Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (2h)  pkgsrc-2024Q1 (15d)  pkgsrc-2023Q4 (43d)  pkgsrc-2023Q2 (75d)  pkgsrc-2023Q3 (155d) 

2024-05-13 18:58:34 UTC Now

2017-01-21 20:20:43 UTC MAIN commitmail json YAML

Updated chat/ejabberd to 17.01

(fhajny)

2017-01-21 20:20:33 UTC MAIN commitmail json YAML

Update chat/ejabberd to 17.01

Most relevant changes:

Admin
- Add example api_permissions: definition to config template
- Allow old-stype mod_vcard_ldap in the config
- Fix migration of old pubsub database (migrating from 2.1.x)
- Get nodes from ejabberd_cluster instead of mnesia
- mod_configure: Fix configuration commands

Core
- Fix case clauses when using compression
- Set from/to in every routed packet
- Correctly process errors from new cyrsasl API
- Improve return values in cyrsasl API

Modules
- mod_http_bind: remove and migration code to mod_bosh
- mod_muc: Allow a subscriber to create room, then set
  allow_subscription=true
- mod_muc: Support legacy muc#roomconfig values
- mod_offline: Decode message before checking for expiration

Mnesia
- Let ejabberd_mnesia handles copy_type
- Fix index processing
- Speedup table setup, no i/o if EJABBERD_SCHEMA_PATH not set

SQL
- Add SSL support for SQL connections with PostgreSQL 1.1.2+
- Cope with malformed values in 'rosterusers' SQL table
- Improve tag insertion, avoid duplication

(fhajny)

2017-01-21 20:17:19 UTC MAIN commitmail json YAML

Updated net/erlang-xmpp to 1.1.5

(fhajny)

2017-01-21 20:17:11 UTC MAIN commitmail json YAML

Update net/erlang-xmpp to 1.1.5.

- Fix translation order
- Add legacy auth stream feature support
- Better support subtags with empty namespaces
- Add dialback feature support
- Fix error generation for raw xml elements
- Treat unknown message type as "normal"
- Allow including #text{} elements into #sm_failed{}
- Add xmpp:del_meta/2 function
- Fix typo in add_delay_info/4
- Make it possible to get text by lang
- Don't crash if previous delay tag misses 'from' attribute

(fhajny)

2017-01-21 20:15:56 UTC MAIN commitmail json YAML

Updated textproc/erlang-fast_yaml to 1.0.8

(fhajny)

2017-01-21 20:15:46 UTC MAIN commitmail json YAML

Update textproc/erlang-fast_yaml to 1.0.8.

- Load local .so instead from system package when running tests.

(fhajny)

2017-01-21 20:15:00 UTC MAIN commitmail json YAML

Updated textproc/erlang-fast_xml to 1.1.19

(fhajny)

2017-01-21 20:14:51 UTC MAIN commitmail json YAML

Update textproc/erlang-fast_xml to 1.1.19.

- Add checks for empty string
- Remove unused code
- Load locally build .so file when performing tests

(fhajny)

2017-01-21 20:13:58 UTC MAIN commitmail json YAML

Updated security/erlang-fast_tls to 1.0.10

(fhajny)

2017-01-21 20:13:48 UTC MAIN commitmail json YAML

Update security/erlang-fast_tls to 1.0.10.

- Add ability to use system installed deps instead fetching them from git.

(fhajny)

2017-01-21 20:11:04 UTC MAIN commitmail json YAML

Updated devel/erlang-ezlib to 1.0.2

(fhajny)

2017-01-21 20:10:55 UTC MAIN commitmail json YAML

Update devel/erlang-ezlib to 1.0.2.

- Do not throw badarg exception on closed port.

(fhajny)

2017-01-21 20:10:10 UTC MAIN commitmail json YAML

Updated devel/erlang-cache_tab to 1.0.6

(fhajny)

2017-01-21 20:09:54 UTC MAIN commitmail json YAML

Update devel/erlang-cache_tab to 1.0.6.

- Add dirty_dist_insert and dirty_dist_delete calls.

(fhajny)

2017-01-21 20:06:55 UTC MAIN commitmail json YAML

2017-01-21 20:05:37 UTC MAIN commitmail json YAML

Updated databases/erlang-p1_pgsql to 1.1.2

(fhajny)

2017-01-21 20:05:26 UTC MAIN commitmail json YAML

2017-01-21 19:57:12 UTC MAIN commitmail json YAML

Updated math/fftw to 3.3.6

(adam)

2017-01-21 19:55:29 UTC MAIN commitmail json YAML

FFTW 3.3.6-pl1
Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated shared libraries of the form libfftw3.so.2.6.6 instead of libfftw3.so.3.*.

FFTW 3.3.6
The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't work, and this 3.3.6 fixes it. Sorry about that.
Compilation fixes for IBM XLC.
Compilation fixes for threads on Windows.
fix SIMD autodetection on amd64 when (_MSC_VER > 1500)

(adam)

2017-01-21 19:45:21 UTC MAIN commitmail json YAML

Bump versions in buildlink

(ryoon)

2017-01-21 19:33:05 UTC MAIN commitmail json YAML

Updated audio/pulseaudio to 10.0

(ryoon)

2017-01-21 19:32:11 UTC MAIN commitmail json YAML

Update to 10.0

Changelog:
# PulseAudio 10.0 release notes
## Changes at a glance

  * Automatically switch Bluetooth profile when using VoIP
    applications
  * New module for prioritizing passthrough streams
    (module-allow-passthrough)
  * Fixed hotplugging support for USB surround sound cards
  * Separate volumes for Bluetooth A2DP and HSP profiles
  * memfd-based shared memory mechanism enabled by default
  * Removed module-xenpv-sink
  * Dropped dependency to json-c
  * When using systemd to start PulseAudio, pulseaudio.socket is
    always started first
  * Compatibility with OpenSSL 1.1.0
  * Clarified qpaeq license

## Notes for end users
### Automatically switch Bluetooth profile when using VoIP applications

Bluetooth headsets typically support both the A2DP profile, which is
suitable for music, and the HSP profile, which is suitable for
telephony use cases. module-bluetooth-policy will now automatically
switch the profile of a Bluetooth headset from A2DP to HSP/HFP when an
application creates a recording stream with property media.role=phone
(telephony applications should set that property for their
streams). When the stream goes away, the profile gets restored back to
A2DP. This way the user doesn't have to manually switch the profiles
when starting and stopping a call. This behaviour can be disabled by
giving argument auto_switch=false to module-bluetooth-policy.

### New module for prioritizing passthrough streams (module-allow-passthrough)

Passthrough streams are streams whose content must go completely unaltered from the application to the sound card, and they are mainly used for playing back compressed audio through an S/PDIF connection. When a passthrough stream is playing to a device, no other streams can play at the same time to the same device, and if there's already something playing when a passthrough stream is created, the passthrough stream creation will normally fail. Now we have a new module, called module-allow-passthrough, which will give higher priority to passthrough streams, so that if there are other streams playing when a passthrough stream is created, those other streams will be moved out of the way to a dummy device.

### Fixed hotplugging support for USB surround sound cards

A long-standing bug that prevented PulseAudio from using any
hotplugged USB surround sound cards has been fixed.

### Separate volumes for Bluetooth A2DP and HSP profiles

The Bluetooth sink and source names are now different depending on
whether the active profile is A2DP or HSP. This allows PulseAudio to
store different volumes for A2DP and HSP. Due to different mechanisms
for implementing volume control between the profiles, trying to use
the same volume value in PulseAudio doesn't actually result in the
same perceived volume, so it's better not to try to use the same
volume.

As an unfortunate transition effect, volumes saved earlier with an
older PulseAudio version won't have effect in the new PulseAudio
version, so all Bluetooth devices will have their volume reset to the
default value when running the new PulseAudio version for the first
time.

This only affects BlueZ 5 users. The same change was done already
earlier for PulseAudio's BlueZ 4 code.

### memfd-based shared memory mechanism enabled by default

The memfd-based shared memory mechanism that was implemented in 9.0 is
now enabled by default. This shouldn't cause any user-visible changes
in behaviour, except if you're using the Firejail sandboxing software,
which doesn't work with PulseAudio's old shared memory mechanism.

If desired, the feature can still be disabled by setting "enable-memfd
= no" either in daemon.conf (for disabling it at the server side) or
in client.conf (for disabling it at the client side).

### Removed module-xenpv-sink

module-xenpv-sink was removed, because it's probably not used by
anyone. If you use it, please let us know.

## Notes for packagers
### Dropped dependency to json-c

libpulse previously used json-c internally, which forced applications
to link to json-c too. That caused crashing in some GLib applications,
because json-c and json-glib both use the same name for some
functions. To solve this, we implemented the necessary JSON
functionality directly in libpulse, so we don't depend on json-c any
more.

### When using systemd to start PulseAudio, pulseaudio.socket is always started first

The pulseaudio.service unit now depends on pulseaudio.socket, meaning
that before systemd starts PulseAudio, it will always first set up the
socket. This is done to avoid confusing behaviour in certain corner
cases (see the comments in pulseaudio.service for a more detailed
explanation).

### Compatibility with OpenSSL 1.1.0

OpenSSL, which is used by module-raop-sink, broke backwards
compatibility in the 1.1.0 release. PulseAudio now supports both 1.1.0
and older versions.

### Clarified qpaeq license

Most of PulseAudio is licensed under LGPL, but the "qpaeq" equalizer
GUI is licensed under AGPL. That hasn't previously been mentioned
anywhere else than in the qpaeq source code itself. Therefore,
distributions that tag their packages with license information have
likely used incorrect information. The license of qpaeq hasn't
changed, but the use of AGPL is now correctly noted in the top-level
LICENSE file.

(ryoon)

2017-01-21 17:10:26 UTC MAIN commitmail json YAML

Always take the flex version from the second word of the version string.

When necessary, the flex version is obtained from the version string reported
by running flex.  Generally, the first word of the version string is flex and
and the second is a version number.  At least for MacOS, there is a third
vendor-specific word.  The sed command previously used to capture the flex
version captured the last word, not the second one, because the first capture
group was too greedy and could capture more than a single word.  Instead,
force the capture groups to capture only words, i.e., no blanks, and use the
second word for the version.

(brook)

2017-01-21 15:37:49 UTC MAIN commitmail json YAML

Program now supports python-3.x. Mark it as such.

(wiz)

2017-01-21 14:44:26 UTC MAIN commitmail json YAML

+ pulseaudio-10.0, wget-1.19.

(wiz)

2017-01-21 12:23:48 UTC MAIN commitmail json YAML

Note license change from modified-bsd to 2-clause-bsd.

(kim)

2017-01-21 12:13:28 UTC MAIN commitmail json YAML

Updated devel/reposurgeon to 3.40

(kim)

2017-01-21 12:07:28 UTC MAIN commitmail json YAML

Update to 3.40:

3.40: 2016-09-20
    In repocutter, repair fatal bugs in log and setlog commands.
    In repocutter, added "see" command for reporting repository structure.
    In repocutter, added "sift" command inverting "expunge".

3.39: 2016-09-01
    Make repocutter pathrename and expunge preserve Node-copyfrom-* headers.
    Make pathrename hack Node-copyfrom-path headers as well as Node-path.
    Enable repocutter to handle binary content in blobs.
    Improved documentation for the unite command.

3.38: 2016-08-27
    Fix handling of second argument of timeoffset.
    Allow full find/replace with UTF-8.
    Make the syntax of the 'split' command consistent with the manual.
    Fix buggy 'authors write' command, and add a regression test for it.

3.37: 2016-03-14
    Prevent two potential crash bug introduced by Python 3 porting.

3.36: 2016-03-13
    The repocutter and repomapper utilities are now 8-bit clean under Python 3.
    Reorder 'done' stream terminator after tag and commit creates.
    Fix for GitLab issue #52, crash on a weird unite case.

3.35: 2016-02-25
    Reposurgeon now runs under either Python 2 or 3.
    CVS repos are recognized by CVSROOT, not a (possibly missing) Attic.

3.34: 2016-02-16
    Make repocutter DTRT when copyfrom roots are removed by expunge.

3.33: 2016-02-01
    More work on header-order independence for both reposurgeon and repocutter.

3.32: 2016-01-31
    Handle Subversion dumps as produced by svndumpfilter with Node-kind first.

3.31: 2016-01-23
    repocutter, a tool for preprocessing Subversion repos, is now included.
    In repotool, a new 'branches' command lists branches (not tags).
    Fix repotool, 'tags' for CVS repo so it lists only tags, not branches.
    In repotool, a new 'compare-branches' command compares all branches.
    In repotool, a new 'compare-all' compares tip, tags, and branches.
    repotool no longer needs to run within a module directory for CVS.
    Move from BSD-3-clause to BSD-2-clause, apply SPDX tag.

3.30: 2016-01-10
    Added "when" command for timestamp conversions.
    Fix GitHub issue #42: Repository.split_commit() produces invalid marks.
    Commands now tab-complete name arguments wherever that makes sense.
    Handle format 7 Subversion dumps with sporadic empty nodes.
    Selection sets now remain ordered rather than being sorted.
    There is a new @srt() function to explicitly sort selection sets.
    The reparent command can now specify multiple ancestors.
    In SVN repositories, a tag's subdirectory is now part of its name.

(kim)

2017-01-21 11:58:52 UTC MAIN commitmail json YAML

Updated print/cups-filters to 1.13.3

(leot)

2017-01-21 11:58:29 UTC MAIN commitmail json YAML

Update print/cups-filters to cups-filters-1.13.3

pkgsrc changes:
- Add --with-apple-raster-filter=rastertopdf to CONFIGURE_ARGS to avoid
  possible PLIST issues with cups<2.2.2 (with cups>=2.2.2 urftopdf is no
  longer built)

Changes:
1.13.3
------
- libcupsfilters: When auto-generating PPD files added support
  for passing through JPEG input to printers which understand
  JPEG. This is also done in CUPS-generated PPDs (Debian bug
  #851499).
- libcupsfilters: Added the "output-bin" option support from
  CUPS' PPD generator to our PPD generator (CUPS Issue #4938).
- cups-browsed: Make support for printers with IPv6 IP address
  work. Both link-local and regular addresses work.

(leot)

2017-01-21 11:57:23 UTC MAIN commitmail json YAML

Updated print/cups to 2.2.2

(leot)

2017-01-21 11:57:10 UTC MAIN commitmail json YAML

Update print/cups to cups-2.2.2

Changes:
2.2.2
-----
- Fixed some issues with the Zebra ZPL printer driver (Issue #4898)
- Fixed some issues with IPP Everywhere printer support (Issue #4893,
  Issue #4909, Issue #4916, Issue #4921, Issue #4923, Issue #4932,
  Issue #4933, Issue #4938)
- The rastertopwg filter could crash with certain input (Issue #4942)
- Optimized connection usage in the IPP backend
  (<rdar://problem/29547323>)
- The scheduler did not detect when an encrypted connection was closed
  by the client on Linux (Issue #4901)
- The cups-lpd program did not catch all legacy usage of ISO-8859-1
  (Issue #4899)
- Fixed builds on systems without a working poll() implementation
  (Issue #4905)
- Added a USB quirk rule for the Kyocera Ecosys P6026cdn (Issue #4900)
- The scheduler no longer creates log files on startup
  (<rdar://problem/28332470>)
- The ippContainsString function now uses case-insensitive comparisons
  for mimeMediaType, name, and text values in conformance with RFC 2911.
- The network backends now log the addresses that were found for a
  printer (<rdar://problem/29268474>)
- Let's Encrypt certificates did not work when the hostname contained
  uppercase letters (Issue #4919)
- Fixed reporting of printed pages in the web interface (Issue #4924)
- Updated systemd config files (Issue #4935)
- Updated documentation (PR #4896)
- Updated localizations (PR #4894, PR #4895, PR #4904, PR #4908,
  Issue #4946)
- Updated packaging files (Issue #4940)

(leot)

2017-01-21 10:52:00 UTC pkgsrc-2016Q4 commitmail json YAML

2017-01-21 10:49:15 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5198 - requested by taca
lang/php56: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.171
- lang/php56/distinfo                                          1.39

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Fri Jan 20 00:44:01 UTC 2017

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php56: distinfo

  Log Message:
  Update php56 to 5.6.30.

  PHP                                                                        NEWS
  |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
  19 Jan 2017, PHP 5.6.30

  - EXIF:
    . Fixed bug #73737 (FPE when parsing a tag format). (Stas)

  - GD:
    . Fixed bug #73549 (Use after free when stream is passed to imagepng). (cmb)
    . Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb)
    . Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb)

  - Intl:
    . Fixed bug #68447 (grapheme_extract take an extra trailing character).
      (SATŌ Kentarō)

  - Phar:
    . Fixed bug #73764 (Crash while loading hostile phar archive). (Stas)
    . Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas)
    . Fixed bug #73773 (Seg fault when loading hostile phar). (Stas)

  - SQLite3:
    . Reverted fix for bug #73530 (Unsetting result set may reset other result
      set). (cmb)

  - Standard:
    . Fixed bug #70213 (Unserialize context shared on double class lookup).
      (Taoguang Chen)
    . Fixed bug #73825 (Heap out of bounds read on unserialize in
      finish_nested_data()). (Stas)

(bsiegert)

2017-01-21 10:18:30 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5197 - requested by taca
lang/php70: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.170
- lang/php70/distinfo                                          1.25

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Thu Jan 19 14:48:49 UTC 2017

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php70: distinfo

  Log Message:
  Update php70 to 7.0.15.

  PHP                                                                        NEWS
  |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
  19 Jan 2017 PHP 7.0.15

  - Core:
    . Fixed bug #73792 (invalid foreach loop hangs script). (Dmitry)
    . Fixed bug #73663 ("Invalid opcode 65/16/8" occurs with a variable created
      with list()). (Laruence)
    . Fixed bug #73585 (Logging of "Internal Zend error - Missing class
      information" missing class name). (Laruence)
    . Fixed bug #73753 (unserialized array pointer not advancing). (David Walker)
    . Fixed bug #73825 (Heap out of bounds read on unserialize in
      finish_nested_data()). (Stas)
    . Fixed bug #73831 (NULL Pointer Dereference while unserialize php object).
      (Stas)
    . Fixed bug #73832 (Use of uninitialized memory in unserialize()). (Stas)
    . Fixed bug #73092 (Unserialize use-after-free when resizing object's
      properties hash table). (Nikita)
    . Fixed bug #69425 (Use After Free in unserialize()). (Nikita)
    . Fixed bug #72731 (Type Confusion in Object Deserialization). (Nikita)

  - COM:
    . Fixed bug #73679 (DOTNET read access violation using invalid codepage).
      (Anatol)

  - DOM:
    . Fixed bug #67474 (getElementsByTagNameNS filter on default ns). (aboks)

  - EXIF:
    . Bug bug #73737 (FPE when parsing a tag format). (Stas)

  - GD:
    . Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb)
    . Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb)

  - GMP:
    . Fixed bug #70513 (GMP Deserialization Type Confusion Vulnerability).
      (Nikita)

  - Mysqli:
    . Fixed bug #73462 (Persistent connections don't set $connect_errno).
      (darkain)

  - Mysqlnd:
    . Fixed issue with decoding BIT columns when having more than one rows in the
      result set. 7.0+ problem. (Andrey)
    . Fixed bug #73800 (sporadic segfault with MYSQLI_OPT_INT_AND_FLOAT_NATIVE).
  (vanviegen)

  - PCRE:
    . Fixed bug #73612 (preg_*() may leak memory). (cmb)

  - PDO_Firebird:
    . Fixed bug #72931 (PDO_FIREBIRD with Firebird 3.0 not work on returning
      statement). (Dorin Marcoci)

  - Phar:
    . Fixed bug #73773 (Seg fault when loading hostile phar). (Stas)
    . Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas)
    . Fixed bug #73764 (Crash while loading hostile phar archive). (Stas)

  - Phpdbg:
    . Fixed bug #73615 (phpdbg without option never load .phpdbginit at startup).
      (Bob)
    . Fixed issue getting executable lines from custom wrappers. (Bob)
    . Fixed bug #73704 (phpdbg shows the wrong line in files with shebang). (Bob)

  - Reflection:
    . Fixed bug #46103 (ReflectionObject memory leak). (Nikita)

  - Streams:
    . Fixed bug #73586 (php_user_filter::$stream is not set to the stream the
      filter is working on). (Dmitry)

  - SQLite3:
    . Reverted fix for bug #73530 (Unsetting result set may reset other result
      set). (cmb)

  - Standard:
    . Fixed bug #73594 (dns_get_record does not populate $additional out
      parameter). (Bruce Weirdan)
    . Fixed bug #70213 (Unserialize context shared on double class lookup).
      (Taoguang Chen)
    . Fixed bug #73154 (serialize object with __sleep function crash). (Nikita)
    . Fixed bug #70490 (get_browser function is very slow). (Nikita)
    . Fixed bug #73265 (Loading browscap.ini at startup causes high memory usage).
      (Nikita)
    . Fixed bug #31875 (get_defined_functions additional param to exclude
  disabled functions). (willianveiga)

  - Zlib:
    . Fixed bug #73373 (deflate_add does not verify that output was not truncated).
      (Matt Bonneau)

(bsiegert)

2017-01-21 10:12:43 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5196 - requested by taca
lang/php71: security fix

Revisions pulled up:
- lang/php/phpversion.mk                                        1.169
- lang/php71/distinfo                                          1.12

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Thu Jan 19 14:43:25 UTC 2017

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php71: distinfo

  Log Message:
  Update php71 to 7.1.1.

  PHP                                                                        NEWS
  |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
  19 Jan 2017, PHP 7.1.1

  - Core:
    . Fixed bug #73792 (invalid foreach loop hangs script). (Dmitry)
    . Fixed bug #73686 (Adding settype()ed values to ArrayObject results in
      references). (Nikita, Laruence)
    . Fixed bug #73663 ("Invalid opcode 65/16/8" occurs with a variable created
      with list()). (Laruence)
    . Fixed bug #73727 (ZEND_MM_BITSET_LEN is "undefined symbol" in
      zend_bitset.h). (Nikita)
    . Fixed bug #73753 (unserialized array pointer not advancing). (David Walker)
    . Fixed bug #73783 (SIG_IGN doesn't work when Zend Signals is enabled).
      (David Walker)
    . Fixed bug #73825 (Heap out of bounds read on unserialize in
      finish_nested_data()). (Stas)
    . Fixed bug #73831 (NULL Pointer Dereference while unserialize php object).
      (Stas)
    . Fixed bug #73832 (Use of uninitialized memory in unserialize()). (Stas)

  - CLI:
    . Fixed bug #72555 (CLI output(japanese) on Windows). (Anatol)

  - COM:
    . Fixed bug #73679 (DOTNET read access violation using invalid codepage).
      (Anatol)

  - DOM:
    . Fixed bug #67474 (getElementsByTagNameNS filter on default ns). (aboks)

  - EXIF:
    . Bug bug #73737 (FPE when parsing a tag format). (Stas)

  - GD:
    . Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb)
    . Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb)

  - Mbstring:
    . Fixed bug #73646 (mb_ereg_search_init null pointer dereference).
      (Laruence)

  - Mysqli:
    . Fixed bug #73462 (Persistent connections don't set $connect_errno).
      (darkain)

  - Mysqlnd:
    . Optimized handling of BIT fields - less memory copies and lower memory
      usage. (Andrey)
    . Fixed bug #73800 (sporadic segfault with MYSQLI_OPT_INT_AND_FLOAT_NATIVE).
  (vanviegen)

  - Opcache:
    . Fixed bug #73789 (Strange behavior of class constants in switch/case block).
      (Laruence)
    . Fixed bug #73746 (Method that returns string returns UNKNOWN:0 instead).
      (Laruence)
    . Fixed bug #73654 (Segmentation fault in zend_call_function). (Nikita)
    . Fixed bug #73668 ("SIGFPE Arithmetic exception" in opcache when divide by
      minus 1). (Nikita)
    . Fixed bug #73847 (Recursion when a variable is redefined as array). (Nikita)

  - PDO_Firebird:
    . Fixed bug #72931 (PDO_FIREBIRD with Firebird 3.0 not work on returning
      statement). (Dorin Marcoci)

  - Phar:
    . Fixed bug #73773 (Seg fault when loading hostile phar). (Stas)
    . Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas)
    . Fixed bug #73764 (Crash while loading hostile phar archive). (Stas)

  - phpdbg:
    . Fixed bug #73794 (Crash (out of memory) when using run and # command
      separator). (Bob)
    . Fixed bug #73704 (phpdbg shows the wrong line in files with shebang). (Bob)

  - SQLite3:
    . Reverted fix for bug #73530 (Unsetting result set may reset other result
      set). (cmb)

  - Standard:
    . Fixed bug #73594 (dns_get_record does not populate $additional out
      parameter). (Bruce Weirdan)
    . Fixed bug #70213 (Unserialize context shared on double class lookup).
      (Taoguang Chen)
    . Fixed bug #73154 (serialize object with __sleep function crash). (Nikita)
    . Fixed bug #70490 (get_browser function is very slow). (Nikita)
    . Fixed bug #73265 (Loading browscap.ini at startup causes high memory usage).
      (Nikita)
    . Add subject to mail log. (tomsommer)
    . Fixed bug #31875 (get_defined_functions additional param to exclude
  disabled functions). (willianveiga)

  - Zlib
    . Fixed bug #73373 (deflate_add does not verify that output was not truncated).
      (Matt Bonneau)

(bsiegert)

2017-01-21 09:11:27 UTC MAIN commitmail json YAML

Readd `libexec/w3m/w3mimgdisplay' to the PLIST to fix w3m installation built
with an imagelib option.

(leot)

2017-01-21 01:58:02 UTC MAIN commitmail json YAML

Updated cad/pcb to 4.0.0

(dmcmahill)

2017-01-21 01:56:13 UTC MAIN commitmail json YAML

Update to pcb-4.0.0

========================================================================
Release notes for pcb-4.0.0
========================================================================

Dear Users,

It has been quite some time since the last snapshot of pcb was released
in March 2014.

Since then quite a lot of bugs were fixed and new features added, below
this introduction a summary is given of the improvements and additions
since the latest snapshot "pcb-20140316".

This release represents over 480 commits (mostly bugfixes and code
refactoring) and as such this summary clearly is not complete.

This pcb release 4.0.0 has a significant change in the major version
number.

This is done to make a fresh start and to get away from the 1.99z
version with YYYYMMDD snapshots.

Kind regards,

The pcb development team

User experience improvements
----------------------------
- added the command-line option --save-metric-only.
- added escaping of Attribute values.
- added a translation of the Getting Started with PCB for pt_BR.
- added translatable tooltips for toolbar buttons.
- added "Report net length" to Menu -> Info in Gtk.
- added a script for generating a key binding list.
- added tooltips in the GTK HID UI.
- the puller no longer crosses unplated holes.
- solder/component outer layer names changed to top/bottom.
- pcb now uses a tilde instead of a dash for backup filenames.
- corrections in the user documentation.
- the position "delta" display no longer forces the GTK HID window to
  grow.
- write time in ASCII locale into exported files.
- allow for up to 10000 dpi on png exporter output.

Plugins
-------
- added smartdisperse for dispersing elements better, contributed by
  Ben Jackson.
- added relocate for relocating elements, contributed by Jean Richard.
- added RenumberBlock() and RenumberBuffer(), contributed by DJ Delorie.
- added teardrops(), contributed by DJ Delorie.

Exporters
---------
- added a netlister conforming to the IPC-D-356 standard, contributed by
  Jerome Marchand.
- changed "as-shown" to "screen-layer-order" in the png and eps hids.

Footprints library
------------------
- added a SC88A footprint.
- added a LQFP80-10 footprint.
- added QFN24_5 and TQFN24_5 footprints.
- added a SOD523 footprint.
- the SOT325 package had a wrong numbering.
- renamed the SOT325 footprint to SOT353.
- in the ALF footprint the drill holes were too tight.
- an infinite loop in the SIL m4 macro was fixed.

Developer experience improvements
---------------------------------
- made a start with adding Doxygen developer documentation tags in the
  source files.
  A pcb.dox configuration file is available in the "doc/doxygen"
  directory so developers can build the documentation there by invoking
  "doxygen pcb.dox" from the CLI.
  This is not done by configuring with --enable-docs, which is solely
  reserved for the generation of User documentation.
- added numerous fixes in the win32 target.

Notes for early adapters
------------------------
In the git repository two tags have been added to allow for checking
out of pcb-4.0.0 at the branch point (git checkout pcb-4.0.0-base) or at
the release point (git checkout pcb-4.0.0-RELEASE).
This is in line with tagging done in former snapshots.

Changed dependencies
--------------------
- autoconf 2.60 --> 2.69.
- gettext 0.14 --> 0.19.3.

Contributors
------------
The following authors contributed to the 4.0.0 release:
- Milan Prochac
- WileyECoyote
- DJ Delorie
- Britton Leo Kerin
- Jerome Marchand
- chrysn
- Sergey Stepanov
- Gareth Edwards
- Peter Clifton
- Anton Dubniak
- Markus Hitter
- Kai-Martin Knaak
- Martin
- Adrian Pardini
- Keith Packard
- Patrick Bernaud
- Robert Drehmel
- erich_heinzle
- Andrew Poelstra
- Marco Ciampa
- Roland Lutz
- Eugene Mikhantiev
- Jorge Barros de Abreu
- Richard Hughes
- Ivan Stankovic
- Charles Parker
- Dan McMahill
- Igor2
- Jean Richard
- Ben Jackson
- Morvan
- dima
- Peter S. May
- Felix K (kuhlix)
- rosvall
- Sergey Alyoshin
- bert

Please note that names are in no particular order and all e-mail
addresses have been removed for privacy.

Fixed and committed Launchpad bug reports
-----------------------------------------
#699149  infinite loop in the SIL m4 macro.
#699164  Position "delta" display forces GTK HID window to grow.
#699209  DSP dances.
#699243  SOT325 Package wrong numbering.
#699286  ALF footprint drill holes too tight.
#699413  Doxygenation of action.c and hid.h.
#699539  Request: tooltips.
#699543  Request: key binding list.
#701133  Export to PNG always shows pads on other side of board.
#996319  ipc-d-356 netlist creation.
#1005137  Build fails when DEBUG constant defined.
#1013358  Auto-enforce-DRC : cannot draw with exact clearance.
#1035979  default silk layer names are the same for top and bottom.
#1048256  pcb crashes when GUI-lessly exporting a PNG.
#1074268  gcode tests fail.
#1280748  Print non localized date string.
#1308221  Use tilde instead of dash for backup files.
#1309579  Adding descriptive Tooltips to the toolbar buttons.
#1339383  Segfault on PS export with completely clipped polygon.
#1408399  small fix in source text.
#1408615  added pcb.pot to the gitignore.
#1413254  Value of 1umil incorrectly set to 10袖mil.
#1413350  Drill report - wrong hole count.
#1486582  pcb doesn't build.
#1487761  Antifork.
#1488220  Allow automated tests of actions.
#1490264  Remove vi command line interface.
#1490284  Compile error in src/hid/lesstif/dialogs.c and
          src/hid/lesstif/main.c.
#1491953  Dispersing elements better.
#1492497  Documentation for "Arc" is wrong.
#1497628  We need a PPA.
#1500224  Unit tests fail on 32-bit.
#1500241  pcb/gtk: buggy definition of LAYER_BUTTON_SILK.
#1500244  pcb/gtk: order of layer groups in preference dialogue.
#1505262  The N_ macro is spoiling the user documentation
#1506204  Quotes in attribute name or value make the PCB file
          unreadable.
#1521597  PCB includes invalid vertex into merged polygon.
#1532298  add the relocate plugin.
#1532329  add keywords to appdata.
#1534373  Improper handling of files specified on cmdline.
#1542858  strchrnull not in OSX C library.
#1550382  puller crosses unplated holes.
#1551970  Install failure in doc subdirectory.
#1553255  djopt(splitlines) does not behave as expected.
#1553281  djopt(miter) affects outline.
#1580837  Cleanup code causes core dumps.
#1586020  Bad Translation Menu Entry: PCB (Portuguese).
#1604524  polygon "twin hole" bug.
#1609542  text bug.
#1616803  Remove redundant setting of library_window->libtreeview.
#1631059  Crash during undo of element text resize.
#1631646  Non-fatal errors when building docs.
#1633924  FontSave distorts symbols.
#1636221  Undo serial number not incremented when deselecting.
#1639518  Joining Text Fails to Undo.
#1645100  Arc rtree/polygon clearance bugs.

(dmcmahill)

2017-01-20 23:49:35 UTC MAIN commitmail json YAML

Add more tex packages.

(markd)

2017-01-20 23:47:25 UTC MAIN commitmail json YAML

Add texlive-collection-all

(markd)

2017-01-20 23:46:36 UTC MAIN commitmail json YAML

Add texlive-collection-all
  A meta-pkg pulling in all the texlive collections.

(markd)

2017-01-20 23:35:18 UTC MAIN commitmail json YAML

Add tex-milog and tex-uhrzeit completing collection.

(markd)

2017-01-20 23:32:42 UTC MAIN commitmail json YAML

Add tex-przechlewski-book to complete collection

(markd)

2017-01-20 23:31:08 UTC MAIN commitmail json YAML

2017-01-20 23:29:08 UTC MAIN commitmail json YAML

2017-01-20 23:26:37 UTC MAIN commitmail json YAML

Add tex-{eqparbox,milog,przechlewski-book,uhrzeit,urlbst}{,-doc}

(markd)

2017-01-20 23:22:49 UTC MAIN commitmail json YAML

2017-01-20 23:09:56 UTC MAIN commitmail json YAML

Add tex-mparrows to complete collection.

(markd)

2017-01-20 23:07:38 UTC MAIN commitmail json YAML

Add tex-mparrows{,-doc}

(markd)

2017-01-20 23:06:06 UTC MAIN commitmail json YAML

2017-01-20 22:38:39 UTC MAIN commitmail json YAML

Updated textproc/py-vobject to 0.9.4

(wiz)

2017-01-20 22:38:29 UTC MAIN commitmail json YAML

Updated py-vobject to 0.9.4.

0.9.4

    improved PEP8 compliance (#53)
    improved Python 3 compatibility (#55)
    improved encoding/decoding (#49, #58) - thanks @pbiering!
    correct handling of pytz timezones (#45) - thanks @Achimh3011!

0.9.3

    Fixed use of doc in setup.py for -OO mode (#19) - thanks @dsanders11!
    Added python3 compatibility for base64 encoding (#21) - thanks @prauscher!
    Fixed ORG fields with multiple components (#23) - thanks @untitaker!
    Removed stray HTML entity in README (#26) - thanks @inglesp!
    Updated README.md to show example of adding "ORG" to a vCard (#28) - thanks @Tamerz!
    Handle pytz timezones in iCalendar serialization (#33) - thanks @medmunds!
    Use logging instead of printing to stdout (#35) - thanks @lucc!

(wiz)

2017-01-20 22:13:28 UTC MAIN commitmail json YAML

2017-01-20 21:57:08 UTC MAIN commitmail json YAML

Add a bunch of tex packages

(markd)

2017-01-20 21:51:32 UTC MAIN commitmail json YAML

Add a bunch of tex packages

(markd)

2017-01-20 21:44:01 UTC MAIN commitmail json YAML

Add tex-abntex2{,-doc} 1.9.6
Typeset technical and scientific Brazilian documents based on ABNT rules
Add tex-blindtext{,-doc} 2.0
Producing 'blind' text for testing
Add tex-cleveref{,-doc} 0.19
Intelligent cross-referencing
Add tex-diagbox{,-doc} 2.1
Table heads with diagonal lines
Add tex-fncychap{,-doc} 1.34
Seven predefined chapter heading styles
Add tex-fontaxes{,-doc} 1.0d
dditional font axes for LaTeX
Add tex-longfbox{,-doc} 1.0
Draw framed boxes with standard CSS attributes that can break over multiple pages
Add tex-mweights{,-doc} 20130721
Support for multiple-weight font packages
Add tex-options{,-doc} 1.0
Provides convenient key-value options for LaTeX package writers
Add tex-realboxes{,-doc} 0.2
Variants of common box-commands
Add tex-sfmath 0.8
Sans-serif mathematics
Add tex-tcolorbox{,-doc} 3.94
Coloured boxes, for LaTeX examples and theorems, etc
Add tex-titling{,-doc} 2.1d
Control over the typesetting of the \maketitle command
Add tex-trimspaces{,-doc} 1.1
Trim spaces around an argument or within a macro

(markd)

2017-01-20 21:35:01 UTC MAIN commitmail json YAML

Updated www/php-nextcloud to 11.0.1

(ryoon)

2017-01-20 21:33:51 UTC MAIN commitmail json YAML

Update to 11.0.1

Changelog:
Version 11.0.1 January 16 2017

Changes
Server

    Safari CSPv3 support is sub-par (server/2699)
    Fix legacy DAV endpoint (server/2685)
    Use unmasked permissions in shared scanner (server/2696)
    Do not connect to database before creating it (server/2703)
    Fix todo list activity filter (server/2746)
    Changed anchor in settings page (server/2805)
    Also check in cron for old php version (server/2809)
    Add DAV repair step to fix calendar data (server/2807)
    Only log as info when we can not create a new DB user (server/2750)
    Fix wording for apps mgmt buttons (server/2751)
    Use a form so firefox doesn't try to save the space as a password (server/2804)
    Fix overwriting parameter (server/2825)
    Applied security hardening in SwiftMailer (core/2882)
    Don't set Content-Disposition header if one already exists (server/2949)
    Don't link to the oC forum (server/2988)
    Set redirect_url on 2FA challenge page (server/2981)
    Dont write a certificate bundle if the shipped ca bundle is empty (server/2994)
    Remove group restrictions when those are not allowed anymore (server/2980)

Activity

    Update docs and samples (activity/92)
    Make sure the preview URLs are absolute (activity/91)

User_SAML

    Update SAML library (user_saml/64))
    Make the JS work with sudo mode (user_saml/71))
    Enabled strict mode (user_saml/75))

files_retention

    Delete job if tag not found (files_retention/18)

Also included is a precautionary update for a recent SwiftMailer security issue.

(ryoon)

2017-01-20 21:10:58 UTC MAIN commitmail json YAML

Add tex-ellipse* tex-incgraph*

(markd)

2017-01-20 21:09:07 UTC MAIN commitmail json YAML

Add tex-incgraph{,-doc} 1.12

The package provides tools for including graphics at the full
size of the output medium, or for creating "pages" whose size
is that of the graphic they contain. A principal use case is
documents that require inclusion of (potentially many) scans or
photographs. Bookmarking is especially supported. The tool box
has basic macros and a 'convenience' user interface that wraps
\includegraphics.

(markd)

2017-01-20 21:07:40 UTC MAIN commitmail json YAML

2017-01-20 19:03:56 UTC MAIN commitmail json YAML

Updated www/py-werkzeug to 0.11.15.
Updated www/py-werkzeug-docs to 0.11.15.

(kleink)

2017-01-20 19:02:32 UTC MAIN commitmail json YAML

Update py-werkzeug{,-docs} to 0.11.15.

Version 0.11.15
---------------

Released on December 30th 2016.

- Bugfix for the bugfix in the previous release.

Version 0.11.14
---------------

Released on December 30th 2016.

- Check if platform can fork before importing ``ForkingMixIn``, raise exception
  when creating ``ForkingWSGIServer`` on such a platform, see PR ``#999``.

Version 0.11.13
---------------

Released on December 26th 2016.

- Correct fix for the reloader issuer on certain Windows installations.

Version 0.11.12
---------------

Released on December 26th 2016.

- Fix more bugs in multidicts regarding empty lists. See ``#1000``.
- Add some docstrings to some `EnvironBuilder` properties that were previously
  unintentionally missing.
- Added a workaround for the reloader on windows.

Version 0.11.11
---------------

Released on August 31st 2016.

- Fix JSONRequestMixin for Python3. See #731
- Fix broken string handling in test client when passing integers. See #852
- Fix a bug in ``parse_options_header`` where an invalid content type
  starting with comma or semi-colon would result in an invalid return value,
  see issue ``#995``.
- Fix a bug in multidicts when passing empty lists as values, see issue
  ``#979``.
- Fix a security issue that allows XSS on the Werkzeug debugger. See ``#1001``.

(kleink)

2017-01-20 18:38:21 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5195 - requested by taca
www/typo3_62: security fix

Revisions pulled up:
- www/typo3_62/Makefile                                        1.21
- www/typo3_62/PLIST                                            1.17
- www/typo3_62/distinfo                                        1.19

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Fri Jan 13 15:06:40 UTC 2017

  Modified Files:
  pkgsrc/www/typo3_62: Makefile PLIST distinfo

  Log Message:
  Update typo3_62 to 6.2.30 (TYPO3 6.2.30) including security fixes.

  2017-01-03  ec284cf                  [RELEASE] Release of TYPO3 6.2.30 (TYPO3 Release Team)
  2017-01-03  0f79d43  #79114          [SECURITY] Protect Mailtransport (Wouter Wolters)
  2016-12-31  7a99325  #70106          [BUGFIX] Do not use realpath for temporary file names (Stefan Froemken)
  2016-12-30  5bb34d0  #76478          [TASK] Clean up DebuggerUtility (Nicole Cordes)
  2016-12-24  98dd27a  #70962          [BUGFIX] FAL relations duplicated when saving in workspaces (Andreas Wolf)
  2016-12-16  5124e88  #78915,#78977  [BUGFIX] Optimize cache handling in ReflectionService (Helmut Hummel)
  2016-12-15  18b19ea  #78977          Revert "[BUGFIX] Reflection Cache does not save methodReflections" (Nicole Cordes)
  2016-12-13  8095288  #78925          [BUGFIX] Fix exception in QuickEdit mode for empty pages (Manuel Selbach)
  2016-12-12  8ef727a  #78915          [BUGFIX] Reflection Cache does not save methodReflections (Tymoteusz Motylewski)
  2016-12-08  01a927d  #73241          [BUGFIX] Do not fetch pages with pid < 0 in prepareCacheFlush (Steffen G旦de)
  2016-12-08  bab723b  #72654,#62660  [BUGFIX] Improve DataHandler handling for dbType fields (Nicole Cordes)
  2016-12-07  1a32e92  #78551          [BUGFIX] Reset hidden field information in FormViewhelper (Nicole Cordes)
  2016-12-03  b927c7b  #77097          [BUGFIX] Reset FormViewHelper on execution (Helmut Hummel)

(bsiegert)

2017-01-20 18:35:38 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5194 - requested by joerg
security/botan-devel: build fix

Revisions pulled up:
- security/botan-devel/distinfo                                1.12
- security/botan-devel/patches/patch-src_build-data_os_solaris.txt 1.1
- security/botan-devel/patches/patch-src_lib_utils_locking__allocator_info.txt 1.1
- security/botan-devel/patches/patch-src_lib_utils_os__utils.cpp 1.4

---
  Module Name: pkgsrc
  Committed By: joerg
  Date: Mon Jan 16 01:50:15 UTC 2017

  Modified Files:
  pkgsrc/security/botan-devel: distinfo
  pkgsrc/security/botan-devel/patches: patch-src_lib_utils_os__utils.cpp
  Added Files:
  pkgsrc/security/botan-devel/patches:
      patch-src_build-data_os_solaris.txt
      patch-src_lib_utils_locking__allocator_info.txt

  Log Message:
  More fixes for build on SmartOS/Solaris.

(bsiegert)

2017-01-20 17:54:31 UTC MAIN commitmail json YAML

Added www/py-flask-webpack version 0.1.0.

(kleink)

2017-01-20 17:53:51 UTC MAIN commitmail json YAML

Add py-flask-webpack.

(kleink)

2017-01-20 17:53:09 UTC MAIN commitmail json YAML

Import Flask-Webpack-0.1.0 as www/py-flask-webpack.

Flask-Webpack ties Webpack and Flask together. It exposes a few
global template tags so that you can work with assets in your jinja
templates and it works with any wsgi server.

(kleink)

2017-01-20 16:13:12 UTC MAIN commitmail json YAML

Note update of security/opendnssec to 1.4.13.

(he)

2017-01-20 16:12:39 UTC MAIN commitmail json YAML

Update OpenDNSSEC to version 1.4.13.

Pkgsrc changes:
* Remove patch now integrated.

Upstream changes:

OpenDNSSEC 1.4.13 - 2017-01-20

* OPENDNSSEC-778: Double NSEC3PARAM record after resalt.
* OPENDNSSEC-853: Fixed serial_xfr_acquired not updated in state file.
* Wrong error was sometimes being print on failing TCP connect.
* Add support for OpenSSL 1.1.0.
* OPENDNSSEC-866: Script for migration between MySQL and SQLite was outdated.

(he)

2017-01-20 16:01:32 UTC MAIN commitmail json YAML

2017-01-20 15:04:22 UTC MAIN commitmail json YAML

Updated www/firefox45 to 45.6.0nb2
Updated www/firefox to 50.1.0nb2

(ryoon)

2017-01-20 15:03:37 UTC MAIN commitmail json YAML

2017-01-20 15:02:05 UTC MAIN commitmail json YAML

Updated devel/nss to 3.28.1

(ryoon)

2017-01-20 15:01:23 UTC MAIN commitmail json YAML

Update to 3.28.1

* Bump nspr requirement

Changelog:
3.28.1:
The NSS team has released Network Security Services (NSS) 3.28.1,
which is a patch release.

Below is a summary of the changes.
Please refer to the full release notes for additional details,
including the SHA256 fingerprints of the changed CA certificates.

No new functionality is introduced in this release. This is a patch release to
update the list of root CA certificates and address a minor TLS compatibility
issue that some applications experienced with NSS 3.28.

Notable Changes:
* The following CA certificates were Removed
- CN = Buypass Class 2 CA 1
- CN = Root CA Generalitat Valenciana
- OU = RSA Security 2048 V3
* The following CA certificates were Added
- OU = AC RAIZ FNMT-RCM
- CN = Amazon Root CA 1
- CN = Amazon Root CA 2
- CN = Amazon Root CA 3
- CN = Amazon Root CA 4
- CN = LuxTrust Global Root 2
- CN = Symantec Class 1 Public Primary Certification Authority - G4
- CN = Symantec Class 1 Public Primary Certification Authority - G6
- CN = Symantec Class 2 Public Primary Certification Authority - G4
- CN = Symantec Class 2 Public Primary Certification Authority - G6
* The version number of the updated root CA list has been set to 2.11
* A misleading assertion/alert has been removed when NSS tries to flush data
  to the peer but the connection was already reset.

3.28:
The NSS team has released Network Security Services (NSS) 3.28,
which is a minor release.

Below is a summary of the changes.

Please refer to the full release notes for additional details:
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28_release_notes

Request to test and prepare for TLS 1.3 (draft):
================================================
To prepare for a change of default build options, which is
planned for
the future NSS 3.29 release, we'd like to encourage all users of NSS
3.28
to override the standard NSS build configuration to enable support for
(draft
) TLS 1.3 by defining NSS_ENABLE_TLS_1_3=1 at build time.
We'd like to ask you to
please give feedback to the NSS developers for any
compatibility issues that you
might encounter in your tests.

For providing feedback, you may send a message to this mailing list, see:
  https://lists.mozilla.org/listinfo/dev-tech-crypto
or please report a bug here:
  https://bugzilla.mozilla.org/enter_bug.cgi?product=NSS

New functionality:
==================
* NSS includes support for TLS 1.3 draft -18. This includes a number 
  of
improvements to TLS 1.3:
  - The signed certificate timestamp, used in
certificate transparency, 
    is supported in TLS 1.3.
  - Key exporters for TLS
1.3 are supported. This includes the early key
    exporter, which can be used if
0-RTT is enabled. Note that there is a
    difference between TLS 1.3 and key
exporters in older versions of TLS.
    TLS 1.3 does not distinguish between an
empty context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by
defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
* NSS includes support for
the X25519 key exchange algorithm, which is
  supported and enabled by default in
all versions of TLS.

New Functions:
==============
* SSL_ExportEarlyKeyingMaterial
* SSL_SendAdditionalKeyShares
* SSL_SignatureSchemePrefSet
* SSL_SignatureSchemePrefGet

Notable Changes:
================
* NSS can no longer be compiled with support for additional elliptic curves.
  This was previously possible by replacing certain NSS source files.
* NSS will now detect the presence of tokens that support additional
  elliptic curves and enable those curves for use in TLS.
  Note that this detection has a one-off performance cost, which can be
  avoided by using the SSL_NamedGroupConfig function to limit supported
  groups to those that NSS provides.
* PKCS#11 bypass for TLS is no longer supported and has been removed.
* Support for "export" grade SSL/TLS cipher suites has been removed.
* NSS now uses the signature schemes definition in TLS 1.3.
  This also affects TLS 1.2. NSS will now only generate signatures with the
  combinations of hash and signature scheme that are defined in TLS 1.3,
  even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are 
    supported by a peer if there was no commonly supported signature scheme.
* NSS will now check if RSA-PSS signing is supported by the token that holds
  the private key prior to using it for TLS.
* The certificate validation code contains checks to no longer trust
  certificates that are issued by old WoSign and StartCom CAs after 
  October 21, 2016. This is equivalent to the behavior that Mozilla will
  release with Firefox 51.

(ryoon)

2017-01-20 13:50:02 UTC MAIN commitmail json YAML

Updated archivers/p5-Archive-Extract to 0.80

(mef)

2017-01-20 13:49:51 UTC MAIN commitmail json YAML

Updated archivers/p5-Archive-Extract to 0.80
--------------------------------------------
0.80    Wed Jan 18 23:14:32 GMT 2017
* Change Linux unzip heuristic to match FreeBSD's [rt#119905]

(mef)

2017-01-20 11:01:38 UTC MAIN commitmail json YAML

2017-01-20 11:01:06 UTC MAIN commitmail json YAML

Added cad/oce version 0.18

(fhajny)

2017-01-20 11:00:50 UTC MAIN commitmail json YAML

2017-01-20 09:39:07 UTC MAIN commitmail json YAML

Updated devel/py-argcomplete to 1.8.0

(fhajny)

2017-01-20 09:38:58 UTC MAIN commitmail json YAML

Update devel/py-argcomplete to 1.8.0.

- Simplify nospace handling in global completion (#195)
- Specially handle all characters in COMP_WORDBREAKS (#187)
- Use setuptools tests-require directive, fixes #186
- Complete files using the specified interpreter (#192)
- Fix completion for scripts run via python (#191)
- Clarify argument to register-python-argcomplete (#190)
- Fix handling of commas and other special chars (#172); handle more
  special characters (#189)
- Fix handling of special characters in tcsh (#188)
- Update my_shlex to Python 3.6 version (#184)
- Fix additional trailing space in exact matches (#183)
- Adjust tests to handle development environments (#180)
- Fix tcsh tests on OSX (#177); Update bash on OSX (#176); Check output
  of test setup command (#179)
- Optionally disable duplicated flags (#143)
- Add default_completer option to CompletionFinder.call (#167)
- Let bash add or suppress trailing space (#159)

(fhajny)

2017-01-20 00:44:49 UTC MAIN commitmail json YAML

Note update of lang/php56 package to 5.6.30.

(taca)

2017-01-20 00:44:01 UTC MAIN commitmail json YAML

Update php56 to 5.6.30.

PHP                                                                        NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
19 Jan 2017, PHP 5.6.30

- EXIF:
  . Fixed bug #73737 (FPE when parsing a tag format). (Stas)

- GD:
  . Fixed bug #73549 (Use after free when stream is passed to imagepng). (cmb)
  . Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb)
  . Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb)

- Intl:
  . Fixed bug #68447 (grapheme_extract take an extra trailing character).
    (SATŌ Kentarō)

- Phar:
  . Fixed bug #73764 (Crash while loading hostile phar archive). (Stas)
  . Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas)
  . Fixed bug #73773 (Seg fault when loading hostile phar). (Stas)

- SQLite3:
  . Reverted fix for bug #73530 (Unsetting result set may reset other result
    set). (cmb)

- Standard:
  . Fixed bug #70213 (Unserialize context shared on double class lookup).
    (Taoguang Chen)
  . Fixed bug #73825 (Heap out of bounds read on unserialize in
    finish_nested_data()). (Stas)

(taca)

2017-01-19 23:46:20 UTC MAIN commitmail json YAML

Added www/SOGo3 version 3.2.5

(wiedi)

2017-01-19 23:45:33 UTC MAIN commitmail json YAML

Import SOGo-3.2.5 as www/SOGo3

Since upstream still maintaines the 2-series it is kept in www/SOGo.
Version 3, introduced in early 2016, has a modern, fully responsive Web
frontend. Both versions share a common implementation of the communication
protocols supported in SOGo and SOPE: LDAP, IMAP, SQL, CardDAV, CalDAV, and
Microsoft Enterprise ActiveSync.

DESCR:
SOGo is fully supported and trusted groupware server with a focus
on scalability and open standards. SOGo is released under the GNU
GPL/LGPL v2 and above.

SOGo provides a rich AJAX-based Web interface and supports multiple
native clients through the use of standard protocols such as CalDAV,
CardDAV and GroupDAV.

SOGo is the missing component of your infrastructure; it sits in
the middle of your servers to offer your users an uniform and
complete interface to access their information. It has been deployed
in production environments where thousands of users are involved.

(wiedi)

2017-01-19 20:35:03 UTC MAIN commitmail json YAML

Updated lang/py35-html-docs to 3.5.3

(leot)

2017-01-19 20:34:50 UTC MAIN commitmail json YAML

Update lang/py35-html-docs to py35-html-docs-3.5.3

pkgsrc changes:
- Switch MASTER_SITES to https://www.python.org/ftp/python/doc/${VERS}/
  Unlike previous MASTER_SITES the documentation there is not regenerated
  periodically (so it will avoid possible changes in the distfiles).

Changes (from the `Documentation' section of the Python 3.5.3 Changelog):
- Issue #28513: Documented command-line interface of zipfile.

(leot)

2017-01-19 19:59:56 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5192 - requested by schmonz
www/ikiwiki: security fix

Revisions pulled up:
- www/ikiwiki/Makefile                                          1.145-1.148
- www/ikiwiki/distinfo                                          1.117-1.120

---
  Module Name: pkgsrc
  Committed By: schmonz
  Date: Fri Dec 30 03:21:11 UTC 2016

  Modified Files:
  pkgsrc/www/ikiwiki: Makefile distinfo

  Log Message:
  Update to 3.20161229. From the changelog:

  * Security: force CGI::FormBuilder->field to scalar context where
    necessary, avoiding unintended function argument injection
    analogous to CVE-2014-1572. In ikiwiki this could be used to
    forge commit metadata, but thankfully nothing more serious.
    (CVE-2016-9646)
  * Security: try revert operations in a temporary working tree before
    approving them. Previously, automatic rename detection could result in
    a revert writing outside the wiki srcdir or altering a file that the
    reverting user should not be able to alter, an authorization bypass.
    (CVE-2016-10026 represents the original vulnerability.)
    The incomplete fix released in 3.20161219 was not effective for git
    versions prior to 2.8.0rc0.
    (CVE-2016-9645 represents that incomplete solution.)
  * Add CVE references for CVE-2016-10026
  * Add automated test for using the CGI with git, including
    CVE-2016-10026
    - Build-depend on libipc-run-perl for better build-time test coverage
  * Add missing ikiwiki.setup for the manual test for CVE-2016-10026
  * git: don't issue a warning if the rcsinfo CGI parameter is undefined
  * git: do not fail to commit changes with a recent git version
    and an anonymous committer

---
  Module Name: pkgsrc
  Committed By: schmonz
  Date: Fri Dec 30 13:59:42 UTC 2016

  Modified Files:
  pkgsrc/www/ikiwiki: Makefile distinfo

  Log Message:
  Update to 3.20161229.1. From the changelog:

  * git: Attribute reverts to the user doing the revert, not the wiki
    itself.
  * git: Do not disable the commit hook while preparing a revert.

---
  Module Name: pkgsrc
  Committed By: schmonz
  Date: Wed Jan 11 02:15:54 UTC 2017

  Modified Files:
  pkgsrc/www/ikiwiki: Makefile distinfo

  Log Message:
  Update to 3.20170110. From the changelog:

  [ Amitai Schleier ]
  * wrappers: Correctly escape quotes in git_wrapper_background_command

  [ Simon McVittie ]
  * git: use an explicit function parameter for the directory to work
    in. Previously, we used global state that was not restored correctly
    on catching exceptions, causing an unintended log message
    "cannot chdir to .../ikiwiki-temp-working: No such file or directory"
    with versions >= 3.20161229 when an attempt to revert a change fails
    or is disallowed
  * git: don't run "git rev-list ... -- -- ..." which would select the
    wrong commits if a file named literally "--" is present in the
    repository
  * check_canchange: log "bad file name whatever", not literal string
    "bad file name %s"
  * t/git-cgi.t: fix a race condition that made the test fail
    intermittently
  * t/git-cgi.t: be more careful to provide a syntactically valid
    author/committer name and email, hopefully fixing this test on
    ci.debian.net
  * templates, comments, passwordauth: use rel=nofollow microformat
    for dynamic URLs
  * templates: use rel=nofollow microformat for comment authors
  * news: use Debian security tracker instead of MITRE for security
    references. Thanks, anarcat
  * Set package format to 3.0 (native)
  * d/copyright: re-order to put more specific stanzas later, to get the
    intended interpretation
  * d/source/lintian-overrides: override obsolete-url-in-packaging for
    OpenID Selector, which does not seem to have any more current URL
    (and in any case our version is a fork)
  * docwiki.setup: exclude TourBusStop from offline documentation.
    It does not make much sense there.
  * d/ikiwiki.lintian-overrides: override script-not-executable warnings
  * d/ikiwiki.lintian-overrides: silence false positive spelling warning
    for Moin Moin
  * d/ikiwiki.doc-base: register the documentation with doc-base
  * d/control: set libmagickcore-6.q16-3-extra as preferred
    build-dependency, with virtual package libmagickcore-extra as an
    alternative, to help autopkgtest to do the right thing

---
  Module Name: pkgsrc
  Committed By: schmonz
  Date: Thu Jan 12 00:44:15 UTC 2017

  Modified Files:
  pkgsrc/www/ikiwiki: Makefile distinfo

  Log Message:
  Update to 3.20170111. From the changelog:

  * passwordauth: prevent authentication bypass via multiple name
    parameters (CVE-2017-0356, OVE-20170111-0001)
  * passwordauth: avoid userinfo forgery via repeated email parameter
    (also in the scope of CVE-2017-0356)
  * CGI, attachment, passwordauth: harden against repeated parameters
    (not believed to have been a vulnerability)
  * remove: make it clearer that repeated page parameter is OK here
  * t/passwordauth.t: new automated test for passwordauth

(bsiegert)

2017-01-19 19:56:49 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5185 (second part) - requested by wiz
security/gnutls: build fix

Revisions pulled up:
- security/gnutls/buildlink3.mk                                1.32

---
  Module Name: pkgsrc
  Committed By: wiz
  Date: Wed Jan 11 17:06:52 UTC 2017

  Modified Files:
  pkgsrc/security/gnutls: buildlink3.mk

  Log Message:
  Add libunistring to bl3.mk, it's linked into libgnutls{,xx}.so.

  PR 51830

(bsiegert)

2017-01-19 19:55:17 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5185 - requested by wiz
security/gnutls: security fix

Revisions pulled up:
- security/gnutls/Makefile                                      1.168-1.169
- security/gnutls/PLIST                                        1.54
- security/gnutls/distinfo                                      1.122
- security/gnutls/patches/patch-tests_mini-server-name.c        deleted

---
  Module Name: pkgsrc
  Committed By: maya
  Date: Sat Jan  7 18:49:16 UTC 2017

  Modified Files:
  pkgsrc/security/gnutls: Makefile

  Log Message:
  gnutls: don't redefine max_align_t on FreeBSD. It incorrectly fails the
  configure test because the type in stddef.h is guarded by a c11 macro
  (most likely).

  Force the configure test to pass.

  From David Shao in PR pkg/51793 (originally from FreeBSD ports).

---
  Module Name: pkgsrc
  Committed By: wiz
  Date: Tue Jan 10 16:23:50 UTC 2017

  Modified Files:
  pkgsrc/security/gnutls: Makefile PLIST distinfo
  Removed Files:
  pkgsrc/security/gnutls/patches: patch-tests_mini-server-name.c

  Log Message:
  Updated gnutls to 3.5.8.

  * Version 3.5.8 (released 2016-01-09)

  ** libgnutls: Ensure that multiple calls to the gnutls_set_priority_*
    functions will not leave the verification profiles field to an
    undefined state. The last call will take precedence.

  ** libgnutls: Ensure that GNUTLS_E_DECRYPTION_FAIL will be returned
    by PKCS#8 decryption functions when an invalid key is provided. This
    addresses regression on decrypting certain PKCS#8 keys.

  ** libgnutls: Introduced option to override the default priority string
    used by the library. The intention is to allow support of system-wide
    priority strings (as set with --with-system-priority-file). The
    configure option is --with-default-priority-string.

  ** libgnutls: Require a valid IV size on all ciphers for PKCS#8 decryption.
    This prevents crashes when decrypting malformed PKCS#8 keys.

  ** libgnutls: Fix crash on the loading of malformed private keys with certain
    parameters set to zero.

  ** libgnutls: Fix double free in certificate information printing. If the PKIX
    extension proxy was set with a policy language set but no policy specified,
    that could lead to a double free.

  ** libgnutls: Addressed memory leaks in client and server side error paths
    (issues found using oss-fuzz project)

  ** libgnutls: Addressed memory leaks in X.509 certificate printing error paths
    (issues found using oss-fuzz project)

  ** libgnutls: Addressed memory leaks and an infinite loop in OpenPGP certificate
    parsing. Fixes by Alex Gaynor. (issues found using oss-fuzz project)

  ** libgnutls: Addressed invalid memory accesses in OpenPGP certificate parsing.
    (issues found using oss-fuzz project)

  ** API and ABI modifications:
  No changes since last version.

  * Version 3.5.7 (released 2016-12-8)

  ** libgnutls: Include CHACHA20-POLY1305 ciphersuites in the SECURE128
    and SECURE256 priority strings.

  ** libgnutls: Require libtasn1 4.9; this ensures gnutls will correctly
    operate with OIDs which have elements that exceed 2^32.

  ** libgnutls: The DN decoding functions output the traditional DN format
    rather than the strict RFC4514 compliant textual DN. This reverts the
    3.5.6 introduced change, and allows applications which depended on the
    previous format to continue to function. Introduced new functions which
    output the strict format by default, and can revert to the old one using
    a flag.

  ** libgnutls: Improved TPM key handling. Check authorization requirements
    prior to using a key and fix issue on loop for PIN input. Patches by
    James Bottomley.

  ** libgnutls: In all functions accepting UTF-8 passwords, ensure that
    passwords are normalized according to RFC7613. When invalid UTF-8
    passwords are detected, they are only tolerated for decryption.
    This introduces a libunistring dependency on GnuTLS. A version of
    libunistring is included in the library for the platforms that do
    not ship it; it can be used with the '--with-included-unistring'
    option to configure script.

  ** libgnutls: When setting a subject alternative name in a certificate
    which is in UTF-8 format, it will transparently be converted to IDNA form
    prior to storing.

  ** libgnutls: GNUTLS_CRT_PRINT_ONELINE flag on gnutls_x509_crt_print()
    will print the SHA256 key-ID instead of a certificate fingerprint.

  ** libgnutls: enhance the PKCS#7 verification capabilities. In the case
    signers that are not discoverable using the trust list or input, use
    the stored list as pool to generate a trusted chain to the signer.

  ** libgnutls: Improved MTU calculation precision for the CBC ciphersuites
    under DTLS.

  ** libgnutls: [added missing news entry since 3.5.0]
    No longer tolerate certificate key usage violations for
    TLS signature verification, and decryption. That is GnuTLS will fail
    to connect to servers which incorrectly use a restricted to signing certificate
    for decryption, or vice-versa. This reverts the lax behavior introduced
    in 3.1.0, due to several such broken servers being available. The %COMPAT
    priority keyword can be used to work-around connecting on these servers.

  ** certtool: When exporting a CRQ in DER format ensure no text data are
    intermixed. Patch by Dmitry Eremin-Solenikov.

  ** certtool: Include the SHA-256 variant of key ID in --certificate-info
    options.

  ** p11tool: Introduced the --initialize-pin and --initialize-so-pin
    options.

  ** API and ABI modifications:
  gnutls_utf8_password_normalize: Added
  gnutls_ocsp_resp_get_responder2: Added
  gnutls_x509_crt_get_issuer_dn3: Added
  gnutls_x509_crt_get_dn3: Added
  gnutls_x509_rdn_get2: Added
  gnutls_x509_dn_get_str2: Added
  gnutls_x509_crl_get_issuer_dn3: Added
  gnutls_x509_crq_get_dn3: Added

  * Version 3.5.6 (released 2016-11-04)

  ** libgnutls: Enhanced the PKCS#7 parser to allow decoding old
    (pre-rfc5652) structures with arbitrary encapsulated content.

  ** libgnutls: Introduced a function group to set known DH parameters
    using groups from RFC7919.

  ** libgnutls: Added more strict RFC4514 textual DN encoding and decoding.
    Now the generated textual DN is in reverse order according to RFC4514,
    and functions which generate a DN from strings such gnutls_x509_crt_set_*dn()
    set the expected DN (reverse of the provided string).

  ** libgnutls: Introduced time and constraints checks in the end certificate
    in the gnutls_x509_crt_verify_data2() and gnutls_pkcs7_verify_direct()
    functions.

  ** libgnutls: Set limits on the maximum number of alerts handled. That is,
    applications using gnutls could be tricked into an busy loop if the
    peer sends continuously alert messages. Applications which set a maximum
    handshake time (via gnutls_handshake_set_timeout) will eventually recover
    but others may remain in a busy loops indefinitely. This is related but
    not identical to CVE-2016-8610, due to the difference in alert handling
    of the libraries (gnutls delegates that handling to applications).

  ** libgnutls: Reverted the change which made the gnutls_certificate_set_*key*
    functions return an index (introduced in 3.5.5), to avoid affecting programs
    which explicitly check success of the function as equality to zero. In order
    for these functions to return an index an explicit call to gnutls_certificate_set_flags
    with the GNUTLS_CERTIFICATE_API_V2 flag is now required.

  ** libgnutls: Reverted the behavior of sending a status request extension even
    without a response (introduced in 3.5.5). That is, we no longer reply to a
    client's hello with a status request, with a status request extension. Although
    that behavior is legal, it creates incompatibility issues with releases in
    the gnutls 3.3.x branch.

  ** libgnutls: Delayed the initialization of the random generator at
    the first call of gnutls_rnd(). This allows applications to load
    on systems which getrandom() would block, without blocking until
    real random data are needed.

  ** certtool: --get-dh-params will output parameters from the RFC7919
    groups.

  ** p11tool: improvements in --initialize option.

  ** API and ABI modifications:
  GNUTLS_CERTIFICATE_API_V2: Added
  GNUTLS_NO_TICKETS: Added
  gnutls_pkcs7_get_embedded_data_oid: Added
  gnutls_anon_set_server_known_dh_params: Added
  gnutls_certificate_set_known_dh_params: Added
  gnutls_psk_set_server_known_dh_params: Added
  gnutls_x509_crt_check_key_purpose: Added

  * Version 3.5.5 (released 2016-10-09)

  ** libgnutls: enhanced gnutls_certificate_set_ocsp_status_request_file()
    to allow importing multiple OCSP request files, one for each chain
    provided.

  ** libgnutls: The gnutls_certificate_set_key* functions return an
    index of the added chain. That index can be used either with
    gnutls_certificate_set_ocsp_status_request_file(), or with
    gnutls_certificate_get_crt_raw() and friends.

  ** libgnutls: Added SHA*, AES-GCM, AES-CCM and AES-CBC optimized implementations
    for the aarch64 architecture. Uses Andy Polyakov's assembly code.

  ** libgnutls: Ensure proper cleanups on gnutls_certificate_set_*key()
    failures due to key mismatch. This prevents leaks or double freeing
    on such failures.

  ** libgnutls: Increased the maximum size of the handshake message hash.
    This will allow the library to cope better with larger packets, as
    the ones offered by current TLS 1.3 drafts.

  ** libgnutls: Allow to use client certificates despite them containing
    disallowed algorithms for a session. That allows for example a client
    to use DSA-SHA1 due to his old DSA certificate, without requiring him
    to enable DSA-SHA1 (and thus make it acceptable for the server's certificate).

  ** libgnutls: Reverted AESNI code on x86 to earlier version as the
    latest version was creating position depending code. Added checks
    in the CI to detect position depending code early.

  ** guile: Update code to the I/O port API of Guile >= 2.1.4
    This makes sure the GnuTLS bindings will work with the forthcoming 2.2
    stable series of Guile, of which 2.1 is a preview.

  ** API and ABI modifications:
  gnutls_certificate_set_ocsp_status_request_function2: Added
  gnutls_session_ext_register: Added
  gnutls_session_supplemental_register: Added
  GNUTLS_E_PK_INVALID_PUBKEY: Added
  GNUTLS_E_PK_INVALID_PRIVKEY: Added

(bsiegert)

2017-01-19 19:48:45 UTC pkgsrc-2016Q4 commitmail json YAML

Pullup ticket #5193 - requested by wiz
security/libtasn1: bugfix, build fix

Revisions pulled up:
- security/libtasn1/Makefile                                    1.67-1.68
- security/libtasn1/distinfo                                    1.47

---
  Module Name: pkgsrc
  Committed By: wiz
  Date: Tue Jan 10 15:26:32 UTC 2017

  Modified Files:
  pkgsrc/security/libtasn1: Makefile distinfo

  Log Message:
  Updated libtasn1 to 4.9.

  * Noteworthy changes in release 4.9 (released 2016-07-25) [stable]
  - Fixes to OID encoding of OIDs which have elements which exceed 2^32

---
  Module Name: pkgsrc
  Committed By: wiz
  Date: Wed Jan 11 16:25:06 UTC 2017

  Modified Files:
  pkgsrc/security/libtasn1: Makefile

  Log Message:
  Remove -Werror from compilation flags.

  PR 51821
  PR 51829

(bsiegert)

2017-01-19 18:52:30 UTC MAIN commitmail json YAML

2017-01-19 17:21:19 UTC MAIN commitmail json YAML

Note update of sysutils/collectd to 5.6.2nb1.

(he)

2017-01-19 17:20:42 UTC MAIN commitmail json YAML

Reinstate the "processes" plugin for NetBSD by initializing the
two per-process context switch counters to -1, indicating no support.
Our kinfo_lwp structure doesn't contain the context switch counters,
which in the kernel is part of the lwp structure.

Also make this build on netbsd-6 and on ports which don't yet have
nearbyint() by simply defining it as rint() on NetBSD.

Bump PKGREVISION.

(he)

2017-01-19 14:58:33 UTC MAIN commitmail json YAML

Note update of www/contao35 package to 3.5.24.

(taca)

2017-01-19 14:58:05 UTC MAIN commitmail json YAML

Update contao35 to 3.5.24.

Version 3.5.24 (2017-01-19)
---------------------------

### Fixed
Correctly handle SVGZ files in the file manager (also fixes #8624).

### Fixed
Revert the download element changes (see #8620).

(taca)

2017-01-19 14:57:35 UTC MAIN commitmail json YAML

Note update of www/contao43 package to 4.3.3.

(taca)

2017-01-19 14:57:05 UTC MAIN commitmail json YAML

Update contao43 to 4.3.3.

* Correctly handle nested public folders when symlinking a folder.
* Correctly handle SVGZ files in the file manager (see contao/core#8624).
* Prevent an endless redirect loop if the page alias is "/" (see contao/core#8560).
* Correctly parse German dates with two digit years in MooTools (see contao/core#8593).
* Correctly add new resources to the user/group permissions (see contao/core#8583).
* Trigger the auto-submit function in the date picker (see contao/core#8603).
* Call the load callback when loading page/file picker nodes (see contao/core#7702).

(taca)

2017-01-19 14:49:23 UTC MAIN commitmail json YAML

Note update of lang/php70 package to 7.0.15.

(taca)

2017-01-19 14:48:49 UTC MAIN commitmail json YAML

Update php70 to 7.0.15.

PHP                                                                        NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
19 Jan 2017 PHP 7.0.15

- Core:
  . Fixed bug #73792 (invalid foreach loop hangs script). (Dmitry)
  . Fixed bug #73663 ("Invalid opcode 65/16/8" occurs with a variable created
    with list()). (Laruence)
  . Fixed bug #73585 (Logging of "Internal Zend error - Missing class
    information" missing class name). (Laruence)
  . Fixed bug #73753 (unserialized array pointer not advancing). (David Walker)
  . Fixed bug #73825 (Heap out of bounds read on unserialize in
    finish_nested_data()). (Stas)
  . Fixed bug #73831 (NULL Pointer Dereference while unserialize php object).
    (Stas)
  . Fixed bug #73832 (Use of uninitialized memory in unserialize()). (Stas)
  . Fixed bug #73092 (Unserialize use-after-free when resizing object's
    properties hash table). (Nikita)
  . Fixed bug #69425 (Use After Free in unserialize()). (Nikita)
  . Fixed bug #72731 (Type Confusion in Object Deserialization). (Nikita)

- COM:
  . Fixed bug #73679 (DOTNET read access violation using invalid codepage).
    (Anatol)

- DOM:
  . Fixed bug #67474 (getElementsByTagNameNS filter on default ns). (aboks)

- EXIF:
  . Bug bug #73737 (FPE when parsing a tag format). (Stas)

- GD:
  . Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb)
  . Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb)

- GMP:
  . Fixed bug #70513 (GMP Deserialization Type Confusion Vulnerability).
    (Nikita)

- Mysqli:
  . Fixed bug #73462 (Persistent connections don't set $connect_errno).
    (darkain)

- Mysqlnd:
  . Fixed issue with decoding BIT columns when having more than one rows in the
    result set. 7.0+ problem. (Andrey)
  . Fixed bug #73800 (sporadic segfault with MYSQLI_OPT_INT_AND_FLOAT_NATIVE).
(vanviegen)

- PCRE:
  . Fixed bug #73612 (preg_*() may leak memory). (cmb)

- PDO_Firebird:
  . Fixed bug #72931 (PDO_FIREBIRD with Firebird 3.0 not work on returning
    statement). (Dorin Marcoci)

- Phar:
  . Fixed bug #73773 (Seg fault when loading hostile phar). (Stas)
  . Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas)
  . Fixed bug #73764 (Crash while loading hostile phar archive). (Stas)

- Phpdbg:
  . Fixed bug #73615 (phpdbg without option never load .phpdbginit at startup).
    (Bob)
  . Fixed issue getting executable lines from custom wrappers. (Bob)
  . Fixed bug #73704 (phpdbg shows the wrong line in files with shebang). (Bob)

- Reflection:
  . Fixed bug #46103 (ReflectionObject memory leak). (Nikita)

- Streams:
  . Fixed bug #73586 (php_user_filter::$stream is not set to the stream the
    filter is working on). (Dmitry)

- SQLite3:
  . Reverted fix for bug #73530 (Unsetting result set may reset other result
    set). (cmb)

- Standard:
  . Fixed bug #73594 (dns_get_record does not populate $additional out
    parameter). (Bruce Weirdan)
  . Fixed bug #70213 (Unserialize context shared on double class lookup).
    (Taoguang Chen)
  . Fixed bug #73154 (serialize object with __sleep function crash). (Nikita)
  . Fixed bug #70490 (get_browser function is very slow). (Nikita)
  . Fixed bug #73265 (Loading browscap.ini at startup causes high memory usage).
    (Nikita)
  . Fixed bug #31875 (get_defined_functions additional param to exclude
disabled functions). (willianveiga)

- Zlib:
  . Fixed bug #73373 (deflate_add does not verify that output was not truncated).
    (Matt Bonneau)

(taca)

2017-01-19 14:43:56 UTC MAIN commitmail json YAML

Note update of lang/php71 package to 7.1.1.

(taca)

2017-01-19 14:43:25 UTC MAIN commitmail json YAML

Update php71 to 7.1.1.

PHP                                                                        NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
19 Jan 2017, PHP 7.1.1

- Core:
  . Fixed bug #73792 (invalid foreach loop hangs script). (Dmitry)
  . Fixed bug #73686 (Adding settype()ed values to ArrayObject results in
    references). (Nikita, Laruence)
  . Fixed bug #73663 ("Invalid opcode 65/16/8" occurs with a variable created
    with list()). (Laruence)
  . Fixed bug #73727 (ZEND_MM_BITSET_LEN is "undefined symbol" in
    zend_bitset.h). (Nikita)
  . Fixed bug #73753 (unserialized array pointer not advancing). (David Walker)
  . Fixed bug #73783 (SIG_IGN doesn't work when Zend Signals is enabled).
    (David Walker)
  . Fixed bug #73825 (Heap out of bounds read on unserialize in
    finish_nested_data()). (Stas)
  . Fixed bug #73831 (NULL Pointer Dereference while unserialize php object).
    (Stas)
  . Fixed bug #73832 (Use of uninitialized memory in unserialize()). (Stas)

- CLI:
  . Fixed bug #72555 (CLI output(japanese) on Windows). (Anatol)

- COM:
  . Fixed bug #73679 (DOTNET read access violation using invalid codepage).
    (Anatol)

- DOM:
  . Fixed bug #67474 (getElementsByTagNameNS filter on default ns). (aboks)

- EXIF:
  . Bug bug #73737 (FPE when parsing a tag format). (Stas)

- GD:
  . Fixed bug #73869 (Signed Integer Overflow gd_io.c). (cmb)
  . Fixed bug #73868 (DOS vulnerability in gdImageCreateFromGd2Ctx()). (cmb)

- Mbstring:
  . Fixed bug #73646 (mb_ereg_search_init null pointer dereference).
    (Laruence)

- Mysqli:
  . Fixed bug #73462 (Persistent connections don't set $connect_errno).
    (darkain)

- Mysqlnd:
  . Optimized handling of BIT fields - less memory copies and lower memory
    usage. (Andrey)
  . Fixed bug #73800 (sporadic segfault with MYSQLI_OPT_INT_AND_FLOAT_NATIVE).
(vanviegen)

- Opcache:
  . Fixed bug #73789 (Strange behavior of class constants in switch/case block).
    (Laruence)
  . Fixed bug #73746 (Method that returns string returns UNKNOWN:0 instead).
    (Laruence)
  . Fixed bug #73654 (Segmentation fault in zend_call_function). (Nikita)
  . Fixed bug #73668 ("SIGFPE Arithmetic exception" in opcache when divide by
    minus 1). (Nikita)
  . Fixed bug #73847 (Recursion when a variable is redefined as array). (Nikita)

- PDO_Firebird:
  . Fixed bug #72931 (PDO_FIREBIRD with Firebird 3.0 not work on returning
    statement). (Dorin Marcoci)

- Phar:
  . Fixed bug #73773 (Seg fault when loading hostile phar). (Stas)
  . Fixed bug #73768 (Memory corruption when loading hostile phar). (Stas)
  . Fixed bug #73764 (Crash while loading hostile phar archive). (Stas)

- phpdbg:
  . Fixed bug #73794 (Crash (out of memory) when using run and # command
    separator). (Bob)
  . Fixed bug #73704 (phpdbg shows the wrong line in files with shebang). (Bob)

- SQLite3:
  . Reverted fix for bug #73530 (Unsetting result set may reset other result
    set). (cmb)

- Standard:
  . Fixed bug #73594 (dns_get_record does not populate $additional out
    parameter). (Bruce Weirdan)
  . Fixed bug #70213 (Unserialize context shared on double class lookup).
    (Taoguang Chen)
  . Fixed bug #73154 (serialize object with __sleep function crash). (Nikita)
  . Fixed bug #70490 (get_browser function is very slow). (Nikita)
  . Fixed bug #73265 (Loading browscap.ini at startup causes high memory usage).
    (Nikita)
  . Add subject to mail log. (tomsommer)
  . Fixed bug #31875 (get_defined_functions additional param to exclude
disabled functions). (willianveiga)

- Zlib
  . Fixed bug #73373 (deflate_add does not verify that output was not truncated).
    (Matt Bonneau)

(taca)

2017-01-19 14:17:19 UTC MAIN commitmail json YAML

Updated converters/p5-JSON-MaybeXS to 1.003008

(wen)

2017-01-19 14:16:34 UTC MAIN commitmail json YAML

Update to 1.003008
Update DEPENDS

Upstream changes:
1.003008 - 2016-10-03
- added an INSTALLATION section to documentation, to clarify the use of
  dynamic prerequisites in Makefile.PL
- minimize prereqs listed in META.json to avoid giving the appearance of XS
  prerequisites, and confusing static inspection tools such as metacpan.org.

1.003007 - 2016-09-11
- no changes since 1.003006_001

1.003006_001 - 2016-06-28
- bump prereq on JSON::PP, to ensure we get the fix for parsing utf8-encoded
  values (in JSON::PP 2.27300)
- we now always upgrade JSON::XS if it is installed and below version 3.0,
  due to changes in handling booleans
- remove test dependency on Test::Without::Module (RT#115394)

(wen)

2017-01-19 13:58:34 UTC MAIN commitmail json YAML

Updated lang/python35 to 3.5.3

(wen)

2017-01-19 13:55:53 UTC MAIN commitmail json YAML

Update to 3.5.3

Upstream changes:
What's New in Python 3.5.3?
===========================

Release date: 2017-01-16

There were no code changes between 3.5.3rc1 and 3.5.3 final.

What's New in Python 3.5.3 release candidate 1?
===============================================

Release date: 2017-01-02

Core and Builtins
-----------------

- Issue #29073: bytearray formatting no longer truncates on first null byte.

- Issue #28932: Do not include <sys/random.h> if it does not exist.

- Issue #28147: Fix a memory leak in split-table dictionaries: setattr()
  must not convert combined table into split table.

- Issue #25677: Correct the positioning of the syntax error caret for
  indented blocks.  Based on patch by Michael Layzell.

- Issue #29000: Fixed bytes formatting of octals with zero padding in alternate
  form.

- Issue #28512: Fixed setting the offset attribute of SyntaxError by
  PyErr_SyntaxLocationEx() and PyErr_SyntaxLocationObject().

- Issue #28991:  functools.lru_cache() was susceptible to an obscure reentrancy
  bug caused by a monkey-patched len() function.

- Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X
  when decode astral characters.  Patch by Xiang Zhang.

- Issue #19398: Extra slash no longer added to sys.path components in case of
  empty compile-time PYTHONPATH components.

- Issue #28426: Fixed potential crash in PyUnicode_AsDecodedObject() in debug
  build.

- Issue #23782: Fixed possible memory leak in _PyTraceback_Add() and exception
  loss in PyTraceBack_Here().

- Issue #28379: Added sanity checks and tests for PyUnicode_CopyCharacters().
  Patch by Xiang Zhang.

- Issue #28376: The type of long range iterator is now registered as Iterator.
  Patch by Oren Milman.

- Issue #28376: The constructor of range_iterator now checks that step is not 0.
  Patch by Oren Milman.

- Issue #26906: Resolving special methods of uninitialized type now causes
  implicit initialization of the type instead of a fail.

- Issue #18287: PyType_Ready() now checks that tp_name is not NULL.
  Original patch by Niklas Koep.

- Issue #24098: Fixed possible crash when AST is changed in process of
  compiling it.

- Issue #28350: String constants with null character no longer interned.

- Issue #26617: Fix crash when GC runs during weakref callbacks.

- Issue #27942: String constants now interned recursively in tuples and frozensets.

- Issue #21578: Fixed misleading error message when ImportError called with
  invalid keyword args.

- Issue #28203: Fix incorrect type in error message from
  ``complex(1.0, {2:3})``. Patch by Soumya Sharma.

- Issue #27955: Fallback on reading /dev/urandom device when the getrandom()
  syscall fails with EPERM, for example when blocked by SECCOMP.

- Issue #28131: Fix a regression in zipimport's compile_source().  zipimport
  should use the same optimization level as the interpreter.

- Issue #25221: Fix corrupted result from PyLong_FromLong(0) when
  Python is compiled with NSMALLPOSINTS = 0.

- Issue #25758: Prevents zipimport from unnecessarily encoding a filename
  (patch by Eryk Sun)

- Issue #28189: dictitems_contains no longer swallows compare errors.
  (Patch by Xiang Zhang)

- Issue #27812: Properly clear out a generator's frame's backreference to the
  generator to prevent crashes in frame.clear().

- Issue #27811: Fix a crash when a coroutine that has not been awaited is
  finalized with warnings-as-errors enabled.

- Issue #27587: Fix another issue found by PVS-Studio: Null pointer check
  after use of 'def' in _PyState_AddModule().
  Initial patch by Christian Heimes.

- Issue #26020: set literal evaluation order did not match documented behaviour.

- Issue #27782: Multi-phase extension module import now correctly allows the
  ``m_methods`` field to be used to add module level functions to instances
  of non-module types returned from ``Py_create_mod``. Patch by Xiang Zhang.

- Issue #27936: The round() function accepted a second None argument
  for some types but not for others.  Fixed the inconsistency by
  accepting None for all numeric types.

- Issue #27487: Warn if a submodule argument to "python -m" or
  runpy.run_module() is found in sys.modules after parent packages are
  imported, but before the submodule is executed.

- Issue #27558: Fix a SystemError in the implementation of "raise" statement.
  In a brand new thread, raise a RuntimeError since there is no active
  exception to reraise. Patch written by Xiang Zhang.

- Issue #27419: Standard __import__() no longer look up "__import__" in globals
  or builtins for importing submodules or "from import".  Fixed handling an
  error of non-string package name.

- Issue #27083: Respect the PYTHONCASEOK environment variable under Windows.

- Issue #27514: Make having too many statically nested blocks a SyntaxError
  instead of SystemError.

- Issue #27473: Fixed possible integer overflow in bytes and bytearray
  concatenations.  Patch by Xiang Zhang.

- Issue #27507: Add integer overflow check in bytearray.extend().  Patch by
  Xiang Zhang.

- Issue #27581: Don't rely on wrapping for overflow check in
  PySequence_Tuple().  Patch by Xiang Zhang.

- Issue #27443: __length_hint__() of bytearray iterators no longer return a
  negative integer for a resized bytearray.

- Issue #27942: Fix memory leak in codeobject.c

Library
-------

- Issue #15812: inspect.getframeinfo() now correctly shows the first line of
  a context.  Patch by Sam Breese.

- Issue #29094: Offsets in a ZIP file created with extern file object and modes
  "w" and "x" now are relative to the start of the file.

- Issue #13051: Fixed recursion errors in large or resized
  curses.textpad.Textbox.  Based on patch by Tycho Andersen.

- Issue #29119: Fix weakrefs in the pure python version of
  collections.OrderedDict move_to_end() method.
  Contributed by Andra Bogildea.

- Issue #9770: curses.ascii predicates now work correctly with negative
  integers.

- Issue #28427: old keys should not remove new values from
  WeakValueDictionary when collecting from another thread.

- Issue 28923: Remove editor artifacts from Tix.py.

- Issue #28871: Fixed a crash when deallocate deep ElementTree.

- Issue #19542: Fix bugs in WeakValueDictionary.setdefault() and
  WeakValueDictionary.pop() when a GC collection happens in another
  thread.

- Issue #20191: Fixed a crash in resource.prlimit() when pass a sequence that
  doesn't own its elements as limits.

- Issue #28779: multiprocessing.set_forkserver_preload() would crash the
  forkserver process if a preloaded module instantiated some
  multiprocessing objects such as locks.

- Issue #28847: dbm.dumb now supports reading read-only files and no longer
  writes the index file when it is not changed.

- Issue #25659: In ctypes, prevent a crash calling the from_buffer() and
  from_buffer_copy() methods on abstract classes like Array.

- Issue #28732: Fix crash in os.spawnv() with no elements in args

- Issue #28485: Always raise ValueError for negative
  compileall.compile_dir(workers=...) parameter, even when multithreading is
  unavailable.

- Issue #28387: Fixed possible crash in _io.TextIOWrapper deallocator when
  the garbage collector is invoked in other thread.  Based on patch by
  Sebastian Cufre.

- Issue #27517: LZMA compressor and decompressor no longer raise exceptions if
  given empty data twice.  Patch by Benjamin Fogle.

- Issue #28549: Fixed segfault in curses's addch() with ncurses6.

- Issue #28449: tarfile.open() with mode "r" or "r:" now tries to open a tar
  file with compression before trying to open it without compression.  Otherwise
  it had 50% chance failed with ignore_zeros=True.

- Issue #23262: The webbrowser module now supports Firefox 36+ and derived
  browsers.  Based on patch by Oleg Broytman.

- Issue #27939: Fixed bugs in tkinter.ttk.LabeledScale and tkinter.Scale caused
  by representing the scale as float value internally in Tk.  tkinter.IntVar
  now works if float value is set to underlying Tk variable.

- Issue #28255: calendar.TextCalendar().prmonth() no longer prints a space
  at the start of new line after printing a month's calendar.  Patch by
  Xiang Zhang.

- Issue #20491: The textwrap.TextWrapper class now honors non-breaking spaces.
  Based on patch by Kaarle Ritvanen.

- Issue #28353: os.fwalk() no longer fails on broken links.

- Issue #25464: Fixed HList.header_exists() in tkinter.tix module by addin
  a workaround to Tix library bug.

- Issue #28488: shutil.make_archive() no longer add entry "./" to ZIP archive.

- Issue #24452: Make webbrowser support Chrome on Mac OS X.

- Issue #20766: Fix references leaked by pdb in the handling of SIGINT
  handlers.

- Issue #26293: Fixed writing ZIP files that starts not from the start of the
  file.  Offsets in ZIP file now are relative to the start of the archive in
  conforming to the specification.

- Issue #28321: Fixed writing non-BMP characters with binary format in plistlib.

- Issue #28322: Fixed possible crashes when unpickle itertools objects from
  incorrect pickle data.  Based on patch by John Leitch.

- Fix possible integer overflows and crashes in the mmap module with unusual
  usage patterns.

- Issue #1703178: Fix the ability to pass the --link-objects option to the
  distutils build_ext command.

- Issue #28253: Fixed calendar functions for extreme months: 0001-01
  and 9999-12.

  Methods itermonthdays() and itermonthdays2() are reimplemented so
  that they don't call itermonthdates() which can cause datetime.date
  under/overflow.

- Issue #28275: Fixed possible use after free in the decompress()
  methods of the LZMADecompressor and BZ2Decompressor classes.
  Original patch by John Leitch.

- Issue #27897: Fixed possible crash in sqlite3.Connection.create_collation()
  if pass invalid string-like object as a name.  Patch by Xiang Zhang.

- Issue #18893: Fix invalid exception handling in Lib/ctypes/macholib/dyld.py.
  Patch by Madison May.

- Issue #27611: Fixed support of default root window in the tkinter.tix module.

- Issue #27348: In the traceback module, restore the formatting of exception
  messages like "Exception: None".  This fixes a regression introduced in
  3.5a2.

- Issue #25651: Allow falsy values to be used for msg parameter of subTest().

- Issue #27932: Prevent memory leak in win32_ver().

- Fix UnboundLocalError in socket._sendfile_use_sendfile.

- Issue #28075: Check for ERROR_ACCESS_DENIED in Windows implementation of
  os.stat().  Patch by Eryk Sun.

- Issue #25270: Prevent codecs.escape_encode() from raising SystemError when
  an empty bytestring is passed.

- Issue #28181: Get antigravity over HTTPS. Patch by Kaartic Sivaraam.

- Issue #25895: Enable WebSocket URL schemes in urllib.parse.urljoin.
  Patch by Gergely Imreh and Markus Holtermann.

- Issue #27599: Fixed buffer overrun in binascii.b2a_qp() and binascii.a2b_qp().

- Issue #19003:m email.generator now replaces only \r and/or \n line
  endings, per the RFC, instead of all unicode line endings.

- Issue #28019: itertools.count() no longer rounds non-integer step in range
  between 1.0 and 2.0 to 1.

- Issue #25969: Update the lib2to3 grammar to handle the unpacking
  generalizations added in 3.5.

- Issue #14977: mailcap now respects the order of the lines in the mailcap
  files ("first match"), as required by RFC 1542.  Patch by Michael Lazar.

- Issue #24594: Validates persist parameter when opening MSI database

- Issue #17582: xml.etree.ElementTree nows preserves whitespaces in attributes
  (Patch by Duane Griffin.  Reviewed and approved by Stefan Behnel.)

- Issue #28047: Fixed calculation of line length used for the base64 CTE
  in the new email policies.

- Issue #27445: Don't pass str(_charset) to MIMEText.set_payload().
  Patch by Claude Paroz.

- Issue #22450: urllib now includes an "Accept: */*" header among the
  default headers.  This makes the results of REST API requests more
  consistent and predictable especially when proxy servers are involved.

- lib2to3.pgen3.driver.load_grammar() now creates a stable cache file
  between runs given the same Grammar.txt input regardless of the hash
  randomization setting.

- Issue #27570: Avoid zero-length memcpy() etc calls with null source
  pointers in the "ctypes" and "array" modules.

- Issue #22233: Break email header lines *only* on the RFC specified CR and LF
  characters, not on arbitrary unicode line breaks.  This also fixes a bug in
  HTTP header parsing.

- Issue 27988: Fix email iter_attachments incorrect mutation of payload list.

- Issue #27691: Fix ssl module's parsing of GEN_RID subject alternative name
  fields in X.509 certs.

- Issue #27850: Remove 3DES from ssl module's default cipher list to counter
  measure sweet32 attack (CVE-2016-2183).

- Issue #27766: Add ChaCha20 Poly1305 to ssl module's default ciper list.
  (Required OpenSSL 1.1.0 or LibreSSL).

- Issue #26470: Port ssl and hashlib module to OpenSSL 1.1.0.

- Remove support for passing a file descriptor to os.access. It never worked but
  previously didn't raise.

- Issue #12885: Fix error when distutils encounters symlink.

- Issue #27881: Fixed possible bugs when setting sqlite3.Connection.isolation_level.
  Based on patch by Xiang Zhang.

- Issue #27861: Fixed a crash in sqlite3.Connection.cursor() when a factory
  creates not a cursor.  Patch by Xiang Zhang.

- Issue #19884: Avoid spurious output on OS X with Gnu Readline.

- Issue #27706: Restore deterministic behavior of random.Random().seed()
  for string seeds using seeding version 1.  Allows sequences of calls
  to random() to exactly match those obtained in Python 2.
  Patch by Nofar Schnider.

- Issue #10513: Fix a regression in Connection.commit().  Statements should
  not be reset after a commit.

- A new version of typing.py from https://github.com/python/typing:
  - Collection (only for 3.6) (Issue #27598)
  - Add FrozenSet to __all__ (upstream #261)
  - fix crash in _get_type_vars() (upstream #259)
  - Remove the dict constraint in ForwardRef._eval_type (upstream #252)

- Issue #27539: Fix unnormalised ``Fraction.__pow__`` result in the case
  of negative exponent and negative base.

- Issue #21718: cursor.description is now available for queries using CTEs.

- Issue #2466: posixpath.ismount now correctly recognizes mount points which
  the user does not have permission to access.

- Issue #27773: Correct some memory management errors server_hostname in
  _ssl.wrap_socket().

- Issue #26750: unittest.mock.create_autospec() now works properly for
  subclasses of property() and other data descriptors.

- In the curses module, raise an error if window.getstr() or window.instr() is
  passed a negative value.

- Issue #27783: Fix possible usage of uninitialized memory in
  operator.methodcaller.

- Issue #27774: Fix possible Py_DECREF on unowned object in _sre.

- Issue #27760: Fix possible integer overflow in binascii.b2a_qp.

- Issue #27758: Fix possible integer overflow in the _csv module for large
  record lengths.

- Issue #27568: Prevent HTTPoxy attack (CVE-2016-1000110). Ignore the
  HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates
  that the script is in CGI mode.

- Issue #27656: Do not assume sched.h defines any SCHED_* constants.

- Issue #27130: In the "zlib" module, fix handling of large buffers
  (typically 4 GiB) when compressing and decompressing.  Previously, inputs
  were limited to 4 GiB, and compression and decompression operations did not
  properly handle results of 4 GiB.

- Issue #27533: Release GIL in nt._isdir

- Issue #17711: Fixed unpickling by the persistent ID with protocol 0.
  Original patch by Alexandre Vassalotti.

- Issue #27522: Avoid an unintentional reference cycle in email.feedparser.

- Issue #26844: Fix error message for imp.find_module() to refer to 'path'
  instead of 'name'. Patch by Lev Maximov.

- Issue #23804: Fix SSL zero-length recv() calls to not block and not raise
  an error about unclean EOF.

- Issue #27466: Change time format returned by http.cookie.time2netscape,
  confirming the netscape cookie format and making it consistent with
  documentation.

- Issue #26664: Fix activate.fish by removing mis-use of ``$``.

- Issue #22115: Fixed tracing Tkinter variables: trace_vdelete() with wrong
  mode no longer break tracing, trace_vinfo() now always returns a list of
  pairs of strings, tracing in the "u" mode now works.

- Fix a scoping issue in importlib.util.LazyLoader which triggered an
  UnboundLocalError when lazy-loading a module that was already put into
  sys.modules.

- Issue #27079: Fixed curses.ascii functions isblank(), iscntrl() and ispunct().

- Issue #26754: Some functions (compile() etc) accepted a filename argument
  encoded as an iterable of integers. Now only strings and byte-like objects
  are accepted.

- Issue #27048: Prevents distutils failing on Windows when environment
  variables contain non-ASCII characters

- Issue #27330: Fixed possible leaks in the ctypes module.

- Issue #27238: Got rid of bare excepts in the turtle module.  Original patch
  by Jelle Zijlstra.

- Issue #27122: When an exception is raised within the context being managed
  by a contextlib.ExitStack() and one of the exit stack generators
  catches and raises it in a chain, do not re-raise the original exception
  when exiting, let the new chained one through.  This avoids the PEP 479
  bug described in issue25782.

- [Security] Issue #27278: Fix os.urandom() implementation using getrandom() on
  Linux.  Truncate size to INT_MAX and loop until we collected enough random
  bytes, instead of casting a directly Py_ssize_t to int.

- Issue #26386: Fixed ttk.TreeView selection operations with item id's
  containing spaces.

- [Security] Issue #22636: Avoid shell injection problems with
  ctypes.util.find_library().

- Issue #16182: Fix various functions in the "readline" module to use the
  locale encoding, and fix get_begidx() and get_endidx() to return code point
  indexes.

- Issue #27392: Add loop.connect_accepted_socket().
  Patch by Jim Fulton.

- Issue #27930: Improved behaviour of logging.handlers.QueueListener.
  Thanks to Paulo Andrade and Petr Viktorin for the analysis and patch.

- Issue #21201: Improves readability of multiprocessing error message.  Thanks
  to Wojciech Walczak for patch.

- Issue #27456: asyncio: Set TCP_NODELAY by default.

- Issue #27906: Fix socket accept exhaustion during high TCP traffic.
  Patch by Kevin Conway.

- Issue #28174: Handle when SO_REUSEPORT isn't properly supported.
  Patch by Seth Michael Larson.

- Issue #26654: Inspect functools.partial in asyncio.Handle.__repr__.
  Patch by iceboy.

- Issue #26909: Fix slow pipes IO in asyncio.
  Patch by INADA Naoki.

- Issue #28176: Fix callbacks race in asyncio.SelectorLoop.sock_connect.

- Issue #27759: Fix selectors incorrectly retain invalid file descriptors.
  Patch by Mark Williams.

- Issue #28368: Refuse monitoring processes if the child watcher has
  no loop attached.
  Patch by Vincent Michel.

- Issue #28369: Raise RuntimeError when transport's FD is used with
  add_reader, add_writer, etc.

- Issue #28370: Speedup asyncio.StreamReader.readexactly.
  Patch by ▒<9A>о▒<80>енбе▒<80>г ▒<9C>а▒<80>к.

- Issue #28371: Deprecate passing asyncio.Handles to run_in_executor.

- Issue #28372: Fix asyncio to support formatting of non-python coroutines.

- Issue #28399: Remove UNIX socket from FS before binding.
  Patch by ▒<9A>о▒<80>енбе▒<80>г ▒<9C>а▒<80>к.

- Issue #27972: Prohibit Tasks to await on themselves.

- Issue #26923: Fix asyncio.Gather to refuse being cancelled once all
  children are done.
  Patch by Johannes Ebke.

- Issue #26796: Don't configure the number of workers for default
  threadpool executor.
  Initial patch by Hans Lawrenz.

- Issue #28600: Optimize loop.call_soon().

- Issue #28613: Fix get_event_loop() return the current loop if
  called from coroutines/callbacks.

- Issue #28639: Fix inspect.isawaitable to always return bool
  Patch by Justin Mayfield.

- Issue #28652: Make loop methods reject socket kinds they do not support.

- Issue #28653: Fix a refleak in functools.lru_cache.

- Issue #28703: Fix asyncio.iscoroutinefunction to handle Mock objects.

- Issue #24142: Reading a corrupt config file left the parser in an
  invalid state.  Original patch by Florian Höch.

- Issue #28990: Fix SSL hanging if connection is closed before handshake
  completed.
  (Patch by HoHo-Ho)

IDLE
----

- Issue #15308: Add 'interrupt execution' (^C) to Shell menu.
  Patch by Roger Serwy, updated by Bayard Randel.

- Issue #27922: Stop IDLE tests from 'flashing' gui widgets on the screen.

- Add version to title of IDLE help window.

- Issue #25564: In section on IDLE -- console differences, mention that
  using exec means that __builtins__ is defined for each statement.

- Issue #27714: text_textview and test_autocomplete now pass when re-run
  in the same process.  This occurs when test_idle fails when run with the
  -w option but without -jn.  Fix warning from test_config.

- Issue #25507: IDLE no longer runs buggy code because of its tkinter imports.
  Users must include the same imports required to run directly in Python.

- Issue #27452: add line counter and crc to IDLE configHandler test dump.

- Issue #27365: Allow non-ascii chars in IDLE NEWS.txt, for contributor names.

- Issue #27245: IDLE: Cleanly delete custom themes and key bindings.
  Previously, when IDLE was started from a console or by import, a cascade
  of warnings was emitted.  Patch by Serhiy Storchaka.

C API
-----

- Issue #28808: PyUnicode_CompareWithASCIIString() now never raises exceptions.

- Issue #26754: PyUnicode_FSDecoder() accepted a filename argument encoded as
  an iterable of integers. Now only strings and bytes-like objects are accepted.

Documentation
-------------

- Issue #28513: Documented command-line interface of zipfile.

Tests
-----

- Issue #28950: Disallow -j0 to be combined with -T/-l/-M in regrtest
  command line arguments.

- Issue #28666: Now test.support.rmtree is able to remove unwritable or
  unreadable directories.

- Issue #23839: Various caches now are cleared before running every test file.

- Issue #28409: regrtest: fix the parser of command line arguments.

- Issue #27787: Call gc.collect() before checking each test for "dangling
  threads", since the dangling threads are weak references.

- Issue #27369: In test_pyexpat, avoid testing an error message detail that
  changed in Expat 2.2.0.

Tools/Demos
-----------

- Issue #27952: Get Tools/scripts/fixcid.py working with Python 3 and the
  current "re" module, avoid invalid Python backslash escapes, and fix a bug
  parsing escaped C quote signs.

- Issue #27332: Fixed the type of the first argument of module-level functions
  generated by Argument Clinic.  Patch by Petr Viktorin.

- Issue #27418: Fixed Tools/importbench/importbench.py.

Windows
-------

- Issue #28251: Improvements to help manuals on Windows.

- Issue #28110: launcher.msi has different product codes between 32-bit and
  64-bit

- Issue #25144: Ensures TargetDir is set before continuing with custom
  install.

- Issue #27469: Adds a shell extension to the launcher so that drag and drop
  works correctly.

- Issue #27309: Enabled proper Windows styles in python[w].exe manifest.

Build
-----

- Issue #29080: Removes hard dependency on hg.exe from PCBuild/build.bat

- Issue #23903: Added missed names to PC/python3.def.

- Issue #10656: Fix out-of-tree building on AIX.  Patch by Tristan Carel and
  Michael Haubenwallner.

- Issue #26359: Rename --with-optimiations to --enable-optimizations.

- Issue #28444: Fix missing extensions modules when cross compiling.

- Issue #28248: Update Windows build and OS X installers to use OpenSSL 1.0.2j.

- Issue #28258: Fixed build with Estonian locale (python-config and distclean
  targets in Makefile).  Patch by Arfrever Frehtes Taifersar Arahesis.

- Issue #26661: setup.py now detects system libffi with multiarch wrapper.

- Issue #28066: Fix the logic that searches build directories for generated
  include files when building outside the source tree.

- Issue #15819: Remove redundant include search directory option for building
  outside the source tree.

- Issue #27566: Fix clean target in freeze makefile (patch by Lisa Roach)

- Issue #27705: Update message in validate_ucrtbase.py

- Issue #27983: Cause lack of llvm-profdata tool when using clang as
  required for PGO linking to be a configure time error rather than
  make time when --with-optimizations is enabled.  Also improve our
  ability to find the llvm-profdata tool on MacOS and some Linuxes.

- Issue #26307: The profile-opt build now applies PGO to the built-in modules.

- Issue #26359: Add the --with-optimizations configure flag.

- Issue #27713: Suppress spurious build warnings when updating importlib's
  bootstrap files.  Patch by Xiang Zhang

- Issue #25825: Correct the references to Modules/python.exp and ld_so_aix,
  which are required on AIX.  This updates references to an installation path
  that was changed in 3.2a4, and undoes changed references to the build tree
  that were made in 3.5.0a1.

- Issue #27453: CPP invocation in configure must use CPPFLAGS. Patch by
  Chi Hsuan Yen.

- Issue #27641: The configure script now inserts comments into the makefile
  to prevent the pgen and _freeze_importlib executables from being cross-
  compiled.

- Issue #26662: Set PYTHON_FOR_GEN in configure as the Python program to be
  used for file generation during the build.

- Issue #10910: Avoid C++ compilation errors on FreeBSD and OS X.
  Also update FreedBSD version checks for the original ctype UTF-8 workaround.

- Issue #28676: Prevent missing 'getentropy' declaration warning on macOS.
  Patch by Gareth Rees.

(wen)

2017-01-19 11:15:52 UTC MAIN commitmail json YAML

Update PLIST.{Linux,SunOS} to reflect removed plat-* modules.

According to Python 3.6 changelog:

The undocumented IN, CDROM, DLFCN, TYPES, CDIO, and STROPTS modules have been
removed. They had been available in the platform specific Lib/plat-*/
directories, but were chronically out of date, inconsistently available across
platforms, and unmaintained. The script that created these modules is still
available in the source distribution at Tools/scripts/h2py.py.

No PKGREVISION bump since they failed to install on these platforms.

TODO: PLIST.IRIX entries seems to still contains plat-* modules but the ones
TODO: contained are not explicitly documented in the changelog, so they can
TODO: maybe still installed.

Pointed out by Joyent's Linux and SmartOS bulk builds and thanks to <jperkin>
for testing it!

(leot)

2017-01-19 10:57:48 UTC MAIN commitmail json YAML

Tonights updates

(markd)

2017-01-19 10:37:21 UTC MAIN commitmail json YAML

Update to stow 2.2.2

* Changes in version 2.2.2

** @VERSION@ substitution was set up for the Stow::Util module.

* Changes in version 2.2.1

Version 2.2.1 was not released since it was rejected by pause.perl.org
due to Stow::Util missing $VERSION.

** Small improvements to documentation
** Fix Perl warnings
** Fix "Undefined subroutine &main::error" error
** Failed system calls now include error description
** Default ignore list now ignores top-level README.*, LICENSE.*,
  and COPYING
** Correctly handle the stow/target directories as non-canonical paths
** Fix stowing of relative links when --no-folding is used.

* Changes in version 2.2.0

** New --no-folding option
** Remove -a option (--adopt still available)
** Improve error message when stow package is not found.
** Test suite improvements
** Documentation improvements
** Remove "There are no outstanding operations to perform" warning.

* Changes in version 2.1.3

** New --adopt / -a option
** ./configure now checks for Perl modules required by the test suite.

* Changes in version 2.1.2

  Many thanks to Stefano Lattarini for help with numerous autoconf and
  automake issues which are addressed in this release.
** Significantly improve the handling of --with-pmdir.
** ./configure now aborts if Perl isn't found.
** Ensured the ChangeLog is up-to-date when making a new distribution.
** Fixed bug with `make clean' removing files which the user may not
  be able to rebuild.

* Changes in version 2.1.1

** Fixed bug where ./configure --with-pmdir=X was ineffectual.
** Calculated the correct default value for pmdir based on the
  local Perl installation.
** Fixed some automake issues
** Improved various bits of documentation.

* Changes in version 2.1.0

** Major refactoring of code into separate Stow and Stow::Util Perl
  modules.
** Added support for ignore list files.
** Added support for CPAN-style installation and distribution via
  Module::Build.
** Introduced `make test' target and significantly tightened up test
  suite.
** Very large number of code and documentation fixes (over 80 commits
  since version 2.0.1).
** The '--conflicts' option has been removed.
** Improved debugging output.
** Converted man page to POD format.
** Include PDF, and both split- and single-page HTML versions of manual
  in the distribution.
** Fixed code style consistency issues.
** Running configure from outside the source tree now works.
** `make distcheck' now works.

* Changes in version 2.0.1

** Defer operations until all potential conflicts have been assessed.
** Multiple stow directories will now cooperate in folding/unfolding.
** Conflict messages are more uniform and informative.
** Verbosity and tracing is more extensive and uniform.
** Implemented option parsing via Getopt::Long.
** Default command line arguments set via '.stowrc' and '~/.stowrc' files.
** Support multiple actions per invocation.
** New (repeatable) command line arg: --ignore='<regex>'
** New (repeatable) command line arg: --defer='<regex>'
** New (repeatable) command line arg: --defer='<regex>'
** New (repeatable) command line arg: --override='<regex>'
** By default, search less aggressively for invalid symlinks when unstowing.
** New chkstow utility for checking the integrity of the target directory.

(markd)

2017-01-19 10:19:26 UTC MAIN commitmail json YAML

Fix path to pdftpps.
mv cups-browsed.conf from correct post install location.

(markd)

2017-01-19 10:03:00 UTC MAIN commitmail json YAML

Currently doesn't build with python36 - cann't find python libs

(markd)

2017-01-19 09:58:18 UTC MAIN commitmail json YAML

2017-01-19 09:54:56 UTC MAIN commitmail json YAML

2017-01-19 09:47:02 UTC MAIN commitmail json YAML

2017-01-19 09:45:39 UTC MAIN commitmail json YAML

2017-01-19 09:43:37 UTC MAIN commitmail json YAML

More automoc cleanup

(markd)

2017-01-19 09:40:50 UTC MAIN commitmail json YAML

More automoc cleanup

(markd)

2017-01-19 09:37:56 UTC MAIN commitmail json YAML

More automoc cleanup.

(markd)

2017-01-19 09:33:04 UTC MAIN commitmail json YAML

update package versions

(markd)

2017-01-19 09:31:17 UTC MAIN commitmail json YAML

Update to kdewebdev 16.08.0

minor changes - last kde4 version

(markd)

2017-01-19 09:29:54 UTC MAIN commitmail json YAML

Update to kuser 16.08.0

minor changes - last kde4 version

(markd)

2017-01-19 09:29:22 UTC MAIN commitmail json YAML

Updated lang/py34-html-docs to 3.4.6

(leot)

2017-01-19 09:29:07 UTC MAIN commitmail json YAML

Update lang/py34-html-docs to py34-html-docs-3.4.6

pkgsrc changes:
- Switch MASTER_SITES to https://www.python.org/ftp/python/doc/${VERS}/
  Unlike previous MASTER_SITES the documentation there is not regenerated
  periodically (so it will avoid possible changes in the distfiles).

Changes:
Unfortunately no changelog is available. However, the documentation
is now synced with the lang/python34 version available in pkgsrc.

(leot)

2017-01-19 09:28:49 UTC MAIN commitmail json YAML

Update to kdf 16.04.0

minor changes - last kde4 version

(markd)

2017-01-19 09:27:33 UTC MAIN commitmail json YAML

Update to kgpg 16.08.0

minor changes - last kde4 version

(markd)

2017-01-19 09:25:49 UTC MAIN commitmail json YAML

Update to okular 16.08.0

minor changes - last kde4 version

(markd)

2017-01-19 09:24:38 UTC MAIN commitmail json YAML

Update to kppp 16.12.0

minor changes

(markd)

2017-01-19 09:23:36 UTC MAIN commitmail json YAML

2017-01-19 09:17:29 UTC MAIN commitmail json YAML

Update to kdenetwork-strigi-analyzers 16.04.0

minor changes - last kde4 version

(markd)

2017-01-19 09:16:20 UTC MAIN commitmail json YAML

Update to mplayerthumbs 16.04.0

minor changes - last kde4 version

(markd)

2017-01-19 09:15:16 UTC MAIN commitmail json YAML

Update to libkcddb 16.08.0

minor changes - last kde4 version

(markd)

2017-01-19 09:14:07 UTC MAIN commitmail json YAML

Update to audiocd-kio 16.08.0

minor changes - last kde4 version

(markd)

2017-01-19 09:13:00 UTC MAIN commitmail json YAML

Update to sweeper 16.12.0

minor changes

(markd)

2017-01-19 09:11:57 UTC MAIN commitmail json YAML

2017-01-19 09:10:59 UTC MAIN commitmail json YAML

Update to kmousetool 16.12.0

minor changes

(markd)

2017-01-19 09:10:02 UTC MAIN commitmail json YAML

Update to kmag 16.12.0

minor changes

(markd)

2017-01-19 09:08:59 UTC MAIN commitmail json YAML

Update to kalzium 16.08.0

minor changes - last kde4 version

(markd)

2017-01-19 09:08:02 UTC MAIN commitmail json YAML

Update to kaccessible 16.12.0

minor changes

(markd)

2017-01-19 09:06:22 UTC MAIN commitmail json YAML

Update to svgpart 16.08.0

minor changes - last kde4 version

(markd)

2017-01-19 09:05:07 UTC MAIN commitmail json YAML

2017-01-19 09:02:42 UTC MAIN commitmail json YAML

2017-01-19 09:01:20 UTC MAIN commitmail json YAML

Update to kolourpaint 16.04.0

minor changes - last kde4 version

(markd)

2017-01-19 08:59:49 UTC MAIN commitmail json YAML

Update to kdegraphics-strigi-analyzer 16.04.0

minor updates - final kde4 version

(markd)

2017-01-19 08:58:21 UTC MAIN commitmail json YAML

Update to kdegraphics-mobipocket 16.08.0

minor changes - last kde4 version

(markd)

2017-01-19 08:55:44 UTC MAIN commitmail json YAML

Update to kdesdk-strigi-analyzers 16.04.0

minor changes - last kde4 version.

(markd)

2017-01-19 08:54:10 UTC MAIN commitmail json YAML

2017-01-19 08:51:56 UTC MAIN commitmail json YAML

2017-01-19 08:50:24 UTC MAIN commitmail json YAML

Update to cervisia 16.04.0

minor changes - last kde4 version.

(markd)

2017-01-19 08:48:13 UTC MAIN commitmail json YAML

2017-01-19 08:45:00 UTC MAIN commitmail json YAML

Note kdelibs update to 4.14.27

(markd)

2017-01-19 08:44:11 UTC MAIN commitmail json YAML

2017-01-19 07:01:05 UTC MAIN commitmail json YAML

Updated lang/yabasic to 2.77.3

(wen)

2017-01-19 06:59:54 UTC MAIN commitmail json YAML

Update to 2.77.3

Upstream changes:
Version 2.77.3, December 29, 2016

    Fixed insecure usage of strcpy
    Better logging for windows installer
    Spelling corrections

Version 2.77.2, December 17, 2016

    Fixes for coloured text under windows as reported by TheMeq
    msvcr140.dll is no longer required under Windows
    Several spelling corrections contributed by ginggs
    Updated and fixed man-page under linux

Version 2.77.1, November 13, 2016

    Adopted the MIT License for yabasic
    Switched to semantic versioning; the new schema is MajorRelease.MinorRelease.Patchlevel
    New peek$ for version, documented all peeks
    Various bugfixes
    Setup program now offers to start the demo
    Redid the development process for yabasic; you may now participate in the development of yabasic itself via github: https://github.com/marcIhm/yabasic. However, the main site for programming in yabasic is still https://www.yabasic.de

(wen)

2017-01-19 06:49:43 UTC MAIN commitmail json YAML

Updated lang/bwbasic to 3.10

(wen)

2017-01-19 06:48:46 UTC MAIN commitmail json YAML

Update to 3.10

Upstream changes:
CHANGES FROM 3.00 to 3.10

  * Implements most of the following BASIC dialects:
      OPTION VERSION DARTMOUTH        ' Dartmouth DTSS BASIC
      OPTION VERSION MARK-I          ' GE 265 Mainframe BASIC
      OPTION VERSION MARK-II          ' GE 435 Mainframe BASIC
      OPTION VERSION SYSTEM-360      ' IBM System/360 BASIC
      OPTION VERSION SYSTEM-370      ' IBM System/370 BASIC
      OPTION VERSION CBASIC-II        ' CBASIC-II for CP/M
      OPTION VERSION ECMA-55          ' ANSI Minimal BASIC
      OPTION VERSION HANDBOOK1        ' The BASIC Handbook, 1st Edition
      OPTION VERSION HANDBOOK2        ' The BASIC Handbook, 2nd Edition
      OPTION VERSION TRS-80          ' TRS-80 Model I/III/4 LBASIC
      OPTION VERSION BASIC-80        ' Microsoft BASIC-80 for Xenix
      OPTION VERSION ECMA-116        ' ANSI Full BASIC

  * from Howard Wulf, AF5NE

(wen)

2017-01-19 03:50:53 UTC MAIN commitmail json YAML

GC deprecated logic for openssh without /dev/urandom. This option is no longer
supported by OpenSSH.

(maya)

2017-01-19 02:33:03 UTC MAIN commitmail json YAML

Updated www/moodle to 3.2.1

(wen)

2017-01-19 02:31:57 UTC MAIN commitmail json YAML

Update to 3.2.1

Upstream changes:
Moodle 3.2.1 release notes

Releases > Moodle 3.2.1 release notes

Release date: 9 January 2017

Here is the full list of fixed issues in 3.2.1.
Fixes and improvements

    MDL-55906 - Assignment grading table reset button should clear persistent settings
    MDL-57222 - Marking workflow and grading must still save for hidden Assignment
    MDL-56810 - Fixed error converting submissions for annotation when student is unenrolled from course
    MDL-55062 - Upload users admin tool incorrectly updates authentication method for existing users when not included in CSV
    MDL-56912 - Feedback: Allow to submit empty not required multichoice questions
    MDL-53044 - Completely prevent login with expired passwords
    MDL-57213 - Boost - Fixed bug when my courses were not displayed at all with $CFG->navshowmycoursecategories on

Security issues

    MSA-17-0001 System file inclusion when adding own preset file in Boost theme
    MSA-17-0002 Incorrect sanitation of attributes in forums
    MSA-17-0003 PHPMailer vulnerability in no-reply address
    MSA-17-0004 XSS in assignment submission page

(wen)

2017-01-19 01:26:07 UTC MAIN commitmail json YAML

Updated lang/python34 to 3.4.6

(wen)

2017-01-19 01:25:09 UTC MAIN commitmail json YAML

Update to 3.4.6

Upstream changes:
What's New in Python 3.4.6?
===========================

Release date: 2017-01-16

There were no changes between 3.4.6rc1 and 3.4.6 final.

What's New in Python 3.4.6rc1?
==============================

Release date: 2017-01-02

Core and Builtins
-----------------

- Issue #28648: Fixed crash in Py_DecodeLocale() in debug build on Mac OS X
  when decode astral characters.  Patch by Xiang Zhang.

- Issue #28426: Fixed potential crash in PyUnicode_AsDecodedObject() in debug
  build.

Library
-------

- Issue #28563: Fixed possible DoS and arbitrary code execution when handle
  plural form selections in the gettext module.  The expression parser now
  supports exact syntax supported by GNU gettext.

- In the curses module, raise an error if window.getstr() or window.instr() is
  passed a negative value.

- Issue #27783: Fix possible usage of uninitialized memory in operator.methodcaller.

- Issue #27774: Fix possible Py_DECREF on unowned object in _sre.

- Issue #27760: Fix possible integer overflow in binascii.b2a_qp.

- Issue #27758: Fix possible integer overflow in the _csv module for large record
  lengths.

- Issue #27568: Prevent HTTPoxy attack (CVE-2016-1000110). Ignore the
  HTTP_PROXY variable when REQUEST_METHOD environment is set, which indicates
  that the script is in CGI mode.

- Issue #27759: Fix selectors incorrectly retain invalid file descriptors.
  Patch by Mark Williams.

Build
-----

- Issue #28248: Update Windows build to use OpenSSL 1.0.2j.

Tests
-----

- Issue #27369: In test_pyexpat, avoid testing an error message detail that
  changed in Expat 2.2.0.

(wen)

2017-01-18 23:05:57 UTC MAIN commitmail json YAML

Updated pkgtools/pkglint to 5.4.17

(rillig)

2017-01-18 23:05:43 UTC MAIN commitmail json YAML

Updated pkglint to 5.4.17.

Changes since 5.4.16:

* allow multiple definitions for MASTER_SITES in the package Makefile,
  without triggering a warning about wrong ordering.
  See https://mail-index.netbsd.org/tech-pkg/2017/01/18/msg017698.html

(rillig)

2017-01-18 21:10:51 UTC MAIN commitmail json YAML

Updated sysutils/coreutils to 8.26

(wiz)

2017-01-18 21:10:42 UTC MAIN commitmail json YAML

Updated coreutils to 8.26.

* Noteworthy changes in release 8.26 (2016-11-30) [stable]

** Bug fixes

  cp, mv, and install no longer run into undefined behavior when
  handling ACLs on Cygwin and Solaris platforms. [bug introduced in
  coreutils-8.24]

  cp --parents --no-preserve=mode, no longer copies permissions from source
  directories, instead using default permissions for created directories.
  [bug introduced in coreutils-5.93]

  chcon, chgrp, chmod, chown, du, and rm, or specifically utilities
  using the FTS interface, now diagnose failures returned by readdir().
  [this bug was inherent in the use of fts: thus, for rm the bug was
  introduced in coreutils-8.0.  du, chmod, chgrp and chown started using
  fts in 6.0.  chcon was added in coreutils-6.9.91 with fts support.  ]

  date, du, ls, and pr no longer mishandle time zone abbreviations on
  System V style platforms where this information is available only
  in the global variable 'tzname'. [bug introduced in coreutils-8.24]

  factor again outputs immediately when numbers are input interactively.
  [bug introduced in coreutils-8.24]

  head no longer tries to process non-seekable input as seekable,
  which resulted in failures on FreeBSD 11 at least.
  [bug introduced in coreutils-8.24]

  install -DZ and mkdir -pZ now set default SELinux context correctly even if
  two or more directories nested in each other are created and each of them
  defaults to a different SELinux context.

  ls --time-style no longer mishandles '%%b' in formats.
  [bug introduced in coreutils-7.2]

  md5sum --check --ignore-missing no longer treats files with checksums
  starting with "00" as missing.  This also affects sha*sum.
  [bug introduced with the --ignore-missing feature in coreutils-8.25]

  nl now resets numbering for each page section rather than just for each page.
  [This bug was present in "the beginning".]

  pr now handles specified separator strings containing tabs correctly.
  Previously it would have output random data from memory.
  [This bug was detected with ASAN and present in "the beginning".]

  sort -h -k now works even in locales that use blank as thousands separator.

  stty --help no longer outputs extraneous gettext header lines
  for translated languages. [bug introduced in coreutils-8.24]

  stty "sane" again sets "susp" to ^z on Solaris, and leaves "swtch" undefined.
  [This bug previously fixed only on some older Solaris systems]

  seq now immediately exits upon write errors.
  [This bug was present in "the beginning".]

  tac no longer crashes when there are issues reading from non-seekable inputs.
  [bug introduced in coreutils-8.15]

  tail -F now continues to process initially untailable files that are replaced
  by a tailable file.  This was handled correctly when inotify was available,
  and is now handled correctly in all cases.
  [bug introduced in fileutils-4.0h]

  tail -f - 'untailable file' will now terminate when there is no more data
  to read from stdin.  Previously it behaved as if --retry was specified.
  [This bug was present in "the beginning".]

  tail -f 'remote file' will now avoid outputting repeated data on network
  file systems that misreport file sizes through stale metadata.
  [This bug was present in "the beginning" but exacerbated in coreutils-8.24]

  tail -f --retry 'missing file' will now process truncations of that file.
  Previously truncation was ignored thus not outputting new data in the file.
  [bug introduced in coreutils-5.3.0]

  tail -f will no longer continually try to open inaccessible files,
  only doing so if --retry is specified.
  [This bug was present in "the beginning".]

  yes now handles short writes, rather than assuming all writes complete.
  [bug introduced in coreutils-8.24]

** Changes in behavior

  rm no longer accepts shortened variants of the --no-preserve-root option.

  seq no longer accepts 0 value as increment, and now also rejects NaN
  values for any argument.

  stat now outputs nanosecond information for time stamps even if
  they are out of localtime range.

  sort, tail, and uniq now support traditional usage like 'sort +2'
  and 'tail +10' on systems conforming to POSIX 1003.1-2008 and later.
  The 2008 edition of POSIX dropped the requirement that arguments
  like '+2' must be treated as file names.

** Improvements

  df now filters the system mount list more efficiently, with 20000
  mount entries now being processed in about 1.1s compared to 1.7s.

  du, shuf, sort, and uniq no longer fail to process a specified file
  when their stdin is closed, which would have happened with glibc >= 2.14.

  install -Z now also sets the default SELinux context for created directories.

  ls is now fully responsive to signals until the first escape sequence is
  written to a terminal.

  ls now aligns quoted items with non quoted items, which is easier to read,
  and also better indicates that the quote is not part of the actual name.

  stat and tail now know about these file systems:
    "balloon-kvm-fs"    KVM dynamic RAM allocation support,
    "cgroup2"          Linux Control Groups V2 support,
    "daxfs"            Optical media file system,
    "m1fs"              A Plexistor file system,
    "prl_fs"            A parallels file system,
    "smb2"              Samba for SMB protocol V2,
    "wslfs"            Windows Subsystem for Linux,
    "zsmalloc"          Linux compressed swap support,
  stat -f --format=%T now reports the file system type, and
  tail -f uses polling for "prl_fs" and "smb2", and inotify for others.

  stat --format=%N for quoting file names now honors the
  same QUOTING_STYLE environment variable values as ls.

** New programs

  b2sum is added to support the BLAKE2 digest algorithm with
  a similar interface to the existing md5sum and sha1sum, etc. commands.

** New Features

  comm now accepts the --total option to output a summary at the end.

  date now accepts the --debug option, to annotate the parsed date string,
  display timezone information, and warn about potential misuse.

  date now accepts the %q format to output the quarter of the year.

(wiz)

2017-01-18 20:47:50 UTC MAIN commitmail json YAML

Updated net/py-ipaddress to 1.0.18

(wiz)

2017-01-18 20:47:40 UTC MAIN commitmail json YAML

2017-01-18 20:46:44 UTC MAIN commitmail json YAML

Updated net/py-foolscap to 0.12.6

(wiz)

2017-01-18 20:46:34 UTC MAIN commitmail json YAML

Updated py-foolscap to 0.12.6.

* Release 0.12.6 (12-Jan-2017)

This is a minor release to improve compatibility with Twisted and I2P.

In this release, the Foolscap test suite no longer uses several deprecated
and/or internal Twisted attributes, so it should pass cleanly on the next
release of Twisted (which will probably be named Twisted-17.0.0).

In addition, the I2P connection handler was enhanced to let applications pass
arbitrary kwargs through to the underlying "SAM" API.

Finally connection-status error messages should be slightly cleaner and
provide more useful information in the face of unrecogized exceptions.

(wiz)

2017-01-18 20:44:40 UTC MAIN commitmail json YAML

Updated devel/py-dulwich to 0.16.3

(wiz)

2017-01-18 20:44:28 UTC MAIN commitmail json YAML

Updated py-dulwich to 0.16.3.

0.16.3 2016-01-14

TEST FIXES

  * Remove racy check that relies on clock time changing between writes.
  (Jelmer Vernooij)

0.16.2 2016-01-14

IMPROVEMENTS

  * Fixed failing test-cases on windows.
    (Koen Martens)

API CHANGES

  * Repo is now a context manager, so that it can be easily
    closed using a ``with`` statement. (S淡ren L淡vborg)

TEST FIXES

  * Only run worktree list compat tests against git 2.7.0,
    when 'git worktree list' was introduced. (Jelmer Vernoo蝶)

BUG FIXES

  * Ignore filemode when building index when core.filemode
    is false.
    (Koen Martens)

  * Initialize core.filemode configuration setting by
    probing the filesystem for trustable permissions.
    (Koen Martens)

  * Fix ``porcelain.reset`` to respect the comittish argument.
    (Koen Martens)

  * Fix dulwich.porcelain.ls_remote() on Python 3.
    (#471, Jelmer Vernoo蝶)

  * Allow both unicode and byte strings for host paths
    in dulwich.client. (#435, Jelmer Vernoo蝶)

  * Add remote from porcelain.clone. (#466, Jelmer Vernoo蝶)

  * Fix unquoting of credentials before passing to urllib2.
    (#475, Volodymyr Holovko)

  * Cope with submodules in `build_index_from_tree`.
    (#477, Jelmer Vernoo蝶)

  * Handle deleted files in `get_unstaged_changes`.
    (#483, Doug Hellmann)

  * Don't overwrite files when they haven't changed in
    `build_file_from_blob`.
    (#479, Beno樽t HERVIER)

  * Check for existence of index file before opening pack.
    Fixes a race when new packs are being added.
    (#482, wme)

(wiz)

2017-01-18 20:40:47 UTC MAIN commitmail json YAML

+ fs-uae-2.8.2 [pkg/51895], gperiodic-3.0.2.

(wiz)

2017-01-18 20:22:50 UTC MAIN commitmail json YAML

Updated x11/xf86-video-r128 to 6.10.2

(wiz)

2017-01-18 20:22:40 UTC MAIN commitmail json YAML

Updated xf86-video-r128 to 6.10.2.

Adam Jackson (1):
    Adapt Block/WakeupHandler signature for ABI 23

Connor Behan (1):
    Remove gatos advertisement

Kevin Brace (1):
    xextproto 7.1 support update to the source code

Matt Turner (1):
    xf86-video-r128 6.10.2

(wiz)

2017-01-18 20:21:23 UTC MAIN commitmail json YAML

Updated x11/xf86-video-i740 to 1.3.6

(wiz)

2017-01-18 20:21:14 UTC MAIN commitmail json YAML

Updated xf86-video-i740 to 1.3.6.

Adam Jackson (1):
    Adapt Block/WakeupHandler signature for ABI 23

Matt Turner (1):
    xf86-video-i740 1.3.6

(wiz)

2017-01-18 20:20:06 UTC MAIN commitmail json YAML

Updated x11/xf86-video-savage to 2.3.9

(wiz)

2017-01-18 20:19:57 UTC MAIN commitmail json YAML

Updated xf86-video-savage to 2.3.9.

Adam Jackson (1):
    Adapt Block/WakeupHandler signature for ABI 23

Matt Turner (1):
    xf86-video-savage 2.3.9

Stefan Dirsch (1):
    Disable tiling on SuperSavage by default

(wiz)

2017-01-18 20:19:31 UTC MAIN commitmail json YAML

Updated x11/xf86-video-trident to 1.3.8

(wiz)

2017-01-18 20:19:21 UTC MAIN commitmail json YAML

Updated xf86-video-trident to 1.3.8.

Adam Jackson (1):
    Adapt Block/WakeupHandler signature for ABI 23

Matt Turner (1):
    xf86-video-trident 1.3.8

(wiz)

2017-01-18 20:17:41 UTC MAIN commitmail json YAML

Updated x11/xf86-video-glint to 1.2.9

(wiz)

2017-01-18 20:17:32 UTC MAIN commitmail json YAML

Updated xf86-video-glint to 1.2.9.

Adam Jackson (3):
    Remove mibstore.h
    Pass the pci device through to fbdevHWInit
    Adapt Block/WakeupHandler signature for ABI 23

Matt Turner (1):
    xf86-video-glint 1.2.9

Michael Lorenz (1):
    Fix I2C for DDC2.

(wiz)

2017-01-18 20:16:14 UTC MAIN commitmail json YAML

Updated x11/xf86-video-nv to 2.1.21

(wiz)

2017-01-18 20:16:04 UTC MAIN commitmail json YAML

Updated xf86-video-nv to 2.1.21.

Adam Jackson (2):
    Remove mibstore.h
    Adapt Block/WakeupHandler signature for ABI 23

Egbert Eich (1):
    init: Initialize VGA IOBase before using it

Jeremy White (1):
    Include xf86Modes.h to use functions from hw/xfree86/modes/xf86Modes.c.

Matt Turner (1):
    xf86-video-nv 2.1.21

Matthieu Herrb (1):
    Fix shadow framebuffer implementation.

(wiz)

2017-01-18 18:31:27 UTC MAIN commitmail json YAML

Updated x11/xf86-video-siliconmotion to 1.7.9

(wiz)

2017-01-18 18:31:18 UTC MAIN commitmail json YAML

Updated xf86-video-siliconmotion to 1.7.9.

Adam Jackson (1):
    Adapt Block/WakeupHandler signature for ABI 23

Connor Behan (1):
    Check for drawables before compositing

Matt Turner (1):
    xf86-video-siliconmotion 1.7.9

Thomas Klausner (1):
    Use X11/Xarch.h for endian detection.

(wiz)

2017-01-18 18:28:12 UTC MAIN commitmail json YAML

Updated x11/xf86-video-chips to 1.2.7

(wiz)

2017-01-18 18:28:03 UTC MAIN commitmail json YAML

Updated xf86-video-chips to 1.2.7.

Adam Jackson (1):
    Adapt Block/WakeupHandler signature for ABI 23

Matt Turner (1):
    xf86-video-chips 1.2.7

(wiz)

2017-01-18 18:26:50 UTC MAIN commitmail json YAML

Updated x11/xf86-video-mga to 1.6.5

(wiz)

2017-01-18 18:26:41 UTC MAIN commitmail json YAML

Updated xf86-video-mga to 1.6.5.

Adam Jackson (2):
    Enable write-combining on the framebuffer BAR
    Adapt Block/WakeupHandler signature for ABI 23

Connor Behan (2):
    Remove DownloadFromScreen
    Composite fixup

Mathieu Larouche (2):
    xf86-video-mga: Add support for a new G200eW3 chipset
    xf86-video-mga: Add support for the new G200e chipset -- V2

Matt Turner (1):
    xf86-video-mga 1.6.5

Matthew Rezny (1):
    MGA DDX: make it possible to find EXA support

Thomas Klausner (1):
    Use correct type in function call.

(wiz)

2017-01-18 18:25:29 UTC MAIN commitmail json YAML

Updated x11/xf86-video-sis to 0.10.9

(wiz)

2017-01-18 18:25:18 UTC MAIN commitmail json YAML

Updated xf86-video-sis to 0.10.9.

Adam Jackson (1):
    Adapt Block/WakeupHandler signature for ABI 23

Matt Turner (1):
    xf86-video-sis 0.10.9

Thomas Klausner (1):
    Fix arguments for miSetPointerPosition.

(wiz)

2017-01-18 18:23:34 UTC MAIN commitmail json YAML

Updated x11/xf86-video-tdfx to 1.4.7

(wiz)

2017-01-18 18:23:25 UTC MAIN commitmail json YAML

Updated xf86-video-tdfx to 1.4.7.

Adam Jackson (1):
    Adapt Block/WakeupHandler signature for ABI 23

Matt Turner (1):
    xf86-video-tdfx 1.4.7

(wiz)

2017-01-18 13:54:06 UTC MAIN commitmail json YAML

Updated filesystems/glusterfs to 3.8.8

(manu)

2017-01-18 13:52:45 UTC MAIN commitmail json YAML

Update glusterfs to 3.8.8
This is a maintenance release.
python-2.x requirement has been verified once again.

(manu)

2017-01-18 13:51:11 UTC MAIN commitmail json YAML

Updated math/p5-Math-BigInt-GMP to 1.6003

(wen)

2017-01-18 13:48:34 UTC MAIN commitmail json YAML

Update to 1.6003
Update DEPENDS

Upstream changes:
2017-01-11 v1.6003 pjacklam

* Fix syntax for required version of Math::BigInt::Lib.

* Better checking of POD coverage.

* Sync test files with Math-BigInt-1.999808.

2016-12-03 v1.6002 pjacklam

* Use ExtUtils::MakeMaker rather than Module::Install in Makefile.PL

* Don't use Devel::CheckLib. It fails on Windows even in cases where
  this distribution would build just fine.

* Update BUGS file.

* Remove author information in LICENSE file.

* Inform that the TODO file is not up to date.

* Remove INSTALL file. The information is in the README file.

2016-11-23 v1.6001 pjacklam

* Sync test files with Math-BigInt-1.999801.

* Correct version number in CHANGES file.

2016-11-15 v1.6000 pjacklam

* Sync test files with Math-BigInt-1.999800.

* Update bundled Devel::CheckLib from v1.03 to v1.07.

* Math::BigInt::GMP is now a subclass of Math::BigInt::Lib, so remove pure
  Perl methods from Math::BigInt::GMP that are implemented in the superclass
  Math::BigInt::Lib. The methods removed are _digit(), _num(), _nok(), and
  _log_int(). The version of _log_int() implemented in Math::BigInt::GMP was
  buggy anyway.

* Fix _check() so it doesn't give a "use of uninitialized value" warning if
  given an undefined "object".

* Trim whitespace in all files.

* Better use of the functionality in Test::More in t/bigintg.t.

(wen)

2017-01-18 13:44:59 UTC MAIN commitmail json YAML

Updated textproc/groff to 1.22.3nb5

(leot)