Added games/cosmosmash version 1.4.7

(kamil)

Add games/cosmosmash

(kamil)

Import cosmosmash-1.4.7 as games/cosmosmash

Cosmosmash - A space rock shooting video game.

In this game, you control a base that must destroy rocks before they hit the
ground, or you lose points. You must also prevent "spinners" from touching the
ground, or your base will explode.

This game is a clone of the 1981 Astrosmash game for the Intellivision by
Mattel Electronics.

(kamil)

Added games/burgerspace version 1.9.2

(kamil)

Add games/burgerspace

(kamil)

Import burgerspace-1.9.2 as games/burgerspace

BurgerSpace - A hamburger-smashing video game.

(kamil)

Added games/batrachians version 0.1.6

(kamil)

Add games/batrachians

(kamil)

Import batrachians-0.1.6 as games/batrachians

Batrachians - A fly-eating frog game.

(kamil)

Fix HOMEPAGE.

(wiz)

Added games/quadrupleback version 0.1.0

(kamil)

Add games/quadrupleback

(kamil)

Import quadrupleback-0.1.0 as games/quadrupleback

Quadrupleback - A game where intruders must be circled.

This game is based on Doubleback, a Tandy Color Computer game by Dale Lear.

(kamil)

Added games/afternoonstalker version 1.1.5

(kamil)

Add games/afternoonstalker

(kamil)

Import afternoonstalker-1.1.5 as games/afternoonstalker

Afternoon Stalker - A robot-killing game.

(kamil)

Added devel/flatzebra version 0.1.6

(kamil)

Add devel/flatzebra

(kamil)

Import flatzebra-0.1.6 as devel/flatzebra

A generic game engine for 2D double-buffering animation.

(kamil)

Updated www/ikiwiki to 3.20160728

(schmonz)

Update to 3.20160728. From the changelog:

* Explicitly remove current working directory from Perl's library
  search path, mitigating CVE-2016-1238 (see #588017)
* wrappers: allocate new environment dynamically, so we won't overrun
  the array if third-party plugins add multiple environment variables.
* Standards-Version: 3.9.8 (no changes required)

(schmonz)

Updated games/ztrack to 1.0nb1

(leot)

Do not alter LIBS in in patch-Makefile (so SUBST_* correctly applies)

Bump PKGREVISION

(leot)

Added games/ztrack version 1.0

(kamil)

Updated devel/cmake-fedora to 2.6.0

(prlw1)

Update cmake-fedora to 2.6.0

All I found was:

- Enhancement:
  * ManageTranslation: MANAGE_POT_FILE: new options DOMAIN_NAME, MO_LOCALE_DIR
- Bug fix:
  * cmake-fedora-zanata: remove debug message
  * ManageTranslate: failed to generate pot targets when
    MANAGE_TRANSLATION_GETTEXT_POT_FILES is not empty.

but it is in the TODO list...

(prlw1)

Add games/ztrack

(kamil)

Import ztrack-1.0 as games/ztrack

Simple curses-based pseudo-3D driving game

Originally packaged in pkgsrc-wip by:
- myself
and
- <leot>.

(kamil)

tickets 5061 5062 5063 5067 5068 5069 5070 5071 5072 5074

(spz)

Updated devel/cmake to 3.6.1

(prlw1)

Update cmake to 3.6.1

CMake 3.6 Release Notes
***********************

Changes made since CMake 3.5 include the following.

New Features
============

Generators
----------

* The :generator:`Ninja` generator learned to produce phony targets
  of the form ``sub/dir/all`` to drive the build of a subdirectory.
  This is equivalent to ``cd sub/dir; make all`` with
  :ref:`Makefile Generators`.

* The :generator:`Ninja` generator now includes system header files in build
  dependencies to ensure correct re-builds when system packages are updated.

* The :generator:`Visual Studio 14 2015` generator learned to support the
  Clang/C2 toolsets, e.g. with the ``-T v140_clang_3_7`` option.
  This feature is experimental.

Commands
--------

* The :command:`add_custom_command` and :command:`add_custom_target` commands
  learned how to use the :prop_tgt:`CROSSCOMPILING_EMULATOR` executable
  target property.

* The :command:`install` command learned a new ``EXCLUDE_FROM_ALL`` option
  to leave installation rules out of the default installation.

* The :command:`list` command gained a ``FILTER`` sub-command to filter
  list elements by regular expression.

* The :command:`string(TIMESTAMP)` and :command:`file(TIMESTAMP)`
  commands gained support for the ``%s`` placeholder.  This is
  the number of seconds since the UNIX Epoch.

Variables
---------

* A :variable:`CMAKE_DEPENDS_IN_PROJECT_ONLY` variable was introduced
  to tell :ref:`Makefile Generators` to limit dependency scanning only
  to files in the project source and build trees.

* A new :variable:`CMAKE_HOST_SOLARIS` variable was introduced to
  indicate when CMake is running on an Oracle Solaris host.

* A :variable:`CMAKE_<LANG>_STANDARD_INCLUDE_DIRECTORIES` variable was
  added for use by toolchain files to specify system include directories
  to be appended to all compiler command lines.

* The :variable:`CMAKE_<LANG>_STANDARD_LIBRARIES` variable is now documented.
  It is intended for use by toolchain files to specify system libraries to be
  added to all linker command lines.

* A :variable:`CMAKE_NINJA_OUTPUT_PATH_PREFIX` variable was introduced
  to tell the :generator:`Ninja` generator to configure the generated
  ``build.ninja`` file for use as a ``subninja``.

* A :variable:`CMAKE_TRY_COMPILE_PLATFORM_VARIABLES` variable was
  added for use by toolchain files to specify platform-specific
  variables that must be propagated by the :command:`try_compile`
  command into test projects.

* A :variable:`CMAKE_TRY_COMPILE_TARGET_TYPE` variable was added
  to optionally tell the :command:`try_compile` command to build
  a static library instead of an executable.  This is useful for
  cross-compiling toolchains that cannot link binaries without
  custom flags or scripts.

Properties
----------

* A :prop_tgt:`DEPLOYMENT_REMOTE_DIRECTORY` target property was introduced
  to tell the :generator:`Visual Studio 9 2008` and
  :generator:`Visual Studio 8 2005` generators to generate the "remote
  directory" for WinCE project deployment and debugger settings.

* A :prop_tgt:`<LANG>_CLANG_TIDY` target property and supporting
  :variable:`CMAKE_<LANG>_CLANG_TIDY` variable were introduced to tell the
  :ref:`Makefile Generators` and the :generator:`Ninja` generator to run
  ``clang-tidy`` along with the compiler for ``C`` and ``CXX`` languages.

* A :prop_test:`TIMEOUT_AFTER_MATCH` test property was introduced to
  optionally tell CTest to enforce a secondary timeout after matching
  certain output from a test.

* A :prop_tgt:`VS_CONFIGURATION_TYPE` target property was introduced
  to specify a custom project file type for :ref:`Visual Studio Generators`
  supporting VS 2010 and above.

* A :prop_dir:`VS_STARTUP_PROJECT` directory property was introduced
  to specify for :ref:`Visual Studio Generators` the default startup
  project for generated solutions (``.sln`` files).

Modules
-------

* The :module:`CMakePushCheckState` module now pushes/pops/resets the variable
  ``CMAKE_EXTRA_INCLUDE_FILE`` used in :module:`CheckTypeSize`.

* The :module:`ExternalProject` module leared the ``GIT_SHALLOW 1``
  option to perform a shallow clone of a Git repository.

* The :module:`ExternalProject` module learned to initialize Git submodules
  recursively and also to initialize new submodules on updates.  Use the
  ``GIT_SUBMODULES`` option to restrict which submodules are initalized and
  updated.

* The :module:`ExternalProject` module leared the ``DOWNLOAD_NO_EXTRACT 1``
  argument to skip extracting the file that is downloaded (e.g., for
  self-extracting shell installers or ``.msi`` files).

* The :module:`ExternalProject` module now uses ``TLS_VERIFY`` when fetching
  from git repositories.

* The :module:`FindBLAS` and :module:`FindLAPACK` modules learned to
  support `OpenBLAS <http://www.openblas.net>`__.

* The :module:`FindCUDA` module learned to find the ``cublas_device`` library.

* The :module:`FindGTest` module ``gtest_add_tests`` function now causes
  CMake to automatically re-run when test sources change so that they
  can be re-scanned.

* The :module:`FindLTTngUST` module was introduced to find the LTTng-UST
  library.

* The :module:`FindPkgConfig` module learned to optionally create imported
  targets for the libraries it has found.

* The :module:`FindProtobuf` module learned to provide a ``Protobuf_VERSION``
  variable and check the version number requested in a :command:`find_package`
  call.

* The :module:`InstallRequiredSystemLibraries` module learned a new
  ``CMAKE_INSTALL_UCRT_LIBRARIES`` option to enable app-local deployment
  of the Windows Universal CRT libraries with Visual Studio 2015.

Platforms
---------

* The Clang compiler is now supported on CYGWIN.

* Support was added for the Bruce C Compiler with compiler id ``Bruce``.

CTest
-----

* The :command:`ctest_update` command now looks at the
  :variable:`CTEST_GIT_INIT_SUBMODULES` variable to determine whether
  submodules should be updated or not before updating.

* The :command:`ctest_update` command will now synchronize submodules on an
  update. Updates which add submodules or change a submodule's URL will now be
  pulled properly.

CPack
-----

* The :module:`CPackDeb` module learned how to handle ``$ORIGIN``
  in ``CMAKE_INSTALL_RPATH`` when :variable:`CPACK_DEBIAN_PACKAGE_SHLIBDEPS`
  is used for dependency auto detection.

* The :module:`CPackDeb` module learned how to generate ``DEBIAN/shlibs``
  contorl file when package contains shared libraries.

* The :module:`CPackDeb` module learned how to generate ``DEBIAN/postinst`` and
  ``DEBIAN/postrm`` files if the package installs libraries in
  ldconfig-controlled locations (e.g. ``/lib/``, ``/usr/lib/``).

* The :module:`CPackDeb` module learned how to generate dependencies between
  Debian packages if multi-component setup is used and
  :variable:`CPACK_COMPONENT_<compName>_DEPENDS` variables are set.
  For backward compatibility this feature is disabled by default.
  See :variable:`CPACK_DEBIAN_ENABLE_COMPONENT_DEPENDS`.

* The :module:`CPackDeb` module learned how to set custom package file names
  including how to generate properly-named Debian packages::

    <PackageName>_<VersionNumber>-<DebianRevisionNumber>_<DebianArchitecture>.deb

  For backward compatibility this feature is disabled by default. See
  :variable:`CPACK_DEBIAN_FILE_NAME` and
  :variable:`CPACK_DEBIAN_<COMPONENT>_FILE_NAME`.

* The :module:`CPackDeb` module learned how to set the package release number
  (``DebianRevisionNumber`` in package file name when used in combination with
  ``DEB-DEFAULT`` value set by :variable:`CPACK_DEBIAN_FILE_NAME`).  See
  :variable:`CPACK_DEBIAN_PACKAGE_RELEASE`.

* The :module:`CPackDeb` module learned how to set the package architecture
  per-component.  See :variable:`CPACK_DEBIAN_<COMPONENT>_PACKAGE_ARCHITECTURE`.

* The :module:`CPackDMG` module learned a new option to tell the CPack
  ``DragNDrop`` generaor to skip the ``/Applications`` symlink.
  See the :variable:`CPACK_DMG_DISABLE_APPLICATIONS_SYMLINK` variable.

* The :module:`CPackIFW` module gained a new
  :command:`cpack_ifw_update_repository` command to update a QtIFW-specific
  repository from a remote repository.

* The :module:`CPackRPM` module learned how to set RPM ``dist`` tag as part of
  RPM ``Release:`` tag when enabled (mandatory on some Linux distributions for
  e.g. on Fedora).
  See :variable:`CPACK_RPM_PACKAGE_RELEASE_DIST`.

* The :module:`CPackRPM` module learned how to set default values for owning
  user/group and file/directory permissions of package content.
  See :variable:`CPACK_RPM_DEFAULT_USER`, :variable:`CPACK_RPM_DEFAULT_GROUP`,
  :variable:`CPACK_RPM_DEFAULT_FILE_PERMISSIONS`,
  :variable:`CPACK_RPM_DEFAULT_DIR_PERMISSIONS` and their per component
  counterparts.

* The :module:`CPackRPM` module learned how to set user defined package file
  names, how to specify that rpmbuild should decide on file name format as
  well as handling of multiple rpm packages generated by a single user defined
  spec file.
  See :variable:`CPACK_RPM_PACKAGE_NAME` and
  :variable:`CPACK_RPM_<component>_PACKAGE_NAME`.

* The :module:`CPackRPM` module learned how to correctly handle symlinks
  that are pointing outside generated packages.

Other
-----

* The :manual:`Compile Features <cmake-compile-features(7)>` functionality
  is now aware of features supported by Intel C++ compilers versions 12.1
  through 16.0 on UNIX platforms.

Deprecated and Removed Features
===============================

* The :module:`CMakeForceCompiler` module and its macros are now deprecated.
  See module documentation for an explanation.

* The :command:`find_library`, :command:`find_path`, and :command:`find_file`
  commands no longer search in installation prefixes derived from the ``PATH``
  environment variable on non-Windows platforms.  This behavior was added in
  CMake 3.3 to support Windows hosts but has proven problematic on UNIX hosts.
  Users that keep some ``<prefix>/bin`` directories in the ``PATH`` just for
  their tools do not necessarily want any supporting ``<prefix>/lib``
  directories searched.  One may set the ``CMAKE_PREFIX_PATH`` environment
  variable with a :ref:`;-list <CMake Language Lists>` of prefixes that are
  to be searched.

* The :generator:`Visual Studio 7 .NET 2003` generator is now
  deprecated and will be removed in a future version of CMake.

* The :generator:`Visual Studio 7` generator (for VS .NET 2002) has been
  removed.  It had been deprecated since CMake 3.3.

* The :generator:`Visual Studio 6` generator has been removed.
  It had been deprecated since CMake 3.3.

Other Changes
=============

* The precompiled OS X binary provided on ``cmake.org`` now requires
  OS X 10.7 or newer.

* On Linux and FreeBSD platforms, when building CMake itself from source and
  not using a system-provided libcurl, OpenSSL is now used by default if it is
  found on the system.  This enables SSL/TLS support for commands supporting
  network communication via ``https``, such as :command:`file(DOWNLOAD)`,
  :command:`file(UPLOAD)`, and :command:`ctest_submit`.

* The :manual:`cmake(1)` ``--build`` command-line tool now rejects multiple
  ``--target`` options with an error instead of silently ignoring all but the
  last one.

* :prop_tgt:`AUTOMOC` now diagnoses name collisions when multiple source
  files in different directories use ``#include <moc_foo.cpp>`` with the
  same name (because the generated ``moc_foo.cpp`` files would collide).

* The :module:`FindBISON` module ``BISON_TARGET`` macro now supports
  special characters by passing the ``VERBATIM`` option to internal
  :command:`add_custom_command` calls.  This may break clients that
  added escaping manually to work around the bug.

* The :module:`FindFLEX` module ``FLEX_TARGET`` macro now supports
  special characters by passing the ``VERBATIM`` option to internal
  :command:`add_custom_command` calls.  This may break clients that
  added escaping manually to work around the bug.

* The :module:`FindProtobuf` module input and output variables were all renamed
  from ``PROTOBUF_`` to ``Protobuf_`` for consistency with other find modules.
  Input variables of the old case will be honored if provided, and output
  variables of the old case are always provided.

* The :module:`CPackRPM` module now supports upper cased component
  names in per component CPackRPM specific variables.
  E.g. component named ``foo`` now expects component specific
  variable to be ``CPACK_RPM_FOO_PACKAGE_NAME`` while before
  it expected ``CPACK_RPM_foo_PACKAGE_NAME``.
  Upper cased component name part in variables is compatible
  with convention used for other CPack variables.
  For back compatibility old format of variables is still valid
  and preferred if both versions of variable are set, but the
  preferred future use is upper cased component names in variables.
  New variables that will be added to CPackRPM in later versions
  will only support upper cased component variable format.

* The CPack NSIS generator's configuration file template was fixed to
  quote the path to the uninstaller tool used by the
  :variable:`CPACK_NSIS_ENABLE_UNINSTALL_BEFORE_INSTALL` option.
  This avoids depending on an insecure Windows feature to run an
  uninstaller tool with a space in the path.

(prlw1)

Pullup ticket #5063 - requested by taca
www/contao41: security patch

contao41 no longer exists in pkgsrc HEAD, so this is not properly
a pullup but maintenance of a vulnerable package on the branch.

The patch replaces contao41 'asset/mediaelement' by
contao-mediaelement.js-2.21.2.tar.gz

(spz)

Pullup ticket #5062 - requested by taca
www/contao42: security update

Revisions pulled up:
- www/contao42/Makefile                                        1.2
- www/contao42/PLIST                                            1.2
- www/contao42/distinfo                                        1.2

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jul 17 14:00:25 UTC 2016

  Modified Files:
  pkgsrc/www/contao42: Makefile PLIST distinfo

  Log Message:
  Update contao42 to 4.2.1.

  ### 4.2.1 (2016-07-15)

    * Strip soft hyphens when indexing a page (see contao/core#8389).
    * Do not run the command scheduler if the installation is incomplete (see #541).
    * Do not index randomly ordered image galleries.
    * Fix the filter menu layout on mobile devices.
    * Provide the back end fonts in different variants (see #523).
    * Fix the message markup in the member templates.
    * Correctly load the language strings in the pretty error screen listener.

  To generate a diff of this commit:
  cvs rdiff -u -r1.1 -r1.2 pkgsrc/www/contao42/Makefile \
      pkgsrc/www/contao42/PLIST pkgsrc/www/contao42/distinfo

(spz)

Updated x11/gtksourceview3 to 3.20.4

(prlw1)

Update gtksourceview3 to 3.20.4

News in 3.20.4
--------------
* Fix a critical message when showing a completion window
* Fix a general syntax highlighting issue
* Other smaller bug fixes
* Translation updates

(prlw1)

Pullup ticket #5061 - requested by taca
www/contao35: security update

Revisions pulled up:
- www/contao35/Makefile                                        1.15
- www/contao35/PLIST                                            1.9
- www/contao35/distinfo                                        1.12

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jul 17 13:58:00 UTC 2016

  Modified Files:
  pkgsrc/www/contao35: Makefile PLIST distinfo

  Log Message:
  Update contao35 to 3.5.15, including fix for CVE-2016-4567.

  Version 3.5.15 (2016-07-15)
  ---------------------------

  ### Fixed
  Strip soft hyphens when indexing a page (see #8389).

  ### Fixed
  Update mediaelement.js to version 2.21.2 (fixes CVE-2016-4567).

  To generate a diff of this commit:
  cvs rdiff -u -r1.14 -r1.15 pkgsrc/www/contao35/Makefile
  cvs rdiff -u -r1.8 -r1.9 pkgsrc/www/contao35/PLIST
  cvs rdiff -u -r1.11 -r1.12 pkgsrc/www/contao35/distinfo

(spz)

Pullup ticket #5068 - requested by taca
lang/php70: security update
lang/php: subsequent adjustment

Revisions pulled up:
- lang/php/phpversion.mk                                        1.144
- lang/php70/distinfo                                          1.15

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jul 24 02:20:16 UTC 2016

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php70: distinfo

  Log Message:
  Update php70 to 7.0.9 (PHP 7.0.9).

  21 Jul 2016 PHP 7.0.9

  - Core:
    . Fixed bug #72508 (strange references after recursive function call and
      "switch" statement). (Laruence)
    . Fixed bug #72513 (Stack-based buffer overflow vulnerability in
      virtual_file_ex). (Stas)
    . Fixed bug #72573 (HTTP_PROXY is improperly trusted by some PHP libraries
      and applications). (Stas)

  - bz2:
    . Fixed bug #72613 (Inadequate error handling in bzread()). (Stas)

  - CLI:
    . Fixed bug #72484 (SCRIPT_FILENAME shows wrong path if the user specify
      router.php). (Laruence)

  - COM:
    . Fixed bug #72498 (variant_date_from_timestamp null dereference). (Anatol)

  - Curl:
    . Fixed bug #72541 (size_t overflow lead to heap corruption). (Stas)

  - Exif:
    . Fixed bug #72603 (Out of bound read in exif_process_IFD_in_MAKERNOTE).
      (Stas)
    . Fixed bug #72618 (NULL Pointer Dereference in exif_process_user_comment).
      (Stas)

  - GD:
    . Fixed bug #43475 (Thick styled lines have scrambled patterns). (cmb)
    . Fixed bug #53640 (XBM images require width to be multiple of 8). (cmb)
    . Fixed bug #64641 (imagefilledpolygon doesn't draw horizontal line). (cmb)
    . Fixed bug #72512 (gdImageTrueColorToPaletteBody allows arbitrary write/read
      access). (Pierre)
    . Fixed bug #72519 (imagegif/output out-of-bounds access). (Pierre)
    . Fixed bug #72558 (Integer overflow error within _gdContributionsAlloc()).
      (Pierre)
    . Fixed bug #72482 (Ilegal write/read access caused by gdImageAALine
      overflow). (Pierre)
    . Fixed bug #72494 (imagecropauto out-of-bounds access). (Pierre)

  - Intl:
    . Fixed bug #72533 (locale_accept_from_http out-of-bounds access). (Stas)

  - Mbstring:
    . Fixed bug #72405 (mb_ereg_replace - mbc_to_code (oniguruma) -
      oob read access). (Laruence)
    . Fixed bug #72399 (Use-After-Free in MBString (search_re)). (Laruence)

  - mcrypt:
    . Fixed bug #72551, bug #72552 (In correct casting from size_t to int lead to
      heap overflow in mdecrypt_generic). (Stas)

  - PDO_pgsql:
    . Fixed bug #72570 (Segmentation fault when binding parameters on a query
      without placeholders). (Matteo)

  - PCRE:
    . Fixed bug #72476 (Memleak in jit_stack). (Laruence)
    . Fixed bug #72463 (mail fails with invalid argument). (Anatol)

  - Readline:
    . Fixed bug #72538 (readline_redisplay crashes php). (Laruence)

  - Standard:
    . Fixed bug #72505 (readfile() mangles files larger than 2G). (Cschneid)
    . Fixed bug #72306 (Heap overflow through proc_open and $env parameter).
      (Laruence)

  - Session:
    . Fixed bug #72531 (ps_files_cleanup_dir Buffer overflow). (Laruence)
    . Fixed bug #72562 (Use After Free in unserialize() with Unexpected Session
      Deserialization). (Stas)

  - SNMP:
    . Fixed bug #72479 (Use After Free Vulnerability in SNMP with GC and
      unserialize()). (Stas)

  - Streams:
    . Fixed bug #72439 (Stream socket with remote address leads to a segmentation
      fault). (Laruence)

  - XMLRPC:
    . Fixed bug #72606 (heap-buffer-overflow (write) simplestring_addn
      simplestring.c). (Stas)

  - Zip:
    . Fixed bug #72520 (Stack-based buffer overflow vulnerability in
      php_stream_zip_opener). (Stas)

  To generate a diff of this commit:
  cvs rdiff -u -r1.143 -r1.144 pkgsrc/lang/php/phpversion.mk
  cvs rdiff -u -r1.14 -r1.15 pkgsrc/lang/php70/distinfo

(spz)

Pullup ticket #5069 - requested by taca
lang/php56: security update
lang/php: subsequent adjustment

Revisions pulled up:
- lang/php/phpversion.mk                                        1.143
- lang/php56/distinfo                                          1.29

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jul 24 02:18:02 UTC 2016

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php56: distinfo

  Log Message:
  Update php56 to 5.6.24 (PHP 5.6.24).

  21 Jul 2016, PHP 5.6.24

  - Core:
    . Fixed bug #71936 (Segmentation fault destroying HTTP_RAW_POST_DATA).
      (mike dot laspina at gmail dot com, Remi)
    . Fixed bug #72496 (Cannot declare public method with signature incompatible
      with parent private method). (Pedro Magalhães)
    . Fixed bug #72138 (Integer Overflow in Length of String-typed ZVAL). (Stas)
    . Fixed bug #72513 (Stack-based buffer overflow vulnerability in
      virtual_file_ex). (loianhtuan at gmail dot com)
    . Fixed bug #72562 (Use After Free in unserialize() with Unexpected Session
      Deserialization). (taoguangchen at icloud dot com)
    . Fixed bug #72573 (HTTP_PROXY is improperly trusted by some PHP libraries and
      applications). (CVE-2016-5385) (Stas)

  - bz2:
    . Fixed bug #72447 (Type Confusion in php_bz2_filter_create()). (gogil at
      stealien dot com).
    . Fixed bug #72613 (Inadequate error handling in bzread()). (Stas)

  - EXIF:
    . Fixed bug #50845 (exif_read_data() returns corrupted exif headers).
      (Bartosz Dziewoński)
  - EXIF:
    . Fixed bug #72603 (Out of bound read in exif_process_IFD_in_MAKERNOTE).
      (Stas)
    . Fixed bug #72618 (NULL Pointer Dereference in exif_process_user_comment).
      (Stas)

  - GD:
    . Fixed bug #43475 (Thick styled lines have scrambled patterns). (cmb)
    . Fixed bug #53640 (XBM images require width to be multiple of 8). (cmb)
    . Fixed bug #64641 (imagefilledpolygon doesn't draw horizontal line). (cmb)
    . Fixed bug #72512 (gdImageTrueColorToPaletteBody allows arbitrary write/read
      access). (Pierre)
    . Fixed bug #72519 (imagegif/output out-of-bounds access). (Pierre)
    . Fixed bug #72558 (Integer overflow error within _gdContributionsAlloc()).
      (CVE-2016-6207) (Pierre)

  - Intl:
    . Fixed bug #72533 (locale_accept_from_http out-of-bounds access). (Stas)

  - ODBC:
    . Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns)

  - OpenSSL:
    . Fixed bug #71915 (openssl_random_pseudo_bytes is not fork-safe).
      (Jakub Zelenka)
    . Fixed bug #72336 (openssl_pkey_new does not fail for invalid DSA params).
      (Jakub Zelenka)

  - SNMP:
    . Fixed bug #72479 (Use After Free Vulnerability in SNMP with GC and
      unserialize()). (taoguangchen at icloud dot com)

  - SPL:
    . Fixed bug #55701 (GlobIterator throws LogicException). (Valentin VĂLCIU)

  - SQLite3:
    . Fixed bug #70628 (Clearing bindings on an SQLite3 statement doesn't work).
      (cmb)

  - Streams:
    . Fixed bug #72439 (Stream socket with remote address leads to a segmentation
      fault). (Laruence)

  - Xmlrpc:
    . Fixed bug #72606 (heap-buffer-overflow (write) simplestring_addn simplestring.c).
      (Stas)

  - Zip:
    . Fixed bug #72520 (Stack-based buffer overflow vulnerability in
      php_stream_zip_opener). (loianhtuan at gmail dot com)

  To generate a diff of this commit:
  cvs rdiff -u -r1.142 -r1.143 pkgsrc/lang/php/phpversion.mk
  cvs rdiff -u -r1.28 -r1.29 pkgsrc/lang/php56/distinfo

(spz)

Pullup ticket #5067 - requested by taca
lang/php55: security update
lang/php: subsequent adjustment

Revisions pulled up:
- lang/php/phpversion.mk                                        1.142
- lang/php55/distinfo                                          1.55

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Jul 24 02:15:16 UTC 2016

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php55: distinfo

  Log Message:
  Update php55 to 5.5.38 (PHP 5.5.38).

  Quote from release note:

  Note that according to our release schedule, PHP 5.5.38 is the last release
  of the PHP 5.5 branch. There may be additional release if we discover
  important security issues that warrant it, otherwise this release will be
  the final one in the PHP 5.5 branch. If your PHP installation is based on
  PHP 5.5, it may be a good time to start making the plans for the upgrade to
  PHP 5.6 or PHP 7.0.

  21 Jul 2016, PHP 5.5.38

  - BZip2:
      . Fixed bug #72613 (Inadequate error handling in bzread()). (Stas)

  - Core:
      . Fixed bug #70480 (php_url_parse_ex() buffer overflow read). (Stas)
      . Fixed bug #72513 (Stack-based buffer overflow vulnerability in
        virtual_file_ex). (loianhtuan at gmail dot com)
      . Fixed bug #72562 (Use After Free in unserialize() with Unexpected Session
        Deserialization). (taoguangchen at icloud dot com)
      . Fixed bug #72573 (HTTP_PROXY is improperly trusted by some PHP libraries and
        applications). (CVE-2016-5385) (Stas)

  - EXIF:
      . Fixed bug #72603 (Out of bound read in exif_process_IFD_in_MAKERNOTE).
        (Stas)
      . Fixed bug #72618 (NULL Pointer Dereference in exif_process_user_comment).
        (Stas)

  - GD:
      . Fixed bug #72512 (gdImageTrueColorToPaletteBody allows arbitrary write/read
        access). (Pierre)
      . Fixed bug #72519 (imagegif/output out-of-bounds access). (Pierre)
      . Fixed bug #72558 (Integer overflow error within _gdContributionsAlloc()).
        (CVE-2016-6207) (Pierre)

  - Intl:
      . Fixed bug #72533 (locale_accept_from_http out-of-bounds access). (Stas)

  - ODBC:
      . Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns)

  - SNMP:
      . Fixed bug #72479 (Use After Free Vulnerability in SNMP with GC and
        unserialize()). (taoguangchen at icloud dot com)

  - Xmlrpc:
      . Fixed bug #72606 (heap-buffer-overflow (write) simplestring_addn simplestring.c).
        (Stas)

  - Zip:
      . Fixed bug #72520 (Stack-based buffer overflow vulnerability in
        php_stream_zip_opener). (loianhtuan at gmail dot com)

  To generate a diff of this commit:
  cvs rdiff -u -r1.141 -r1.142 pkgsrc/lang/php/phpversion.mk
  cvs rdiff -u -r1.54 -r1.55 pkgsrc/lang/php55/distinfo

(spz)

Updated print/R-knitr to 1.13

(wen)

Update to 1.13

Upstream changes:

CHANGES IN knitr VERSION 1.13

NEW FEATURES

    code chunks that generate metadata may be cached now; it requires htmlwidgets >= v0.6 and htmltools >= 0.3.3 if you cache code chunks that contain HTML widgets or Shiny inputs/outputs (#1158)

    when the output format is not HTML, HTML widgets used to fail to render; now knitr will try to generate static screenshots for HTML widgets automatically using the webshot package; you can specify alternative screenshots via the chunk option screenshot.alt (which takes a character vector of image paths), and pass more options to webshot::webshot() via the chunk option screenshot.opts, e.g. list(delay = 3, cliprect = 'viewport')

    added two functions include_url() and include_app() to embed URLs in the output (the latter is for Shiny app URLs); when the output format is HTML, iframe will be used; otherwise screenshots of the URLs will be used

    screenshotting for HTML widgets and URLs can be forced for all output formats via the chunk option screenshot.force = TRUE; if you set the chunk option screenshot.force = FALSE, knitr will just render these content normally and not take screenshots

    added a new chunk option fig.link, which can be used to attach hyperlinks on figures, e.g. you can add a link to a screenshot of a Shiny app so that readers can check out the actual live app after clicking on the static screenshot (this chunk option currently only works for Markdown and LaTeX output)

    syntactical errors in code chunks will be allowed when the chunk option error = TRUE and the package version of evaluate is at least 0.8.4; previously knitr would just stop on parsing errors (hadley/evaluate#65)

    PNG/JPEG images included via include_graphics() also respects the chunk option dpi now; if it is numeric and the chunk option out.width is not set, the output width (in inches) of an image will be automatically calculated from the actual width (in pixels) divided by dpi; note this feature requires the packages png and/or jpeg to be installed, and you can disable the feature using dpi = NA (thanks, @hadley, rstudio/bookdown#38)

    added a new hook function named evaluate in knit_hooks so that users can redefine a evaluator to evaluate the code chunk; the default is evaluate::evaluate(), and your custom evaluator must be compatible with evaluate::evaluate() in terms of the argument names and the data structure of the returned value (a list of values with special classes)

    added a new function combine_words() to combine multiple words / phrases into a single string, which may be useful in inline R expressions, e.g. combine_words(c('a', 'b', 'c')) returns a, b, and c

    render_markdown() gained a new argument fence_char to customize the character to be used as the code blocks fence, e.g. it can be a backtick, or a tilde, depending on the Markdown rendering engine (thanks, @tinyheero, #1161)

    the pandoc() function no longer assumes Markdown input (thanks, @scls19fr, #1170)

    added a new function knit_meta_add() so that users can manually inject metadata into the current knitr session

    for the tikz engine, if fig.ext = 'svg', dvisvgm will be called to convert the DVI output of TikZ to SVG; you need to install dvisvgm, and Windows users have to install GhostScript as well (thanks, @dkilfoyle, #1177)

    new js and css engines which surround their content with <script> and <style> tags respecitvely, and print no output when not in an HTML document

    for LaTeX tables, kable() supports short captions now via the caption.short argument, e.g. kable(..., caption = 'A long caption', caption.short = 'A short caption') (thanks, @ismayc, #1199)

    added three global R options knitr.sanitize.errors, knitr.sanitize.warnings, and knitr.sanitize.messages to mask or change the messages, e.g. if options(knitr.sanitize.errors = TRUE) and the chunk option error = TRUE, the actual error message will be replaced by a character string like "An error occurred"; these options can also accept character values so you can customize the messages to be displayed, e.g. options(knitr.sanitize.warnings = 'You had a warning from the code'); see rstudio/shiny#1123 for the motivation of these options

BUG FIXES

    when the chunk option cache.rebuild = TRUE, the cache database should be rewritten (thanks, Oleg Mayba)

    include_graphics() did not work in inline R expressions (thanks, @WastlM, #1166)

    the cex parameter was not correctly restored in the case of opts_knit$set(global.par = TRUE) (http://stackoverflow.com/q/35606445/559676)

    for Rnw documents, when there are two instances of \documentclass{}, knitr might mistakenly treats the second instance as the the actual command to declare the document class (thanks, #1180, @ekstroem)

    corrected the environment for evaluating R scripts in stitch_rhtml() and stitch_rmd() (thanks, @Hughan, #1207)

MAJOR CHANGES

    the default value of the package option eval.after is changed from NULL to fig.cap, i.e. the figure caption will always be evaluated after a code chunk is evaluated (thanks, @JoshOBrien, #1165)

    the function eclipse_theme() has been removed since the website eclipsecolorthemes.org has been down for a long time

(wen)

Add upstream bug report.

(wiz)

Updated textproc/R-highr to 0.6

(wen)

Update to 0.6

Upstream changes:
CHANGES IN highr VERSION 0.6

NEW FEATURES

o `hilight()` can deal with multibyte characters that cannot represented in
the system native encoding now (on Windows)

BUG FIXES

o blank lines before/after code are preserved in the hilight() output now
(thanks, Terry Therneau)

(wen)

Updated devel/R-evaluate to 0.9

(wen)

Update to 0.9

Upstream changes:
Version 0.9
------------------------------------------------------------------------------

* Added an argument `allow_error` to `parse_all()` to allow syntactical errors
  in R source code when `allow_error = TRUE`; this means `evaluate(stop_on_error
  = 0 or 1)` will no longer stop on syntactical errors but returns a list of
  source code and the error object instead. This can be useful to show
  syntactical errors for pedagogical purposes.

(wen)

Pullup ticket #5072 - requested by bouyer
sysutils/xenkernel41: security patch

Revisions pulled up:
- sysutils/xenkernel41/Makefile                                1.50
- sysutils/xenkernel41/distinfo                                1.43
- sysutils/xenkernel41/patches/patch-XSA-182                    1.1

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: bouyer
  Date: Tue Jul 26 15:59:20 UTC 2016

  Modified Files:
  pkgsrc/sysutils/xenkernel41: Makefile distinfo
  Added Files:
  pkgsrc/sysutils/xenkernel41/patches: patch-XSA-182

  Log Message:
  Apply security patch from XSA-182. Bump PKGREVISION
  xen 4.2 is not vulnerable to XSA-183.

  To generate a diff of this commit:
  cvs rdiff -u -r1.49 -r1.50 pkgsrc/sysutils/xenkernel41/Makefile
  cvs rdiff -u -r1.42 -r1.43 pkgsrc/sysutils/xenkernel41/distinfo
  cvs rdiff -u -r0 -r1.1 pkgsrc/sysutils/xenkernel41/patches/patch-XSA-182

(spz)

Bump depends per release notes.
Ride update.

(wiz)

Updated time/py-icalendar to 3.10

(wiz)

Updated py-icalendar to 3.10.

3.10 (2016-05-26)
-----------------

New:

- Updated components description to better comply with RFC 5545.
  Refs #183.
  [stlaz]

- Added PERIOD value type to date types.
  Also fixes incompatibilities described in #184.
  Refs #189.
  [stlaz]

Fixes:

- Fix testsuite for use with ``dateutil>=2.5``.
  Refs #195.
  [untitaker]

- Reintroduce cal.Component.is_broken that was removed with 3.9.2.
  Refs #185.
  [geier]

3.9.2 (2016-02-05)
------------------

New:

- Defined ``test_suite`` in setup.py.
  Now tests can be run via ``python setup.py test``.
  [geier]

Fixes:

- Fixed cal.Component.from_ical() representing an unknown component as one of the known.
  [stlaz]

- Fixed possible IndexError exception during parsing of an ical string.
  [stlaz]

- When doing a boolean test on ``icalendar.cal.Component``, always return ``True``.
  Before it was returning ``False`` due to CaselessDict, if it didn't contain any items.
  [stlaz]

- Fixed date-time being recognized as date or time during parsing.
  Added better error handling to parsing from ical strings.
  [stlaz]

- Added __version__ attribute to init.py.
  [TomTry]

- Documentation fixes.
  [TomTry]

- Pep 8, UTF 8 headers, dict/list calls to literals.
  [thet]

3.9.1 (2015-09-08)
------------------

- Fix ``vPeriod.__repr__``.
  [spacekpe]

- Improve foldline() performance. This improves the foldline performance,
  especially for large strings like base64-encoded inline attachements. In some
  cases (1MB string) from 7 Minutes to less than 20ms for ASCII data and 500ms
  for non-ASCII data. Ref: #163.
  [emfree]

3.9.0 (2015-03-24)
------------------

- Creating timezone objects from VTIMEZONE components.
  [geier]

- Make ``python-dateutil`` a dependency.
  [geier]

- Made RRULE tolerant of trailing semicolons.
  [sleeper]

- Documentation fixes.
  [t-8ch, thet]

3.8.4 (2014-11-01)
------------------

- Add missing BYWEEKNO to recurrence rules.
  [russkel]

(wiz)

Pullup ticket #5071 - requested by bouyer
sysutils/xenkernel42: security patch

Revisions pulled up:
- sysutils/xenkernel42/Makefile                                1.22
- sysutils/xenkernel42/distinfo                                1.20
- sysutils/xenkernel42/patches/patch-XSA-182                    1.1

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: bouyer
  Date: Tue Jul 26 15:38:00 UTC 2016

  Modified Files:
  pkgsrc/sysutils/xenkernel42: Makefile distinfo
  Added Files:
  pkgsrc/sysutils/xenkernel42/patches: patch-XSA-182

  Log Message:
  Apply security patch from XSA-182. Bump PKGREVISION
  xen 4.2 is not vulnerable to XSA-183.

  To generate a diff of this commit:
  cvs rdiff -u -r1.21 -r1.22 pkgsrc/sysutils/xenkernel42/Makefile
  cvs rdiff -u -r1.19 -r1.20 pkgsrc/sysutils/xenkernel42/distinfo
  cvs rdiff -u -r0 -r1.1 pkgsrc/sysutils/xenkernel42/patches/patch-XSA-182

(spz)

Pullup ticket #5070 - requested by bouyer
sysutils/xenkernel45: security patch

Revisions pulled up:
- sysutils/xenkernel45/Makefile                                1.19
- sysutils/xenkernel45/distinfo                                1.15
- sysutils/xenkernel45/patches/patch-XSA-182                    1.1
- sysutils/xenkernel45/patches/patch-XSA-183                    1.1

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: bouyer
  Date: Tue Jul 26 14:31:57 UTC 2016

  Modified Files:
  pkgsrc/sysutils/xenkernel45: Makefile distinfo
  Added Files:
  pkgsrc/sysutils/xenkernel45/patches: patch-XSA-182 patch-XSA-183

  Log Message:
  Apply security patch from XSA-182 and XSA-183. Bump PKGREVISION

  To generate a diff of this commit:
  cvs rdiff -u -r1.18 -r1.19 pkgsrc/sysutils/xenkernel45/Makefile
  cvs rdiff -u -r1.14 -r1.15 pkgsrc/sysutils/xenkernel45/distinfo
  cvs rdiff -u -r0 -r1.1 pkgsrc/sysutils/xenkernel45/patches/patch-XSA-182 \
      pkgsrc/sysutils/xenkernel45/patches/patch-XSA-183

(spz)

Updated net/wireshark1 to 1.12.13

(wiz)

Updated wireshark to 1.12.13.

What's New

  This is the final release of Wireshark 1.12. It officially reaches end
  of life on July 31, 2016. If you are still using Wireshark 1.12 you are
  encouraged to upgrade to Wireshark 2.0.

  Bug Fixes

  The following vulnerabilities have been fixed:
    * [1]wnpa-sec-2016-40
      NDS dissector crash. ([2]Bug 12576)
    * [3]wnpa-sec-2016-41
      PacketBB crash. ([4]Bug 12577)
    * [5]wnpa-sec-2016-42
      WSP infinite loop. ([6]Bug 12594)
    * [7]wnpa-sec-2016-43
      MMSE infinite loop. ([8]Bug 12624)
    * [9]wnpa-sec-2016-44
      RLC long loop. ([10]Bug 12660)
    * [11]wnpa-sec-2016-45
      LDSS dissector crash. ([12]Bug 12662)
    * [13]wnpa-sec-2016-46
      RLC dissector crash. ([14]Bug 12664)
    * [15]wnpa-sec-2016-47
      OpenFlow long loop. ([16]Bug 12659)

  The following bugs have been fixed:
    * T30 FCF byte decoding masks DTC, CIG and NCS. ([17]Bug 1918)
    * TShark crashes with option "-z io,stat,..." in the presence of
      negative relative packet timestamps. ([18]Bug 9014)
    * Packet size limited during capture msg is repeated in the Info
      column. ([19]Bug 9826)
    * Filter for field name tcp.options.wscale.multiplier cannot exceed
      255. ([20]Bug 12525)
    * Inconsistent VHT data rate. ([21]Bug 12558)

  Updated Protocol Support

  802.11 Radiotap, LANforge, LDSS, MMSE, PacketBB, PRP, RLC, RTP MIDI,
  T.30, TCP, VITA 49, WiMax RNG-RSP, and WSP

  New and Updated Capture File Support

  and pcapng

(wiz)

Updated net/wireshark to 2.0.5

(wiz)

Updated wireshark to 2.0.5.

What's New

  Bug Fixes

  The following vulnerabilities have been fixed:
    * [1]wnpa-sec-2016-39
      CORBA IDL dissector crash on 64-bit Windows. ([2]Bug 12495)
    * [3]wnpa-sec-2016-41
      PacketBB crash. ([4]Bug 12577)
    * [5]wnpa-sec-2016-42
      WSP infinite loop. ([6]Bug 12594)
    * [7]wnpa-sec-2016-44
      RLC long loop. ([8]Bug 12660)
    * [9]wnpa-sec-2016-45
      LDSS dissector crash. ([10]Bug 12662)
    * [11]wnpa-sec-2016-46
      RLC dissector crash. ([12]Bug 12664)
    * [13]wnpa-sec-2016-47
      OpenFlow long loop. ([14]Bug 12659)
    * [15]wnpa-sec-2016-48
      MMSE, WAP, WBXML, and WSP infinite loop. ([16]Bug 12661)
    * [17]wnpa-sec-2016-49
      WBXML crash. ([18]Bug 12663)

  The following bugs have been fixed:
    * T30 FCF byte decoding masks DTC, CIG and NCS. ([19]Bug 1918)
    * TShark crashes with option "-z io,stat,..." in the presence of
      negative relative packet timestamps. ([20]Bug 9014)
    * Packet size limited during capture msg is repeated in the Info
      column. ([21]Bug 9826)
    * Wireshark loses windows decorations on second screen when
      restarting maximized using GNOME. ([22]Bug 11303)
    * Cannot launch GTK+ version of wireshark as a normal user. ([23]Bug
      11400)
    * Restart current capture fails with "no interface selected" error
      when capturing in promiscuous mode. ([24]Bug 11834)
    * Add field completion suggestions when adding a Display filter or Y
      Field to the IO Graph. ([25]Bug 11899)
    * Wireshark Qt always indicates locale as "C". ([26]Bug 11960)
    * Wireshark crashes every time open Statistics -> Conversations |
      Endpoints. ([27]Bug 12288)
    * Find function within the conversations window does not work.
      ([28]Bug 12363)
    * Invalid values for USB SET_REQUEST packets. ([29]Bug 12511)
    * Display filter dropdown hides cursor. ([30]Bug 12520)
    * Filter for field name tcp.options.wscale.multiplier cannot exceed
      255. ([31]Bug 12525)
    * Ctrl+ shortcuts that are not text-related do not work when focus is
      on display filter field. ([32]Bug 12533)
    * Closing Statistics window results in black screen. ([33]Bug 12544)
    * OSPF: Incorrect description of N/P-bit in NSSA LSA. ([34]Bug 12555)
    * Inconsistent VHT data rate. ([35]Bug 12558)
    * DCE/RPC malformed error when stub-data is missing but a
      sub-dissector has been registered. ([36]Bug 12561)
    * Wireshark is marking BGP FlowSpec NLRI as malformed if NLRI length
      is larger than 239 bytes. ([37]Bug 12568)
    * "Edit Resolved Name" is not saved in current pcapng file. ([38]Bug
      12629)
    * MPTCP: MP_JOIN B bit not decoded correctly. ([39]Bug 12635)
    * MPTCP MP_PRIO header with AddrID: incorrect AddrID. ([40]Bug 12641)

  Updated Protocol Support

  802.11 Radiotap, BGP, CAN, CANopen, H.248 Q.1950, IPv4, IPv6, LANforge,
  LDSS, MPTCP, OSPF, PacketBB, PRP, RLC, RMT-FEC, RSVP, RTP MIDI, T.30,
  TDS, USB, WAP, WBXML, WiMax RNG-RSP, and WSP

  New and Updated Capture File Support

  and pcapng

(wiz)

Updated time/khal to 0.8.2

(mef)

Updated time/khal 0.7.0 to 0.8.2
--------------------------------
0.8.2
=====
released on 2015-05-16

* fixed some bugs in `configure` that would lead to invalid configuration files
  and crashes (Christian Geier)
* fixed detecting of icalendar version (Markus Unterwaditzer)

0.8.1
=====
released on 2015-04-13

* fix bug in CalendarWidget.set_focus_date() (Christian Geier)

0.8.0
=====
released on 2015-04-13

* BREAKING CHANGE: python 2 is no longer supported (Hugo Osvaldo Barrera)
* updated dependency: vdirsyncer >= 0.5.2
* make tests work with icalendar 3.9.2 (no functional changes) (Christian Geier)
* new dependency: freezegun (only for running the tests)
* khal's git repository moved to https://github.com/pimutils/khal

* support for showing the birthday of contacts with no FN property (Hugo
  Osvaldo Barrera)
* increased start up time when coloring is enabled (Christian Geier)
* improved color support (256 colors and 24-bit colors), see configuration
  documentation for details (Sebastian Hamann)
* renamed color `grey` to `gray` (Sebastian Hamann)
* in `khal new` treat 24:00 as the end of a day/00:00 of the next (Christian Geier)
* new allowed value for a calendar's color: `auto` (also the new default), if
  set, khal will try to read a file called `color` from that calendar's vdir (see
  vdirsyncer's documentation on `metasync`). If that file is not present or its
  contents is not understood, the default color will be used (Christian Geier)
* new allowed value for calendar's type: `discover`, if set, khal will
  (recursively) search that calendar's path for valid vdirs and add those to
  the configured calendars (Christian Geier)
* new command `configure` which should help new users set up a configuration
  file (Christian Geier)
* warn user when parsing broken icalendar files, this requires icalendar > 3.9.2
  (Christian Geier)
* khal will now strip all ANSI escape codes when it detects that stdout is no
  tty, this behaviour can be overwritten with the new options --color/ --no-color
  (Markus Unterwaditzer)
* calendar and agenda have a new option --week, if set all events from current week
  (or the week containing the given date) are shown (Stephan Weller)
* new option --alarm DURATION for `new` (Max Voit)

ikhal
-----
* basic export of events from event editor pane and from event lists (default
  keybinding: *e* (Filip Pytloun)
* pressing *enter* in a date editing widget will now open a small calendar
  widget, arrow keys can be used to select a date, enter (or escape) will close
  it again (Christian Geier)
* in highlight/date range selection mode the other end can be selected, default
  keybinding `o` (as in *Other*) (Christian Geier)
* basic search is now supported (default keybinding `/`) (Christian Geier)
* in the event editor and pop-up Dialogs select the next (previous) item with tab
  (shift tab) (Christian Geier)
* only allow saving when starttime < endtime (Christian Geier)
* the event editor now allows editing of alarms (but khal will not actually
  alarm you at the given time) (Johannes Wienke)

(mef)

Pullup ticket #5074 - requested by christos
devel/cvsps: security patch

Revisions pulled up:
- devel/cvsps/Makefile                                          1.27
- devel/cvsps/distinfo                                          1.14
- devel/cvsps/patches/patch-ag                                  1.2

-------------------------------------------------------------------
  Module Name:    pkgsrc
  Committed By:  christos
  Date:          Mon Jul 25 05:10:03 UTC 2016

  Modified Files:
          pkgsrc/devel/cvsps: Makefile distinfo
          pkgsrc/devel/cvsps/patches: patch-ag

  Log Message:
  Fix buffer overflow on long lines

  To generate a diff of this commit:
  cvs rdiff -u -r1.26 -r1.27 pkgsrc/devel/cvsps/Makefile
  cvs rdiff -u -r1.13 -r1.14 pkgsrc/devel/cvsps/distinfo
  cvs rdiff -u -r1.1 -r1.2 pkgsrc/devel/cvsps/patches/patch-ag

(spz)

Updated databases/p5-App-Sqitch to 0.9995

(wen)

Update to 0.9995

Upstream changes:
0.9995 2016-07-27T09:23:55Z
    - Taught the `add` command not to ignore the `--change` option.
    - The `add` command now emits a usage statement when no change name is
      passed to it.
    - The `add` command now helpfully suggests using the --change option when
      attempting to add a change with the same name as a target. Thanks to
      Ivan Nunes for the report!
    - The `tag` command now helpfully suggests using the --tag option when
      attempting to add a tag with the same name as a target.
    - Added `--global` as an alias for `--user` to the `config` command. This
      alias benefits the muscle memory of Git users.
    - Added a note for Git users to the `sqitch-revert` documentation, to
      head off potential confusion with `git revert`. Thanks to Eric
      Br矇chemier for the "time travel" analogy and wording.
    - Fixed an "uninitialized value" error when creating a registry database
      on Windows. Thanks to Steven C. Buttgereit for the report (Issue #289).
    - Fixed editor selection to prioritize the `core.editor` configuration
      variable over the `$EDITOR` environment variable. The `$SQITCH_EDITOR`
      environment variable still trumps all. Thanks to Jim Nasby for the pull
      request (#296).
    - Added detection of the `$VISUAL` environment variable to Editor
      selection, prioritzed after the `core.editor` configuration variable
      and before the `$EDITOR` environment variable. Thanks to Jim Nasby for
      the pull request (#296).
    - Updated the DateTime code to set the locale via `set_locale()` instead
      of `set()`, as the latter may actually change the local time
      unintentionally, and has been deprecated since DateTime v1.04. Thanks
      to Dave Rolsky for the pull request (#304).

0.9994 2016-01-08T19:46:43Z
    - Reduced minimum required MySQL engine from 5.1.0 to 5.0.0. Thanks to
      @dgc-wh for testing it (Issue #251).
    - Fixed floating-point rounding issue with SQLite registry versions on
      Perls with 16-byte doubles. Thanks to H. Merijn Brand for the report
      and testing.
    - Fixed an error when adding an engine with the `engine` command. Thanks
      to Victor Mours for the report and fix!
    - Updated the Oracle engine to support Oracle Wallet connection strings,
      where no username or host is in the connection URI. Thanks to Timothy
      Procter for the patch!
    - Improved the installer's selection of the prefix in which to install
      `etc` files to better match the `--installdirs` option, which defaults
      to the "site" directories. Thanks to @carragom for the pull request
      (#265).
    - Added missing dash to `-engine` in sample calls to `sqitch init` in the
      tutorials. Thanks to Andrew Dunstan for the spot (Issue #268).
    - Fixed broken Vertica documentation links.
    - Attempting to revert a database with no associated registry no longer
      reports the registry as version 0, but correctly reports that no
      registry can be found. Thanks to Arnaldo Piccinelli for the spot (Issue
      #271).
    - Fixed the search for change IDs in engines to match the search for
      changes. Specifically, change ID seaerch now properly handles the
      offset characters `~` and `^`. This bug mainly affected the `verify`
      command, but it's good to address the inconsistency, done mainly by
      adding the `find_change_id` and `change_id_offset_from_id` methods to
      complement the `find_change` and `change_offset_from_id` methods.
      Thanks to Andrew Dunstan for the spot (Issue #272).
    - Fixed the `flips` table example in the MySQL tutorial. It was
      inappropriately copied from the PostgreSQL tutorial at some point.
      Thanks to Jeff Carpenter for the spot (Issue #254)!

0.9993  2015-08-17T17:55:26Z
    [Bug Fixes]
    - Eliminated test failures due to warnings from DateTime::Locale when
      `LC_TIME` is set to C.UTF-8. Thanks to Shantanu Bhadoria for the report
      and Dave Rolsky for the workaround.
    - Fixed an error checking the registry version when the local uses a
      comma for decimal values. Thanks to Steffen M羹ller for the report
      (Issue #234).
    - Worked around an error setting the MySQL storage engine using versions
      of DBI prior to 1.631. Thanks to melon-babak for the report!
    - Fixed an error from the Oracle engine when deploying more than 1000
      changes. Thanks to Timothy Procter and Minh Hoang for the report and
      testing the fix.
    - Fixed a bunch of typos in error messages, comments, and documentation.
      Thanks to Dmitriy for the pull request!
    - Fixed test failures due to new warnings from File::Path on Perl
      5.23.1.
    - On Firebird, Looking up a change and tag in the database (via the
      `--onto` option to `rebase` or the `--to` option to `revert`, among
      others) would sometimes return the incorrect change if the change has
      been reworked two or more times. Was fixed for the other engines in
      v0.9991.
    - Fixed the `--all` option used to apply a command to all known targets
      so that it loads only targets specified by the local configuration.
      Otherwise, user and system configuration can get in the way when they
      specify engines and targets not used by the current project.
    [Improvements]
    - Added support for the `--set` option when deploying to MySQL. Thanks to
      Chris Bandy for figuring out how to do it!
    - Added support for a "reworked directory". By default, reworked change
      scripts live in the deploy, revert, and verify directories along with
      all the other change scripts. But if that starts to get too messy, or
      you simply don't want to see them, add a `reworked_dir` setting to the
      core, engine, or target config and reworked scripts will be stored
      there, instead. Also supported are `reworked_deploy_dir`,
      `reworked_revert_dir`, and `reworked_verify_dir`.
    - Added the `--dir` option to the `init`, `engine`, and `target`
      commands.
    - Copied the core configuration options (`--engine`, `--target`,
      `--plan-file`, `--registry`, etc.) to the `init`, `engine`, and
      `target` commands. This means that they can be specified after the
      command, which is a bit more natural. It also means that the
      `--registry` and `--client` options of the `target` are no longer
      deprecated.
    - The `init` command on longer writes out commented values for the
      `deploy_dir`, `revert_dir`, or `verify_dir` settings. I think these
      settings are not commonly used, and it would start to get crowded if we
      also added their "reworked" variants, which will be used still less.
    - Added the `alter` action to the `engine` and `target` commands to set
      engine and target properties.
    - Added support for setting reworked directories to the `engine` and
      `target` commands.
    - Reformatted the output of the `engine` and `target` command `show`
      actions to include reworked directories, and to bit a bit less flat.
    - Attempting to add or alter an engine with a target URI that connects to
      a different engine now triggers an error. For example, you can't set
      the target for engine `pg` to `db:sqlite:`.
    - The `add` and `alter` actions of the `engine` and `target` commands
      now create script directories if they don't already exist.
    - The `add` action of the `engine` and `target` commands now creates a
      plan file if one does not exist in the specified location for the
      engine or target.
    - Added the `deploy_dir`, `revert_dir`, and `verify_dir` methods to
      App::Sqitch::Plan::Change. Each points to the proper directory for the
      target depending on whether or not the change has been reworked.
    - In the MySQL engine, the following URI query params will be converted
      to options passed to the command-line client, if they're present:
      * mysql_compression=1  => --compress
      * mysql_ssl=1          => --ssl
      * mysql_connect_timeout => --connect_timeout
      * mysql_init_command    => --init-command
      * mysql_socket          => --socket
      * mysql_ssl_client_key  => --ssl-key
      * mysql_ssl_client_cert => --ssl-cert
      * mysql_ssl_ca_file    => --ssl-ca
      * mysql_ssl_ca_path    => --ssl-capath
      * mysql_ssl_cipher      => --ssl-cipher
    [Documentation]
    - Added the "Overworked" section to sqitch-configuration guide with an
      example of how to move reworked change scripts into a `reworked_dir`.
    [Deprecations]
    - Deprecated the `set-*` actions in the `engine` and `target` commands in
      favor of the new `alter` action.
    - The core `--deployed-dir`, `--revert-dir`, and `--verify-dir` options
      are deprecated in favor of the `--dir` option on the `init`, `engine`,
      and `target` command.

0.9992 2015-05-20T23:51:41Z
    - On PostgreSQL, Sqitch now sets the `client_encoding` parameter to
      `UTF8` for its own connection to the database. This ensures that data
      sent to and from the databse should always be properly encoded and
      decoded. Users should still set the proper encodings for change scripts
      as appropriate.
    - Fixed test failures due to path differences on Windows.
    - DateTime::TimeZone is now explicitly required in an attempt to head off
      "Cannot determine local time zone" errors.
    - Corrected some typos and thinkos in `sqitchtutorial-oracle`, thanks to
      George Hartzell.
    - Improved the script to upgrade an Oracle registry to v1.0 to support
      versions prior to Oracle 12, thanks to Timothy Procter.
    - Added missing closing parenthesis to the "Nothing to deploy" message.
      Thanks to George Hartzell for the pull request (Issue #226).
    - Replaced the unique constraint on the `script_hash` column in the
      `changes` registry table with a unique constraint on `project` and
      `script_hash`. This is to allow a deploy script to be used in more than
      one project in a single database. This change increments the registry
      version to v1.1. Thanks to Timothy Procter for the report.
    - Updated the registry check constraints to have consistent names on the
      engines that support them. This will make it easier to modify the
      constraints in the future.
    - Fixed precision issues with the registry version on MySQL and Firebird.
    - Added comment to sqitch-passwords guide that MySQL::Config is required
      to read passwords from the MySQL configuration files. Thanks to
      Sterling Hanenkamp for the patch!

0.9991 2015-04-03T23:14:39Z
    [Improvements]
    - Reduced minimum required MySQL engine from 5.6.4 to 5.1.0. Versions
      prior to 5.6.4 lose the following features:
      * Versions earlier than 5.6.4 is fractional second precision on
        registry `DATETIME` columns. Since the ordering of those timestamps
        is so important to the functioning of Sqitch, it will sleep in 100 ms
        increments between logging changes to the registry until the time has
        ticked over to the next second. Naturally, reverts and deploys will
        be a little slower on versions of MySQL before 5.6.4, but accurate.
      * Versions earlier than 5.5.0 lose the `checkit()` functions, which
        would otherwise be used to emulate CHECK constraints in the registry,
        as well as in user-created verify scripts, as recommended in the
        MySQL tutorial, `sqitchtutorial-mysql`.
    - Added a script to update the `DATETIME` columns in a MySQL Sqitch
      registry that was upgraded to MySQL 5.6.4 or higher. It will be
      installed as `tools/upgrade-registry-to-mysql-5.6.4.sql` in the
      directory returned by `sqitch --etc`.
    - Added a script to add the `checkit()` function and registry triggers to
      emulate CHECK constraints to a MySQL Sqitch registry that was upgraded
      to MySQL 5.5.0 or higher. It will be installed as
      `tools/upgrade-registry-to-mysql-5.5.0.sql` in the directory returned
      by `sqitch --etc`.
    - The `init` command now throws an error when the plan file already
      exists and is invalid or defined for a different project. Thanks to
      Gabriel Potk獺ny for the suggestion (Issue #214).
    - All commands that take target arguments can now specify them as engine
      names or plan file paths as well as target names and URIs.
    - Added the `--all` option and the `$command.all` configuration variable
      to the `add`, `rework`, `tag`, and `bundle` commands. This option tells
      the commands to do their thing for all plans known from the
      configuration, not just the default plan.
    - Pass engine, target, or plan file names to the `add`, `rework`, `tag`,
      and `bundle` commands` commands to specify specify one or more targets,
      engines, and plans to act on.
    - Added the `--change` option to the `add`, `rework`, and `tag` commands
      to distinguish the change to be added, reworked, or tagged from
      plan-specifying arguments, if necessary.
    - Added the `--tag` option to the `tag` command to distinguish the tag to
      be added from plan-specifying arguments, if necessary.
    - Changed the short variant of the `--conflicts` option to the `add` and
      `rework` commands from `-c` to `-x`. The `-c` option is now used as the
      short variant for `--change` (and `--conflicts` has almost certainly
      never been used, anyway).
    - Added the `engine` and `project` variables to the execution of script
      templates by the `add` command. The default templates now use it to
      make their first lines one of:
      * -- Deploy [% project %]:[% change %] to [% engine]
      * -- Revert [% project %]:[% change %] from [% engine]
      * -- Verify [% project %]:[% change %] on [% engine]
    [Bug Fixes]
    - DateTime::TimeZone::Local::Win32 is now required on Windows.
    - The MySQL engine no longer passes `--skip-pager` on Windows, since
      it is not supported there. Thanks to Gabriel Potk獺ny for the report
      (Issue #213).
    - Fixed "no such table: changes" error when upgrading the SQLite
      registry.
    - Fixed upgrade failure on PostgreSQL 8.4. Thanks to Phillip Smith for
      the report!
    - Fixed an error when the `status` command `show_changes` and `show_tags`
      configuration variables were set. Thanks to Adrian Klaver for the
      report (Issue #219).
    - Fixed `log` and `plan` usage statements to properly spell `--abbrev`.
      Thanks to Adrian Klaver for the report (Issue #220).
    - Fixed the formatting of change notes so that a space precedes the `#`
      character whether the note was added by the `--note` option or via an
      editor.
    - Fixed a bug when parsing plan files with DOS/Windows line endings.
      Thanks to Timothy Procter for the report (Issue #212).
    - Looking up a change and tag in the database (via the `--onto` option to
      `rebase` or the `--to` option to `revert`, among others) would
      sometimes return the incorrect change if the change has been reworked
      two or more times. Thanks to BryLo for the report!
    [Documentation]
    - Updated docs to be consistent in referring to the location of the system
      configuration and template location as `$(prefix)/etc/sqitch`. Also
      added notes pointing to the `--etc-dir` to find out exactly what that
      resolves to. Suggested by Joseph Anthony Pasquale Holsten (Issue #167).
    [Deprecations]
    - Reverted deprecation of the database connection options. Target URIs
      are still generally preferred, but sometimes you want to use a target
      but just change the user name or database name. Retaining the options
      is the easiest way to do this. Plus, a fair number of people have
      scripts that use these options, and it seems petty to break them. Sorry
      for the double-take here! The list of un-deprecated options is:
      * `--db-client`
      * `--db-host`
      * `--db-port`
      * `--db-username`
      * `--db-password`
      * `--db-name`

0.999  2015-02-12T19:43:45Z
    - Improved MySQL missing table error detection by relying on error codes
      instead of matching a (possibly localized) error string.
    - Made the registry upgrade more transparent when deploying. Sqitch is
      now is a little more vigilent in checking for things being out-of-date
      and updating them.
    - Fixed an issue where the `status` command would return an error when
      run against a an older version of the registry.
    - Fixed a Postgres test failure when DBD::Pg is installed but psql is not
      in the path.
    - Now require Config::GitLike 1.15 to build on Windows in order to avoid
      test failures when Cwd::abs_path dies on non-existant paths.
    - Clarified the behavior of each `deploy` reversion mode with regard to
      deploy script vs. verify script failures, and with the expectation that
      deploy scripts are atomic.
    - Target passwords can now be set via a single environment variable,
      `$SQITCH_PASSWORD`. Its value will override URI-specified password.
    - Added the sqitch-passwords and sqitch-environment guides.

0.998  2015-01-15T22:17:44Z
    - Fixed a bug in `sqitch engine update-config` where it would add data to
      config files that did not previously have them, or report that data was
      present in nonexistent config files.
    - Added the `releases` table to the databases. This table will keep track
      of releases of the Sqitch registry schema.
    - The Oracle `registry` variable is now always `DEFINE`d when Oracle
      scripts run.
    - Added the `upgrade` command, which upgrades the schema for the Sqitch
      registry for a target database.
    - Added the `script_hash` column to the `changes` registry table. This
      column contains a SHA-1 hash of the deploy script for the change at the
      time it was deployed. For existing registries, the upgrade script sets
      its value to be the same as the change ID. This value is update the
      next time a project is deployed to the database.
    - The error message when `deploy` cannot find the currently-deployed
      change ID in the plan now includes more contextual information,
      including the change name, associated tags, and the plan file name.
      Suggested by Curtis Poe (Issue #205).
    - Comments on Firebird registry objects are now created with the
      `COMMENT` command, rather than INSERTs into catalog tables.
    - Added support for "merge" events, though none are logged, yet.

(wen)

Updated archivers/p5-Archive-Any to 0.0945

(wen)

Update to 0.0945

Upstream changes:
0.0945 2016-05-02 18:56:57 America/Toronto
    - Use 'base' rather than @ISA in Zip.pm

0.0944 2016-04-01 18:30:02 America/Toronto
    - Use warnings in more modules (Jenish G)

0.0943 2016-04-01 18:28:03 America/Toronto
    - Use 'base' rather than @ISA (@real-dam and Jenish G)

(wen)

Updated archivers/p5-Archive-Tar to 2.10

(wen)

Update to 2.10

Upstream changes:
2.10  27/07/2016 (TONYC)
- CVE-2016-1238: avoid loading optional modules from default .

2.08  12/05/2016
- Add the roundtrip test to MANIFEST

2.06  24/04/2016 (ISHIGAKI && BOOK)
- changed some of the "A"s in the UNPACK constant to "a"
  to allow trailing whitespaces in an archived filename
- roundtrip tests

(wen)

Updated textproc/odt2tex to 0.0.13

(wiz)

Updated odt2tex to 0.0.13.

2016-07-27 v0.0.13

    Fixed some possible memleaks, thanks Valgrind again
    Included Patch from Thomas Klausner fixing Makefile glitches

(wiz)

pkglint cleanup. Make better use of github framework. Add upstream
bug report URL to patch.

(wiz)

cvstomd: Add GITHUB_TAG that fixes "fetch" stage

(cheusov)

Updated archivers/p5-Archive-Any-Lite to 0.11

(wen)

Update to 0.11

Upstream changes:
0.11 2016/04/29
  - improved tar extraction performance

(wen)

Updated devel/p5-experimental to 0.016

(wen)

Update to 0.016

Upstream changes:
0.016    2015-10-10 12:46:48+02:00 Europe/Amsterdam
          Fix deprecation check

0.015    2015-10-03 14:21:18+02:00 Europe/Amsterdam
          Make lexical_topic a deprecated feature

0.014    2015-09-12 00:29:37+02:00 Europe/Amsterdam
          Add bitwise to list of known features

(wen)

Updated devel/p5-CPAN-Perl-Releases to 2.88

(wen)

Update to 2.88

Upstream changes:
version 2.88 at 2016-07-25 15:49:54 +0000
-----------------------------------------

  Change: bef7dc2fbca1aa1b41d3223806c638a00d70a390
  Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
  Date : 2016-07-25 16:49:54 +0000

    Remove 5.003_07

-----------------------------------------
version 2.86 at 2016-07-25 15:38:52 +0000
-----------------------------------------

  Change: 0c31a5067e27e17c1be5ac3ec6054968f17f51e3
  Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
  Date : 2016-07-25 16:38:52 +0000

    Updated for v5.22.3 and v5.24.1 RC2

-----------------------------------------
version 2.84 at 2016-07-20 18:31:32 +0000
-----------------------------------------

  Change: 0d4340f965fe90d93d371b8512acb6cb13fb08a2
  Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
  Date : 2016-07-20 19:31:32 +0000

    Updated for v5.25.3

-----------------------------------------
version 2.82 at 2016-07-17 22:44:09 +0000
-----------------------------------------

  Change: fd4514153cf3a46fa3c4bb7308e1718f10ecb36d
  Author: Chris 'BinGOs' Williams <chris@bingosnet.co.uk>
  Date : 2016-07-17 23:44:09 +0000

    Updated for v5.22.3-RC1 and v5.24.1-RC1

(wen)

Updated devel/p5-indirect to 0.37

(wen)