memset
  - Make the heap method and datatype a plain list
  - Reverts making AliasFile into a list_t (#379)
  - Turn mutt_new_* macros into inline functions
  - Do not cast return values from malloc (et similia)
* Upstream
  - Simplify mutt_label_complete().
  - Permit tab completion of pattern expressions with ~y (labels).
  - Fix the mutt_label_complete() pos parameter.
  - Fix the x-label update code check location.
  - Improve the label completion hash table usage.
  - Adds label completion.
  - Add hash_find_elem to get the hash element.
  - Minor fixes to the x-label patch from David.
  - Adds capability to edit x-labels inside mutt, and to sort by label.
  - Allow "unsubjectrc *" to remove all patterns.
  - Add subjectrx command to replace matching subjects with something else.
  - Abstract the SPAM_LIST as a generic REPLACE_LIST
  - Improve Reply-to vs From comparison when replying. (closes #3909)
  - Fix sidebar references to the "new count" to be "unread". (closes #3908)
  - Fix several alias hashtable issues.
  - Add casecmp and strdup_key flags to hash_create()
  - Improve error handling in mbox magic detection.
  - Allow initial blank lines in local mailboxes.
  - Fix minor documentation issues.
  - Convert cmd_parse_search to use the uid hash. (closes #3905)
  - Create a uid hash for imap. (see #3905)
  - Convert HASH to be indexable by unsigned int. (see #3905)
  - Fix imap server-side search to call uid2msgno() only once. (see #3905)
  - Add a pattern_cache_t to speed up a few repeated matches.
  - Canonicalize line endings for GPGME S/MIME encryption. (closes #3904)
  - Fix build for bdb.
  - Create function to free header cache data.
  - Add Kyoto Cabinet support to the header cache.
  - Prevent null pointer exception for h->ai_canonname
  - Show SHA1 fp in interactive cert check menu.
  - Fix potential cert memory leak in check_certificate_by_digest().
  - Plug memory leak in weed-expired-certs code.
  - Filter expired local certs for OpenSSL verification.
  - Change "allow_dups" into a flag at hash creation.

(wiz)

Do not compare pointers with 0.

(joerg)

Unbreak build in environments with fine grained file system times.

(joerg)

Add comments on how to generate the man page.

(wiz)

Added textproc/py-sphinxcontrib-newsfeed version 0.1.4

(wiz)

+ py-sphinxcontrib-newsfeed

(wiz)

Import py-sphinxcontrib-newsfeed-0.1.4 as
textproc/py-sphinxcontrib-newsfeed.

sphinxcontrib-newsfeed is a extension for adding a simple Blog,
News or Announcements section to a Sphinx website.

Features:

    Makes feed entries from Sphinx documents.
    Generates a list of entries with teasers.
    Saves the feed to a file in RSS format.
    Supports comments via Disqus.

(wiz)

Fix author for filesystem/glusterfs update to 3.8.9
(this is what hapopens when you copypaste lines)

(manu)

Updated filesystems/glusterfs to 3.8.9

(manu)

Move urlbsd script to bin directory. Bump PKGREVISION.

(markd)

Upstream removal of mpost from shell_escape_commands

(markd)

Unbreak on legacy OS X by not defining BIND_8_COMPAT
The configure script now automatically adds resolv library to the linker list,
without intervention. Build tested on OS X 10.4 & 10.11

(sevan)

Updated misc/dpkg to 1.18.23

(wiz)

Updated dpkg to 1.18.23.

dpkg (1.18.23) unstable; urgency=medium

  * Handle unmatched arch-qualified virtual packages in dpkg-genbuildinfo,
    instead of letting perl die. Closes: #849944
  * Declare .buildinfo format as stable with version 1.0.
  * Do not depend on cxxabi.h to have declared __cxa_pure_virtual, use
    the same “__cxxabiv1” namespace as specified in the C++ ABI, instead
    of using the “abi” alias intended for use by userland.
    Thanks to Jörg Sonnenberger <joerg@netbsd.org>.
  * Add a comment on any C code switch case that falls through. Fixes new
    gcc-7 warnings.
  * Use snprintf() instead of sprintf() in libdpkg when constructing the ar
    member header, as we might overflow depending on the input data.
  * Portability:
    - Do not redeclare sys_siglist in libcompat when the system does so.
      Thanks to Thomas Klausner <wiz@NetBSD.org>.
    - Rename err variable to ret in start-stop-daemon as the former is a
      function on BSDs.
    - Use 5-argument kvm_getprocs() call form on OpenBSD in start-stop-daemon.
    - Use correct struct kinfo_proc ruid submember name on NetBSD in
      start-stop-daemon.
    - Define _KMEMUSER for NetBSD to get declarations for various
      struct kinfo_proc members in start-stop-daemon.
  * Perl modules:
    - Do not special case EM_SPARC32PLUS for NetBSD in Dpkg::Shlibs::Objdump,
      the code has been fixed in NetBSD as that situation could not happen.
    - Fix read() error handling in Dpkg::Shlibs::Objdump::get_format() to
      gracefully ignore non-ELF files again. Closes: #854536
    - Emit an explicit warning from Dpkg::Shlibs::Objdump::Object::analyze()
      for unknown executable formats instead of relying on objdump doing so.
    - Do not parse bogus ELF binaries in Dpkg::Shlibs::Objdump::get_format().
      Reported by Niels Thykier <niels@thykier.net>.
    - Add ‘.mnt-ignore’ to the default ignore lists in Dpkg::Source::Package,
      as we were already ignoring the ‘_MTN’ pathnames. Closes: #855450
      Thanks to Nicolas Boulenguez <nicolas@debian.org>.
    - Mark kfreebsd-amd64, kfreebsd-i386, sparc and sparc64 architectures as
      having gcc builtin PIE in Dpkg::Vendor::Debian.
    - Switch PIE handling in Dpkg::Vendor::Debian to have no default (!) and
      delegate the setting to gcc or an explicit request by a user. This is
      needed to cope with the general PIE brokenness situation in Debian, and
      the current specific brokenness of a Debian gcc patch mangling the dpkg
      build flags. Closes: #848129, #845550
  * Documentation:
    - Clarify the requirements for deb-conffile(5) pathnames. Closes: #854417
      Proposed by Dieter Adriaenssens <dieter.adriaenssens@gmail.com>.
    - Document dpkg-source --before-build and --after-build in --help output.
    - Document dpkg-buildpackage --ignore-builtin-builddeps in --help output.
  * Build system:
    - Check <sys/proc.h> by also including <sys/param.h>, on several BSD
      systems the header is not self-contained.
    - Handle libmd implementations built into system libc, as found on some
      BSD systems.
    - Do not fail on missing compression libraries or headers on automatic
      detection mode. Regression introduced in dpkg 1.18.14.
  * Test suite:
    - Use the detected perl interpreter instead of a random one from PATH.

  [ Updated programs translations ]
  * Dutch (Frans Spiesschaert). Closes: #856325

  [ Updated scripts translations ]
  * German (Helge Kreutzmann).

  [ Updated man pages translations ]
  * Dutch (Frans Spiesschaer). Closes: #856326

-- Guillem Jover <guillem@debian.org>  Mon, 06 Mar 2017 05:41:11 +0100

(wiz)

Updated time/khal to 0.9.3

(wiz)

Updated khal to 0.9.3.

0.9.3
=====
released 2017-03-06

* FIX `list` (and commands based on it like `calendar`, `at`, and `search`)
  crashed if `--notstarted` was given and allday events were found (introduced
  in 0.9.2)
* FIX `list --notstarted` (and commands based on it) would show events only on
  the first day of their occurrence and not on all further days
* FIX `configure` would crash if neither "import config from vdirsyncer" nor
  "create locale vdir" was selected
* FIX `at` will now show an error message if a date instead of a datetime is
  given
* FIX `at`'s default header will now show the datetime queried for (instead of
  just the date)
* FIX validate vdir metadata in color files
* FIX show the actually configured keybindings in ikhal

* NEW khal will now show cancelled events with a big CANCELLED in front (can be
  configured via event formatting)
* NEW ikhal supports editing an event's raw icalendar content in an external
  editor ($EDITOR), default keybinding is `alt + shift + e`. Only use this, if
  you know what you are doing, the icalendar library we use doesn't do a lot of
  validation, it silently disregards most invalid data.

(wiz)

Add instructions on installing required dependencies on Debian & derivatives to
ensure a smooth process
Taken from:
https://imil.net/blog/2015/07/05/using-pkgsrc-on-debian-gnulinux/

(sevan)

Note update of libtool packages to 2.4.6.

(jperkin)

Update libtool packages to 2.4.6.

Changes since 2.4.2 are too numerous to mention, with over 4,700 lines
in the ChangeLog file.  However, this release does at least fix a large
number of build failures on SmartOS, and doesn't appear to cause any
obvious regressions in bulk builds performed by Joerg and myself.

Some pkgsrc cleanups while here, including merging the MirBSD patches
correctly.  It couldn't be made much clearer how to properly integrate
patches here to ensure they are not lost.  Next time you might not be so
fortunate!

(jperkin)

* Fix compilation with GCC, based on https://github.com/joyent/pkgsrc/pull/470.
* Use proper Github support, use tagged releases.
* Use upstream install target.
* Cleanup and legibility.

(fhajny)

Added emulators/suse131_binutils version 13.1

(hauke)

Add opensuse 13.1 binutils, since wip/suse131_fpc will not do much
without a linux ld(1).

(hauke)

Updated multimedia/libva to 1.7.3nb4

(maya)

libva: drop local patch to workaround the need to specify LIBVA_DRIVER_NAME
intel shouldn't use gallium, there's a separate driver for it which is better,
now in wip/intel-vaapi-driver. thanks leot for pointing it out.

bump pkgrevision

(maya)

Updated inputmethod/skk to 16.2

(ryoon)

Remove emacs22 from supported versions

(ryoon)

Update to 16.2

Chagneglog:
* Remove GNU Emacs 22 support
16.1 supports GNU Emacs 22.

* Add GNU Emacs 26 support
Use encode-coding-string() instead of obsolete string-make-unibyte().

* Support Ruby 2.4
Support bayesian/bskk with Ruby 2.4.

* Select window management
skk-candidate-buffer-delete-other-windows as nil disables
windows management.

* Candidates display with SPC key
skk-show-candidates-nth-henkan-char should be 2 or greater.

* A number of Candidates
Specify a number as skk-henkan-number-to-display-candidates.
Do not use skk-henkan-show-candidates-rows, it is obsolete.

(ryoon)

Updated multimedia/gst-plugins1-ugly to 1.10.3nb1

(snj)

fix CVE-2017-5847.  bump PKGREVISION.

(snj)

Updated editors/vim-share to 8.0.0425

(snj)

update vim to 8.0.0425.  changes:

8.0.0342  double free with EXITFREE and setting 'ttytype'
8.0.0343  b:changedtick can be unlocked
8.0.0344  unlet command leaks memory
8.0.0345  islocked('d.changedtick') does not work
8.0.0346  Vim relies on limits.h to be included indirectly
8.0.0347  when using completion comment leader wont work
8.0.0348  using shadow dir on Mac lack +clipboard
8.0.0349  redrawing errors with GTK 3
8.0.0350  not enough test coverage for Perl
8.0.0351  no test for concatenating an empty string
8.0.0352  not easy to see when a typval needs to be cleared
8.0.0353  if [RO] is translated it may be truncated
8.0.0354  test to check that setting termcap key fails sometimes
8.0.0355  using uninitialized memory when 'isfname' is empty
8.0.0356  (after 8.0.0342) leaking memory when setting 'ttytype'
8.0.0357  crash when setting 'guicursor' to weird value
8.0.0358  invalid memory access in C-indent code
8.0.0359  'number' and 'relativenumber' are not properly tested
8.0.0360  sometimes VimL is used instead of "Vim script"
8.0.0361  GUI initialisation is not sufficiently tested
8.0.0362  (after 8.0.0361) tests fail on MS-Windows
8.0.0363  Travis is too slow to keep up with patches
8.0.0364  ]s does not move cursor with two spell errors in one line
8.0.0365  might free a dict item that wasn't allocated
8.0.0366  (after 8.0.0365) build fails with tiny features
8.0.0367  types in include files may be inconsistent
8.0.0368  not all options are tested with a range of values
8.0.0369  a few options are not defined, depending on features
8.0.0370  invalid memory access when setting wildchar empty
8.0.0371  leaking memory when setting v:completed_item
8.0.0372  more options are not always defined
8.0.0373  build fails without +folding
8.0.0374  invalid memory access when using :sc in Ex mode
8.0.0375  the "+ register is not tested
8.0.0376  size computations in spell file reading are off
8.0.0377  possible overflow when reading corrupted undo file
8.0.0378  another possible overflow when reading corrupted undo file
8.0.0379  CTRL-Z and mouse click use CTRL-O unnecessary
8.0.0380  with 'linebreak' double wide char wraps badly
8.0.0381  diff mode is not sufficiently tested
8.0.0382  (after 8.0.0380) warning in tiny build for unused variable
8.0.0383  (after 8.0.0382) misplaced #ifdef
8.0.0384  timer test failed for no apparent reason
8.0.0385  no tests for arabic
8.0.0386  tiny build has a problem with generating the options test
8.0.0387  compiler warnings
8.0.0388  filtering lines changes folds
8.0.0389  test for arabic does not check what is displayed
8.0.0390  when the window scrolls the popup menu may be garbled
8.0.0391  arabic support is verbose and not well tested
8.0.0392  GUI test fails with Athena and Motif
8.0.0393  (after 8.0.0190) order of duplicate tags is not preserved
8.0.0394  tabs are not aligned when scrolling horizontally
8.0.0395  testing the + register fails with Motif
8.0.0396  'balloonexpr' only works synchronously
8.0.0397  (after 8.0.0392) can't build with +viminfo but without +eval
8.0.0398  illegal memory access with "t"
8.0.0399  crash when using balloon_show() when not supported
8.0.0400  some tests have a one second delay
8.0.0401  test fails with missing balloon feature
8.0.0402  :map completion does not have <special>
8.0.0403  GUI tests may fail
8.0.0404  not enough testing for quickfix
8.0.0405  v:progpath may become invalid after :cd
8.0.0406  arabic shaping code is verbose
8.0.0407  filtering folds with marker method not tested
8.0.0408  updating folds does not always work properly
8.0.0409  set_progpath is defined but not always used
8.0.0410  newer gettext/iconv library has extra dll file
8.0.0411  menu translations don't match when case is changed
8.0.0412  (after 8.0.0411) menu test fails on MS-Windows
8.0.0413  (after 8.0.0412) menu test fails on MS-Windows using gvim
8.0.0414  balloon eval is not tested
8.0.0415  (after 8.0.0414) balloon test fails on MS-Windows
8.0.0416  setting v:progpath is not quite right
8.0.0417  test for the clipboard fails sometimes
8.0.0418  ASAN logs are disabled
8.0.0419  test for v:progpath fails on MS-Windows
8.0.0420  text garbled when the system encoding differs from 'encoding'
8.0.0421  diff mode wrong when adding line at end of buffer
8.0.0422  Python test fails with Python 3.6
8.0.0423  changing 'cinoptions' does not always work
8.0.0424  compiler warnings on MS-Windows
8.0.0425  build errors when building without folding

(snj)

Updated net/wireshark to 2.2.5

(wiz)

Updated wireshark to 2.2.5.

  Bug Fixes

  The following vulnerabilities have been fixed:
    * [1]wnpa-sec-2017-03
      LDSS dissector crash ([2]Bug 13346)
    * [3]wnpa-sec-2017-04
      RTMTP dissector infinite loop ([4]Bug 13347)
    * [5]wnpa-sec-2017-05
      WSP dissector infinite loop ([6]Bug 13348)
    * [7]wnpa-sec-2017-06
      STANAG 4607 file parser infinite loop ([8]Bug 13416)
    * [9]wnpa-sec-2017-07
      NetScaler file parser infinite loop ([10]Bug 13429)
    * [11]wnpa-sec-2017-08
      NetScaler file parser crash ([12]Bug 13430)
    * [13]wnpa-sec-2017-09
      K12 file parser crash ([14]Bug 13431)
    * [15]wnpa-sec-2017-10
      IAX2 dissector infinite loop ([16]Bug 13432)
    * [17]wnpa-sec-2017-11
      NetScaler file parser infinite loop ([18]Bug 12083)

  The 32-bit and 64-bit Windows installers might have been susceptible to
  a [19]DLL hijacking flaw.

  The following bugs have been fixed:
    * Display filter textbox loses focus during live capturing. ([20]Bug
      11890)
    * Wireshark crashes when saving pcaps, opening pcaps, and exporting
      specified packets. ([21]Bug 12036)
    * tshark stalls on FreeBSD if androiddump is present. ([22]Bug 13104)
    * UTF-8 characters in packet list column title. ([23]Bug 13342)
    * Recent capture file list should appear immediately on startup.
      ([24]Bug 13352)
    * editcap segfault if a packet length is shorter than ignore bytes
      parameter. ([25]Bug 13378)
    * dftest segfault with automated build of 2.2.5. ([26]Bug 13387)
    * UMTS MAC Dissector shows Packet size limited for BCCH payload.
      ([27]Bug 13392)
    * VS2010 win32 吋. ([28]Bug 13398)
    * EAP AKA not being decoded properly. ([29]Bug 13411)
    * Dumpcap crashes during rpcap setup. ([30]Bug 13418)
    * Crash on closing SNMP capture file if snmp credentials are present.
      ([31]Bug 13420)
    * GPRS-NS message PDU type displayed in octal instead of hexadecimal.
      ([32]Bug 13428)

  Updated Protocol Support

  GPRS-NS, GTPv2, IAX2, IEEE 802.11, LDSS, MS-WSP, OpcUa, ROHC, RTMTP,
  SNMP, STANAG 4607, T.38, and UMTS FP

(wiz)

Haven't used p4 in forever; relinquish these updates.

(schmonz)

Reset PKGREVISION after update.

(wiz)

Updated graphics/p5-PerlMagick to 7.0.5.1

(wiz)

Updated graphics/ImageMagick to 7.0.5.1

(wiz)

Updated ImageMagick to 7.0.5.1.

2017-03-03  7.0.5-1 Cristy  <quetzlzacatenango@image...>
  * Release ImageMagick version 7.0.5-1, GIT revision 19662:b7f455a:20170303.

2017-02-21  7.0.5-1 Cristy  <quetzlzacatenango@image...>
  * Fix Spurious memory allocation message (reference
    https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31438).
  * Identical images should return inf for PSNR (reference
    https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31487).

(wiz)

Updated net/tor to 0.2.9.10

(wiz)

Updated tor to 0.2.9.10.

Changes in version 0.2.9.10 - 2017-03-01
  Tor 0.2.9.10 backports a security fix for users who build Tor with
  the --enable-expensive-hardening option. It also includes fixes for
  some major issues affecting directory authorities, LibreSSL
  compatibility, and IPv6 correctness.

  The Tor 0.2.9.x release series is now marked as a long-term-support
  series.  We intend to backport security fixes to 0.2.9.x until at
  least January of 2020.

  o Major bugfixes (directory authority, 0.3.0.3-alpha):
    - During voting, when marking a relay as a probable sybil, do not
      clear its BadExit flag: sybils can still be bad in other ways
      too. (We still clear the other flags.) Fixes bug 21108; bugfix
      on 0.2.0.13-alpha.

  o Major bugfixes (IPv6 Exits, backport from 0.3.0.3-alpha):
    - Stop rejecting all IPv6 traffic on Exits whose exit policy rejects
      any IPv6 addresses. Instead, only reject a port over IPv6 if the
      exit policy rejects that port on more than an IPv6 /16 of
      addresses. This bug was made worse by 17027 in 0.2.8.1-alpha,
      which rejected a relay's own IPv6 address by default. Fixes bug
      21357; bugfix on commit 004f3f4e53 in 0.2.4.7-alpha.

  o Major bugfixes (parsing, also in 0.3.0.4-rc):
    - Fix an integer underflow bug when comparing malformed Tor
      versions. This bug could crash Tor when built with
      --enable-expensive-hardening, or on Tor 0.2.9.1-alpha through Tor
      0.2.9.8, which were built with -ftrapv by default. In other cases
      it was harmless. Part of TROVE-2017-001. Fixes bug 21278; bugfix
      on 0.0.8pre1. Found by OSS-Fuzz.

  o Minor features (directory authorities, also in 0.3.0.4-rc):
    - Directory authorities now reject descriptors that claim to be
      malformed versions of Tor. Helps prevent exploitation of
      bug 21278.
    - Reject version numbers with components that exceed INT32_MAX.
      Otherwise 32-bit and 64-bit platforms would behave inconsistently.
      Fixes bug 21450; bugfix on 0.0.8pre1.

  o Minor features (geoip):
    - Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2
      Country database.

  o Minor features (portability, compilation, backport from 0.3.0.3-alpha):
    - Autoconf now checks to determine if OpenSSL structures are opaque,
      instead of explicitly checking for OpenSSL version numbers. Part
      of ticket 21359.
    - Support building with recent LibreSSL code that uses opaque
      structures. Closes ticket 21359.

  o Minor bugfixes (code correctness, also in 0.3.0.4-rc):
    - Repair a couple of (unreachable or harmless) cases of the risky
      comparison-by-subtraction pattern that caused bug 21278.

  o Minor bugfixes (tor-resolve, backport from 0.3.0.3-alpha):
    - The tor-resolve command line tool now rejects hostnames over 255
      characters in length. Previously, it would silently truncate them,
      which could lead to bugs. Fixes bug 21280; bugfix on 0.0.9pre5.
      Patch by "junglefowl".

(wiz)

Updated devel/talloc to 2.1.9

(wiz)

Updated talloc to 2.1.9.

Changes not found.

(wiz)

Updated time/py-vdirsyncer to 0.15.0

(wiz)

Updated py-vdirsyncer to 0.15.0.

Version 0.15.0
==============

*released on 28 February 2017*

- Deprecated syntax for configuration values is now completely rejected. All
  values now have to be valid JSON.
- A few UX improvements for Google storages, see :gh:`549` and :gh:`552`.
- Fix collection discovery for :storage:`google_contacts`, see :gh:`564`.
- iCloud is now tested on Travis, see :gh:`567`.

(wiz)

Updated databases/py-sqlparse to 0.2.3

(wiz)

Updated py-sqlparse to 0.2.3.

Release 0.2.3 (Mar 02, 2017)
----------------------------

Enhancements

* New command line option "--encoding" (by twang2218, pr317).
* Support CONCURRENTLY keyword (issue322, by rowanseymour).

Bug Fixes

* Fix some edge-cases when parsing invalid SQL statements.
* Fix indentation of LIMIT (by romainr, issue320).
* Fix parsing of INTO keyword (issue324).

Internal Changes

* Several improvements regarding encodings.

(wiz)

Updated textproc/py-sphinx-rtd-theme to 0.2.2

(wiz)

Updated py-sphinx-rtd-theme to 0.2.2.

v0.2.2:
not documented

v0.2.1

    Add the rel HTML attribute to the footer links which point to the previous and next pages.
    Fix toctree issue caused by Sphinx singlehtml builder (#367)

v0.2.0

    Adds the comments block after the body block in the template
    Added "Edit on GitLab” support
    Many bug fixes

v0.1.10-alpha

    Removes Sphinx dependency
    Fixes hamburger on mobile display
    Adds a body_begin block to the template
    Add prev_next_buttons_location which can take the value bottom, top, both , None and will display the “Next” and “Previous” buttons accordingly

(wiz)

Updated devel/py-setuptools to 34.3.1

(wiz)

Updated py-setuptools to 34.3.1.

v34.3.1
-------

* #988: Trap ``os.unlink`` same as ``os.remove`` in
  ``auto_chmod`` error handler.

* #983: Fixes to invalid escape sequence deprecations on
  Python 3.6.

(wiz)

Updated databases/py-psycopg2 to 2.7

(wiz)

Updated py-psycopg2 to 2.7.

What's new in psycopg 2.7
-------------------------

New features:

- Added `~psycopg2.sql` module to generate SQL dynamically (:ticket:`#308`).
- Added :ref:`replication-support` (:ticket:`#322`). Main authors are
  Oleksandr Shulgin and Craig Ringer, who deserve a huge thank you.
- Added `~psycopg2.extensions.parse_dsn()` and
  `~psycopg2.extensions.make_dsn()` functions (:tickets:`#321, #363`).
  `~psycopg2.connect()` now can take both *dsn* and keyword arguments, merging
  them together.
- Added `~psycopg2.__libpq_version__` and
  `~psycopg2.extensions.libpq_version()` to inspect the version of the
  ``libpq`` library the module was compiled/loaded with
  (:tickets:`#35, #323`).
- The attributes `~connection.notices` and `~connection.notifies` can be
  customized replacing them with any object exposing an `!append()` method
  (:ticket:`#326`).
- Adapt network types to `ipaddress` objects when available. When not
  enabled, convert arrays of network types to lists by default. The old `!Inet`
  adapter is deprecated (:tickets:`#317, #343, #387`).
- Added `~psycopg2.extensions.quote_ident()` function (:ticket:`#359`).
- Added `~connection.get_dsn_parameters()` connection method (:ticket:`#364`).
- `~cursor.callproc()` now accepts a dictionary of parameters (:ticket:`#381`).
- Give precedence to `!__conform__()` over superclasses to choose an object
  adapter (:ticket:`#456`).
- Using Python C API decoding functions and codecs caching for faster
  unicode encoding/decoding (:ticket:`#473`).
- `~cursor.executemany()` slowness addressed by
  `~psycopg2.extras.execute_batch()` and `~psycopg2.extras.execute_values()`
  (:ticket:`#491`).
- Added ``async_`` as an alias for ``async`` to support Python 3.7 where
  ``async`` will become a keyword (:ticket:`#495`).
- Unless in autocommit, do not use :sql:`default_transaction_*` settings to
  control the session characteristics as it may create problems with external
  connection pools such as pgbouncer; use :sql:`BEGIN` options instead
  (:ticket:`#503`).
- `~connection.isolation_level` is now writable and entirely separated from
  `~connection.autocommit`; added `~connection.readonly`,
  `~connection.deferrable` writable attributes.

Bug fixes:

- Fixed error caused by missing decoding `~psycopg2.extras.LoggingConnection`
  (:ticket:`#483`).
- Fixed integer overflow in :sql:`interval` seconds (:ticket:`#512`).

Other changes:

- Dropped support for Python 2.5 and 3.1.
- Dropped support for client library older than PostgreSQL 9.1 (but older
  server versions are still supported).
- `~connection.isolation_level` doesn't read from the database but will return
  `~psycopg2.extensions.ISOLATION_LEVEL_DEFAULT` if no value was set on the
  connection.
- Empty arrays no more converted into lists if they don't have a type attached
  (:ticket:`#506`)

(wiz)

Updated devel/py-pbr to 2.0.0

(wiz)

Updated py-pbr to 2.0.0.

2.0.0
-----

* tox: Don't set skipsdist=True
* Stop using 'warnerrors'
* doc: Clarify sections in 'setup.cfg'
* Updated from global requirements
* Remove discover from test-requirements
* Add Constraints support
* Don't raise exception on missing man pages
* Updated from global requirements
* Clean imports in code
* Updated from global requirements
* Docstrings should not start with a space
* Changed the home-page link
* Update .coveragerc after the removal of openstack directory
* coverage package name option, doc improvement
* Updated from global requirements
* Deprecated warning for SafeConfigParser
* Add more words to a confusing error message
* Don't ignore data-files
* Change assertTrue(isinstance()) by optimal assert
* Fix handling of old git log output
* Fix typo in the index.rst
* Expose deb version to match exposing rpm version
* Replace OpenStack LLC with OpenStack Foundation
* Updated from global requirements
* Fix pypy soabi tests
* Add Python 3.5 classifier and venv
* Fix argument order for assertEqual to (expected, observed)
* Move to oslosphinx
* Updated from global requirements
* Restore warnerrors behavior and support Sphinx 1.4
* Updated from global requirements
* Updated from global requirements
* Updated from global requirements
* Fix pypy wsgi tests
* Remember the insertion order for pbr.json

(wiz)

Added devel/py-testresources version 2.0.1

(wiz)

+ py-testresources

(wiz)

Import py-testresources-2.0.1 as devel/py-testresources.

testresources extends unittest with a clean and simple api to provide
test optimisation where expensive common resources are needed for
test cases - for example sample working trees for VCS systems,
reference databases for enterprise applications, or web servers ...
let your imagination run wild.

(wiz)

Updated www/py-idna to 2.4

(wiz)

Updated py-idna to 2.4.

2.4 (2017-03-01)
++++++++++++++++

- Restore IDNAError to be a subclass of UnicodeError, as some users of
  this library are only looking for the latter to catch invalid strings.

2.3 (2017-02-28)
++++++++++++++++

- Fix bugs relating to deriving IDNAError from UnicodeError.
- More memory footprint improvements (Thanks, Alex Gaynor)

(wiz)

Updated devel/py-dulwich to 0.17.1

(wiz)

Updated py-dulwich to 0.17.1.

0.17.1 2017-03-01

IMPROVEMENTS

* Add basic 'dulwich pull' command. (Jelmer Vernoo蝶)

BUG FIXES

* Cope with existing submodules during pull.
  (Jelmer Vernoo蝶, #505)

0.17.0 2017-03-01

TEST FIXES

* Skip test that requires sync to synchronize filesystems if os.sync is
  not available. (Koen Martens)

IMPROVEMENTS

* Implement MemoryRepo.{set_description,get_description}.
  (Jelmer Vernoo蝶)

* Raise exception in Repo.stage() when absolute paths are
  passed in. Allow passing in relative paths to
  porcelain.add().(Jelmer Vernooij)

BUG FIXES

* Handle multi-line quoted values in config files.
  (Jelmer Vernoo蝶, #495)

* Allow porcelain.clone of repository without HEAD.
  (Jelmer Vernoo蝶, #501)

* Support passing tag ids to Walker()'s include argument.
  (Jelmer Vernoo蝶)

* Don't strip trailing newlines from extra headers.
  (Nicolas Dandrimont)

* Set bufsize=0 for subprocess interaction with SSH client.
  Fixes hangs on Python 3. (Ren辿 Stern, #434)

* Don't drop first slash for SSH paths, except for those
  starting with "~". (Jelmer Vernooij, Ren辿 Stern, #463)

* Properly log off after retrieving just refs.
  (Jelmer Vernooij)

(wiz)

Updated www/p5-libwww to 6.22

(wiz)

Updated p5-libwww to 6.22.

6.22      2017-03-01
    - Update Travis-CI to test on minimum versions of prereqs. (GH PR #109)
    - Fix tests that depended on a newer version of HTTP::Message (GH PR #119)
    - Update documentation to reflect behavior difference in ->put() depending
      on the version of HTTP::Message installed. (GH PR #120)

(wiz)

Updated devel/p5-Test-Simple to 1.302078

(wiz)

Updated p5-Test-Simple to 1.302078.

1.302078  2017-03-01 15:24:12-08:00 America/Los_Angeles

    - No changes since last trial

1.302077  2017-02-19 14:34:30-08:00 America/Los_Angeles (TRIAL RELEASE)

    - Fix #762, newlines for todo subtest
    - Revisit #637, fix rare race condition it created

1.302076  2017-02-01 19:38:42-08:00 America/Los_Angeles (TRIAL RELEASE)

    - Fix crash when TB->reset used inside subtest

(wiz)

Updated graphics/jasper to 2.0.12

(wiz)

Updated jasper to 2.0.12.

    Bumped the version number.

    Added some additional checking to prevent a potential integer overflow
    due to conversion in the JPC decoder.

    Added numerous more-detailed error messages for the JPC and JP2
    codecs.
    Added a partial verbose capability for the run_test_1 script.
    Moved a test case from the bad category to the good category, as the
    test case had been miscategorized.

    Added another regression test case.

    Fixed some potential double-free problems in the JPC codec.

(wiz)

Updated time/p5-DateTime-TimeZone to 2.10

(wiz)

Updated p5-DateTime-TimeZone to 2.10.

2.10    2017-03-01

- This release is based on version 2017a of the Olson database. This release
  includes contemporary changes for Mongolia and Chile.

(wiz)

Updated devel/p5-Date-Manip to 6.58

(wiz)

Updated p5-Date-Manip to 6.58.

VERSION 6.58 2017-03-01 ^

Better support for $mode in DateCalc.

    DateCalc (in DM6) did not support all values for $mode. Now it does.

Bug fixes

    Parsing a date like 01/02/2016 and calling printf with %e gave '02' instead of ' 2'. RT 119787.

    Fixed a problem where the tzdata method of determining the timezone was producing an error which wasn't correct. Reported on GitHub by John.

Time zone fixes

    Newest zoneinfo data (tzdata 2017a)

(wiz)

Updated textproc/miller to 5.0.0

(wiz)

Updated miller to 5.0.0.

Autodetected line-endings, in-place mode, user-defined functions, and more

This major release significantly expands the expressiveness of the DSL for mlr put and mlr filter. (The upcoming 5.1.0 release will add the ability to aggregate across all columns for non-DSL verbs such as mlr stats1 and mlr stats2. As well, a Windows port is underway.)

Please also see the Miller main docs.

Simple but impactful features:

    Line endings (CRLF vs. LF, Windows-style vs. Unix-style) are now autodetected. For example, files (including CSV) with LF input will lead to LF output unless you specify otherwise.
    There is now an in-place mode using mlr -I.

Major DSL features:

    You can now define your own functions and subroutines: e.g. func f(x, y) { return x**2 + y**2 }.
    New local variables are completely analogous to out-of-stream variables: sum retains its value for the duration of the expression it's defined in; @sum retains its value across all records in the record stream.
    Local variables, function parameters, and function return types may be defined untyped or typed as in x = 1 or int x = 1, respectively. There are also expression-inline type-assertions available. Type-checking is up to you: omit it if you want flexibility with heterogeneous data; use it if you want to help catch misspellings in your DSL code or unexpected irregularities in your input data.
    There are now four kinds of maps. Out-of-stream variables have always been scalars, maps, or multi-level maps: @a=1, @b[1]=2, @c[1][2]=3. The same is now true for local variables, which are new to 5.0.0. Stream records have always been single-level maps; $* is a map. And as of 5.0.0 there are now map literals, e.g. {"a":1, "b":2}, which can be defined using JSON-like syntax (with either string or integer keys) and which can be nested arbitrarily deeply.
    You can loop over maps -- $*, out-of-stream variables, local variables, map-literals, and map-valued function return values -- using for (k, v in ...) or the new for (k in ...) (discussed next). All flavors of map may also be used in emit and dump statements.
    User-defined functions and subroutines may take map-valued arguments, and may return map values.
    Some built-in functions now accept map-valued input: typeof, length, depth, leafcount, haskey. There are built-in functions producing map-valued output: mapsum and mapdiff. There are now string-to-map and map-to-string functions: splitnv, splitkv, splitnvx, splitkvx, joink, joinv, and joinkv.

Minor DSL features:

    For iterating over maps (namely, local variables, out-of-stream variables, stream records, map literals, or return values from map-valued functions) there is now a key-only for-loop syntax: e.g. for (k in $*) { ... }. This is in addition to the already-existing for (k, v in ...) syntax.
    There are now triple-statement for-loops (familiar from many other languages), e.g. for (int i = 0; i < 10; i += 1) { ... }.
    mlr put and mlr filter now accept multiple -f for script files, freely intermixable with -e for expressions. The suggested use case is putting user-defined functions in script files and one-liners calling them using -e. Example: myfuncs.mlr defines the function f(...), then mlr put -f myfuncs.mlr -e '$o = f($i)' myfile.dat. More information is here.
    mlr filter is now almost identical to mlr put: it can have multiple statements, it can use begin and/or end blocks, it can define and invoke functions. Its final expression must evaluate to boolean which is used as the filter criterion. More details are here.
    The min and max functions are now variadic: $o = max($a, $b, $c).
    There is now a substr function.
    While ENV has long provided read-access to environment variables on the right-hand side of assignments (as a getenv), it now can be at the left-hand side of assignments (as a putenv). This is useful for subsidiary processes created by tee, emit, dump, or print when writing to a pipe.
    Handling for the # in comments is now handled in the lexer, so you can now (correctly) include # in strings.
    Separators are now available as read-only variables in the DSL: IPS, IFS, IRS, OPS, OFS, ORS. These are particularly useful with the split and join functions: e.g. with mlr --ifs tab ..., the IFS variable within a DSL expression will evaluate to a string containing a tab character.
    Syntax errors in DSL expressions now have a little more context.
    DSL parsing and execution are a bit more transparent. There have long been -v and -t options to mlr put and mlr filter, which print the expression's abstract syntax tree and do a low-level parser trace, respectively. There are now additionally -a which traces stack-variable allocation and -T which traces statements line by line as they execute. While -v, -t, and -a are most useful for development of Miller, the -T option gives you more visibility into what your Miller scripts are doing. See also here.

Verbs:

    most-frequent and least-frequent as requested in #110.
    seqgen makes it easy to generate data from within Miller: please also see here for a usage example.
    unsparsify makes it easy to rectangularize data where not all records have the same fields.
    cat -n now takes a group-by (-g) option, making it easy to number records within categories.
    count-distinct,
    uniq,
    most-frequent,
    least-frequent,
    top, and
    histogram
    now take a -o option for specifying their output field names, as requested in #122.
    Median is now a synonym for p50 in stats1.
    You can now start a then chain with an initial then, which is nice in backslashy/multiline-continuation contexts.
    This was requested in #130.

I/O options:

    The print statement may now be used with no arguments, which prints a newline, and a no-argument printn prints nothing but creates a zero-length file in redirected-output context.
    Pretty-print format now has a --pprint --barred option (for output only, not input). For an example, please see here.
    There are now keystroke-savers of the form --c2p which abbreviate --icsvlite --opprint, and so on.
    Miller's map literals are JSON-looking but allow integer keys which JSON doesn't. The
    --jknquoteint and --jvquoteall flags for mlr (when using JSON output) and mlr put (for dump) provide control over double-quoting behavior.

Documents new since the previous release:

    Miller in 10 minutes is a long-overdue addition: while Miller's detailed documentation is evident, there has been a lack of more succinct examples.
    The cookbook has likewise been expanded, and has been split out
    into three parts: part 1, part
    2, part 3.
    A bit more background on C performance compared to other languages I experimented with, early on in the development of Miller, is here.

On-line help:

    Help for DSL built-in functions, DSL keywords, and verbs is accessible using mlr -f, mlr -k, and mlr -l respectively; name-only lists are available with mlr -F, mlr -K, and mlr -L.

Bugfixes:

    A corner-case bug causing a segmentation violation on two sub/gsub statements within a single put, the first one matching its pattern and the second one not matching its pattern, has been fixed.

Backward incompatibilities: This is Miller 5.0.0, not 4.6.0, due to the following (all relatively minor):

    The v variables bound in for-loops such as for (k, v in some_multi_level_map) { ... } can now be map-valued if the v specifies a non-terminal in the map.
    There are new keywords such as var, int, float, num, str, bool, map, IPS, IFS, IRS, OPS, OFS, ORS which can no longer be used as variable names. See mlr -k for the complete list.
    Unset of the last key in an map-valued variable's map level no longer removes the level: e.g. with @v[1][2]=3 and unset @v[1][2] the @v variable would be empty. As of 5.0.0, @v has key 1 with an empty-map value.
    There is no longer type-inference on literals: "3"+4 no longer gives 7. (That was never a good idea.)
    The typeof function used to say things like MT_STRING; now it says things like string.

(wiz)

Updated mail/notmuch to 0.23.7

(wiz)

Updated notmuch to 0.23.7.

Notmuch 0.23.7 (2017-02-28)
===========================

Test Suite
----------

Drop use of gpgconf --create-socketdir. Move $GNUPGHOME to /tmp.

  It turns out the hardcoded use of /run/user in gpg doesn't work out
  that well in some environments. The more low tech fix is to move all
  of $GNUPGHOME to somewhere where we can control the length of the
  paths.

Notmuch 0.23.6 (2017-02-27)
===========================

Command Line Interface
----------------------

Fix read-after-free bug in `notmuch new`.

Test Suite
----------

Use gpgconf --create-socketdir if available.

  GnuPG has a facility to use sockets in /run or /var/run to avoid
  problems with long socket paths, but this is not enabled by default
  for GNUPGHOME other than $HOME/.gnupg. Enable it, if possible.

(wiz)

Updated print/abcm2ps to 8.13.7

(wiz)

Updated abcm2ps to 8.13.7.

---- Version 8.13.7 - 2017-02-26 ----

Don't display beams when no visible note with a stem
(reported by Gerhard Schacherl)
Fix non working !ped! and !ped-up! with SVG output
(reported by Gerhard Schacherl)
Fix non working "%%pos stem hidden"
(reported by Gerhard Schacherl)
Fix bad horizontal spacing since 8.13.6
(reported by David Lacroix)
Fix clash of slurs with note decorations since 8.13.6
(reported by David Lacroix)

(wiz)

Updated security/libgpg-error to 1.27

(wiz)

Updated libgpg-error to 1.27.

Noteworthy changes in version 1.27 (2017-02-28) [C22/A22/R0]
-----------------------------------------------

* Added a Base64 decoder.

* Added support for the sh3 architecture.

* Added header gpgrt.h as an alias for gpg-error.h.

* Fixed macro GPGRT_GCC_VERSION.

* Fixed a race in non-blocking I/O on Windows.

* Interface changes relative to the 1.26 release:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
gpgrt_b64state_t                NEW type.
gpgrt_b64dec_start              NEW.
gpgrt_b64dec_proc                NEW.
gpgrt_b64dec_finish              NEW.
GPG_ERR_WRONG_NAME              NEW.
gpgrt.h                          NEW header.

(wiz)

Updated archivers/lzo to 2.10

(wiz)

Updated lzo to 2.10.

Changes in 2.10 (01 Mar 2017)
  * Improve CMake build support.
  * Add support for pkg-config.
  * Do not redefine "snprintf" so that the examples build with MSVC 2015.
  * Assorted cleanups.

(wiz)

Distfile no longer available on GitHub. Fetch from ${MASTER_SITE_LOCAL}.

(schmonz)

Merge 784851b7b476f3cb2e1247c0f8913b8726c103d9:

Change Solaris ACL support to use acl() and facl()

This removes dependency on libsec and enables compilation on Solaris 10.

(joerg)

Merge d9036ca49e414c6b5560c48126b6963204a6eda9:

Fix compilation on Mac OS X versions without ACL_SYNCHRONIZE

(joerg)

Updated news/tin to 2.2.1nb12

(wiz)

Rename mmdf(5) to tin-mmdf(5) to fix conflict with mutt packages.

Bump PKGREVISION.

Addresses PR 52030 by Michael-John Turner.

(wiz)

Fix path to cross-libtool-base in f2c.mk for crossbuilding

(kamil)

Fix path to cross-libtool-base in TOOL_DEPENDS+= for crossbuilding

(kamil)

Fix path to cross-libtool-base in HOWTO

(kamil)

+ ImageMagick-7.0.5.1, abcm2ps-8.13.7, jasper-2.0.12, libgpg-error-1.27,
  lzo-2.10, miller-5.0.0, notmuch-0.23.7, p5-Date-Manip-6.58,
  p5-DateTime-TimeZone-2.10, p5-Test-Simple-1.302078, p5-libwww-6.22,
  password-store-1.7, potrace-1.15, py-dulwich-0.17.1, py-idna-2.4,
  py-pbr-2.0.0, py-psycopg2-2.7, py-setuptools-34.3.1,
  py-sphinx-rtd-theme-0.2.2, py-sqlparse-0.2.3, py-vdirsyncer-0.15.0,
  rspamd-1.5.1, screen-4.5.1, talloc-2.1.9, texstudio-2.12.2,
  tor-0.2.9.10, vim-8.0.0413, vim-share-8.0.0413, wireshark-2.2.5,
  x264-devel-20170304.

(wiz)