Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (0m)  pkgsrc-2024Q1 (14d)  pkgsrc-2023Q4 (41d)  pkgsrc-2023Q2 (74d)  pkgsrc-2023Q3 (153d) 

2024-05-12 15:09:44 UTC Now

2017-01-22 21:27:49 UTC MAIN commitmail json YAML

Drop gpsbabel as a dependency

Based on discussions with upstream, it is recommended but not
required.  gpsbabel requires qt4 now and is about to require qt5,
which makes it very large.

(gdt)

2017-01-22 20:48:30 UTC MAIN commitmail json YAML

Updated net/corebird to 1.4.1nb1

(maya)

2017-01-22 20:48:07 UTC MAIN commitmail json YAML

add dependency on adwaita icons. they're needed to display lots of icons
in corebird.

bump PKGREVISION.

(maya)

2017-01-22 20:14:50 UTC MAIN commitmail json YAML

mention you can prefer pkgsrc at bootstrap, too.

pointed out by jperkin, thanks.

(maya)

2017-01-22 19:18:33 UTC MAIN commitmail json YAML

Add a note about the
  "Symbol's function definition is void: make-annotation"
error to the xemacs-packages comment

(abs)

2017-01-22 18:35:52 UTC pkgsrc-2016Q4 commitmail json YAML

2017-01-22 18:34:51 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5184 - requested by bsiegert
sysutils/py-borgbackup: security update

Revisions pulled up:
- sysutils/py-borgbackup/Makefile                              1.11
- sysutils/py-borgbackup/distinfo                              1.6

-------------------------------------------------------------------
  Module Name:    pkgsrc
  Committed By:  wiz
  Date:          Thu Jan  5 16:33:16 UTC 2017

  Modified Files:
          pkgsrc/sysutils/py-borgbackup: Makefile distinfo

  Log Message:
  Updated py-borgbackup to 1.0.9.

  Version 1.0.9 (2016-12-20)

  Security fixes:

      A flaw in the cryptographic authentication scheme in Borg
      allowed an attacker to spoof the manifest. See Pre-1.0.9 manifest
      spoofing vulnerability above for the steps you should take.
      borg check: When rebuilding the manifest (which should only be
      needed very rarely) duplicate archive names would be handled
      on a �ソスfirst come first serve�ソス basis, allowing an attacker to
      apparently replace archives.

  Bug fixes:

      borg check:
          rebuild manifest if it窶冱 corrupted
          skip corrupted chunks during manifest rebuild
      fix TypeError in integrity error handler, #1903, #1894
      fix location parser for archives with @ char (regression
  introduced in 1.0.8), #1930
      fix wrong duration/timestamps if system clock jumped during a create
      fix progress display not updating if system clock jumps backwards
      fix checkpoint interval being incorrect if system clock jumps

  Other changes:

      docs:
          add python3-devel as a dependency for cygwin-based installation
          clarify extract is relative to current directory
          FAQ: fix link to changelog
          markup fixes
      tests:
          test_get_(cache|keys)_dir: clean env state, #1897
          get back pytest窶冱 pretty assertion failures, #1938
      setup.py build_usage:
          fixed build_usage not processing all commands
          fixed build_usage not generating includes for debug commands

  Version 1.0.9rc1 (2016-11-27)

  Bug fixes:

      files cache: fix determination of newest mtime in backup set
      (which is used in cache cleanup and led to wrong �ソスA�ソス [added]
      status for unchanged files in next backup), #1860.
      borg check:
          fix incorrectly reporting attic 0.13 and earlier archives as corrupt
          handle repo w/o objects gracefully and also bail out early if
  repo is completely empty, #1815.
      fix tox/pybuild in 1.0-maint
      at xattr module import time, loggers are not initialized yet

  New features:

      borg umount <mountpoint> exposed already existing umount code
      via the CLI api, so users can use it, which is more consistent
      than using borg to mount and fusermount -u (or umount) to
      un-mount, #1855.
      implement borg create 窶渡oatime 窶渡octime, fixes #1853

  Other changes:

      docs:
          display README correctly on PyPI
          improve cache / index docs, esp. files cache docs, fixes #1825
          different pattern matching for 窶兎xclude, #1779
          datetime formatting examples for {now} placeholder, #1822
          clarify passphrase mode attic repo upgrade, #1854
          clarify 窶砥mask usage, #1859
          clarify how to choose PR target branch
          clarify prune behavior for different archive contents, #1824
          fix PDF issues, add logo, fix authors, headings, TOC
          move security verification to support section
          fix links in standalone README (:ref: tags)
          add link to security contact in README
          add FAQ about security
          move fork differences to FAQ
          add more details about resource usage
      tests: skip remote tests on cygwin, #1268
      travis:
          allow OS X failures until the brew cask osxfuse issue is fixed
          caskroom osxfuse-beta gone, it窶冱 osxfuse now (3.5.3)
      vagrant:
          upgrade OSXfuse / FUSE for macOS to 3.5.3
          remove llfuse from tox.ini at a central place
          do not try to install llfuse on centos6
          fix fuse test for darwin, #1546
          add windows virtual machine with cygwin
          Vagrantfile cleanup / code deduplication

  To generate a diff of this commit:
  cvs rdiff -u -r1.10 -r1.11 pkgsrc/sysutils/py-borgbackup/Makefile
  cvs rdiff -u -r1.5 -r1.6 pkgsrc/sysutils/py-borgbackup/distinfo

(spz)

2017-01-22 18:10:35 UTC MAIN commitmail json YAML

Mention in openbsd readme that it is possible to use OpenSSL from pkgsrc,
as an alternative to the somewhat controversial patch suggested in
PR pkg/51486.

(maya)

2017-01-22 15:56:07 UTC MAIN commitmail json YAML

2017-01-22 15:31:28 UTC MAIN commitmail json YAML

Darwin needs -lresolv.

(jperkin)

2017-01-22 15:20:18 UTC MAIN commitmail json YAML

Updated graphics/py-pygal to 2.3.1

(kamil)

2017-01-22 15:19:25 UTC MAIN commitmail json YAML

Upgrade py-pygal from 1.7.0 to 2.3.1

This upgrade fixes compatibility with new lxml.

Upstream changelog
==================
2.3.1

_This is a micro release and I have very little time on my hands right now sorry_

    Fix crash with no values when the print_values_position param is set (thanks @cristen)

2.3.0

    New call API: chart = Line(fill=True); chart.add('title', [1, 3, 12]); chart.render() can now be replaced with Line(fill=True)(1, 3, 12, title='title').render()
    Drop python 2.6 support

2.2.3

    Fix bar static value positioning (#315)
    Add stroke_opacity style (#321)
    Remove useless js in sparklines. (#312)

2.2.2

    Add classes option.
    Handle ellipsis in list type configs to auto-extend parent. (Viva python3)

2.2.0

    Support interruptions in line charts (thanks @piotrmaslanka #300)
    Fix confidence interval reactiveness (thanks @chartique #296)
    Add horizontal line charts (thanks @chartique #301)
    There is now a formatter config option to format values as specified. The formatter callable may or may not take chart, serie and index as argument. The default value formatting is now chart dependent and is value_formatter for most graph but could be a combination of value_formatter and x_value_formatter for dual charts.
    The human_readable option has been removed. Now you have to use the pygal.formatters.human_readable formatter (value_formatter=human_readable instead of human_readable=True)
    New chart type: SolidGauge (thanks @chartique #295)
    Fix range option for some Charts (#297 #298)
    Fix timezones for DateTimeLine for python 2 (#306, #302)
    Set default uri protocol to https (should fix a lot of "no tooltips" bugs).

2.1.1

    Import scipy as a last resort in stats.py (should workaround bugs like #294 if scipy is installed but not used)

2.1.0

    Bar print value positioning with print_values_position. Can be top, center or bottom (thanks @chartique #291) ci doc
    Confidence intervals (thanks @chartique #292) data doc

2.0.12

    Use custom xml_declaration avoiding conflict with processing instructions

2.0.11

    lxml 3.5 compatibility (#282)

2.0.10

    Fix transposable_node in case all attributes are not there. (thanks @yobuntu).

2.0.9

    Add dynamic_print_values to show print_values on legend hover. (#279)
    Fix unparse_color for python 3.5+ compatibility (thanks @felixonmars, @sjourdois)
    Process major labels as labels. (#263)
    Fix labels rotation > 180 (#257)
    Fix secondary axis
    Don't forget secondary series in table rendering (#260)
    Add defs config option to allow adding gradients and patterns.

2.0.8

    Fix value overwrite in map. (#275)

2.0.7

    Fixing to checks breaking rendering of DateTimeLine and TimeDeltaLine (#264) (thanks @mmrose)
    Fix render_in_browser. (#266) (#268) (thanks @waixwong)

2.0.6

    Avoid x label formatting when label is a string

2.0.5

    Fix x label formatting

2.0.4

    Fix map coloration

2.0.3

    Fix label adaptation. (#256)
    Fix wrong radar truncation. (#255)

2.0.2

    Fix view box differently to avoid getting a null height on huge numbers. (#254)
    Fix broken font_family default
    Fix non namespaced svg (without embed) javascript by adding uuid in config object. (config is in window.pygal now).

2.0.1

    Fix the missing title on x_labels with labels.
    Auto cast to str x labels in non dual charts (#178)
    Add print_labels option to print label too. (#197)
    Add value_label_font_family and value_label_font_size style options for print_labels.
    Default print_zeroes to True
    (Re)Add xlink in desc to show on tooltip
    Activate element on tooltip hovering. (#106)
    Fix radar axis behaviour (#247)
    Add tooltip support in metadata to add a title (#249).
    Take config class options in account too.

2.0.0

    Rework the ghost mechanism to come back to a more object oriented behavior, storing all state in a state object which is created on every render. (#161)
    Refactor maps
    Add world continents
    Add swiss cantons map (thanks @sergedroz)
    Add inverse_y_axis options to reverse graph (#24)
    Fix DateTimeLine time data loss (#193)
    Fix no data for graphs with only zeroes (#148)
    Support value formatter for pie graphs (#218) (thanks @never-eat-yellow-snow)
    Add new Box plot modes and outliers and set extremes as default (#226 #121 #149) (thanks @djezar)
    Add secondary_range option to set range for secondary values. (#203)
    Maps are now plugins, they are removed from pygal core and moved to packages (pygal_maps_world, pygal_maps_fr, pygal_maps_ch, ...) (#225)
    Dot now supports negative values
    Fix dot with log scale (#201)
    Fix y_labels behaviour for lines
    Fix x_labels and y_labels behaviour for xy like
    Improve gauge a bit
    Finally allow call chains on add
    Transform min_scale and max_scale as options
    mode option has been renamed to a less generic name: box_mode
    fix stack_from_top for stacked lines
    Add flake8 test to py.test in tox
    Remove stroke style in style and set it as a global / serie configuration.
    Fix None values in tables
    Fix timezones in DateTimeLine
    Rename in Style foreground_light as foreground_strong
    Rename in Style foreground_dark as foreground_subtle
    Add a render_data_uri method (#237)
    Move font_size config to style
    Add font_family for various elements in style
    Add googlefont:font support for style fonts
    Add tooltip_fancy_mode to revert to old tooltips
    Add auto print_value color + a configurable value_colors list in style
    Add guide_stroke_dasharray and guide_stroke_dasharray in style to customize guides (#242) (thanks @cbergmiller)
    Refactor label processing in a _compute_x_labels and _compute_y_labels method. Handle both string and numbers for all charts. Create a Dual base chart for dual axis charts. (#236)
    Better js integration in maps. Use the normal tooltip.

(kamil)

2017-01-22 15:10:51 UTC MAIN commitmail json YAML

Updated misc/calibre to 2.77.0

(wiz)

2017-01-22 15:10:41 UTC MAIN commitmail json YAML

Updated calibre to 2.77.0.

- version: 2.77.0
  date: 2017-01-13

  bug fixes:
    - title: "Conversion: Fix changing the cover image not updating references to the old cover image inside SVG wrappers."
      tickets: [1655309]

    - title: "E-book viewer: Fix a regression that caused clicking links in the footnote popup window to stop working"

    - title: "Edit Book: Fix importing DOCX file as new book not setting the version attribute in the OPF"

    - title: "Kindle driver: Fix some newer KFX books not being recognized on e-ink kindles, because of a change in how metadata is stored in the KFX format"

    - title: "DOCX Output: Fix missing <td> tag causing conversion to fail."
      tickets: [1654463]

    - title: "Edit Book: Fix group references causing errors when used in replace string in the normal mode search and replace"

    - title: "Edit Book: Fix Check Book reporting a spurious mime/type mismatch error after replacing a file with a file having a different mime type."
      tickets: [1653977]

    - title: "Amazon metadata download: Fix detection of series not working for some books due to changes in the amazon website"

    - title: "Fix Nook HD+ not being detected on windows"

    - title: "Edit Book: Ensure keyboard focus stays with Files Browser when renaming files."
      tickets: [1653311]

  improved recipes:
    - kath.net
    - publico.pt
    - Telepolis
    - The Times
    - Helsingin Sanomat

(wiz)

2017-01-22 14:53:00 UTC MAIN commitmail json YAML

Updated textproc/iso-codes to 3.74

(wiz)

2017-01-22 14:52:50 UTC MAIN commitmail json YAML

Updated iso-codes to 3.74.

iso-codes 3.74
--------------
Dr. Tobias Quathamer <toddy@debian.org>
Mon, 16 Jan 2017

  [ ISO 3166-2 ]
  * Remove GB- prefix from parent code for Great Britain.
    Closes: alioth#315604

(wiz)

2017-01-22 14:49:23 UTC MAIN commitmail json YAML

Match upstream version more closely.

(wiz)

2017-01-22 14:49:07 UTC MAIN commitmail json YAML

Updated math/fftwf to 3.3.6pl1

(wiz)

2017-01-22 14:48:57 UTC MAIN commitmail json YAML

Updated fftwf to 3.3.6pl1.

FFTW 3.3.6-pl1:

* Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
  shared libraries of the form libfftw3.so.2.6.6 instead of
  libfftw3.so.3.*.

FFTW 3.3.6:

* The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
  work, and this 3.3.6 fixes it.  Sorry about that.
* compilation fixes for IBM XLC
* compilation fixes for threads on Windows
* fix SIMD autodetection on amd64 when (_MSC_VER > 1500)

(wiz)

2017-01-22 14:44:33 UTC MAIN commitmail json YAML

Updated devel/meld to 3.16.4nb1

(leot)

2017-01-22 14:44:15 UTC MAIN commitmail json YAML

Add a dependency to graphics/adwaita-icon-theme
Bump PKGREVISION

Pointed out via pkg/51835 by Joern Clausen.

Approved by <wiz>

(leot)

2017-01-22 14:43:35 UTC MAIN commitmail json YAML

Updated math/py-numpy to 1.12.0

(wiz)

2017-01-22 14:43:25 UTC MAIN commitmail json YAML

Updated py-numpy to 1.12.0.

FAILED (KNOWNFAIL=8, SKIP=9, errors=1, failures=1)

==========================
NumPy 1.12.0 Release Notes
==========================

This release supports Python 2.7 and 3.4 - 3.6.

Highlights
==========
The NumPy 1.12.0 release contains a large number of fixes and improvements, but
few that stand out above all others. That makes picking out the highlights
somewhat arbitrary but the following may be of particular interest or indicate
areas likely to have future consequences.

* Order of operations in ``np.einsum`` can now be optimized for large speed improvements.
* New ``signature`` argument to ``np.vectorize`` for vectorizing with core dimensions.
* The ``keepdims`` argument was added to many functions.
* New context manager for testing warnings
* Support for BLIS in numpy.distutils
* Much improved support for PyPy (not yet finished)

Dropped Support
===============

* Support for Python 2.6, 3.2, and 3.3 has been dropped.

Added Support
=============

* Support for PyPy 2.7 v5.6.0 has been added. While not complete (nditer
  ``updateifcopy`` is not supported yet), this is a milestone for PyPy's
  C-API compatibility layer.

Build System Changes
====================

* Library order is preserved, instead of being reordered to match that of
  the directories.

Deprecations
============

Assignment of ndarray object's ``data`` attribute
-------------------------------------------------
Assigning the 'data' attribute is an inherently unsafe operation as pointed
out in gh-7083. Such a capability will be removed in the future.

Unsafe int casting of the num attribute in ``linspace``
-------------------------------------------------------
``np.linspace`` now raises DeprecationWarning when num cannot be safely
interpreted as an integer.

Insufficient bit width parameter to ``binary_repr``
---------------------------------------------------
If a 'width' parameter is passed into ``binary_repr`` that is insufficient to
represent the number in base 2 (positive) or 2's complement (negative) form,
the function used to silently ignore the parameter and return a representation
using the minimal number of bits needed for the form in question. Such behavior
is now considered unsafe from a user perspective and will raise an error in the
future.

Future Changes
==============

* In 1.13 NAT will always compare False except for ``NAT != NAT``,
  which will be True.  In short, NAT will behave like NaN
* In 1.13 np.average will preserve subclasses, to match the behavior of most
  other numpy functions such as np.mean. In particular, this means calls which
  returned a scalar may return a 0-d subclass object instead.

Multiple-field manipulation of structured arrays
------------------------------------------------
In 1.13 the behavior of structured arrays involving multiple fields will change
in two ways:

First, indexing a structured array with multiple fields (eg,
``arr[['f1', 'f3']]``) will return a view into the original array in 1.13,
instead of a copy. Note the returned view will have extra padding bytes
corresponding to intervening fields in the original array, unlike the copy in
1.12, which will affect code such as ``arr[['f1', 'f3']].view(newdtype)``.

Second, for numpy versions 1.6 to 1.12 assignment between structured arrays
occurs "by field name": Fields in the destination array are set to the
identically-named field in the source array or to 0 if the source does not have
a field::

    >>> a = np.array([(1,2),(3,4)], dtype=[('x', 'i4'), ('y', 'i4')])
    >>> b = np.ones(2, dtype=[('z', 'i4'), ('y', 'i4'), ('x', 'i4')])
    >>> b[:] = a
    >>> b
    array([(0, 2, 1), (0, 4, 3)],
          dtype=[('z', '<i4'), ('y', '<i4'), ('x', '<i4')])

In 1.13 assignment will instead occur "by position": The Nth field of the
destination will be set to the Nth field of the source regardless of field
name. The old behavior can be obtained by using indexing to reorder the fields
before
assignment, e.g., ``b[['x', 'y']] = a[['y', 'x']]``.

Compatibility notes
===================

DeprecationWarning to error
---------------------------

* Indexing with floats raises ``IndexError``,
  e.g., a[0, 0.0].
* Indexing with non-integer array_like raises ``IndexError``,
  e.g., ``a['1', '2']``
* Indexing with multiple ellipsis raises ``IndexError``,
  e.g., ``a[..., ...]``.
* Non-integers used as index values raise ``TypeError``,
  e.g., in ``reshape``, ``take``, and specifying reduce axis.

FutureWarning to changed behavior
---------------------------------

* ``np.full`` now returns an array of the fill-value's dtype if no dtype is
  given, instead of defaulting to float.
* np.average will emit a warning if the argument is a subclass of ndarray,
  as the subclass will be preserved starting in 1.13. (see Future Changes)

``power`` and ``**`` raise errors for integer to negative integer powers
------------------------------------------------------------------------
The previous behavior depended on whether numpy scalar integers or numpy
integer arrays were involved.

For arrays

* Zero to negative integer powers returned least integral value.
* Both 1, -1 to negative integer powers returned correct values.
* The remaining integers returned zero when raised to negative integer powers.

For scalars

* Zero to negative integer powers returned least integral value.
* Both 1, -1 to negative integer powers returned correct values.
* The remaining integers sometimes returned zero, sometimes the
  correct float depending on the integer type combination.

All of these cases now raise a ``ValueError`` except for those integer
combinations whose common type is float, for instance uint64 and int8. It was
felt that a simple rule was the best way to go rather than have special
exceptions for the integer units. If you need negative powers, use an inexact
type.

Relaxed stride checking is the default
--------------------------------------
This will have some impact on code that assumed that ``F_CONTIGUOUS`` and
``C_CONTIGUOUS`` were mutually exclusive and could be set to determine the
default order for arrays that are now both.

The ``np.percentile`` 'midpoint' interpolation method fixed for exact indices
-----------------------------------------------------------------------------
The 'midpoint' interpolator now gives the same result as 'lower' and 'higher' when
the two coincide. Previous behavior of 'lower' + 0.5 is fixed.

``keepdims`` kwarg is passed through to user-class methods
----------------------------------------------------------
numpy functions that take a ``keepdims`` kwarg now pass the value
through to the corresponding methods on ndarray sub-classes.  Previously the
``keepdims`` keyword would be silently dropped.  These functions now have
the following behavior:

1. If user does not provide ``keepdims``, no keyword is passed to the underlying
  method.
2. Any user-provided value of ``keepdims`` is passed through as a keyword
  argument to the method.

This will raise in the case where the method does not support a
``keepdims`` kwarg and the user explicitly passes in ``keepdims``.

The following functions are changed: ``sum``, ``product``,
``sometrue``, ``alltrue``, ``any``, ``all``, ``amax``, ``amin``,
``prod``, ``mean``, ``std``, ``var``, ``nanmin``, ``nanmax``,
``nansum``, ``nanprod``, ``nanmean``, ``nanmedian``, ``nanvar``,
``nanstd``

``bitwise_and`` identity changed
--------------------------------
The previous identity was 1, it is now -1. See entry in `Improvements`_ for
more explanation.

ma.median warns and returns nan when unmasked invalid values are encountered
----------------------------------------------------------------------------
Similar to unmasked median the masked median `ma.median` now emits a Runtime
warning and returns `NaN` in slices where an unmasked `NaN` is present.

Greater consistancy in ``assert_almost_equal``
----------------------------------------------
The precision check for scalars has been changed to match that for arrays. It
is now::

    abs(actual - desired) < 1.5 * 10**(-decimal)

Note that this is looser than previously documented, but agrees with the
previous implementation used in ``assert_array_almost_equal``. Due to the
change in implementation some very delicate tests may fail that did not
fail before.

``NoseTester`` behaviour of warnings during testing
---------------------------------------------------
When ``raise_warnings="develop"`` is given, all uncaught warnings will now
be considered a test failure. Previously only selected ones were raised.
Warnings which are not caught or raised (mostly when in release mode)
will be shown once during the test cycle similar to the default python
settings.

``assert_warns`` and ``deprecated`` decorator more specific
-----------------------------------------------------------
The ``assert_warns`` function and context manager are now more specific
to the given warning category. This increased specificity leads to them
being handled according to the outer warning settings. This means that
no warning may be raised in cases where a wrong category warning is given
and ignored outside the context. Alternatively the increased specificity
may mean that warnings that were incorrectly ignored will now be shown
or raised. See also the new ``suppress_warnings`` context manager.
The same is true for the ``deprecated`` decorator.

C API
-----
No changes.

New Features
============

Writeable keyword argument for ``as_strided``
---------------------------------------------
``np.lib.stride_tricks.as_strided`` now has a ``writeable``
keyword argument. It can be set to False when no write operation
to the returned array is expected to avoid accidental
unpredictable writes.

``axes`` keyword argument for ``rot90``
---------------------------------------
The ``axes`` keyword argument in ``rot90`` determines the plane in which the
array is rotated. It defaults to ``axes=(0,1)`` as in the originial function.

Generalized ``flip``
--------------------
``flipud`` and ``fliplr`` reverse the elements of an array along axis=0 and
axis=1 respectively. The newly added ``flip`` function reverses the elements of
an array along any given axis.

* ``np.count_nonzero`` now has an ``axis`` parameter, allowing
  non-zero counts to be generated on more than just a flattened
  array object.

BLIS support in ``numpy.distutils``
-----------------------------------
Building against the BLAS implementation provided by the BLIS library is now
supported.  See the ``[blis]`` section in ``site.cfg.example`` (in the root of
the numpy repo or source distribution).

Hook in ``numpy/__init__.py`` to run distribution-specific checks
-----------------------------------------------------------------
Binary distributions of numpy may need to run specific hardware checks or load
specific libraries during numpy initialization.  For example, if we are
distributing numpy with a BLAS library that requires SSE2 instructions, we
would like to check the machine on which numpy is running does have SSE2 in
order to give an informative error.

Add a hook in ``numpy/__init__.py`` to import a ``numpy/_distributor_init.py``
file that will remain empty (bar a docstring) in the standard numpy source,
but that can be overwritten by people making binary distributions of numpy.

New nanfunctions ``nancumsum`` and ``nancumprod`` added
-------------------------------------------------------
Nan-functions ``nancumsum`` and ``nancumprod`` have been added to
compute ``cumsum`` and ``cumprod`` by ignoring nans.

``np.interp`` can now interpolate complex values
------------------------------------------------
``np.lib.interp(x, xp, fp)`` now allows the interpolated array ``fp``
to be complex and will interpolate at ``complex128`` precision.

New polynomial evaluation function ``polyvalfromroots`` added
-------------------------------------------------------------
The new function ``polyvalfromroots`` evaluates a polynomial at given points
from the roots of the polynomial. This is useful for higher order polynomials,
where expansion into polynomial coefficients is inaccurate at machine
precision.

New array creation function ``geomspace`` added
-----------------------------------------------
The new function ``geomspace`` generates a geometric sequence.  It is similar
to ``logspace``, but with start and stop specified directly:
``geomspace(start, stop)`` behaves the same as
``logspace(log10(start), log10(stop))``.

New context manager for testing warnings
----------------------------------------
A new context manager ``suppress_warnings`` has been added to the testing
utils. This context manager is designed to help reliably test warnings.
Specifically to reliably filter/ignore warnings. Ignoring warnings
by using an "ignore" filter in Python versions before 3.4.x can quickly
result in these (or similar) warnings not being tested reliably.

The context manager allows to filter (as well as record) warnings similar
to the ``catch_warnings`` context, but allows for easier specificity.
Also printing warnings that have not been filtered or nesting the
context manager will work as expected. Additionally, it is possible
to use the context manager as a decorator which can be useful when
multiple tests give need to hide the same warning.

New masked array functions ``ma.convolve`` and ``ma.correlate`` added
---------------------------------------------------------------------
These functions wrapped the non-masked versions, but propagate through masked
values. There are two different propagation modes. The default causes masked
values to contaminate the result with masks, but the other mode only outputs
masks if there is no alternative.

New ``float_power`` ufunc
-------------------------
The new ``float_power`` ufunc is like the ``power`` function except all
computation is done in a minimum precision of float64. There was a long
discussion on the numpy mailing list of how to treat integers to negative
integer powers and a popular proposal was that the ``__pow__`` operator should
always return results of at least float64 precision. The ``float_power``
function implements that option. Note that it does not support object arrays.

``np.loadtxt`` now supports a single integer as ``usecol`` argument
-------------------------------------------------------------------
Instead of using ``usecol=(n,)`` to read the nth column of a file
it is now allowed to use ``usecol=n``. Also the error message is
more user friendly when a non-integer is passed as a column index.

Improved automated bin estimators for ``histogram``
---------------------------------------------------
Added 'doane' and 'sqrt' estimators to ``histogram`` via the ``bins``
argument. Added support for range-restricted histograms with automated
bin estimation.

``np.roll`` can now roll multiple axes at the same time
-------------------------------------------------------
The ``shift`` and ``axis`` arguments to ``roll`` are now broadcast against each
other, and each specified axis is shifted accordingly.

The ``__complex__`` method has been implemented for the ndarrays
----------------------------------------------------------------
Calling ``complex()`` on a size 1 array will now cast to a python
complex.

``pathlib.Path`` objects now supported
--------------------------------------
The standard ``np.load``, ``np.save``, ``np.loadtxt``, ``np.savez``, and similar
functions can now take ``pathlib.Path`` objects as an argument instead of a
filename or open file object.

New ``bits`` attribute for ``np.finfo``
---------------------------------------
This makes ``np.finfo`` consistent with ``np.iinfo`` which already has that
attribute.

New ``signature`` argument to ``np.vectorize``
----------------------------------------------
This argument allows for vectorizing user defined functions with core
dimensions, in the style of NumPy's
:ref:`generalized universal functions<c-api.generalized-ufuncs>`. This allows
for vectorizing a much broader class of functions. For example, an arbitrary
distance metric that combines two vectors to produce a scalar could be
vectorized with ``signature='(n),(n)->()'``. See ``np.vectorize`` for full
details.

Emit py3kwarnings for division of integer arrays
------------------------------------------------
To help people migrate their code bases from Python 2 to Python 3, the
python interpreter has a handy option -3, which issues warnings at runtime.
One of its warnings is for integer division::

    $ python -3 -c "2/3"

    -c:1: DeprecationWarning: classic int division

In Python 3, the new integer division semantics also apply to numpy arrays.
With this version, numpy will emit a similar warning::

    $ python -3 -c "import numpy as np; np.array(2)/np.array(3)"

    -c:1: DeprecationWarning: numpy: classic int division

numpy.sctypes now includes bytes on Python3 too
-----------------------------------------------
Previously, it included str (bytes) and unicode on Python2, but only str
(unicode) on Python3.

Improvements
============

``bitwise_and`` identity changed
--------------------------------
The previous identity was 1 with the result that all bits except the LSB were
masked out when the reduce method was used.  The new identity is -1, which
should work properly on twos complement machines as all bits will be set to
one.

Generalized Ufuncs will now unlock the GIL
------------------------------------------
Generalized Ufuncs, including most of the linalg module, will now unlock
the Python global interpreter lock.

Caches in `np.fft` are now bounded in total size and item count
---------------------------------------------------------------
The caches in `np.fft` that speed up successive FFTs of the same length can no
longer grow without bounds. They have been replaced with LRU (least recently
used) caches that automatically evict no longer needed items if either the
memory size or item count limit has been reached.

Improved handling of zero-width string/unicode dtypes
-----------------------------------------------------
Fixed several interfaces that explicitly disallowed arrays with zero-width
string dtypes (i.e. ``dtype('S0')`` or ``dtype('U0')``, and fixed several
bugs where such dtypes were not handled properly.  In particular, changed
``ndarray.__new__`` to not implicitly convert ``dtype('S0')`` to
``dtype('S1')`` (and likewise for unicode) when creating new arrays.

Integer ufuncs vectorized with AVX2
-----------------------------------
If the cpu supports it at runtime the basic integer ufuncs now use AVX2
instructions. This feature is currently only available when compiled with GCC.

Order of operations optimization in ``np.einsum``
--------------------------------------------------
``np.einsum`` now supports the ``optimize`` argument which will optimize the
order of contraction. For example, ``np.einsum`` would complete the chain dot
example ``np.einsum(���ij,jk,kl->il���, a, b, c)`` in a single pass which would
scale like ``N^4``; however, when ``optimize=True`` ``np.einsum`` will create
an intermediate array to reduce this scaling to ``N^3`` or effectively
``np.dot(a, b).dot(c)``. Usage of intermediate tensors to reduce scaling has
been applied to the general einsum summation notation. See ``np.einsum_path``
for more details.

quicksort has been changed to an introsort
------------------------------------------
The quicksort kind of ``np.sort`` and ``np.argsort`` is now an introsort which
is regular quicksort but changing to a heapsort when not enough progress is
made. This retains the good quicksort performance while changing the worst case
runtime from ``O(N^2)`` to ``O(N*log(N))``.

``ediff1d`` improved performance and subclass handling
------------------------------------------------------
The ediff1d function uses an array instead on a flat iterator for the
subtraction.  When to_begin or to_end is not None, the subtraction is performed
in place to eliminate a copy operation.  A side effect is that certain
subclasses are handled better, namely astropy.Quantity, since the complete
array is created, wrapped, and then begin and end values are set, instead of
using concatenate.

Improved precision of ``ndarray.mean`` for float16 arrays
---------------------------------------------------------
The computation of the mean of float16 arrays is now carried out in float32 for
improved precision. This should be useful in packages such as Theano
where the precision of float16 is adequate and its smaller footprint is
desireable.

Changes
=======

All array-like methods are now called with keyword arguments in fromnumeric.py
------------------------------------------------------------------------------
Internally, many array-like methods in fromnumeric.py were being called with
positional arguments instead of keyword arguments as their external signatures
were doing. This caused a complication in the downstream 'pandas' library
that encountered an issue with 'numpy' compatibility. Now, all array-like
methods in this module are called with keyword arguments instead.

Operations on np.memmap objects return numpy arrays in most cases
-----------------------------------------------------------------
Previously operations on a memmap object would misleadingly return a memmap
instance even if the result was actually not memmapped.  For example,
``arr + 1`` or ``arr + arr`` would return memmap instances, although no memory
from the output array is memmaped. Version 1.12 returns ordinary numpy arrays
from these operations.

Also, reduction of a memmap (e.g.  ``.sum(axis=None``) now returns a numpy
scalar instead of a 0d memmap.

stacklevel of warnings increased
--------------------------------
The stacklevel for python based warnings was increased so that most warnings
will report the offending line of the user code instead of the line the
warning itself is given. Passing of stacklevel is now tested to ensure that
new warnings will receive the ``stacklevel`` argument.

This causes warnings with the "default" or "module" filter to be shown once
for every offending user code line or user module instead of only once. On
python versions before 3.4, this can cause warnings to appear that were falsely
ignored before, which may be surprising especially in test suits.

(wiz)

2017-01-22 14:06:07 UTC MAIN commitmail json YAML

Fix build for non HPUX on HP PA platforms

Thanks to Riccardo Mottola for testing

No PKGREVISION bump as should not affect build on any previously working platform

(abs)

2017-01-22 13:14:55 UTC MAIN commitmail json YAML

Updated x11/libxkbcommon to 0.7.1

(wiz)

2017-01-22 13:14:46 UTC MAIN commitmail json YAML

Updated libxkbcommon to 0.7.1.

libxkbcommon 0.7.1 - 2017-01-18
==================

- Fixed various reported problems when the current locale is tr_TR.UTF-8.

  The function xkb_keysym_from_name() used to perform case-insensitive
  string comparisons in a locale-dependent way, but required it to to
  work as in the C/ASCII locale (the so called "Turkish i problem").

  The function is now no longer affected by the current locale.

- Fixed compilation in NetBSD.

(wiz)

2017-01-22 13:13:01 UTC MAIN commitmail json YAML

Updated devel/py-test-runner to 2.10.1

(wiz)

2017-01-22 13:12:52 UTC MAIN commitmail json YAML

Updated py-test-runner to 2.10.1.

2.10.1
~~~~~~

* #21: Avoid mutating dictionary keys during iteration.

2.10
~~~~

* #20: Leverage technique in `setuptools 794
  <https://github.com/pypa/setuptools/issues/794>`_
  to populate PYTHONPATH during test runs such that
  Python subprocesses will have a dependency context
  comparable to the test runner.

(wiz)

2017-01-22 13:12:15 UTC MAIN commitmail json YAML

Updated net/p5-WebService-MusicBrainz to 0.94

(wiz)

2017-01-22 13:12:06 UTC MAIN commitmail json YAML

Updated p5-WebService-MusicBrainz to 0.94.

0.94 Tuesday Auguest 2016
- Fixed tests

(wiz)

2017-01-22 13:10:27 UTC MAIN commitmail json YAML

Updated devel/p5-Tie-Cycle to 1.222

(wiz)

2017-01-22 13:10:18 UTC MAIN commitmail json YAML

Updated p5-Tie-Cycle to 1.222.

1.222 2017-01-20T11:30:37Z
* The module seems to have disappeared from CPAN, so I'm
re-uploading.

(wiz)

2017-01-22 13:09:20 UTC MAIN commitmail json YAML

Updated www/p5-libwww to 6.16

(wiz)

2017-01-22 13:09:10 UTC MAIN commitmail json YAML

Updated p5-libwww to 6.16.

6.16 2017-01-12
- Moved LWP::Protocol::GHTTP into its own dist and removed from here (PR#81)
- Updated test suite to use strict/warnings and Test::More (PR#88)
- Additional tests for UserAgent coverage (PR#79)
- Cleaned up documentation formatting and fixed several typos (PR#87, PR#93)
- Stop promoting use of HTTP::Cookies and instead use HTTP::CookieJar::LWP (PR#102)
- Added some new documentation to UserAgent and tutorial (PR#68)
- Allow default header to carry over when using ->post() in UA (PR#100)

(wiz)

2017-01-22 13:05:04 UTC MAIN commitmail json YAML

Updated audio/libopus to 1.1.4

(wiz)

2017-01-22 13:04:55 UTC MAIN commitmail json YAML

Updated libopus to 1.1.4.

This Opus 1.1.4 release fixes a single bug. A specially-crafted
Opus packet could cause an integer wrap-around in the SILK LSF
stabilization code. This would cause an out-of-bounds read 256
bytes before a constant table. In most circumstances, the consequences
are harmless and the result is simply noise in the audio.

This was reported as CVE-2017-0381. Contrary to that report, our
own analysis shows that no remote code execution is possible.
However, we are making this release as a precaution.

(wiz)

2017-01-22 12:55:39 UTC MAIN commitmail json YAML

Updated security/libgcrypt to 1.7.6

(wiz)

2017-01-22 12:55:29 UTC MAIN commitmail json YAML

Updated libgcrypt to 1.7.6.

All tests pass.

Noteworthy changes in version 1.7.6 (2017-01-18)  [C21/A1/R6]
------------------------------------------------

* Bug fixes:

  - Fix AES CTR self-check detected failure in the SSSE3 based
    implementation.

  - Remove gratuitous select before the getrandom syscall.

(wiz)

2017-01-22 12:42:16 UTC MAIN commitmail json YAML

Updated graphics/p5-PerlMagick to 7.0.4.5 [wiz 2017-01-22]

(wiz)

2017-01-22 12:41:47 UTC MAIN commitmail json YAML

Updated devel/libmtp to 1.1.12

(ryoon)

2017-01-22 12:41:40 UTC MAIN commitmail json YAML

Updated ImageMagick to 7.0.4.5.

2017-01-21  7.0.4-5 Cristy  <quetzlzacatenango@image...>
  * Release ImageMagick version 7.0.4-5, GIT revision 19381:7ae396f:20170121.

2017-01-18  7.0.4-5 Cristy  <quetzlzacatenango@image...>
  * Don't set background for transparent tiled images (reference
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31210).

(wiz)

2017-01-22 12:41:22 UTC MAIN commitmail json YAML

Update to 1.1.12

Changelog:
I have just released libmtp 1.1.12. This release is largely meant as
USB ID addition update.

There was also an addition of a function called LIBMTP_Handle_Event(),
to handle USB events asynchronously.

(ryoon)

2017-01-22 12:35:28 UTC MAIN commitmail json YAML

Updated cross/arm-none-eabi-gcc to 6.3.0

(ryoon)

2017-01-22 12:35:02 UTC MAIN commitmail json YAML

Update to 6.3.0

Changelog:
* The default mode for C++ is now -std=gnu++14 instead of -std=gnu++98.

# ARM

Support for revisions of the ARM architecture prior to ARMv4t has been
deprecated and will be removed in a future GCC release. The -mcpu and
-mtune values that are deprecated are: arm2, arm250, arm3, arm6,
arm60, arm600, arm610, arm620, arm7, arm7d, arm7di, arm70, arm700,
arm700i, arm710, arm720, arm710c, arm7100, arm7500, arm7500fe, arm7m,
arm7dm, arm7dmi, arm8, arm810, strongarm, strongarm110, strongarm1100,
strongarm1110, fa526, fa626. The value arm7tdmi is still
supported. The values of -march that are deprecated are:
armv2,armv2a,armv3,armv3m,armv4.

The ARM port now supports target attributes and pragmas. Please refer
to the documentation for details of available attributes and pragmas
as well as usage instructions.

Support has been added for the following processors (GCC identifiers
in parentheses): ARM Cortex-A32 (cortex-a32), ARM Cortex-A35
(cortex-a35) and ARM Cortex-R8 (cortex-r8). The GCC identifiers can be
used as arguments to the -mcpu or -mtune options, for example:
-mcpu=cortex-a32 or -mtune=cortex-a35.

(ryoon)

2017-01-22 12:28:20 UTC MAIN commitmail json YAML

Updated security/tor-browser to 6.0.8

(ryoon)

2017-01-22 12:27:22 UTC MAIN commitmail json YAML

2017-01-22 12:22:46 UTC MAIN commitmail json YAML

gcc48: fix build with newer (e.g. pkgsrc version) gtexinfo.
should help failing CentOS builds.

(maya)

2017-01-22 11:42:22 UTC MAIN commitmail json YAML

php71: add workaround requested in PR pkg/51787, pcre-jit segfaults on
non-amd64 (i386, SPARC - at least). disable it until PHP, add note that
it's mostly relevant for PCRE1 8.38, so if PHP updates to PCRE2 as they
plan, it will be irrelevant.

>From Joern Clausen / cmb@php

(maya)

2017-01-22 11:37:29 UTC MAIN commitmail json YAML

php70: add workaround requested in PR pkg/51787, pcre-jit segfaults on
non-amd64 (i386, SPARC - at least). disable it until PHP, add note that
it's mostly relevant for PCRE1 8.38, so if PHP updates to PCRE2 as they
plan, it will be irrelevant.

>From Joern Clausen / cmb@php

(maya)

2017-01-22 10:58:48 UTC MAIN commitmail json YAML

libvdpau: don't restrict this package to specific operating systems.
there's no reason to - other operating systems have suitable drivers too,
and it doesn't break builds as far as I can tell.

PR pkg/51704, applying as maintainer did not respond.

(maya)

2017-01-22 10:58:45 UTC MAIN commitmail json YAML

Postgis no longer supports PostgreSQL < 9.2.

(fhajny)

2017-01-22 10:37:04 UTC MAIN commitmail json YAML

Updated print/abcm2ps to 8.13.4

(wiz)

2017-01-22 10:36:54 UTC MAIN commitmail json YAML

Updated abcm2ps to 8.13.4.

---- Version 8.13.4 - 2017-01-16 ----

Fix bad note transposition after generation restart
(reported by Fr辿d辿ric Boulanger)
Fix bad generation when decoration defined by <defs> with 'h' in <path>
Fix bad PS output when utf-8 characters in title and pango support
(reported by Timm Reasbeck)
Fix abnormal errors when many ABC source files in the command line
Fix again bad glyph for cut time meter
(reported by Timm Reasbeck)
Fix double include when xx.default.abc in command line
Fix compilation warning and bad PS %%musicfont definition
(reported by David Lacroix)

(wiz)

2017-01-22 10:35:41 UTC MAIN commitmail json YAML

Updated audio/abcde to 2.8.1

(wiz)

2017-01-22 10:35:31 UTC MAIN commitmail json YAML

Updated abcde to 2.8.1.

abcde 2.8.1.

* Fix silly error introduced in abcde-musicbrainz-tool when fixing bug
  30. Thanks to Thomas Klausner for the bug/patch. Closes Issue 52:
  https://abcde.einval.com/bugzilla/show_bug.cgi?id=52

-- Steve McIntyre <93sam@debian.org>  Wed, 18 Jan 2017 11:02:38 +0000

(wiz)

2017-01-22 10:33:33 UTC MAIN commitmail json YAML

Added graphics/guetzli version 0.2

(wiz)

2017-01-22 10:33:20 UTC MAIN commitmail json YAML

2017-01-22 10:32:50 UTC MAIN commitmail json YAML

Import guetzli-0.2 as graphics/guetzli.

Guetzli is a JPEG encoder that aims for excellent compression
density at high visual quality. Guetzli-generated images are
typically 20-30% smaller than images of equivalent quality generated
by libjpeg. Guetzli generates only sequential (nonprogressive)
JPEGs due to faster decompression speeds they offer.

(wiz)

2017-01-22 10:20:33 UTC MAIN commitmail json YAML

+ ImageMagick-7.0.4.5, abcde-2.8.1, abcm2ps-8.13.4, calibre-2.77,
  fftwf-3.3.6pl1, iso-codes-3.74, libgcrypt-1.7.6, libopus-1.1.4,
  libxkbcommon-0.7.1, mcookie-2.29.1, p5-Tie-Cycle-1.222,
  p5-WebService-MusicBrainz-0.94, p5-libwww-6.16, py-numpy-1.12.0,
  py-test-runner-2.10.1, rspamd-1.4.3, tigervnc-1.7.1, vim-8.0.0211,
  vim-share-8.0.0211, x264-devel-20170121.

(wiz)

2017-01-22 08:10:34 UTC MAIN commitmail json YAML

Switch khard to py-vobject 0.9.4 or newer. Bump PKGREVISION.

(wiz)

2017-01-22 04:25:31 UTC MAIN commitmail json YAML

2017-01-22 02:04:48 UTC MAIN commitmail json YAML

Updated editors/nano to 2.7.4

(wiedi)

2017-01-22 02:04:15 UTC MAIN commitmail json YAML

Update editors/nano to 2.7.4

2017.01.10 - GNU nano 2.7.4 "Red dress" undoes deletions in an orderly
manner again (bug was introduced in previous version),
sets the preferred x position for vertical movements
more consistently, avoids some scrolling problems in
softwrap mode, installs the Info manual also when your
system lacks 'makeinfo', and corrects the behavior of
the beginning-of-word anchor (\<) in regex searches.

2016.12.28 - GNU nano 2.7.3 "Ontbijtkoek" wipes away a handful of bugs:
your editor is now able to handle filenames that contain
newlines, avoids a brief flash of color when switching
between buffers that are governed by different syntaxes,
makes the Shift+Ctrl+Arrow keys select text again on a
Linux console, is more resistant against malformations
in the positionlog file, and does not crash when ^C is
typed on systems where it produces the code KEY_CANCEL.
Oh, and it no longer mistakenly warns about editing an
unlocked file just after saving a new one.  That's it.
Tastes great with thick butter.

(wiedi)

2017-01-22 01:43:54 UTC MAIN commitmail json YAML

Updated misc/screen to 4.5.0

(ryoon)

2017-01-22 01:43:25 UTC MAIN commitmail json YAML

Update to 4.5.0

Changelog:
Version 4.5.0 (10/12/2016):
  * Allow specifying logfile's name via command line parameter '-L'
  * Fixes:
        - broken handling of "bind u digraph U+" (bug #48691)
        - crash with long $TERM (bug #48983)
        - crash when bumping blank window
        - build for AIX (bug #49149)
        - %x improperly separating arguments
        - install with custom DESTDIR (bug #48370)

(ryoon)

2017-01-22 01:33:44 UTC MAIN commitmail json YAML

Updated chat/weechat to 1.7

(ryoon)

2017-01-22 01:32:53 UTC MAIN commitmail json YAML

Update to 1.7

Changelog:
[[v1.7]]
== Version 1.7 (2017-01-15)

New features::

  * core: add option weechat.look.align_multiline_words (issue #411, issue #802)
  * core: add optional command prefix in completion templates "commands", "plugins_commands" and "weechat_commands"
  * core: add optional arguments in completion template, sent to the callback
  * core: add option "time" in command /debug
  * api: add info "uptime" (WeeChat uptime)
  * api: add info "pid" (WeeChat PID) (issue #850)
  * fifo: add file fifo.conf and option fifo.file.path to customize FIFO pipe path/filename (issue #850)
  * irc: add server option "usermode" (issue #377, issue #820)
  * irc: add tag "self_msg" on self messages (issue #840)

Improvements::

  * core, xfer: display more information on fork errors (issue #573)
  * core: add a slash before commands completed in arguments of /command, /debug time, /key bind, /key bindctxt, /mute, /repeat, /wait
  * core: add a warning in header of configuration files to not edit by hand (issue #851)
  * alias: add a slash before commands completed in arguments of /alias
  * exec: add option "-oc" in command /exec to execute commands in process output, don't execute commands by default with "-o" (issue #877)
  * irc: evaluate content of server option "ssl_fingerprint" (issue #858)
  * irc: change default value of option irc.network.lag_reconnect from 0 to 300 (issue #818)
  * trigger: do not hide email in command "/msg nickserv register password email" (issue #849)

Bug fixes::

  * core: fix deadlock when quitting after a signal SIGHUP/SIGQUIT/SIGTERM is received (issue #32)
  * core: fix display of empty lines in search mode (issue #829)
  * api: fix crash in function string_expand_home() when the HOME environment variable is not set (issue #827)
  * exec: fix memory leak in display of process output
  * irc: fix option "-temp" in command /server (issue #880)
  * irc: fix close of server channels which are waiting for the JOIN when the server buffer is closed (issue #873)
  * irc: fix buffer switching on manual join for forwarded channels (issue #876)
  * irc: add missing tags on CTCP message sent
  * lua: fix integers returned in Lua >= 5.3 (issue #834)
  * relay: make HTTP headers case-insensitive for WebSocket connections (issue #888)
  * relay: set status to "authentication failed" and close immediately connection in case of authentication failure in weechat and irc protocols (issue #825)
  * script: reload a script after upgrade only if it was loaded, set autoload only if the script was auto-loaded (issue #855)

Build::

  * core, irc, xfer: fix compilation on Mac OS X (add link with resolv) (issue #276)
  * core: add build of xz package with make dist (cmake)
  * tests: fix compilation of tests on FreeBSD 11.0

(ryoon)

2017-01-22 00:01:31 UTC MAIN commitmail json YAML

2017-01-21 23:49:02 UTC MAIN commitmail json YAML

2017-01-21 23:38:19 UTC MAIN commitmail json YAML

Removed misplaced PKGREVISION (didn't have any effect anyway).

(rillig)

2017-01-21 20:20:43 UTC MAIN commitmail json YAML

Updated chat/ejabberd to 17.01

(fhajny)

2017-01-21 20:20:33 UTC MAIN commitmail json YAML

Update chat/ejabberd to 17.01

Most relevant changes:

Admin
- Add example api_permissions: definition to config template
- Allow old-stype mod_vcard_ldap in the config
- Fix migration of old pubsub database (migrating from 2.1.x)
- Get nodes from ejabberd_cluster instead of mnesia
- mod_configure: Fix configuration commands

Core
- Fix case clauses when using compression
- Set from/to in every routed packet
- Correctly process errors from new cyrsasl API
- Improve return values in cyrsasl API

Modules
- mod_http_bind: remove and migration code to mod_bosh
- mod_muc: Allow a subscriber to create room, then set
  allow_subscription=true
- mod_muc: Support legacy muc#roomconfig values
- mod_offline: Decode message before checking for expiration

Mnesia
- Let ejabberd_mnesia handles copy_type
- Fix index processing
- Speedup table setup, no i/o if EJABBERD_SCHEMA_PATH not set

SQL
- Add SSL support for SQL connections with PostgreSQL 1.1.2+
- Cope with malformed values in 'rosterusers' SQL table
- Improve tag insertion, avoid duplication

(fhajny)

2017-01-21 20:17:19 UTC MAIN commitmail json YAML

Updated net/erlang-xmpp to 1.1.5

(fhajny)

2017-01-21 20:17:11 UTC MAIN commitmail json YAML

Update net/erlang-xmpp to 1.1.5.

- Fix translation order
- Add legacy auth stream feature support
- Better support subtags with empty namespaces
- Add dialback feature support
- Fix error generation for raw xml elements
- Treat unknown message type as "normal"
- Allow including #text{} elements into #sm_failed{}
- Add xmpp:del_meta/2 function
- Fix typo in add_delay_info/4
- Make it possible to get text by lang
- Don't crash if previous delay tag misses 'from' attribute

(fhajny)

2017-01-21 20:15:56 UTC MAIN commitmail json YAML

Updated textproc/erlang-fast_yaml to 1.0.8

(fhajny)

2017-01-21 20:15:46 UTC MAIN commitmail json YAML

Update textproc/erlang-fast_yaml to 1.0.8.

- Load local .so instead from system package when running tests.

(fhajny)

2017-01-21 20:15:00 UTC MAIN commitmail json YAML

Updated textproc/erlang-fast_xml to 1.1.19

(fhajny)

2017-01-21 20:14:51 UTC MAIN commitmail json YAML

Update textproc/erlang-fast_xml to 1.1.19.

- Add checks for empty string
- Remove unused code
- Load locally build .so file when performing tests

(fhajny)

2017-01-21 20:13:58 UTC MAIN commitmail json YAML

Updated security/erlang-fast_tls to 1.0.10

(fhajny)

2017-01-21 20:13:48 UTC MAIN commitmail json YAML

Update security/erlang-fast_tls to 1.0.10.

- Add ability to use system installed deps instead fetching them from git.

(fhajny)

2017-01-21 20:11:04 UTC MAIN commitmail json YAML

Updated devel/erlang-ezlib to 1.0.2

(fhajny)

2017-01-21 20:10:55 UTC MAIN commitmail json YAML

Update devel/erlang-ezlib to 1.0.2.

- Do not throw badarg exception on closed port.

(fhajny)

2017-01-21 20:10:10 UTC MAIN commitmail json YAML

Updated devel/erlang-cache_tab to 1.0.6

(fhajny)

2017-01-21 20:09:54 UTC MAIN commitmail json YAML

Update devel/erlang-cache_tab to 1.0.6.

- Add dirty_dist_insert and dirty_dist_delete calls.

(fhajny)

2017-01-21 20:06:55 UTC MAIN commitmail json YAML

2017-01-21 20:05:37 UTC MAIN commitmail json YAML

Updated databases/erlang-p1_pgsql to 1.1.2

(fhajny)

2017-01-21 20:05:26 UTC MAIN commitmail json YAML

2017-01-21 19:57:12 UTC MAIN commitmail json YAML

Updated math/fftw to 3.3.6

(adam)

2017-01-21 19:55:29 UTC MAIN commitmail json YAML

FFTW 3.3.6-pl1
Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated shared libraries of the form libfftw3.so.2.6.6 instead of libfftw3.so.3.*.

FFTW 3.3.6
The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't work, and this 3.3.6 fixes it. Sorry about that.
Compilation fixes for IBM XLC.
Compilation fixes for threads on Windows.
fix SIMD autodetection on amd64 when (_MSC_VER > 1500)

(adam)

2017-01-21 19:45:21 UTC MAIN commitmail json YAML

Bump versions in buildlink

(ryoon)

2017-01-21 19:33:05 UTC MAIN commitmail json YAML

Updated audio/pulseaudio to 10.0

(ryoon)

2017-01-21 19:32:11 UTC MAIN commitmail json YAML

Update to 10.0

Changelog:
# PulseAudio 10.0 release notes
## Changes at a glance

  * Automatically switch Bluetooth profile when using VoIP
    applications
  * New module for prioritizing passthrough streams
    (module-allow-passthrough)
  * Fixed hotplugging support for USB surround sound cards
  * Separate volumes for Bluetooth A2DP and HSP profiles
  * memfd-based shared memory mechanism enabled by default
  * Removed module-xenpv-sink
  * Dropped dependency to json-c
  * When using systemd to start PulseAudio, pulseaudio.socket is
    always started first
  * Compatibility with OpenSSL 1.1.0
  * Clarified qpaeq license

## Notes for end users
### Automatically switch Bluetooth profile when using VoIP applications

Bluetooth headsets typically support both the A2DP profile, which is
suitable for music, and the HSP profile, which is suitable for
telephony use cases. module-bluetooth-policy will now automatically
switch the profile of a Bluetooth headset from A2DP to HSP/HFP when an
application creates a recording stream with property media.role=phone
(telephony applications should set that property for their
streams). When the stream goes away, the profile gets restored back to
A2DP. This way the user doesn't have to manually switch the profiles
when starting and stopping a call. This behaviour can be disabled by
giving argument auto_switch=false to module-bluetooth-policy.

### New module for prioritizing passthrough streams (module-allow-passthrough)

Passthrough streams are streams whose content must go completely unaltered from the application to the sound card, and they are mainly used for playing back compressed audio through an S/PDIF connection. When a passthrough stream is playing to a device, no other streams can play at the same time to the same device, and if there's already something playing when a passthrough stream is created, the passthrough stream creation will normally fail. Now we have a new module, called module-allow-passthrough, which will give higher priority to passthrough streams, so that if there are other streams playing when a passthrough stream is created, those other streams will be moved out of the way to a dummy device.

### Fixed hotplugging support for USB surround sound cards

A long-standing bug that prevented PulseAudio from using any
hotplugged USB surround sound cards has been fixed.

### Separate volumes for Bluetooth A2DP and HSP profiles

The Bluetooth sink and source names are now different depending on
whether the active profile is A2DP or HSP. This allows PulseAudio to
store different volumes for A2DP and HSP. Due to different mechanisms
for implementing volume control between the profiles, trying to use
the same volume value in PulseAudio doesn't actually result in the
same perceived volume, so it's better not to try to use the same
volume.

As an unfortunate transition effect, volumes saved earlier with an
older PulseAudio version won't have effect in the new PulseAudio
version, so all Bluetooth devices will have their volume reset to the
default value when running the new PulseAudio version for the first
time.

This only affects BlueZ 5 users. The same change was done already
earlier for PulseAudio's BlueZ 4 code.

### memfd-based shared memory mechanism enabled by default

The memfd-based shared memory mechanism that was implemented in 9.0 is
now enabled by default. This shouldn't cause any user-visible changes
in behaviour, except if you're using the Firejail sandboxing software,
which doesn't work with PulseAudio's old shared memory mechanism.

If desired, the feature can still be disabled by setting "enable-memfd
= no" either in daemon.conf (for disabling it at the server side) or
in client.conf (for disabling it at the client side).

### Removed module-xenpv-sink

module-xenpv-sink was removed, because it's probably not used by
anyone. If you use it, please let us know.

## Notes for packagers
### Dropped dependency to json-c

libpulse previously used json-c internally, which forced applications
to link to json-c too. That caused crashing in some GLib applications,
because json-c and json-glib both use the same name for some
functions. To solve this, we implemented the necessary JSON
functionality directly in libpulse, so we don't depend on json-c any
more.

### When using systemd to start PulseAudio, pulseaudio.socket is always started first

The pulseaudio.service unit now depends on pulseaudio.socket, meaning
that before systemd starts PulseAudio, it will always first set up the
socket. This is done to avoid confusing behaviour in certain corner
cases (see the comments in pulseaudio.service for a more detailed
explanation).

### Compatibility with OpenSSL 1.1.0

OpenSSL, which is used by module-raop-sink, broke backwards
compatibility in the 1.1.0 release. PulseAudio now supports both 1.1.0
and older versions.

### Clarified qpaeq license

Most of PulseAudio is licensed under LGPL, but the "qpaeq" equalizer
GUI is licensed under AGPL. That hasn't previously been mentioned
anywhere else than in the qpaeq source code itself. Therefore,
distributions that tag their packages with license information have
likely used incorrect information. The license of qpaeq hasn't
changed, but the use of AGPL is now correctly noted in the top-level
LICENSE file.

(ryoon)

2017-01-21 17:10:26 UTC MAIN commitmail json YAML

Always take the flex version from the second word of the version string.

When necessary, the flex version is obtained from the version string reported
by running flex.  Generally, the first word of the version string is flex and
and the second is a version number.  At least for MacOS, there is a third
vendor-specific word.  The sed command previously used to capture the flex
version captured the last word, not the second one, because the first capture
group was too greedy and could capture more than a single word.  Instead,
force the capture groups to capture only words, i.e., no blanks, and use the
second word for the version.

(brook)

2017-01-21 15:37:49 UTC MAIN commitmail json YAML

Program now supports python-3.x. Mark it as such.

(wiz)

2017-01-21 14:44:26 UTC MAIN commitmail json YAML

+ pulseaudio-10.0, wget-1.19.

(wiz)

2017-01-21 12:23:48 UTC MAIN commitmail json YAML

Note license change from modified-bsd to 2-clause-bsd.

(kim)

2017-01-21 12:13:28 UTC MAIN commitmail json YAML

Updated devel/reposurgeon to 3.40

(kim)

2017-01-21 12:07:28 UTC MAIN commitmail json YAML

Update to 3.40:

3.40: 2016-09-20
    In repocutter, repair fatal bugs in log and setlog commands.
    In repocutter, added "see" command for reporting repository structure.
    In repocutter, added "sift" command inverting "expunge".

3.39: 2016-09-01
    Make repocutter pathrename and expunge preserve Node-copyfrom-* headers.
    Make pathrename hack Node-copyfrom-path headers as well as Node-path.
    Enable repocutter to handle binary content in blobs.
    Improved documentation for the unite command.

3.38: 2016-08-27
    Fix handling of second argument of timeoffset.
    Allow full find/replace with UTF-8.
    Make the syntax of the 'split' command consistent with the manual.
    Fix buggy 'authors write' command, and add a regression test for it.

3.37: 2016-03-14
    Prevent two potential crash bug introduced by Python 3 porting.

3.36: 2016-03-13
    The repocutter and repomapper utilities are now 8-bit clean under Python 3.
    Reorder 'done' stream terminator after tag and commit creates.
    Fix for GitLab issue #52, crash on a weird unite case.

3.35: 2016-02-25
    Reposurgeon now runs under either Python 2 or 3.
    CVS repos are recognized by CVSROOT, not a (possibly missing) Attic.

3.34: 2016-02-16
    Make repocutter DTRT when copyfrom roots are removed by expunge.

3.33: 2016-02-01
    More work on header-order independence for both reposurgeon and repocutter.

3.32: 2016-01-31
    Handle Subversion dumps as produced by svndumpfilter with Node-kind first.

3.31: 2016-01-23
    repocutter, a tool for preprocessing Subversion repos, is now included.
    In repotool, a new 'branches' command lists branches (not tags).
    Fix repotool, 'tags' for CVS repo so it lists only tags, not branches.
    In repotool, a new 'compare-branches' command compares all branches.
    In repotool, a new 'compare-all' compares tip, tags, and branches.
    repotool no longer needs to run within a module directory for CVS.
    Move from BSD-3-clause to BSD-2-clause, apply SPDX tag.

3.30: 2016-01-10
    Added "when" command for timestamp conversions.
    Fix GitHub issue #42: Repository.split_commit() produces invalid marks.
    Commands now tab-complete name arguments wherever that makes sense.
    Handle format 7 Subversion dumps with sporadic empty nodes.
    Selection sets now remain ordered rather than being sorted.
    There is a new @srt() function to explicitly sort selection sets.
    The reparent command can now specify multiple ancestors.
    In SVN repositories, a tag's subdirectory is now part of its name.

(kim)

2017-01-21 11:58:52 UTC MAIN commitmail json YAML

Updated print/cups-filters to 1.13.3

(leot)

2017-01-21 11:58:29 UTC MAIN commitmail json YAML

Update print/cups-filters to cups-filters-1.13.3

pkgsrc changes:
- Add --with-apple-raster-filter=rastertopdf to CONFIGURE_ARGS to avoid
  possible PLIST issues with cups<2.2.2 (with cups>=2.2.2 urftopdf is no
  longer built)

Changes:
1.13.3
------
- libcupsfilters: When auto-generating PPD files added support
  for passing through JPEG input to printers which understand
  JPEG. This is also done in CUPS-generated PPDs (Debian bug
  #851499).
- libcupsfilters: Added the "output-bin" option support from
  CUPS' PPD generator to our PPD generator (CUPS Issue #4938).
- cups-browsed: Make support for printers with IPv6 IP address
  work. Both link-local and regular addresses work.

(leot)

2017-01-21 11:57:23 UTC MAIN commitmail json YAML

Updated print/cups to 2.2.2

(leot)

2017-01-21 11:57:10 UTC MAIN commitmail json YAML

Update print/cups to cups-2.2.2

Changes:
2.2.2
-----
- Fixed some issues with the Zebra ZPL printer driver (Issue #4898)
- Fixed some issues with IPP Everywhere printer support (Issue #4893,
  Issue #4909, Issue #4916, Issue #4921, Issue #4923, Issue #4932,
  Issue #4933, Issue #4938)
- The rastertopwg filter could crash with certain input (Issue #4942)
- Optimized connection usage in the IPP backend
  (<rdar://problem/29547323>)
- The scheduler did not detect when an encrypted connection was closed
  by the client on Linux (Issue #4901)
- The cups-lpd program did not catch all legacy usage of ISO-8859-1
  (Issue #4899)
- Fixed builds on systems without a working poll() implementation
  (Issue #4905)
- Added a USB quirk rule for the Kyocera Ecosys P6026cdn (Issue #4900)
- The scheduler no longer creates log files on startup
  (<rdar://problem/28332470>)
- The ippContainsString function now uses case-insensitive comparisons
  for mimeMediaType, name, and text values in conformance with RFC 2911.
- The network backends now log the addresses that were found for a
  printer (<rdar://problem/29268474>)
- Let's Encrypt certificates did not work when the hostname contained
  uppercase letters (Issue #4919)
- Fixed reporting of printed pages in the web interface (Issue #4924)
- Updated systemd config files (Issue #4935)
- Updated documentation (PR #4896)
- Updated localizations (PR #4894, PR #4895, PR #4904, PR #4908,
  Issue #4946)
- Updated packaging files (Issue #4940)

(leot)

2017-01-21 10:52:00 UTC pkgsrc-2016Q4 commitmail json YAML

2017-01-21 10:49:15 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5198 - requested by taca
lang/php56: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.171
- lang/php56/distinfo                                          1.39

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Fri Jan 20 00:44:01 UTC 2017

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php56: distinfo

  Log Message:
  Update php56 to 5.6.30.

  PHP                                                                        NEWS
  |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
  19 Jan 2017, PHP 5.6.30

  - EXIF:
    . Fixed bug #73737 (FPE when parsing a tag format). (Stas)

  - GD:
    . Fixed bug #73549 (Use after free when stream is passed to imagepng). (cmb)
    . Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb)
    . Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb)

  - Intl:
    . Fixed bug #68447 (grapheme_extract take an extra trailing character).
      (SATŌ Kentarō)

  - Phar:
    . Fixed bug #73764 (Crash while loading hostile phar archive). (Stas)
    . Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas)
    . Fixed bug #73773 (Seg fault when loading hostile phar). (Stas)

  - SQLite3:
    . Reverted fix for bug #73530 (Unsetting result set may reset other result
      set). (cmb)

  - Standard:
    . Fixed bug #70213 (Unserialize context shared on double class lookup).
      (Taoguang Chen)
    . Fixed bug #73825 (Heap out of bounds read on unserialize in
      finish_nested_data()). (Stas)

(bsiegert)

2017-01-21 10:18:30 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5197 - requested by taca
lang/php70: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.170
- lang/php70/distinfo                                          1.25

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Thu Jan 19 14:48:49 UTC 2017

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php70: distinfo

  Log Message:
  Update php70 to 7.0.15.

  PHP                                                                        NEWS
  |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
  19 Jan 2017 PHP 7.0.15

  - Core:
    . Fixed bug #73792 (invalid foreach loop hangs script). (Dmitry)
    . Fixed bug #73663 ("Invalid opcode 65/16/8" occurs with a variable created
      with list()). (Laruence)
    . Fixed bug #73585 (Logging of "Internal Zend error - Missing class
      information" missing class name). (Laruence)
    . Fixed bug #73753 (unserialized array pointer not advancing). (David Walker)
    . Fixed bug #73825 (Heap out of bounds read on unserialize in
      finish_nested_data()). (Stas)
    . Fixed bug #73831 (NULL Pointer Dereference while unserialize php object).
      (Stas)
    . Fixed bug #73832 (Use of uninitialized memory in unserialize()). (Stas)
    . Fixed bug #73092 (Unserialize use-after-free when resizing object's
      properties hash table). (Nikita)
    . Fixed bug #69425 (Use After Free in unserialize()). (Nikita)
    . Fixed bug #72731 (Type Confusion in Object Deserialization). (Nikita)

  - COM:
    . Fixed bug #73679 (DOTNET read access violation using invalid codepage).
      (Anatol)

  - DOM:
    . Fixed bug #67474 (getElementsByTagNameNS filter on default ns). (aboks)

  - EXIF:
    . Bug bug #73737 (FPE when parsing a tag format). (Stas)

  - GD:
    . Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb)
    . Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb)

  - GMP:
    . Fixed bug #70513 (GMP Deserialization Type Confusion Vulnerability).
      (Nikita)

  - Mysqli:
    . Fixed bug #73462 (Persistent connections don't set $connect_errno).
      (darkain)

  - Mysqlnd:
    . Fixed issue with decoding BIT columns when having more than one rows in the
      result set. 7.0+ problem. (Andrey)
    . Fixed bug #73800 (sporadic segfault with MYSQLI_OPT_INT_AND_FLOAT_NATIVE).
  (vanviegen)

  - PCRE:
    . Fixed bug #73612 (preg_*() may leak memory). (cmb)

  - PDO_Firebird:
    . Fixed bug #72931 (PDO_FIREBIRD with Firebird 3.0 not work on returning
      statement). (Dorin Marcoci)

  - Phar:
    . Fixed bug #73773 (Seg fault when loading hostile phar). (Stas)
    . Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas)
    . Fixed bug #73764 (Crash while loading hostile phar archive). (Stas)

  - Phpdbg:
    . Fixed bug #73615 (phpdbg without option never load .phpdbginit at startup).
      (Bob)
    . Fixed issue getting executable lines from custom wrappers. (Bob)
    . Fixed bug #73704 (phpdbg shows the wrong line in files with shebang). (Bob)

  - Reflection:
    . Fixed bug #46103 (ReflectionObject memory leak). (Nikita)

  - Streams:
    . Fixed bug #73586 (php_user_filter::$stream is not set to the stream the
      filter is working on). (Dmitry)

  - SQLite3:
    . Reverted fix for bug #73530 (Unsetting result set may reset other result
      set). (cmb)

  - Standard:
    . Fixed bug #73594 (dns_get_record does not populate $additional out
      parameter). (Bruce Weirdan)
    . Fixed bug #70213 (Unserialize context shared on double class lookup).
      (Taoguang Chen)
    . Fixed bug #73154 (serialize object with __sleep function crash). (Nikita)
    . Fixed bug #70490 (get_browser function is very slow). (Nikita)
    . Fixed bug #73265 (Loading browscap.ini at startup causes high memory usage).
      (Nikita)
    . Fixed bug #31875 (get_defined_functions additional param to exclude
  disabled functions). (willianveiga)

  - Zlib:
    . Fixed bug #73373 (deflate_add does not verify that output was not truncated).
      (Matt Bonneau)

(bsiegert)

2017-01-21 10:12:43 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5196 - requested by taca
lang/php71: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.169
- lang/php71/distinfo                                          1.12

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Thu Jan 19 14:43:25 UTC 2017

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php71: distinfo

  Log Message:
  Update php71 to 7.1.1.

  PHP                                                                        NEWS
  |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
  19 Jan 2017, PHP 7.1.1

  - Core:
    . Fixed bug #73792 (invalid foreach loop hangs script). (Dmitry)
    . Fixed bug #73686 (Adding settype()ed values to ArrayObject results in
      references). (Nikita, Laruence)
    . Fixed bug #73663 ("Invalid opcode 65/16/8" occurs with a variable created
      with list()). (Laruence)
    . Fixed bug #73727 (ZEND_MM_BITSET_LEN is "undefined symbol" in
      zend_bitset.h). (Nikita)
    . Fixed bug #73753 (unserialized array pointer not advancing). (David Walker)
    . Fixed bug #73783 (SIG_IGN doesn't work when Zend Signals is enabled).
      (David Walker)
    . Fixed bug #73825 (Heap out of bounds read on unserialize in
      finish_nested_data()). (Stas)
    . Fixed bug #73831 (NULL Pointer Dereference while unserialize php object).
      (Stas)
    . Fixed bug #73832 (Use of uninitialized memory in unserialize()). (Stas)

  - CLI:
    . Fixed bug #72555 (CLI output(japanese) on Windows). (Anatol)

  - COM:
    . Fixed bug #73679 (DOTNET read access violation using invalid codepage).
      (Anatol)

  - DOM:
    . Fixed bug #67474 (getElementsByTagNameNS filter on default ns). (aboks)

  - EXIF:
    . Bug bug #73737 (FPE when parsing a tag format). (Stas)

  - GD:
    . Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb)
    . Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb)

  - Mbstring:
    . Fixed bug #73646 (mb_ereg_search_init null pointer dereference).
      (Laruence)

  - Mysqli:
    . Fixed bug #73462 (Persistent connections don't set $connect_errno).
      (darkain)

  - Mysqlnd:
    . Optimized handling of BIT fields - less memory copies and lower memory
      usage. (Andrey)
    . Fixed bug #73800 (sporadic segfault with MYSQLI_OPT_INT_AND_FLOAT_NATIVE).
  (vanviegen)

  - Opcache:
    . Fixed bug #73789 (Strange behavior of class constants in switch/case block).
      (Laruence)
    . Fixed bug #73746 (Method that returns string returns UNKNOWN:0 instead).
      (Laruence)
    . Fixed bug #73654 (Segmentation fault in zend_call_function). (Nikita)
    . Fixed bug #73668 ("SIGFPE Arithmetic exception" in opcache when divide by
      minus 1). (Nikita)
    . Fixed bug #73847 (Recursion when a variable is redefined as array). (Nikita)

  - PDO_Firebird:
    . Fixed bug #72931 (PDO_FIREBIRD with Firebird 3.0 not work on returning
      statement). (Dorin Marcoci)

  - Phar:
    . Fixed bug #73773 (Seg fault when loading hostile phar). (Stas)
    . Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas)
    . Fixed bug #73764 (Crash while loading hostile phar archive). (Stas)

  - phpdbg:
    . Fixed bug #73794 (Crash (out of memory) when using run and # command
      separator). (Bob)
    . Fixed bug #73704 (phpdbg shows the wrong line in files with shebang). (Bob)

  - SQLite3:
    . Reverted fix for bug #73530 (Unsetting result set may reset other result
      set). (cmb)

  - Standard:
    . Fixed bug #73594 (dns_get_record does not populate $additional out
      parameter). (Bruce Weirdan)
    . Fixed bug #70213 (Unserialize context shared on double class lookup).
      (Taoguang Chen)
    . Fixed bug #73154 (serialize object with __sleep function crash). (Nikita)
    . Fixed bug #70490 (get_browser function is very slow). (Nikita)
    . Fixed bug #73265 (Loading browscap.ini at startup causes high memory usage).
      (Nikita)
    . Add subject to mail log. (tomsommer)
    . Fixed bug #31875 (get_defined_functions additional param to exclude
  disabled functions). (willianveiga)

  - Zlib
    . Fixed bug #73373 (deflate_add does not verify that output was not truncated).
      (Matt Bonneau)

(bsiegert)

2017-01-21 09:11:27 UTC MAIN commitmail json YAML

Readd `libexec/w3m/w3mimgdisplay' to the PLIST to fix w3m installation built
with an imagelib option.

(leot)

2017-01-21 01:58:02 UTC MAIN commitmail json YAML

Updated cad/pcb to 4.0.0

(dmcmahill)

2017-01-21 01:56:13 UTC MAIN commitmail json YAML

Update to pcb-4.0.0

========================================================================
Release notes for pcb-4.0.0
========================================================================

Dear Users,

It has been quite some time since the last snapshot of pcb was released
in March 2014.

Since then quite a lot of bugs were fixed and new features added, below
this introduction a summary is given of the improvements and additions
since the latest snapshot "pcb-20140316".

This release represents over 480 commits (mostly bugfixes and code
refactoring) and as such this summary clearly is not complete.

This pcb release 4.0.0 has a significant change in the major version
number.

This is done to make a fresh start and to get away from the 1.99z
version with YYYYMMDD snapshots.

Kind regards,

The pcb development team

User experience improvements
----------------------------
- added the command-line option --save-metric-only.
- added escaping of Attribute values.
- added a translation of the Getting Started with PCB for pt_BR.
- added translatable tooltips for toolbar buttons.
- added "Report net length" to Menu -> Info in Gtk.
- added a script for generating a key binding list.
- added tooltips in the GTK HID UI.
- the puller no longer crosses unplated holes.
- solder/component outer layer names changed to top/bottom.
- pcb now uses a tilde instead of a dash for backup filenames.
- corrections in the user documentation.
- the position "delta" display no longer forces the GTK HID window to
  grow.
- write time in ASCII locale into exported files.
- allow for up to 10000 dpi on png exporter output.

Plugins
-------
- added smartdisperse for dispersing elements better, contributed by
  Ben Jackson.
- added relocate for relocating elements, contributed by Jean Richard.
- added RenumberBlock() and RenumberBuffer(), contributed by DJ Delorie.
- added teardrops(), contributed by DJ Delorie.

Exporters
---------
- added a netlister conforming to the IPC-D-356 standard, contributed by
  Jerome Marchand.
- changed "as-shown" to "screen-layer-order" in the png and eps hids.

Footprints library
------------------
- added a SC88A footprint.
- added a LQFP80-10 footprint.
- added QFN24_5 and TQFN24_5 footprints.
- added a SOD523 footprint.
- the SOT325 package had a wrong numbering.
- renamed the SOT325 footprint to SOT353.
- in the ALF footprint the drill holes were too tight.
- an infinite loop in the SIL m4 macro was fixed.

Developer experience improvements
---------------------------------
- made a start with adding Doxygen developer documentation tags in the
  source files.
  A pcb.dox configuration file is available in the "doc/doxygen"
  directory so developers can build the documentation there by invoking
  "doxygen pcb.dox" from the CLI.
  This is not done by configuring with --enable-docs, which is solely
  reserved for the generation of User documentation.
- added numerous fixes in the win32 target.

Notes for early adapters
------------------------
In the git repository two tags have been added to allow for checking
out of pcb-4.0.0 at the branch point (git checkout pcb-4.0.0-base) or at
the release point (git checkout pcb-4.0.0-RELEASE).
This is in line with tagging done in former snapshots.

Changed dependencies
--------------------
- autoconf 2.60 --> 2.69.
- gettext 0.14 --> 0.19.3.

Contributors
------------
The following authors contributed to the 4.0.0 release:
- Milan Prochac
- WileyECoyote
- DJ Delorie
- Britton Leo Kerin
- Jerome Marchand
- chrysn
- Sergey Stepanov
- Gareth Edwards
- Peter Clifton
- Anton Dubniak
- Markus Hitter
- Kai-Martin Knaak
- Martin
- Adrian Pardini
- Keith Packard
- Patrick Bernaud
- Robert Drehmel
- erich_heinzle
- Andrew Poelstra
- Marco Ciampa
- Roland Lutz
- Eugene Mikhantiev
- Jorge Barros de Abreu
- Richard Hughes
- Ivan Stankovic
- Charles Parker
- Dan McMahill
- Igor2
- Jean Richard
- Ben Jackson
- Morvan
- dima
- Peter S. May
- Felix K (kuhlix)
- rosvall
- Sergey Alyoshin
- bert

Please note that names are in no particular order and all e-mail
addresses have been removed for privacy.

Fixed and committed Launchpad bug reports
-----------------------------------------
#699149  infinite loop in the SIL m4 macro.
#699164  Position "delta" display forces GTK HID window to grow.
#699209  DSP dances.
#699243  SOT325 Package wrong numbering.
#699286  ALF footprint drill holes too tight.
#699413  Doxygenation of action.c and hid.h.
#699539  Request: tooltips.
#699543  Request: key binding list.
#701133  Export to PNG always shows pads on other side of board.
#996319  ipc-d-356 netlist creation.
#1005137  Build fails when DEBUG constant defined.
#1013358  Auto-enforce-DRC : cannot draw with exact clearance.
#1035979  default silk layer names are the same for top and bottom.
#1048256  pcb crashes when GUI-lessly exporting a PNG.
#1074268  gcode tests fail.
#1280748  Print non localized date string.
#1308221  Use tilde instead of dash for backup files.
#1309579  Adding descriptive Tooltips to the toolbar buttons.
#1339383  Segfault on PS export with completely clipped polygon.
#1408399  small fix in source text.
#1408615  added pcb.pot to the gitignore.
#1413254  Value of 1umil incorrectly set to 10袖mil.
#1413350  Drill report - wrong hole count.
#1486582  pcb doesn't build.
#1487761  Antifork.
#1488220  Allow automated tests of actions.
#1490264  Remove vi command line interface.
#1490284  Compile error in src/hid/lesstif/dialogs.c and
          src/hid/lesstif/main.c.
#1491953  Dispersing elements better.
#1492497  Documentation for "Arc" is wrong.
#1497628  We need a PPA.
#1500224  Unit tests fail on 32-bit.
#1500241  pcb/gtk: buggy definition of LAYER_BUTTON_SILK.
#1500244  pcb/gtk: order of layer groups in preference dialogue.
#1505262  The N_ macro is spoiling the user documentation
#1506204  Quotes in attribute name or value make the PCB file
          unreadable.
#1521597  PCB includes invalid vertex into merged polygon.
#1532298  add the relocate plugin.
#1532329  add keywords to appdata.
#1534373  Improper handling of files specified on cmdline.
#1542858  strchrnull not in OSX C library.
#1550382  puller crosses unplated holes.
#1551970  Install failure in doc subdirectory.
#1553255  djopt(splitlines) does not behave as expected.
#1553281  djopt(miter) affects outline.
#1580837  Cleanup code causes core dumps.
#1586020  Bad Translation Menu Entry: PCB (Portuguese).
#1604524  polygon "twin hole" bug.
#1609542  text bug.
#1616803  Remove redundant setting of library_window->libtreeview.
#1631059  Crash during undo of element text resize.
#1631646  Non-fatal errors when building docs.
#1633924  FontSave distorts symbols.
#1636221  Undo serial number not incremented when deselecting.
#1639518  Joining Text Fails to Undo.
#1645100  Arc rtree/polygon clearance bugs.

(dmcmahill)

2017-01-20 23:49:35 UTC MAIN commitmail json YAML

Add more tex packages.

(markd)

2017-01-20 23:47:25 UTC MAIN commitmail json YAML

Add texlive-collection-all

(markd)

2017-01-20 23:46:36 UTC MAIN commitmail json YAML

Add texlive-collection-all
  A meta-pkg pulling in all the texlive collections.

(markd)

2017-01-20 23:35:18 UTC MAIN commitmail json YAML

Add tex-milog and tex-uhrzeit completing collection.

(markd)

2017-01-20 23:32:42 UTC MAIN commitmail json YAML

Add tex-przechlewski-book to complete collection

(markd)

2017-01-20 23:31:08 UTC MAIN commitmail json YAML

2017-01-20 23:29:08 UTC MAIN commitmail json YAML

2017-01-20 23:26:37 UTC MAIN commitmail json YAML

Add tex-{eqparbox,milog,przechlewski-book,uhrzeit,urlbst}{,-doc}

(markd)

2017-01-20 23:22:49 UTC MAIN commitmail json YAML

2017-01-20 23:09:56 UTC MAIN commitmail json YAML

Add tex-mparrows to complete collection.

(markd)

2017-01-20 23:07:38 UTC MAIN commitmail json YAML

Add tex-mparrows{,-doc}

(markd)

2017-01-20 23:06:06 UTC MAIN commitmail json YAML

2017-01-20 22:38:39 UTC MAIN commitmail json YAML

Updated textproc/py-vobject to 0.9.4

(wiz)

2017-01-20 22:38:29 UTC MAIN commitmail json YAML

Updated py-vobject to 0.9.4.

0.9.4

    improved PEP8 compliance (#53)
    improved Python 3 compatibility (#55)
    improved encoding/decoding (#49, #58) - thanks @pbiering!
    correct handling of pytz timezones (#45) - thanks @Achimh3011!

0.9.3

    Fixed use of doc in setup.py for -OO mode (#19) - thanks @dsanders11!
    Added python3 compatibility for base64 encoding (#21) - thanks @prauscher!
    Fixed ORG fields with multiple components (#23) - thanks @untitaker!
    Removed stray HTML entity in README (#26) - thanks @inglesp!
    Updated README.md to show example of adding "ORG" to a vCard (#28) - thanks @Tamerz!
    Handle pytz timezones in iCalendar serialization (#33) - thanks @medmunds!
    Use logging instead of printing to stdout (#35) - thanks @lucc!

(wiz)

2017-01-20 22:13:28 UTC MAIN commitmail json YAML

2017-01-20 21:57:08 UTC MAIN commitmail json YAML

Add a bunch of tex packages

(markd)

2017-01-20 21:51:32 UTC MAIN commitmail json YAML

Add a bunch of tex packages

(markd)

2017-01-20 21:44:01 UTC MAIN commitmail json YAML

Add tex-abntex2{,-doc} 1.9.6
Typeset technical and scientific Brazilian documents based on ABNT rules
Add tex-blindtext{,-doc} 2.0
Producing 'blind' text for testing
Add tex-cleveref{,-doc} 0.19
Intelligent cross-referencing
Add tex-diagbox{,-doc} 2.1
Table heads with diagonal lines
Add tex-fncychap{,-doc} 1.34
Seven predefined chapter heading styles
Add tex-fontaxes{,-doc} 1.0d
dditional font axes for LaTeX
Add tex-longfbox{,-doc} 1.0
Draw framed boxes with standard CSS attributes that can break over multiple pages
Add tex-mweights{,-doc} 20130721
Support for multiple-weight font packages
Add tex-options{,-doc} 1.0
Provides convenient key-value options for LaTeX package writers
Add tex-realboxes{,-doc} 0.2
Variants of common box-commands
Add tex-sfmath 0.8
Sans-serif mathematics
Add tex-tcolorbox{,-doc} 3.94
Coloured boxes, for LaTeX examples and theorems, etc
Add tex-titling{,-doc} 2.1d
Control over the typesetting of the \maketitle command
Add tex-trimspaces{,-doc} 1.1
Trim spaces around an argument or within a macro

(markd)

2017-01-20 21:35:01 UTC MAIN commitmail json YAML

Updated www/php-nextcloud to 11.0.1

(ryoon)

2017-01-20 21:33:51 UTC MAIN commitmail json YAML

Update to 11.0.1

Changelog:
Version 11.0.1 January 16 2017

Changes
Server

    Safari CSPv3 support is sub-par (server/2699)
    Fix legacy DAV endpoint (server/2685)
    Use unmasked permissions in shared scanner (server/2696)
    Do not connect to database before creating it (server/2703)
    Fix todo list activity filter (server/2746)
    Changed anchor in settings page (server/2805)
    Also check in cron for old php version (server/2809)
    Add DAV repair step to fix calendar data (server/2807)
    Only log as info when we can not create a new DB user (server/2750)
    Fix wording for apps mgmt buttons (server/2751)
    Use a form so firefox doesn't try to save the space as a password (server/2804)
    Fix overwriting parameter (server/2825)
    Applied security hardening in SwiftMailer (core/2882)
    Don't set Content-Disposition header if one already exists (server/2949)
    Don't link to the oC forum (server/2988)
    Set redirect_url on 2FA challenge page (server/2981)
    Dont write a certificate bundle if the shipped ca bundle is empty (server/2994)
    Remove group restrictions when those are not allowed anymore (server/2980)

Activity

    Update docs and samples (activity/92)
    Make sure the preview URLs are absolute (activity/91)

User_SAML

    Update SAML library (user_saml/64))
    Make the JS work with sudo mode (user_saml/71))
    Enabled strict mode (user_saml/75))

files_retention

    Delete job if tag not found (files_retention/18)

Also included is a precautionary update for a recent SwiftMailer security issue.

(ryoon)

2017-01-20 21:10:58 UTC MAIN commitmail json YAML

Add tex-ellipse* tex-incgraph*

(markd)

2017-01-20 21:09:07 UTC MAIN commitmail json YAML

Add tex-incgraph{,-doc} 1.12

The package provides tools for including graphics at the full
size of the output medium, or for creating "pages" whose size
is that of the graphic they contain. A principal use case is
documents that require inclusion of (potentially many) scans or
photographs. Bookmarking is especially supported. The tool box
has basic macros and a 'convenience' user interface that wraps
\includegraphics.

(markd)

2017-01-20 21:07:40 UTC MAIN commitmail json YAML

2017-01-20 19:03:56 UTC MAIN commitmail json YAML

Updated www/py-werkzeug to 0.11.15.
Updated www/py-werkzeug-docs to 0.11.15.

(kleink)

2017-01-20 19:02:32 UTC MAIN commitmail json YAML

Update py-werkzeug{,-docs} to 0.11.15.

Version 0.11.15
---------------

Released on December 30th 2016.

- Bugfix for the bugfix in the previous release.

Version 0.11.14
---------------

Released on December 30th 2016.

- Check if platform can fork before importing ``ForkingMixIn``, raise exception
  when creating ``ForkingWSGIServer`` on such a platform, see PR ``#999``.

Version 0.11.13
---------------

Released on December 26th 2016.

- Correct fix for the reloader issuer on certain Windows installations.

Version 0.11.12
---------------

Released on December 26th 2016.

- Fix more bugs in multidicts regarding empty lists. See ``#1000``.
- Add some docstrings to some `EnvironBuilder` properties that were previously
  unintentionally missing.
- Added a workaround for the reloader on windows.

Version 0.11.11
---------------

Released on August 31st 2016.

- Fix JSONRequestMixin for Python3. See #731
- Fix broken string handling in test client when passing integers. See #852
- Fix a bug in ``parse_options_header`` where an invalid content type
  starting with comma or semi-colon would result in an invalid return value,
  see issue ``#995``.
- Fix a bug in multidicts when passing empty lists as values, see issue
  ``#979``.
- Fix a security issue that allows XSS on the Werkzeug debugger. See ``#1001``.

(kleink)

2017-01-20 18:38:21 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5195 - requested by taca
www/typo3_62: security fix

Revisions pulled up:
- www/typo3_62/Makefile                                        1.21
- www/typo3_62/PLIST                                            1.17
- www/typo3_62/distinfo                                        1.19

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Fri Jan 13 15:06:40 UTC 2017

  Modified Files:
  pkgsrc/www/typo3_62: Makefile PLIST distinfo

  Log Message:
  Update typo3_62 to 6.2.30 (TYPO3 6.2.30) including security fixes.

  2017-01-03  ec284cf                  [RELEASE] Release of TYPO3 6.2.30 (TYPO3 Release Team)
  2017-01-03  0f79d43  #79114          [SECURITY] Protect Mailtransport (Wouter Wolters)
  2016-12-31  7a99325  #70106          [BUGFIX] Do not use realpath for temporary file names (Stefan Froemken)
  2016-12-30  5bb34d0  #76478          [TASK] Clean up DebuggerUtility (Nicole Cordes)
  2016-12-24  98dd27a  #70962          [BUGFIX] FAL relations duplicated when saving in workspaces (Andreas Wolf)
  2016-12-16  5124e88  #78915,#78977  [BUGFIX] Optimize cache handling in ReflectionService (Helmut Hummel)
  2016-12-15  18b19ea  #78977          Revert "[BUGFIX] Reflection Cache does not save methodReflections" (Nicole Cordes)
  2016-12-13  8095288  #78925          [BUGFIX] Fix exception in QuickEdit mode for empty pages (Manuel Selbach)
  2016-12-12  8ef727a  #78915          [BUGFIX] Reflection Cache does not save methodReflections (Tymoteusz Motylewski)
  2016-12-08  01a927d  #73241          [BUGFIX] Do not fetch pages with pid < 0 in prepareCacheFlush (Steffen G旦de)
  2016-12-08  bab723b  #72654,#62660  [BUGFIX] Improve DataHandler handling for dbType fields (Nicole Cordes)
  2016-12-07  1a32e92  #78551          [BUGFIX] Reset hidden field information in FormViewhelper (Nicole Cordes)
  2016-12-03  b927c7b  #77097          [BUGFIX] Reset FormViewHelper on execution (Helmut Hummel)

(bsiegert)

2017-01-20 18:35:38 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5194 - requested by joerg
security/botan-devel: build fix

Revisions pulled up:
- security/botan-devel/distinfo                                1.12
- security/botan-devel/patches/patch-src_build-data_os_solaris.txt 1.1
- security/botan-devel/patches/patch-src_lib_utils_locking__allocator_info.txt 1.1
- security/botan-devel/patches/patch-src_lib_utils_os__utils.cpp 1.4

---
  Module Name: pkgsrc
  Committed By: joerg
  Date: Mon Jan 16 01:50:15 UTC 2017

  Modified Files:
  pkgsrc/security/botan-devel: distinfo
  pkgsrc/security/botan-devel/patches: patch-src_lib_utils_os__utils.cpp
  Added Files:
  pkgsrc/security/botan-devel/patches:
      patch-src_build-data_os_solaris.txt
      patch-src_lib_utils_locking__allocator_info.txt

  Log Message:
  More fixes for build on SmartOS/Solaris.

(bsiegert)

2017-01-20 17:54:31 UTC MAIN commitmail json YAML

Added www/py-flask-webpack version 0.1.0.

(kleink)

2017-01-20 17:53:51 UTC MAIN commitmail json YAML

Add py-flask-webpack.

(kleink)

2017-01-20 17:53:09 UTC MAIN commitmail json YAML

Import Flask-Webpack-0.1.0 as www/py-flask-webpack.

Flask-Webpack ties Webpack and Flask together. It exposes a few
global template tags so that you can work with assets in your jinja
templates and it works with any wsgi server.

(kleink)

2017-01-20 16:13:12 UTC MAIN commitmail json YAML

Note update of security/opendnssec to 1.4.13.

(he)

2017-01-20 16:12:39 UTC MAIN commitmail json YAML

Update OpenDNSSEC to version 1.4.13.

Pkgsrc changes:
* Remove patch now integrated.

Upstream changes:

OpenDNSSEC 1.4.13 - 2017-01-20

* OPENDNSSEC-778: Double NSEC3PARAM record after resalt.
* OPENDNSSEC-853: Fixed serial_xfr_acquired not updated in state file.
* Wrong error was sometimes being print on failing TCP connect.
* Add support for OpenSSL 1.1.0.
* OPENDNSSEC-866: Script for migration between MySQL and SQLite was outdated.

(he)

2017-01-20 16:01:32 UTC MAIN commitmail json YAML

2017-01-20 15:04:22 UTC MAIN commitmail json YAML

Updated www/firefox45 to 45.6.0nb2
Updated www/firefox to 50.1.0nb2

(ryoon)

2017-01-20 15:03:37 UTC MAIN commitmail json YAML

2017-01-20 15:02:05 UTC MAIN commitmail json YAML

Updated devel/nss to 3.28.1

(ryoon)

2017-01-20 15:01:23 UTC MAIN commitmail json YAML

Update to 3.28.1

* Bump nspr requirement

Changelog:
3.28.1:
The NSS team has released Network Security Services (NSS) 3.28.1,
which is a patch release.

Below is a summary of the changes.
Please refer to the full release notes for additional details,
including the SHA256 fingerprints of the changed CA certificates.

No new functionality is introduced in this release. This is a patch release to
update the list of root CA certificates and address a minor TLS compatibility
issue that some applications experienced with NSS 3.28.

Notable Changes:
* The following CA certificates were Removed
- CN = Buypass Class 2 CA 1
- CN = Root CA Generalitat Valenciana
- OU = RSA Security 2048 V3
* The following CA certificates were Added
- OU = AC RAIZ FNMT-RCM
- CN = Amazon Root CA 1
- CN = Amazon Root CA 2
- CN = Amazon Root CA 3
- CN = Amazon Root CA 4
- CN = LuxTrust Global Root 2
- CN = Symantec Class 1 Public Primary Certification Authority - G4
- CN = Symantec Class 1 Public Primary Certification Authority - G6
- CN = Symantec Class 2 Public Primary Certification Authority - G4
- CN = Symantec Class 2 Public Primary Certification Authority - G6
* The version number of the updated root CA list has been set to 2.11
* A misleading assertion/alert has been removed when NSS tries to flush data
  to the peer but the connection was already reset.

3.28:
The NSS team has released Network Security Services (NSS) 3.28,
which is a minor release.

Below is a summary of the changes.

Please refer to the full release notes for additional details:
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28_release_notes

Request to test and prepare for TLS 1.3 (draft):
================================================
To prepare for a change of default build options, which is
planned for
the future NSS 3.29 release, we'd like to encourage all users of NSS
3.28
to override the standard NSS build configuration to enable support for
(draft
) TLS 1.3 by defining NSS_ENABLE_TLS_1_3=1 at build time.
We'd like to ask you to
please give feedback to the NSS developers for any
compatibility issues that you
might encounter in your tests.

For providing feedback, you may send a message to this mailing list, see:
  https://lists.mozilla.org/listinfo/dev-tech-crypto
or please report a bug here:
  https://bugzilla.mozilla.org/enter_bug.cgi?product=NSS

New functionality:
==================
* NSS includes support for TLS 1.3 draft -18. This includes a number 
  of
improvements to TLS 1.3:
  - The signed certificate timestamp, used in
certificate transparency, 
    is supported in TLS 1.3.
  - Key exporters for TLS
1.3 are supported. This includes the early key
    exporter, which can be used if
0-RTT is enabled. Note that there is a
    difference between TLS 1.3 and key
exporters in older versions of TLS.
    TLS 1.3 does not distinguish between an
empty context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by
defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
* NSS includes support for
the X25519 key exchange algorithm, which is
  supported and enabled by default in
all versions of TLS.

New Functions:
==============
* SSL_ExportEarlyKeyingMaterial
* SSL_SendAdditionalKeyShares
* SSL_SignatureSchemePrefSet
* SSL_SignatureSchemePrefGet

Notable Changes:
================
* NSS can no longer be compiled with support for additional elliptic curves.
  This was previously possible by replacing certain NSS source files.
* NSS will now detect the presence of tokens that support additional
  elliptic curves and enable those curves for use in TLS.
  Note that this detection has a one-off performance cost, which can be
  avoided by using the SSL_NamedGroupConfig function to limit supported
  groups to those that NSS provides.
* PKCS#11 bypass for TLS is no longer supported and has been removed.
* Support for "export" grade SSL/TLS cipher suites has been removed.
* NSS now uses the signature schemes definition in TLS 1.3.
  This also affects TLS 1.2. NSS will now only generate signatures with the
  combinations of hash and signature scheme that are defined in TLS 1.3,
  even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are 
    supported by a peer if there was no commonly supported signature scheme.
* NSS will now check if RSA-PSS signing is supported by the token that holds
  the private key prior to using it for TLS.
* The certificate validation code contains checks to no longer trust
  certificates that are issued by old WoSign and StartCom CAs after 
  October 21, 2016. This is equivalent to the behavior that Mozilla will
  release with Firefox 51.

(ryoon)

2017-01-20 13:50:02 UTC MAIN commitmail json YAML

Updated archivers/p5-Archive-Extract to 0.80

(mef)

2017-01-20 13:49:51 UTC MAIN commitmail json YAML

Updated archivers/p5-Archive-Extract to 0.80
--------------------------------------------
0.80    Wed Jan 18 23:14:32 GMT 2017
* Change Linux unzip heuristic to match FreeBSD's [rt#119905]

(mef)

2017-01-20 11:01:38 UTC MAIN commitmail json YAML

2017-01-20 11:01:06 UTC MAIN commitmail json YAML

Added cad/oce version 0.18

(fhajny)

2017-01-20 11:00:50 UTC MAIN commitmail json YAML

2017-01-20 09:39:07 UTC MAIN commitmail json YAML

Updated devel/py-argcomplete to 1.8.0

(fhajny)

2017-01-20 09:38:58 UTC MAIN commitmail json YAML

Update devel/py-argcomplete to 1.8.0.

- Simplify nospace handling in global completion (#195)
- Specially handle all characters in COMP_WORDBREAKS (#187)
- Use setuptools tests-require directive, fixes #186
- Complete files using the specified interpreter (#192)
- Fix completion for scripts run via python (#191)
- Clarify argument to register-python-argcomplete (#190)
- Fix handling of commas and other special chars (#172); handle more
  special characters (#189)
- Fix handling of special characters in tcsh (#188)
- Update my_shlex to Python 3.6 version (#184)
- Fix additional trailing space in exact matches (#183)
- Adjust tests to handle development environments (#180)
- Fix tcsh tests on OSX (#177); Update bash on OSX (#176); Check output
  of test setup command (#179)
- Optionally disable duplicated flags (#143)
- Add default_completer option to CompletionFinder.call (#167)
- Let bash add or suppress trailing space (#159)

(fhajny)

2017-01-20 00:44:49 UTC MAIN commitmail json YAML

Note update of lang/php56 package to 5.6.30.

(taca)

2017-01-20 00:44:01 UTC MAIN commitmail json YAML

Update php56 to 5.6.30.

PHP                                                                        NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
19 Jan 2017, PHP 5.6.30

- EXIF:
  . Fixed bug #73737 (FPE when parsing a tag format). (Stas)

- GD:
  . Fixed bug #73549 (Use after free when stream is passed to imagepng). (cmb)
  . Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb)
  . Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb)

- Intl:
  . Fixed bug #68447 (grapheme_extract take an extra trailing character).
    (SATŌ Kentarō)

- Phar:
  . Fixed bug #73764 (Crash while loading hostile phar archive). (Stas)
  . Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas)
  . Fixed bug #73773 (Seg fault when loading hostile phar). (Stas)

- SQLite3:
  . Reverted fix for bug #73530 (Unsetting result set may reset other result
    set). (cmb)

- Standard:
  . Fixed bug #70213 (Unserialize context shared on double class lookup).
    (Taoguang Chen)
  . Fixed bug #73825 (Heap out of bounds read on unserialize in
    finish_nested_data()). (Stas)

(taca)

2017-01-19 23:46:20 UTC MAIN commitmail json YAML

Added www/SOGo3 version 3.2.5

(wiedi)

2017-01-19 23:45:33 UTC MAIN commitmail json YAML

Import SOGo-3.2.5 as www/SOGo3

Since upstream still maintaines the 2-series it is kept in www/SOGo.
Version 3, introduced in early 2016, has a modern, fully responsive Web
frontend. Both versions share a common implementation of the communication
protocols supported in SOGo and SOPE: LDAP, IMAP, SQL, CardDAV, CalDAV, and
Microsoft Enterprise ActiveSync.

DESCR:
SOGo is fully supported and trusted groupware server with a focus
on scalability and open standards. SOGo is released under the GNU
GPL/LGPL v2 and above.

SOGo provides a rich AJAX-based Web interface and supports multiple
native clients through the use of standard protocols such as CalDAV,
CardDAV and GroupDAV.

SOGo is the missing component of your infrastructure; it sits in
the middle of your servers to offer your users an uniform and
complete interface to access their information. It has been deployed
in production environments where thousands of users are involved.

(wiedi)

2017-01-19 20:35:03 UTC MAIN commitmail json YAML

Updated lang/py35-html-docs to 3.5.3

(leot)

2017-01-19 20:34:50 UTC MAIN commitmail json YAML

Update lang/py35-html-docs to py35-html-docs-3.5.3

pkgsrc changes:
- Switch MASTER_SITES to https://www.python.org/ftp/python/doc/${VERS}/
  Unlike previous MASTER_SITES the documentation there is not regenerated
  periodically (so it will avoid possible changes in the distfiles).

Changes (from the `Documentation' section of the Python 3.5.3 Changelog):
- Issue #28513: Documented command-line interface of zipfile.

(leot)

2017-01-19 19:59:56 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5192 - requested by schmonz
www/ikiwiki: security fix

Revisions pulled up:
- www/ikiwiki/Makefile                                          1.145-1.148
- www/ikiwiki/distinfo                                          1.117-1.120

---
  Module Name: pkgsrc
  Committed By: schmonz
  Date: Fri Dec 30 03:21:11 UTC 2016

  Modified Files:
  pkgsrc/www/ikiwiki: Makefile distinfo

  Log Message:
  Update to 3.20161229. From the changelog:

  * Security: force CGI::FormBuilder->field to scalar context where
    necessary, avoiding unintended function argument injection
    analogous to CVE-2014-1572. In ikiwiki this could be used to
    forge commit metadata, but thankfully nothing more serious.
    (CVE-2016-9646)
  * Security: try revert operations in a temporary working tree before
    approving them. Previously, automatic rename detection could result in
    a revert writing outside the wiki srcdir or altering a file that the
    reverting user should not be able to alter, an authorization bypass.
    (CVE-2016-10026 represents the original vulnerability.)
    The incomplete fix released in 3.20161219 was not effective for git
    versions prior to 2.8.0rc0.
    (CVE-2016-9645 represents that incomplete solution.)
  * Add CVE references for CVE-2016-10026
  * Add automated test for using the CGI with git, including
    CVE-2016-10026
    - Build-depend on libipc-run-perl for better build-time test coverage
  * Add missing ikiwiki.setup for the manual test for CVE-2016-10026
  * git: don't issue a warning if the rcsinfo CGI parameter is undefined
  * git: do not fail to commit changes with a recent git version
    and an anonymous committer

---
  Module Name: pkgsrc
  Committed By: schmonz
  Date: Fri Dec 30 13:59:42 UTC 2016

  Modified Files:
  pkgsrc/www/ikiwiki: Makefile distinfo

  Log Message:
  Update to 3.20161229.1. From the changelog:

  * git: Attribute reverts to the user doing the revert, not the wiki
    itself.
  * git: Do not disable the commit hook while preparing a revert.

---
  Module Name: pkgsrc
  Committed By: schmonz
  Date: Wed Jan 11 02:15:54 UTC 2017

  Modified Files:
  pkgsrc/www/ikiwiki: Makefile distinfo

  Log Message:
  Update to 3.20170110. From the changelog:

  [ Amitai Schleier ]
  * wrappers: Correctly escape quotes in git_wrapper_background_command

  [ Simon McVittie ]
  * git: use an explicit function parameter for the directory to work
    in. Previously, we used global state that was not restored correctly
    on catching exceptions, causing an unintended log message
    "cannot chdir to .../ikiwiki-temp-working: No such file or directory"
    with versions >= 3.20161229 when an attempt to revert a change fails
    or is disallowed
  * git: don't run "git rev-list ... -- -- ..." which would select the
    wrong commits if a file named literally "--" is present in the
    repository
  * check_canchange: log "bad file name whatever", not literal string
    "bad file name %s"
  * t/git-cgi.t: fix a race condition that made the test fail
    intermittently
  * t/git-cgi.t: be more careful to provide a syntactically valid
    author/committer name and email, hopefully fixing this test on
    ci.debian.net
  * templates, comments, passwordauth: use rel=nofollow microformat
    for dynamic URLs
  * templates: use rel=nofollow microformat for comment authors
  * news: use Debian security tracker instead of MITRE for security
    references. Thanks, anarcat
  * Set package format to 3.0 (native)
  * d/copyright: re-order to put more specific stanzas later, to get the
    intended interpretation
  * d/source/lintian-overrides: override obsolete-url-in-packaging for
    OpenID Selector, which does not seem to have any more current URL
    (and in any case our version is a fork)
  * docwiki.setup: exclude TourBusStop from offline documentation.
    It does not make much sense there.
  * d/ikiwiki.lintian-overrides: override script-not-executable warnings
  * d/ikiwiki.lintian-overrides: silence false positive spelling warning
    for Moin Moin
  * d/ikiwiki.doc-base: register the documentation with doc-base
  * d/control: set libmagickcore-6.q16-3-extra as preferred
    build-dependency, with virtual package libmagickcore-extra as an
    alternative, to help autopkgtest to do the right thing

---
  Module Name: pkgsrc
  Committed By: schmonz
  Date: Thu Jan 12 00:44:15 UTC 2017

  Modified Files:
  pkgsrc/www/ikiwiki: Makefile distinfo

  Log Message:
  Update to 3.20170111. From the changelog:

  * passwordauth: prevent authentication bypass via multiple name
    parameters (CVE-2017-0356, OVE-20170111-0001)
  * passwordauth: avoid userinfo forgery via repeated email parameter
    (also in the scope of CVE-2017-0356)
  * CGI, attachment, passwordauth: harden against repeated parameters
    (not believed to have been a vulnerability)
  * remove: make it clearer that repeated page parameter is OK here
  * t/passwordauth.t: new automated test for passwordauth

(bsiegert)

2017-01-19 19:56:49 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5185 (second part) - requested by wiz
security/gnutls: build fix

Revisions pulled up:
- security/gnutls/buildlink3.mk                                1.32

---
  Module Name: pkgsrc
  Committed By: wiz
  Date: Wed Jan 11 17:06:52 UTC 2017

  Modified Files:
  pkgsrc/security/gnutls: buildlink3.mk

  Log Message:
  Add libunistring to bl3.mk, it's linked into libgnutls{,xx}.so.

  PR 51830

(bsiegert)

2017-01-19 19:55:17 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5185 - requested by wiz
security/gnutls: security fix

Revisions pulled up:
- security/gnutls/Makefile                                      1.168-1.169
- security/gnutls/PLIST                                        1.54
- security/gnutls/distinfo                                      1.122
- security/gnutls/patches/patch-tests_mini-server-name.c        deleted

---
  Module Name: pkgsrc
  Committed By: maya
  Date: Sat Jan  7 18:49:16 UTC 2017

  Modified Files:
  pkgsrc/security/gnutls: Makefile

  Log Message:
  gnutls: don't redefine max_align_t on FreeBSD. It incorrectly fails the
  configure test because the type in stddef.h is guarded by a c11 macro
  (most likely).

  Force the configure test to pass.

  From David Shao in PR pkg/51793 (originally from FreeBSD ports).

---
  Module Name: pkgsrc
  Committed By: wiz
  Date: Tue Jan 10 16:23:50 UTC 2017

  Modified Files:
  pkgsrc/security/gnutls: Makefile PLIST distinfo
  Removed Files:
  pkgsrc/security/gnutls/patches: patch-tests_mini-server-name.c

  Log Message:
  Updated gnutls to 3.5.8.

  * Version 3.5.8 (released 2016-01-09)

  ** libgnutls: Ensure that multiple calls to the gnutls_set_priority_*
    functions will not leave the verification profiles field to an
    undefined state. The last call will take precedence.

  ** libgnutls: Ensure that GNUTLS_E_DECRYPTION_FAIL will be returned
    by PKCS#8 decryption functions when an invalid key is provided. This
    addresses regression on decrypting certain PKCS#8 keys.

  ** libgnutls: Introduced option to override the default priority string
    used by the library. The intention is to allow support of system-wide
    priority strings (as set with --with-system-priority-file). The
    configure option is --with-default-priority-string.

  ** libgnutls: Require a valid IV size on all ciphers for PKCS#8 decryption.
    This prevents crashes when decrypting malformed PKCS#8 keys.

  ** libgnutls: Fix crash on the loading of malformed private keys with certain
    parameters set to zero.

  ** libgnutls: Fix double free in certificate information printing. If the PKIX
    extension proxy was set with a policy language set but no policy specified,
    that could lead to a double free.

  ** libgnutls: Addressed memory leaks in client and server side error paths
    (issues found using oss-fuzz project)

  ** libgnutls: Addressed memory leaks in X.509 certificate printing error paths
    (issues found using oss-fuzz project)

  ** libgnutls: Addressed memory leaks and an infinite loop in OpenPGP certificate
    parsing. Fixes by Alex Gaynor. (issues found using oss-fuzz project)

  ** libgnutls: Addressed invalid memory accesses in OpenPGP certificate parsing.
    (issues found using oss-fuzz project)

  ** API and ABI modifications:
  No changes since last version.

  * Version 3.5.7 (released 2016-12-8)

  ** libgnutls: Include CHACHA20-POLY1305 ciphersuites in the SECURE128
    and SECURE256 priority strings.

  ** libgnutls: Require libtasn1 4.9; this ensures gnutls will correctly
    operate with OIDs which have elements that exceed 2^32.

  ** libgnutls: The DN decoding functions output the traditional DN format
    rather than the strict RFC4514 compliant textual DN. This reverts the
    3.5.6 introduced change, and allows applications which depended on the
    previous format to continue to function. Introduced new functions which
    output the strict format by default, and can revert to the old one using
    a flag.

  ** libgnutls: Improved TPM key handling. Check authorization requirements
    prior to using a key and fix issue on loop for PIN input. Patches by
    James Bottomley.

  ** libgnutls: In all functions accepting UTF-8 passwords, ensure that
    passwords are normalized according to RFC7613. When invalid UTF-8
    passwords are detected, they are only tolerated for decryption.
    This introduces a libunistring dependency on GnuTLS. A version of
    libunistring is included in the library for the platforms that do
    not ship it; it can be used with the '--with-included-unistring'
    option to configure script.

  ** libgnutls: When setting a subject alternative name in a certificate
    which is in UTF-8 format, it will transparently be converted to IDNA form
    prior to storing.

  ** libgnutls: GNUTLS_CRT_PRINT_ONELINE flag on gnutls_x509_crt_print()
    will print the SHA256 key-ID instead of a certificate fingerprint.

  ** libgnutls: enhance the PKCS#7 verification capabilities. In the case
    signers that are not discoverable using the trust list or input, use
    the stored list as pool to generate a trusted chain to the signer.

  ** libgnutls: Improved MTU calculation precision for the CBC ciphersuites
    under DTLS.

  ** libgnutls: [added missing news entry since 3.5.0]
    No longer tolerate certificate key usage violations for
    TLS signature verification, and decryption. That is GnuTLS will fail
    to connect to servers which incorrectly use a restricted to signing certificate
    for decryption, or vice-versa. This reverts the lax behavior introduced
    in 3.1.0, due to several such broken servers being available. The %COMPAT
    priority keyword can be used to work-around connecting on these servers.

  ** certtool: When exporting a CRQ in DER format ensure no text data are
    intermixed. Patch by Dmitry Eremin-Solenikov.

  ** certtool: Include the SHA-256 variant of key ID in --certificate-info
    options.

  ** p11tool: Introduced the --initialize-pin and --initialize-so-pin
    options.

  ** API and ABI modifications:
  gnutls_utf8_password_normalize: Added
  gnutls_ocsp_resp_get_responder2: Added
  gnutls_x509_crt_get_issuer_dn3: Added
  gnutls_x509_crt_get_dn3: Added
  gnutls_x509_rdn_get2: Added
  gnutls_x509_dn_get_str2: Added
  gnutls_x509_crl_get_issuer_dn3: Added
  gnutls_x509_crq_get_dn3: Added

  * Version 3.5.6 (released 2016-11-04)

  ** libgnutls: Enhanced the PKCS#7 parser to allow decoding old
    (pre-rfc5652) structures with arbitrary encapsulated content.

  ** libgnutls: Introduced a function group to set known DH parameters
    using groups from RFC7919.

  ** libgnutls: Added more strict RFC4514 textual DN encoding and decoding.
    Now the generated textual DN is in reverse order according to RFC4514,
    and functions which generate a DN from strings such gnutls_x509_crt_set_*dn()
    set the expected DN (reverse of the provided string).

  ** libgnutls: Introduced time and constraints checks in the end certificate
    in the gnutls_x509_crt_verify_data2() and gnutls_pkcs7_verify_direct()
    functions.

  ** libgnutls: Set limits on the maximum number of alerts handled. That is,
    applications using gnutls could be tricked into an busy loop if the
    peer sends continuously alert messages. Applications which set a maximum
    handshake time (via gnutls_handshake_set_timeout) will eventually recover
    but others may remain in a busy loops indefinitely. This is related but
    not identical to CVE-2016-8610, due to the difference in alert handling
    of the libraries (gnutls delegates that handling to applications).

  ** libgnutls: Reverted the change which made the gnutls_certificate_set_*key*
    functions return an index (introduced in 3.5.5), to avoid affecting programs
    which explicitly check success of the function as equality to zero. In order
    for these functions to return an index an explicit call to gnutls_certificate_set_flags
    with the GNUTLS_CERTIFICATE_API_V2 flag is now required.

  ** libgnutls: Reverted the behavior of sending a status request extension even
    without a response (introduced in 3.5.5). That is, we no longer reply to a
    client's hello with a status request, with a status request extension. Although
    that behavior is legal, it creates incompatibility issues with releases in
    the gnutls 3.3.x branch.

  ** libgnutls: Delayed the initialization of the random generator at
    the first call of gnutls_rnd(). This allows applications to load
    on systems which getrandom() would block, without blocking until
    real random data are needed.

  ** certtool: --get-dh-params will output parameters from the RFC7919
    groups.

  ** p11tool: improvements in --initialize option.

  ** API and ABI modifications:
  GNUTLS_CERTIFICATE_API_V2: Added
  GNUTLS_NO_TICKETS: Added
  gnutls_pkcs7_get_embedded_data_oid: Added
  gnutls_anon_set_server_known_dh_params: Added
  gnutls_certificate_set_known_dh_params: Added
  gnutls_psk_set_server_known_dh_params: Added
  gnutls_x509_crt_check_key_purpose: Added

  * Version 3.5.5 (released 2016-10-09)

  ** libgnutls: enhanced gnutls_certificate_set_ocsp_status_request_file()
    to allow importing multiple OCSP request files, one for each chain
    provided.

  ** libgnutls: The gnutls_certificate_set_key* functions return an
    index of the added chain. That index can be used either with
    gnutls_certificate_set_ocsp_status_request_file(), or with
    gnutls_certificate_get_crt_raw() and friends.

  ** libgnutls: Added SHA*, AES-GCM, AES-CCM and AES-CBC optimized implementations
    for the aarch64 architecture. Uses Andy Polyakov's assembly code.

  ** libgnutls: Ensure proper cleanups on gnutls_certificate_set_*key()
    failures due to key mismatch. This prevents leaks or double freeing
    on such failures.

  ** libgnutls: Increased the maximum size of the handshake message hash.
    This will allow the library to cope better with larger packets, as
    the ones offered by current TLS 1.3 drafts.

  ** libgnutls: Allow to use client certificates despite them containing
    disallowed algorithms for a session. That allows for example a client
    to use DSA-SHA1 due to his old DSA certificate, without requiring him
    to enable DSA-SHA1 (and thus make it acceptable for the server's certificate).

  ** libgnutls: Reverted AESNI code on x86 to earlier version as the
    latest version was creating position depending code. Added checks
    in the CI to detect position depending code early.

  ** guile: Update code to the I/O port API of Guile >= 2.1.4
    This makes sure the GnuTLS bindings will work with the forthcoming 2.2
    stable series of Guile, of which 2.1 is a preview.

  ** API and ABI modifications:
  gnutls_certificate_set_ocsp_status_request_function2: Added
  gnutls_session_ext_register: Added
  gnutls_session_supplemental_register: Added
  GNUTLS_E_PK_INVALID_PUBKEY: Added
  GNUTLS_E_PK_INVALID_PRIVKEY: Added

(bsiegert)

2017-01-19 19:48:45 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5193 - requested by wiz
security/libtasn1: bugfix, build fix

Revisions pulled up:
- security/libtasn1/Makefile                                    1.67-1.68
- security/libtasn1/distinfo                                    1.47

---
  Module Name: pkgsrc
  Committed By: wiz
  Date: Tue Jan 10 15:26:32 UTC 2017

  Modified Files:
  pkgsrc/security/libtasn1: Makefile distinfo

  Log Message:
  Updated libtasn1 to 4.9.

  * Noteworthy changes in release 4.9 (released 2016-07-25) [stable]
  - Fixes to OID encoding of OIDs which have elements which exceed 2^32

---
  Module Name: pkgsrc
  Committed By: wiz
  Date: Wed Jan 11 16:25:06 UTC 2017

  Modified Files:
  pkgsrc/security/libtasn1: Makefile

  Log Message:
  Remove -Werror from compilation flags.

  PR 51821
  PR 51829

(bsiegert)

2017-01-19 18:52:30 UTC MAIN commitmail json YAML

2017-01-19 17:21:19 UTC MAIN commitmail json YAML

Note update of sysutils/collectd to 5.6.2nb1.

(he)

2017-01-19 17:20:42 UTC MAIN commitmail json YAML

Reinstate the "processes" plugin for NetBSD by initializing the
two per-process context switch counters to -1, indicating no support.
Our kinfo_lwp structure doesn't contain the context switch counters,
which in the kernel is part of the lwp structure.

Also make this build on netbsd-6 and on ports which don't yet have
nearbyint() by simply defining it as rint() on NetBSD.

Bump PKGREVISION.

(he)

2017-01-19 14:58:33 UTC MAIN commitmail json YAML

Note update of www/contao35 package to 3.5.24.

(taca)

2017-01-19 14:58:05 UTC MAIN commitmail json YAML

Update contao35 to 3.5.24.

Version 3.5.24 (2017-01-19)
---------------------------

### Fixed
Correctly handle SVGZ files in the file manager (also fixes #8624).

### Fixed
Revert the download element changes (see #8620).

(taca)

2017-01-19 14:57:35 UTC MAIN commitmail json YAML

Note update of www/contao43 package to 4.3.3.

(taca)

2017-01-19 14:57:05 UTC MAIN commitmail json YAML

Update contao43 to 4.3.3.

* Correctly handle nested public folders when symlinking a folder.
* Correctly handle SVGZ files in the file manager (see contao/core#8624).
* Prevent an endless redirect loop if the page alias is "/" (see contao/core#8560).
* Correctly parse German dates with two digit years in MooTools (see contao/core#8593).
* Correctly add new resources to the user/group permissions (see contao/core#8583).
* Trigger the auto-submit function in the date picker (see contao/core#8603).
* Call the load callback when loading page/file picker nodes (see contao/core#7702).

(taca)

2017-01-19 14:49:23 UTC MAIN commitmail json YAML

Note update of lang/php70 package to 7.0.15.

(taca)

2017-01-19 14:48:49 UTC MAIN commitmail json YAML

Update php70 to 7.0.15.

PHP                                                                        NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
19 Jan 2017 PHP 7.0.15

- Core:
  . Fixed bug #73792 (invalid foreach loop hangs script). (Dmitry)
  . Fixed bug #73663 ("Invalid opcode 65/16/8" occurs with a variable created
    with list()). (Laruence)
  . Fixed bug #73585 (Logging of "Internal Zend error - Missing class
    information" missing class name). (Laruence)
  . Fixed bug #73753 (unserialized array pointer not advancing). (David Walker)
  . Fixed bug #73825 (Heap out of bounds read on unserialize in
    finish_nested_data()). (Stas)
  . Fixed bug #73831 (NULL Pointer Dereference while unserialize php object).
    (Stas)
  . Fixed bug #73832 (Use of uninitialized memory in unserialize()). (Stas)
  . Fixed bug #73092 (Unserialize use-after-free when resizing object's
    properties hash table). (Nikita)
  . Fixed bug #69425 (Use After Free in unserialize()). (Nikita)
  . Fixed bug #72731 (Type Confusion in Object Deserialization). (Nikita)

- COM:
  . Fixed bug #73679 (DOTNET read access violation using invalid codepage).
    (Anatol)

- DOM:
  . Fixed bug #67474 (getElementsByTagNameNS filter on default ns). (aboks)

- EXIF:
  . Bug bug #73737 (FPE when parsing a tag format). (Stas)

- GD:
  . Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb)
  . Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb)

- GMP:
  . Fixed bug #70513 (GMP Deserialization Type Confusion Vulnerability).
    (Nikita)

- Mysqli:
  . Fixed bug #73462 (Persistent connections don't set $connect_errno).
    (darkain)

- Mysqlnd:
  . Fixed issue with decoding BIT columns when having more than one rows in the
    result set. 7.0+ problem. (Andrey)
  . Fixed bug #73800 (sporadic segfault with MYSQLI_OPT_INT_AND_FLOAT_NATIVE).
(vanviegen)

- PCRE:
  . Fixed bug #73612 (preg_*() may leak memory). (cmb)

- PDO_Firebird:
  . Fixed bug #72931 (PDO_FIREBIRD with Firebird 3.0 not work on returning
    statement). (Dorin Marcoci)

- Phar:
  . Fixed bug #73773 (Seg fault when loading hostile phar). (Stas)
  . Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas)
  . Fixed bug #73764 (Crash while loading hostile phar archive). (Stas)

- Phpdbg:
  . Fixed bug #73615 (phpdbg without option never load .phpdbginit at startup).
    (Bob)
  . Fixed issue getting executable lines from custom wrappers. (Bob)
  . Fixed bug #73704 (phpdbg shows the wrong line in files with shebang). (Bob)

- Reflection:
  . Fixed bug #46103 (ReflectionObject memory leak). (Nikita)

- Streams:
  . Fixed bug #73586 (php_user_filter::$stream is not set to the stream the
    filter is working on). (Dmitry)

- SQLite3:
  . Reverted fix for bug #73530 (Unsetting result set may reset other result
    set). (cmb)

- Standard:
  . Fixed bug #73594 (dns_get_record does not populate $additional out
    parameter). (Bruce Weirdan)
  . Fixed bug #70213 (Unserialize context shared on double class lookup).
    (Taoguang Chen)
  . Fixed bug #73154 (serialize object with __sleep function crash). (Nikita)
  . Fixed bug #70490 (get_browser function is very slow). (Nikita)
  . Fixed bug #73265 (Loading browscap.ini at startup causes high memory usage).
    (Nikita)
  . Fixed bug #31875 (get_defined_functions additional param to exclude
disabled functions). (willianveiga)

- Zlib:
  . Fixed bug #73373 (deflate_add does not verify that output was not truncated).
    (Matt Bonneau)

(taca)

2017-01-19 14:43:56 UTC MAIN commitmail json YAML

Note update of lang/php71 package to 7.1.1.

(taca)

2017-01-19 14:43:25 UTC MAIN commitmail json YAML

Update php71 to 7.1.1.

PHP                                                                        NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
19 Jan 2017, PHP 7.1.1

- Core:
  . Fixed bug #73792 (invalid foreach loop hangs script). (Dmitry)
  . Fixed bug #73686 (Adding settype()ed values to ArrayObject results in
    references). (Nikita, Laruence)
  . Fixed bug #73663 ("Invalid opcode 65/16/8" occurs with a variable created
    with list()). (Laruence)
  . Fixed bug #73727 (ZEND_MM_BITSET_LEN is "undefined symbol" in
    zend_bitset.h). (Nikita)
  . Fixed bug #73753 (unserialized array pointer not advancing). (David Walker)
  . Fixed bug #73783 (SIG_IGN doesn't work when Zend Signals is enabled).
    (David Walker)
  . Fixed bug #73825 (Heap out of bounds read on unserialize in
    finish_nested_data()). (Stas)
  . Fixed bug #73831 (NULL Pointer Dereference while unserialize php object).
    (Stas)
  . Fixed bug #73832 (Use of uninitialized memory in unserialize()). (Stas)

- CLI:
  . Fixed bug #72555 (CLI output(japanese) on Windows). (Anatol)

- COM:
  . Fixed bug #73679 (DOTNET read access violation using invalid codepage).
    (Anatol)

- DOM:
  . Fixed bug #67474 (getElementsByTagNameNS filter on default ns). (aboks)

- EXIF:
  . Bug bug #73737 (FPE when parsing a tag format). (Stas)

- GD:
  . Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb)
  . Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb)

- Mbstring:
  . Fixed bug #73646 (mb_ereg_search_init null pointer dereference).
    (Laruence)

- Mysqli:
  . Fixed bug #73462 (Persistent connections don't set $connect_errno).
    (darkain)

- Mysqlnd:
  . Optimized handling of BIT fields - less memory copies and lower memory
    usage. (Andrey)
  . Fixed bug #73800 (sporadic segfault with MYSQLI_OPT_INT_AND_FLOAT_NATIVE).
(vanviegen)

- Opcache:
  . Fixed bug #73789 (Strange behavior of class constants in switch/case block).
    (Laruence)
  . Fixed bug #73746 (Method that returns string returns UNKNOWN:0 instead).
    (Laruence)
  . Fixed bug #73654 (Segmentation fault in zend_call_function). (Nikita)
  . Fixed bug #73668 ("SIGFPE Arithmetic exception" in opcache when divide by
    minus 1). (Nikita)
  . Fixed bug #73847 (Recursion when a variable is redefined as array). (Nikita)

- PDO_Firebird:
  . Fixed bug #72931 (PDO_FIREBIRD with Firebird 3.0 not work on returning
    statement). (Dorin Marcoci)

- Phar:
  . Fixed bug #73773 (Seg fault when loading hostile phar). (Stas)
  . Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas)
  . Fixed bug #73764 (Crash while loading hostile phar archive). (Stas)

- phpdbg:
  . Fixed bug #73794 (Crash (out of memory) when using run and # command
    separator). (Bob)
  . Fixed bug #73704 (phpdbg shows the wrong line in files with shebang). (Bob)

- SQLite3:
  . Reverted fix for bug #73530 (Unsetting result set may reset other result
    set). (cmb)

- Standard:
  . Fixed bug #73594 (dns_get_record does not populate $additional out
    parameter). (Bruce Weirdan)
  . Fixed bug #70213 (Unserialize context shared on double class lookup).
    (Taoguang Chen)
  . Fixed bug #73154 (serialize object with __sleep function crash). (Nikita)
  . Fixed bug #70490 (get_browser function is very slow). (Nikita)
  . Fixed bug #73265 (Loading browscap.ini at startup causes high memory usage).
    (Nikita)
  . Add subject to mail log. (tomsommer)
  . Fixed bug #31875 (get_defined_functions additional param to exclude
disabled functions). (willianveiga)

- Zlib
  . Fixed bug #73373 (deflate_add does not verify that output was not truncated).
    (Matt Bonneau)

(taca)

2017-01-19 14:17:19 UTC MAIN commitmail json YAML

Updated converters/p5-JSON-MaybeXS to 1.003008

(wen)

2017-01-19 14:16:34 UTC MAIN commitmail json YAML

Update to 1.003008
Update DEPENDS

Upstream changes:
1.003008 - 2016-10-03
- added an INSTALLATION section to documentation, to clarify the use of
  dynamic prerequisites in Makefile.PL
- minimize prereqs listed in META.json to avoid giving the appearance of XS
  prerequisites, and confusing static inspection tools such as metacpan.org.

1.003007 - 2016-09-11
- no changes since 1.003006_001

1.003006_001 - 2016-06-28
- bump prereq on JSON::PP, to ensure we get the fix for parsing utf8-encoded
  values (in JSON::PP 2.27300)
- we now always upgrade JSON::XS if it is installed and below version 3.0,
  due to changes in handling booleans
- remove test dependency on Test::Without::Module (RT#115394)

(wen)

2017-01-19 13:58:34 UTC MAIN commitmail json YAML

Updated lang/python35 to 3.5.3

(wen)

2017-01-19 13:55:53 UTC MAIN commitmail json YAML

Update to 3.5.3

Upstream changes:
What's New in Python 3.5.3?
===========================

Release date: 2017-01-16

There were no code changes between 3.5.3rc1 and 3.5.3 final.

What's New in Python 3.5.3 release candidate 1?
===============================================

Release date: 2017-01-02

Core and Builtins
-----------------

- Issue #29073: bytearray formatting no longer truncates on first null byte.

- Issue #28932: Do not include <sys/random.h> if it does not exist.

- Issue #28147: Fix a memory leak in split-table dictionaries: setattr()
  must not convert combined table into split table.

- Issue #25677: Correct the positioning of the syntax error caret for
  indented blocks.  Based on patch by Michael Layzell.

- Issue #29000: Fixed bytes formatting of octals with zero padding in alternate
  form.

- Issue #28512: Fixed setting the offset attribute of SyntaxError by
  PyErr_SyntaxLocationEx() and PyErr_SyntaxLocationObject().

- Issue #28991:  functools.lru_cache() was susceptible to an obscure reentrancy
  bug caused by a monkey-patched len() function.

- Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X
  when decode astral characters.  Patch by Xiang Zhang.

- Issue #19398: Extra slash no longer added to sys.path components in case of
  empty compile-time PYTHONPATH components.

- Issue #28426: Fixed potential crash in PyUnicode_AsDecodedObject() in debug
  build.

- Issue #23782: Fixed possible memory leak in _PyTraceback_Add() and exception
  loss in PyTraceBack_Here().

- Issue #28379: Added sanity checks and tests for PyUnicode_CopyCharacters().
  Patch by Xiang Zhang.

- Issue #28376: The type of long range iterator is now registered as Iterator.
  Patch by Oren Milman.

- Issue #28376: The constructor of range_iterator now checks that step is not 0.
  Patch by Oren Milman.

- Issue #26906: Resolving special methods of uninitialized type now causes
  implicit initialization of the type instead of a fail.

- Issue #18287: PyType_Ready() now checks that tp_name is not NULL.
  Original patch by Niklas Koep.

- Issue #24098: Fixed possible crash when AST is changed in process of
  compiling it.

- Issue #28350: String constants with null character no longer interned.

- Issue #26617: Fix crash when GC runs during weakref callbacks.

- Issue #27942: String constants now interned recursively in tuples and frozensets.

- Issue #21578: Fixed misleading error message when ImportError called with
  invalid keyword args.

- Issue #28203: Fix incorrect type in error message from
  ``complex(1.0, {2:3})``. Patch by Soumya Sharma.

- Issue #27955: Fallback on reading /dev/urandom device when the getrandom()
  syscall fails with EPERM, for example when blocked by SECCOMP.

- Issue #28131: Fix a regression in zipimport's compile_source().  zipimport
  should use the same optimization level as the interpreter.

- Issue #25221: Fix corrupted result from PyLong_FromLong(0) when
  Python is compiled with NSMALLPOSINTS = 0.

- Issue #25758: Prevents zipimport from unnecessarily encoding a filename
  (patch by Eryk Sun)

- Issue #28189: dictitems_contains no longer swallows compare errors.
  (Patch by Xiang Zhang)

- Issue #27812: Properly clear out a generator's frame's backreference to the
  generator to prevent crashes in frame.clear().

- Issue #27811: Fix a crash when a coroutine that has not been awaited is
  finalized with warnings-as-errors enabled.

- Issue #27587: Fix another issue found by PVS-Studio: Null pointer check
  after use of 'def' in _PyState_AddModule().
  Initial patch by Christian Heimes.

- Issue #26020: set literal evaluation order did not match documented behaviour.

- Issue #27782: Multi-phase extension module import now correctly allows the
  ``m_methods`` field to be used to add module level functions to instances
  of non-module types returned from ``Py_create_mod``. Patch by Xiang Zhang.

- Issue #27936: The round() function accepted a second None argument
  for some types but not for others.  Fixed the inconsistency by
  accepting None for all numeric types.

- Issue #27487: Warn if a submodule argument to "python -m" or
  runpy.run_module() is found in sys.modules after parent packages are
  imported, but before the submodule is executed.

- Issue #27558: Fix a SystemError in the implementation of "raise" statement.
  In a brand new thread, raise a RuntimeError since there is no active
  exception to reraise. Patch written by Xiang Zhang.

- Issue #27419: Standard __import__() no longer look up "__import__" in globals
  or builtins for importing submodules or "from import".  Fixed handling an
  error of non-string package name.

- Issue #27083: Respect the PYTHONCASEOK environment variable under Windows.

- Issue #27514: Make having too many statically nested blocks a SyntaxError
  instead of SystemError.

- Issue #27473: Fixed possible integer overflow in bytes and bytearray
  concatenations.  Patch by Xiang Zhang.

- Issue #27507: Add integer overflow check in bytearray.extend().  Patch by
  Xiang Zhang.

- Issue #27581: Don't rely on wrapping for overflow check in
  PySequence_Tuple().  Patch by Xiang Zhang.

- Issue #27443: __length_hint__() of bytearray iterators no longer return a
  negative integer for a resized bytearray.

- Issue #27942: Fix memory leak in codeobject.c

Library
-------

- Issue #15812: inspect.getframeinfo() now correctly shows the first line of
  a context.  Patch by Sam Breese.

- Issue #29094: Offsets in a ZIP file created with extern file object and modes
  "w" and "x" now are relative to the start of the file.

- Issue #13051: Fixed recursion errors in large or resized
  curses.textpad.Textbox.  Based on patch by Tycho Andersen.

- Issue #29119: Fix weakrefs in the pure python version of
  collections.OrderedDict move_to_end() method.
  Contributed by Andra Bogildea.

- Issue #9770: curses.ascii predicates now work correctly with negative
  integers.

- Issue #28427: old keys should not remove new values from
  WeakValueDictionary when collecting from another thread.

- Issue 28923: Remove editor artifacts from Tix.py.

- Issue #28871: Fixed a crash when deallocate deep ElementTree.

- Issue #19542: Fix bugs in WeakValueDictionary.setdefault() and
  WeakValueDictionary.pop() when a GC collection happens in another
  thread.

- Issue #20191: Fixed a crash in resource.prlimit() when pass a sequence that
  doesn't own its elements as limits.

- Issue #28779: multiprocessing.set_forkserver_preload() would crash the
  forkserver process if a preloaded module instantiated some
  multiprocessing objects such as locks.

- Issue #28847: dbm.dumb now supports reading read-only files and no longer
  writes the index file when it is not changed.

- Issue #25659: In ctypes, prevent a crash calling the from_buffer() and
  from_buffer_copy() methods on abstract classes like Array.

- Issue #28732: Fix crash in os.spawnv() with no elements in args

- Issue #28485: Always raise ValueError for negative
  compileall.compile_dir(workers=...) parameter, even when multithreading is
  unavailable.

- Issue #28387: Fixed possible crash in _io.TextIOWrapper deallocator when
  the garbage collector is invoked in other thread.  Based on patch by
  Sebastian Cufre.

- Issue #27517: LZMA compressor and decompressor no longer raise exceptions if
  given empty data twice.  Patch by Benjamin Fogle.

- Issue #28549: Fixed segfault in curses's addch() with ncurses6.

- Issue #28449: tarfile.open() with mode "r" or "r:" now tries to open a tar
  file with compression before trying to open it without compression.  Otherwise
  it had 50% chance failed with ignore_zeros=True.

- Issue #23262: The webbrowser module now supports Firefox 36+ and derived
  browsers.  Based on patch by Oleg Broytman.

- Issue #27939: Fixed bugs in tkinter.ttk.LabeledScale and tkinter.Scale caused
  by representing the scale as float value internally in Tk.  tkinter.IntVar
  now works if float value is set to underlying Tk variable.

- Issue #28255: calendar.TextCalendar().prmonth() no longer prints a space
  at the start of new line after printing a month's calendar.  Patch by
  Xiang Zhang.

- Issue #20491: The textwrap.TextWrapper class now honors non-breaking spaces.
  Based on patch by Kaarle Ritvanen.

- Issue #28353: os.fwalk() no longer fails on broken links.

- Issue #25464: Fixed HList.header_exists() in tkinter.tix module by addin
  a workaround to Tix library bug.

- Issue #28488: shutil.make_archive() no longer add entry "./" to ZIP archive.

- Issue #24452: Make webbrowser support Chrome on Mac OS X.

- Issue #20766: Fix references leaked by pdb in the handling of SIGINT
  handlers.

- Issue #26293: Fixed writing ZIP files that starts not from the start of the
  file.  Offsets in ZIP file now are relative to the start of the archive in
  conforming to the specification.

- Issue #28321: Fixed writing non-BMP characters with binary format in plistlib.

- Issue #28322: Fixed possible crashes when unpickle itertools objects from
  incorrect pickle data.  Based on patch by John Leitch.

- Fix possible integer overflows and crashes in the mmap module with unusual
  usage patterns.

- Issue #1703178: Fix the ability to pass the --link-objects option to the
  distutils build_ext command.

- Issue #28253: Fixed calendar functions for extreme months: 0001-01
  and 9999-12.

  Methods itermonthdays() and itermonthdays2() are reimplemented so
  that they don't call itermonthdates() which can cause datetime.date
  under/overflow.

- Issue #28275: Fixed possible use after free in the decompress()
  methods of the LZMADecompressor and BZ2Decompressor classes.
  Original patch by John Leitch.

- Issue #27897: Fixed possible crash in sqlite3.Connection.create_collation()
  if pass invalid string-like object as a name.  Patch by Xiang Zhang.

- Issue #18893: Fix invalid exception handling in Lib/ctypes/macholib/dyld.py.
  Patch by Madison May.

- Issue #27611: Fixed support of default root window in the tkinter.tix module.

- Issue #27348: In the traceback module, restore the formatting of exception
  messages like "Exception: None".  This fixes a regression introduced in
  3.5a2.

- Issue #25651: Allow falsy values to be used for msg parameter of subTest().

- Issue #27932: Prevent memory leak in win32_ver().

- Fix UnboundLocalError in socket._sendfile_use_sendfile.

- Issue #28075: Check for ERROR_ACCESS_DENIED in Windows implementation of
  os.stat().  Patch by Eryk Sun.

- Issue #25270: Prevent codecs.escape_encode() from raising SystemError when
  an empty bytestring is passed.

- Issue #28181: Get antigravity over HTTPS. Patch by Kaartic Sivaraam.

- Issue #25895: Enable WebSocket URL schemes in urllib.parse.urljoin.
  Patch by Gergely Imreh and Markus Holtermann.

- Issue #27599: Fixed buffer overrun in binascii.b2a_qp() and binascii.a2b_qp().

- Issue #19003:m email.generator now replaces only \r and/or \n line
  endings, per the RFC, instead of all unicode line endings.

- Issue #28019: itertools.count() no longer rounds non-integer step in range
  between 1.0 and 2.0 to 1.

- Issue #25969: Update the lib2to3 grammar to handle the unpacking
  generalizations added in 3.5.

- Issue #14977: mailcap now respects the order of the lines in the mailcap
  files ("first match"), as required by RFC 1542.  Patch by Michael Lazar.

- Issue #24594: Validates persist parameter when opening MSI database

- Issue #17582: xml.etree.ElementTree nows preserves whitespaces in attributes
  (Patch by Duane Griffin.  Reviewed and approved by Stefan Behnel.)

- Issue #28047: Fixed calculation of line length used for the base64 CTE
  in the new email policies.

- Issue #27445: Don't pass str(_charset) to MIMEText.set_payload().
  Patch by Claude Paroz.

- Issue #22450: urllib now includes an "Accept: */*" header among the
  default headers.  This makes the results of REST API requests more
  consistent and predictable especially when proxy servers are involved.

- lib2to3.pgen3.driver.load_grammar() now creates a stable cache file
  between runs given the same Grammar.txt input regardless of the hash
  randomization setting.

- Issue #27570: Avoid zero-length memcpy() etc calls with null source
  pointers in the "ctypes" and "array" modules.

- Issue #22233: Break email header lines *only* on the RFC specified CR and LF
  characters, not on arbitrary unicode line breaks.  This also fixes a bug in
  HTTP header parsing.

- Issue 27988: Fix email iter_attachments incorrect mutation of payload list.

- Issue #27691: Fix ssl module's parsing of GEN_RID subject alternative name
  fields in X.509 certs.

- Issue #27850: Remove 3DES from ssl module's default cipher list to counter
  measure sweet32 attack (CVE-2016-2183).

- Issue #27766: Add ChaCha20 Poly1305 to ssl module's default ciper list.
  (Required OpenSSL 1.1.0 or LibreSSL).

- Issue #26470: Port ssl and hashlib module to OpenSSL 1.1.0.

- Remove support for passing a file descriptor to os.access. It never worked but
  previously didn't raise.

- Issue #12885: Fix error when distutils encounters symlink.

- Issue #27881: Fixed possible bugs when setting sqlite3.Connection.isolation_level.
  Based on patch by Xiang Zhang.

- Issue #27861: Fixed a crash in sqlite3.Connection.cursor() when a factory
  creates not a cursor.  Patch by Xiang Zhang.

- Issue #19884: Avoid spurious output on OS X with Gnu Readline.

- Issue #27706: Restore deterministic behavior of random.Random().seed()
  for string seeds using seeding version 1.  Allows sequences of calls
  to random() to exactly match those obtained in Python 2.
  Patch by Nofar Schnider.

- Issue #10513: Fix a regression in Connection.commit().  Statements should
  not be reset after a commit.

- A new version of typing.py from https://github.com/python/typing:
  - Collection (only for 3.6) (Issue #27598)
  - Add FrozenSet to __all__ (upstream #261)
  - fix crash in _get_type_vars() (upstream #259)
  - Remove the dict constraint in ForwardRef._eval_type (upstream #252)

- Issue #27539: Fix unnormalised ``Fraction.__pow__`` result in the case
  of negative exponent and negative base.

- Issue #21718: cursor.description is now available for queries using CTEs.

- Issue #2466: posixpath.ismount now correctly recognizes mount points which
  the user does not have permission to access.

- Issue #27773: Correct some memory management errors server_hostname in
  _ssl.wrap_socket().

- Issue #26750: unittest.mock.create_autospec() now works properly for
  subclasses of property() and other data descriptors.

- In the curses module, raise an error if window.getstr() or window.instr() is
  passed a negative value.

- Issue #27783: Fix possible usage of uninitialized memory in
  operator.methodcaller.

- Issue #27774: Fix possible Py_DECREF on unowned object in _sre.

- Issue #27760: Fix possible integer overflow in binascii.b2a_qp.

- Issue #27758: Fix possible integer overflow in the _csv module for large
  record lengths.

- Issue #27568: Prevent HTTPoxy attack (CVE-2016-1000110). Ignore the
  HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates
  that the script is in CGI mode.

- Issue #27656: Do not assume sched.h defines any SCHED_* constants.

- Issue #27130: In the "zlib" module, fix handling of large buffers
  (typically 4 GiB) when compressing and decompressing.  Previously, inputs
  were limited to 4 GiB, and compression and decompression operations did not
  properly handle results of 4 GiB.

- Issue #27533: Release GIL in nt._isdir

- Issue #17711: Fixed unpickling by the persistent ID with protocol 0.
  Original patch by Alexandre Vassalotti.

- Issue #27522: Avoid an unintentional reference cycle in email.feedparser.

- Issue #26844: Fix error message for imp.find_module() to refer to 'path'
  instead of 'name'. Patch by Lev Maximov.

- Issue #23804: Fix SSL zero-length recv() calls to not block and not raise
  an error about unclean EOF.

- Issue #27466: Change time format returned by http.cookie.time2netscape,
  confirming the netscape cookie format and making it consistent with
  documentation.

- Issue #26664: Fix activate.fish by removing mis-use of ``$``.

- Issue #22115: Fixed tracing Tkinter variables: trace_vdelete() with wrong
  mode no longer break tracing, trace_vinfo() now always returns a list of
  pairs of strings, tracing in the "u" mode now works.

- Fix a scoping issue in importlib.util.LazyLoader which triggered an
  UnboundLocalError when lazy-loading a module that was already put into
  sys.modules.

- Issue #27079: Fixed curses.ascii functions isblank(), iscntrl() and ispunct().

- Issue #26754: Some functions (compile() etc) accepted a filename argument
  encoded as an iterable of integers. Now only strings and byte-like objects
  are accepted.

- Issue #27048: Prevents distutils failing on Windows when environment
  variables contain non-ASCII characters

- Issue #27330: Fixed possible leaks in the ctypes module.

- Issue #27238: Got rid of bare excepts in the turtle module.  Original patch
  by Jelle Zijlstra.

- Issue #27122: When an exception is raised within the context being managed
  by a contextlib.ExitStack() and one of the exit stack generators
  catches and raises it in a chain, do not re-raise the original exception
  when exiting, let the new chained one through.  This avoids the PEP 479
  bug described in issue25782.

- [Security] Issue #27278: Fix os.urandom() implementation using getrandom() on
  Linux.  Truncate size to INT_MAX and loop until we collected enough random
  bytes, instead of casting a directly Py_ssize_t to int.

- Issue #26386: Fixed ttk.TreeView selection operations with item id's
  containing spaces.

- [Security] Issue #22636: Avoid shell injection problems with
  ctypes.util.find_library().

- Issue #16182: Fix various functions in the "readline" module to use the
  locale encoding, and fix get_begidx() and get_endidx() to return code point
  indexes.

- Issue #27392: Add loop.connect_accepted_socket().
  Patch by Jim Fulton.

- Issue #27930: Improved behaviour of logging.handlers.QueueListener.
  Thanks to Paulo Andrade and Petr Viktorin for the analysis and patch.

- Issue #21201: Improves readability of multiprocessing error message.  Thanks
  to Wojciech Walczak for patch.

- Issue #27456: asyncio: Set TCP_NODELAY by default.

- Issue #27906: Fix socket accept exhaustion during high TCP traffic.
  Patch by Kevin Conway.

- Issue #28174: Handle when SO_REUSEPORT isn't properly supported.
  Patch by Seth Michael Larson.

- Issue #26654: Inspect functools.partial in asyncio.Handle.__repr__.
  Patch by iceboy.

- Issue #26909: Fix slow pipes IO in asyncio.
  Patch by INADA Naoki.

- Issue #28176: Fix callbacks race in asyncio.SelectorLoop.sock_connect.

- Issue #27759: Fix selectors incorrectly retain invalid file descriptors.
  Patch by Mark Williams.

- Issue #28368: Refuse monitoring processes if the child watcher has
  no loop attached.
  Patch by Vincent Michel.

- Issue #28369: Raise RuntimeError when transport's FD is used with
  add_reader, add_writer, etc.

- Issue #28370: Speedup asyncio.StreamReader.readexactly.
  Patch by ▒<9A>о▒<80>енбе▒<80>г ▒<9C>а▒<80>к.

- Issue #28371: Deprecate passing asyncio.Handles to run_in_executor.

- Issue #28372: Fix asyncio to support formatting of non-python coroutines.

- Issue #28399: Remove UNIX socket from FS before binding.
  Patch by ▒<9A>о▒<80>енбе▒<80>г ▒<9C>а▒<80>к.

- Issue #27972: Prohibit Tasks to await on themselves.

- Issue #26923: Fix asyncio.Gather to refuse being cancelled once all
  children are done.
  Patch by Johannes Ebke.

- Issue #26796: Don't configure the number of workers for default
  threadpool executor.
  Initial patch by Hans Lawrenz.

- Issue #28600: Optimize loop.call_soon().

- Issue #28613: Fix get_event_loop() return the current loop if
  called from coroutines/callbacks.

- Issue #28639: Fix inspect.isawaitable to always return bool
  Patch by Justin Mayfield.

- Issue #28652: Make loop methods reject socket kinds they do not support.

- Issue #28653: Fix a refleak in functools.lru_cache.

- Issue #28703: Fix asyncio.iscoroutinefunction to handle Mock objects.

- Issue #24142: Reading a corrupt config file left the parser in an
  invalid state.  Original patch by Florian Höch.

- Issue #28990: Fix SSL hanging if connection is closed before handshake
  completed.
  (Patch by HoHo-Ho)

IDLE
----

- Issue #15308: Add 'interrupt execution' (^C) to Shell menu.
  Patch by Roger Serwy, updated by Bayard Randel.

- Issue #27922: Stop IDLE tests from 'flashing' gui widgets on the screen.

- Add version to title of IDLE help window.

- Issue #25564: In section on IDLE -- console differences, mention that
  using exec means that __builtins__ is defined for each statement.

- Issue #27714: text_textview and test_autocomplete now pass when re-run
  in the same process.  This occurs when test_idle fails when run with the
  -w option but without -jn.  Fix warning from test_config.

- Issue #25507: IDLE no longer runs buggy code because of its tkinter imports.
  Users must include the same imports required to run directly in Python.

- Issue #27452: add line counter and crc to IDLE configHandler test dump.

- Issue #27365: Allow non-ascii chars in IDLE NEWS.txt, for contributor names.

- Issue #27245: IDLE: Cleanly delete custom themes and key bindings.
  Previously, when IDLE was started from a console or by import, a cascade
  of warnings was emitted.  Patch by Serhiy Storchaka.

C API
-----

- Issue #28808: PyUnicode_CompareWithASCIIString() now never raises exceptions.

- Issue #26754: PyUnicode_FSDecoder() accepted a filename argument encoded as
  an iterable of integers. Now only strings and bytes-like objects are accepted.

Documentation
-------------

- Issue #28513: Documented command-line interface of zipfile.

Tests
-----

- Issue #28950: Disallow -j0 to be combined with -T/-l/-M in regrtest
  command line arguments.

- Issue #28666: Now test.support.rmtree is able to remove unwritable or
  unreadable directories.

- Issue #23839: Various caches now are cleared before running every test file.

- Issue #28409: regrtest: fix the parser of command line arguments.

- Issue #27787: Call gc.collect() before checking each test for "dangling
  threads", since the dangling threads are weak references.

- Issue #27369: In test_pyexpat, avoid testing an error message detail that
  changed in Expat 2.2.0.

Tools/Demos
-----------

- Issue #27952: Get Tools/scripts/fixcid.py working with Python 3 and the
  current "re" module, avoid invalid Python backslash escapes, and fix a bug
  parsing escaped C quote signs.

- Issue #27332: Fixed the type of the first argument of module-level functions
  generated by Argument Clinic.  Patch by Petr Viktorin.

- Issue #27418: Fixed Tools/importbench/importbench.py.

Windows
-------

- Issue #28251: Improvements to help manuals on Windows.

- Issue #28110: launcher.msi has different product codes between 32-bit and
  64-bit

- Issue #25144: Ensures TargetDir is set before continuing with custom
  install.

- Issue #27469: Adds a shell extension to the launcher so that drag and drop
  works correctly.

- Issue #27309: Enabled proper Windows styles in python[w].exe manifest.

Build
-----

- Issue #29080: Removes hard dependency on hg.exe from PCBuild/build.bat

- Issue #23903: Added missed names to PC/python3.def.

- Issue #10656: Fix out-of-tree building on AIX.  Patch by Tristan Carel and
  Michael Haubenwallner.

- Issue #26359: Rename --with-optimiations to --enable-optimizations.

- Issue #28444: Fix missing extensions modules when cross compiling.

- Issue #28248: Update Windows build and OS X installers to use OpenSSL 1.0.2j.

- Issue #28258: Fixed build with Estonian locale (python-config and distclean
  targets in Makefile).  Patch by Arfrever Frehtes Taifersar Arahesis.

- Issue #26661: setup.py now detects system libffi with multiarch wrapper.

- Issue #28066: Fix the logic that searches build directories for generated
  include files when building outside the source tree.

- Issue #15819: Remove redundant include search directory option for building
  outside the source tree.

- Issue #27566: Fix clean target in freeze makefile (patch by Lisa Roach)

- Issue #27705: Update message in validate_ucrtbase.py

- Issue #27983: Cause lack of llvm-profdata tool when using clang as
  required for PGO linking to be a configure time error rather than
  make time when --with-optimizations is enabled.  Also improve our
  ability to find the llvm-profdata tool on MacOS and some Linuxes.

- Issue #26307: The profile-opt build now applies PGO to the built-in modules.

- Issue #26359: Add the --with-optimizations configure flag.

- Issue #27713: Suppress spurious build warnings when updating importlib's
  bootstrap files.  Patch by Xiang Zhang

- Issue #25825: Correct the references to Modules/python.exp and ld_so_aix,
  which are required on AIX.  This updates references to an installation path
  that was changed in 3.2a4, and undoes changed references to the build tree
  that were made in 3.5.0a1.

- Issue #27453: CPP invocation in configure must use CPPFLAGS. Patch by
  Chi Hsuan Yen.

- Issue #27641: The configure script now inserts comments into the makefile
  to prevent the pgen and _freeze_importlib executables from being cross-
  compiled.

- Issue #26662: Set PYTHON_FOR_GEN in configure as the Python program to be
  used for file generation during the build.

- Issue #10910: Avoid C++ compilation errors on FreeBSD and OS X.
  Also update FreedBSD version checks for the original ctype UTF-8 workaround.

- Issue #28676: Prevent missing 'getentropy' declaration warning on macOS.
  Patch by Gareth Rees.

(wen)

2017-01-19 11:15:52 UTC MAIN commitmail json YAML

Update PLIST.{Linux,SunOS} to reflect removed plat-* modules.

According to Python 3.6 changelog:

The undocumented IN, CDROM, DLFCN, TYPES, CDIO, and STROPTS modules have been
removed. They had been available in the platform specific Lib/plat-*/
directories, but were chronically out of date, inconsistently available across
platforms, and unmaintained. The script that created these modules is still
available in the source distribution at Tools/scripts/h2py.py.

No PKGREVISION bump since they failed to install on these platforms.

TODO: PLIST.IRIX entries seems to still contains plat-* modules but the ones
TODO: contained are not explicitly documented in the changelog, so they can
TODO: maybe still installed.

Pointed out by Joyent's Linux and SmartOS bulk builds and thanks to <jperkin>
for testing it!

(leot)

2017-01-19 10:57:48 UTC MAIN commitmail json YAML

Tonights updates

(markd)

2017-01-19 10:37:21 UTC MAIN commitmail json YAML

Update to stow 2.2.2

* Changes in version 2.2.2

** @VERSION@ substitution was set up for the Stow::Util module.

* Changes in version 2.2.1

Version 2.2.1 was not released since it was rejected by pause.perl.org
due to Stow::Util missing $VERSION.

** Small improvements to documentation
** Fix Perl warnings
** Fix "Undefined subroutine &main::error" error
** Failed system calls now include error description
** Default ignore list now ignores top-level README.*, LICENSE.*,
  and COPYING
** Correctly handle the stow/target directories as non-canonical paths
** Fix stowing of relative links when --no-folding is used.

* Changes in version 2.2.0

** New --no-folding option
** Remove -a option (--adopt still available)
** Improve error message when stow package is not found.
** Test suite improvements
** Documentation improvements
** Remove "There are no outstanding operations to perform" warning.

* Changes in version 2.1.3

** New --adopt / -a option
** ./configure now checks for Perl modules required by the test suite.

* Changes in version 2.1.2

  Many thanks to Stefano Lattarini for help with numerous autoconf and
  automake issues which are addressed in this release.
** Significantly improve the handling of --with-pmdir.
** ./configure now aborts if Perl isn't found.
** Ensured the ChangeLog is up-to-date when making a new distribution.
** Fixed bug with `make clean' removing files which the user may not
  be able to rebuild.

* Changes in version 2.1.1

** Fixed bug where ./configure --with-pmdir=X was ineffectual.
** Calculated the correct default value for pmdir based on the
  local Perl installation.
** Fixed some automake issues
** Improved various bits of documentation.

* Changes in version 2.1.0

** Major refactoring of code into separate Stow and Stow::Util Perl
  modules.
** Added support for ignore list files.
** Added support for CPAN-style installation and distribution via
  Module::Build.
** Introduced `make test' target and significantly tightened up test
  suite.
** Very large number of code and documentation fixes (over 80 commits
  since version 2.0.1).
** The '--conflicts' option has been removed.
** Improved debugging output.
** Converted man page to POD format.
** Include PDF, and both split- and single-page HTML versions of manual
  in the distribution.
** Fixed code style consistency issues.
** Running configure from outside the source tree now works.
** `make distcheck' now works.

* Changes in version 2.0.1

** Defer operations until all potential conflicts have been assessed.
** Multiple stow directories will now cooperate in folding/unfolding.
** Conflict messages are more uniform and informative.
** Verbosity and tracing is more extensive and uniform.
** Implemented option parsing via Getopt::Long.
** Default command line arguments set via '.stowrc' and '~/.stowrc' files.
** Support multiple actions per invocation.
** New (repeatable) command line arg: --ignore='<regex>'
** New (repeatable) command line arg: --defer='<regex>'
** New (repeatable) command line arg: --defer='<regex>'
** New (repeatable) command line arg: --override='<regex>'
** By default, search less aggressively for invalid symlinks when unstowing.
** New chkstow utility for checking the integrity of the target directory.

(markd)

2017-01-19 10:19:26 UTC MAIN commitmail json YAML

Fix path to pdftpps.
mv cups-browsed.conf from correct post install location.

(markd)

2017-01-19 10:03:00 UTC MAIN commitmail json YAML

Currently doesn't build with python36 - cann't find python libs

(markd)

2017-01-19 09:58:18 UTC MAIN commitmail json YAML

2017-01-19 09:54:56 UTC MAIN commitmail json YAML

2017-01-19 09:47:02 UTC MAIN commitmail json YAML

2017-01-19 09:45:39 UTC MAIN commitmail json YAML

2017-01-19 09:43:37 UTC MAIN commitmail json YAML

More automoc cleanup

(markd)

2017-01-19 09:40:50 UTC MAIN commitmail json YAML

More automoc cleanup

(markd)

2017-01-19 09:37:56 UTC MAIN commitmail json YAML

More automoc cleanup.

(markd)

2017-01-19 09:33:04 UTC MAIN commitmail json YAML

update package versions

(markd)

2017-01-19 09:31:17 UTC MAIN commitmail json YAML

Update to kdewebdev 16.08.0

minor changes - last kde4 version

(markd)

2017-01-19 09:29:54 UTC MAIN commitmail json YAML

Update to kuser 16.08.0

minor changes - last kde4 version

(markd)

2017-01-19 09:29:22 UTC MAIN commitmail json YAML

Updated lang/py34-html-docs to 3.4.6

(leot)

2017-01-19 09:29:07 UTC MAIN commitmail json YAML

Update lang/py34-html-docs to py34-html-docs-3.4.6

pkgsrc changes:
- Switch MASTER_SITES to https://www.python.org/ftp/python/doc/${VERS}/
  Unlike previous MASTER_SITES the documentation there is not regenerated
  periodically (so it will avoid possible changes in the distfiles).

Changes:
Unfortunately no changelog is available. However, the documentation
is now synced with the lang/python34 version available in pkgsrc.

(leot)

2017-01-19 09:28:49 UTC MAIN commitmail json YAML

Update to kdf 16.04.0

minor changes - last kde4 version

(markd)

2017-01-19 09:27:33 UTC MAIN commitmail json YAML

Update to kgpg 16.08.0

minor changes - last kde4 version

(markd)

2017-01-19 09:25:49 UTC MAIN commitmail json YAML

Update to okular 16.08.0

minor changes - last kde4 version

(markd)

2017-01-19 09:24:38 UTC MAIN commitmail json YAML

Update to kppp 16.12.0

minor changes

(markd)

2017-01-19 09:23:36 UTC MAIN commitmail json YAML