Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (20m)  pkgsrc-2024Q1 (9d)  pkgsrc-2023Q4 (56d)  pkgsrc-2023Q2 (88d)  pkgsrc-2023Q3 (168d) 

2024-05-26 18:42:06 UTC Now

2015-12-29 23:58:41 UTC MAIN commitmail json YAML

Updated net/samba4 to 4.3.3

(wiz)

2015-12-29 23:58:32 UTC MAIN commitmail json YAML

Update samba4 to 4.3.3.

                  =============================
                  Release Notes for Samba 4.3.3
                        December 16, 2015
                  =============================

This is a security release in order to address the following CVEs:

o  CVE-2015-3223 (Denial of service in Samba Active Directory
  server)
o  CVE-2015-5252 (Insufficient symlink verification in smbd)
o  CVE-2015-5299 (Missing access control check in shadow copy
  code)
o  CVE-2015-5296 (Samba client requesting encryption vulnerable
  to downgrade attack)
o  CVE-2015-8467 (Denial of service attack against Windows
  Active Directory server)
o  CVE-2015-5330 (Remote memory read in Samba LDAP server)

Please note that if building against a system libldb, the required
version has been bumped to ldb-1.1.24.  This is needed to ensure
we build against a system ldb library that contains the fixes
for CVE-2015-5330 and CVE-2015-3223.

=======
Details
=======

o  CVE-2015-3223:
  All versions of Samba from 4.0.0 to 4.3.2 inclusive (resp. all
  ldb versions up to 1.1.23 inclusive) are vulnerable to
  a denial of service attack in the samba daemon LDAP server.

  A malicious client can send packets that cause the LDAP server in the
  samba daemon process to become unresponsive, preventing the server
  from servicing any other requests.

  This flaw is not exploitable beyond causing the code to loop expending
  CPU resources.

o  CVE-2015-5252:
  All versions of Samba from 3.0.0 to 4.3.2 inclusive are vulnerable to
  a bug in symlink verification, which under certain circumstances could
  allow client access to files outside the exported share path.

  If a Samba share is configured with a path that shares a common path
  prefix with another directory on the file system, the smbd daemon may
  allow the client to follow a symlink pointing to a file or directory
  in that other directory, even if the share parameter "wide links" is
  set to "no" (the default).

o  CVE-2015-5299:
  All versions of Samba from 3.2.0 to 4.3.2 inclusive are vulnerable to
  a missing access control check in the vfs_shadow_copy2 module. When
  looking for the shadow copy directory under the share path the current
  accessing user should have DIRECTORY_LIST access rights in order to
  view the current snapshots.

  This was not being checked in the affected versions of Samba.

o  CVE-2015-5296:
  Versions of Samba from 3.2.0 to 4.3.2 inclusive do not ensure that
  signing is negotiated when creating an encrypted client connection to
  a server.

  Without this a man-in-the-middle attack could downgrade the connection
  and connect using the supplied credentials as an unsigned, unencrypted
  connection.

o  CVE-2015-8467:
  Samba, operating as an AD DC, is sometimes operated in a domain with a
  mix of Samba and Windows Active Directory Domain Controllers.

  All versions of Samba from 4.0.0 to 4.3.2 inclusive, when deployed as
  an AD DC in the same domain with Windows DCs, could be used to
  override the protection against the MS15-096 / CVE-2015-2535 security
  issue in Windows.

  Prior to MS16-096 it was possible to bypass the quota of machine
  accounts a non-administrative user could create.  Pure Samba domains
  are not impacted, as Samba does not implement the
  SeMachineAccountPrivilege functionality to allow non-administrator
  users to create new computer objects.

o  CVE-2015-5330:
  All versions of Samba from 4.0.0 to 4.3.2 inclusive (resp. all
  ldb versions up to 1.1.23 inclusive) are vulnerable to
  a remote memory read attack in the samba daemon LDAP server.

  A malicious client can send packets that cause the LDAP server in the
  samba daemon process to return heap memory beyond the length of the
  requested value.

  This memory may contain data that the client should not be allowed to
  see, allowing compromise of the server.

  The memory may either be returned to the client in an error string, or
  stored in the database by a suitabily privileged user.  If untrusted
  users can create objects in your database, please confirm that all DN
  and name attributes are reasonable.

Changes since 4.3.2:
--------------------

o  Andrew Bartlett <abartlet@samba.org>
  * BUG 11552: CVE-2015-8467: samdb: Match MS15-096 behaviour for
    userAccountControl.

o  Jeremy Allison <jra@samba.org>
  * BUG 11325: CVE-2015-3223: Fix LDAP \00 search expression attack DoS.
  * BUG 11395: CVE-2015-5252: Fix insufficient symlink verification (file
    access outside the share).
  * BUG 11529: CVE-2015-5299: s3-shadow-copy2: Fix missing access check on
    snapdir.

o  Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
  * BUG 11599: CVE-2015-5330: Fix remote read memory exploit in LDB.

o  Stefan Metzmacher <metze@samba.org>
  * BUG 11536: CVE-2015-5296: Add man in the middle protection when forcing
    smb encryption on the client side.

(wiz)

2015-12-29 23:50:14 UTC MAIN commitmail json YAML

Patches are supposed to have trailing whitespace on otherwise blank lines.
(because the first character of each line is a control field)

(dholland)

2015-12-29 23:43:27 UTC MAIN commitmail json YAML

Updated textproc/miller to 3.2.2

(wiz)

2015-12-29 23:43:18 UTC MAIN commitmail json YAML

Update miller to 3.2.2:

Many changes; speed ups, autoconf support, ....

(wiz)

2015-12-29 23:35:09 UTC MAIN commitmail json YAML

Updated www/libmicrohttpd to 0.9.48

(wiz)

2015-12-29 23:35:00 UTC MAIN commitmail json YAML

Update libmicrohttpd to 0.9.48:

Fri Dec 18 15:54:50 CET 2015
Releasing libmicrohttpd 0.9.48. -CG

Tue Dec  15 18:35:55 CET 2015
Improved compatibility with VS2010 and other older
compilers. -EG

Tue Dec  8 21:48:44 CET 2015
Default backlog size for listen socket was changed from
32 to SOMAXCONN, added new option MHD_OPTION_LISTEN_BACKLOG_SIZE
to override default backlog size.
If not all connections can be handled by MHD_select() than
at least some of connections will be processed instead of
failing without any processing.
Fixed redefenition of FD_SETSIZE on W32 so select() will
work with 2000 connections instead of 64.
Better handled redefenition of FD_SETSIZE on all
platforms. -EG

Sat Dec  5 17:30:45 CET 2015
Close sockets more aggressively in multi-threaded
mode (possibly relevant for idle servers). -CG

(wiz)

2015-12-29 23:34:57 UTC MAIN commitmail json YAML

2015-12-29 23:31:10 UTC MAIN commitmail json YAML

Updated print/cups-filters to 1.5.0

(wiz)

2015-12-29 23:31:00 UTC MAIN commitmail json YAML

Update cups-filters to 1.5.0:

CHANGES IN V1.5.0

- cups-browsed: Allow use of an alternative configuration file
  via the "-c" command line option.
- cups-browsed: Allow supplying configuration settings via the
          command line using the "-o" command line option.
- cups-browsed: Command line help via the "-h" or "--help"
          command line option.

(wiz)

2015-12-29 23:26:25 UTC MAIN commitmail json YAML

Updated fonts/Hack-ttf to 2.018

(wiz)

2015-12-29 23:26:15 UTC MAIN commitmail json YAML

Update Hack-ttf to 2.018:

Version 2.018 (release build)

ttf, otf, webfont builds

Patch for missing glyphs in regular set:

    added U+016C (upper case U breve), regular set - Issue #21
    added U+016D (lower case u breve), regular set - Issue #21

Version 2.017 (release build)

ttf, otf, webfont builds

Changes vs. release v2.015:

    increased vertical position of the tilde (U+007E) to improve alignment with other glyphs - Issue #23
    increased width of the vertical stroke on the dollar symbol (U+0024) - Issue #92
    modified Cyrillic upper case C (U+0421) to differentiate from Latin C - Issues #22 & #29
    modified Cyrillic lower case c (U+0441) to differentiate from Latin c - Issues #22 & #29
    modified upper case theta (U+0398) to differentiate from lower case theta - Issue #36
    added U+0132 (IJ) glyph - Issue #52
    added U+0133 (ij) glyph - Issue #52
    added U+013F (upper case L dot) glyph - Issue #52
    added U+0140 (lower case l dot) glyph - Issue #52
    added U+0162 (upper case T cedilla) glyph - Issue #52
    added U+0163 (lower case t cedilla) glyph - Issue #52
    added U+0138 (kgreenlandic) glyph - Issue #52
    added U+266A (musical note) glyph - Issue #52
    added U+0149 (lower case n apostrophe) - Issue #52
    added U+1EF9 (lower case y tilde) glyph - Issue #102
    added U+1EF8 (upper case Y tilde) glyph - Issue #102
    added U+1EBD (lower case e tilde) glyph - Issue #102
    added U+1EBC (upper case E tilde) glyph - Issue #102
    added U+2116 (numero) glyph - Issues #22 & #114
    added U+01A4 (p hook) glyph - Issue #105
    added U+0108 (upper case C circumflex) - Issue #21
    added U+0109 (lower case c circumflex) - Issue #21
    added U+011C (upper case G circumflex) - Issue #21
    added U+011D (lower case g circumflex) - Issue #21
    added U+0124 (upper case H circumflex) - Issue #21
    added U+0125 (lower case h circumflex) - Issue #21
    added U+0134 (upper case J circumflex) - Issue #21
    added U+0135 (lower case j circumflex) - Issue #21
    added U+015C (upper case S circumflex) - Issue #21
    added U+015D (lower case s circumflex) - Issue #21
    added U+016C (upper case U breve) - Issue #21
    added U+016D (lower case u breve) - Issue #21
    added U+20B7 (spesmilo) - Issue #21
    fixed missing null glyph (U+0000) in regular, italic, bolditalic sets
    removed duplicate CR glyph (U+000D) in all sets - Issue #149
    updated ttfautohint to version 1.4.1 for TrueType (.ttf) build instruction sets

Version 2.016 (testing build)

    increased vertical position of the tilde (U+007E) to improve alignment with other glyphs - Issue #23
    increased width of the vertical stroke on the dollar symbol (U+0024) - Issue #92
    modified Cyrillic upper case C (U+0421) to differentiate from Latin C - Issues #22 & #29
    modified Cyrillic lower case c (U+0441) to differentiate from Latin c - Issues #22 & #29
    modified upper case theta (U+0398) to differentiate from lower case theta - Issue #36
    added U+1EF9 (lower case y tilde) glyph - Issue #102
    added U+1EF8 (upper case Y tilde) glyph - Issue #102
    added U+1EBD (lower case e tilde) glyph - Issue #102
    added U+1EBC (upper case E tilde) glyph - Issue #102
    added U+2116 (numero) glyph - Issues #22 & #114
    added U+01A4 (p hook) glyph - Issue #105
    added U+0108 (upper case C circumflex) - Issue #21
    added U+0109 (lower case c circumflex) - Issue #21
    added U+011C (upper case G circumflex) - Issue #21
    added U+011D (lower case g circumflex) - Issue #21
    added U+0124 (upper case H circumflex) - Issue #21
    added U+0125 (lower case h circumflex) - Issue #21
    added U+0134 (upper case J circumflex) - Issue #21
    added U+0135 (lower case j circumflex) - Issue #21
    added U+015C (upper case S circumflex) - Issue #21
    added U+015D (lower case s circumflex) - Issue #21
    added U+016C (upper case U breve) - Issue #21
    added U+016D (lower case u breve) - Issue #21
    added U+20B7 (spesmilo) - Issue #21
    updated ttfautohint to version 1.4 for TrueType (.ttf) build instruction sets

(wiz)

2015-12-29 23:23:11 UTC MAIN commitmail json YAML

p5-Math-Pari updated.

(wiz)

2015-12-29 23:22:40 UTC MAIN commitmail json YAML

2015-12-29 23:21:21 UTC MAIN commitmail json YAML

Updated nih/p5-Math-Pari to 2.010808

(wiz)

2015-12-29 23:21:11 UTC MAIN commitmail json YAML

Update p5-Math-Pari to 2.010808:

2.01080606a
  cygwin's tar generated 0-permissions for the distribution (no auto-workaround...).
  Document workarounds for isprime() with version 2.1.7 (in the BUGS section).

2.01080607
  Correct the documention about fraction of witnesses from >=0.25 to >=0.75.
  Define HAS_STAT and HAS_OPENDIR basing on $Config{i_sysstat} and $Config{i_dirent}.
  Correct spelling errors in POD and comments in Pari.pm (thanks to dsteinbrunner!).
  On AIX, do merge_822 separately in subdirectories (exceeds command line length otherwise).
  On >=2.3.0, reset had-newline-on-output to 1 at startup.  (Saves one spurious NL)
  New patch: diff_2.3.5_stderr_clobber
  New test: 01_no_extra_newlines.t
  Allow download not only via FTP, but also through HTTP.
  In presence of PERL5_CPAN_IS_RUNNING, assume that NO ANSWER on prompt is agreement.
(It looks like cygwin and MSWin32 automated-testing environment do not have
AUTOMATED_TESTING and PERL_MM_USE_DEFAULT set...)
  Do not auto-download on 64-bit builds of MSWin32.

2.010807
  Too long version name was a misprint.
  Pay attention to PERL_EXTUTILS_AUTOINSTALL when interpreting empty answers to prompt (probably an overkill).
    (disable this abomination by PERL_MATHPARI_TRUST_MANUAL)
    (to see why this may be needed: http://www.cpantesters.org/cpan/report/a5d65ec6-6bf3-1014-87a8-67ba45601f20)
  Report bytes in the answer for prompt.
  Separate into separate subroutines inspecting versions available for download from the actual download.
  Change the logic of fallback Net::FTP --> LWP: before, if Net::FTP fails in retrieving the directory listing;
    now: if this happens, or if it fails to retrieve the file (how can it happen?! see http://www.cpantesters.org/cpan/report/e7f9d5a7-6bfa-1014-9d0f-1948c9c86cae)
  __wrap_PARI_macro: new function (not exported)
  parse_as_gp: new function (exported by default)
  More verbose error message for "Cannot load a Pari macro".

2.010808
  A night of sleep fixed problems of parse_of_gp with the operator \ and empty lines.
    (test suite updated)
  Actually, mingw was not ready for HAVE_OPENDIR.
  Store which patches were applied in $dir/.perl.patches.
  Report which patches were not applied.
  Export patches_for() from BuildPari.
  pari_tgz build option was broken (by LWP-after-NFTP support code � which, apparently, did not help with timeouts).
  Ignore 0-size "downloaded" files.

(wiz)

2015-12-29 23:18:50 UTC MAIN commitmail json YAML

2015-12-29 23:09:35 UTC MAIN commitmail json YAML

Add a patch for CVS-2014-2980: Tools/gdomap.c in gdomap in GNUstep Base 1.24.6
and earlier, when run in daemon mode, does not properly handle the file
descriptor for the logger, which allows remote attackers to cause a denial of
service (abort) via an invalid request.

Bump pkgrevision.

(bsiegert)

2015-12-29 23:05:19 UTC MAIN commitmail json YAML

Updated x11/libdrm to 2.4.66

(wiz)

2015-12-29 23:05:09 UTC MAIN commitmail json YAML

Update libdrm to 2.4.66:

libdrm 2.4.66 release, mainly for new nouveau API.

lots of other changes in here as well though.

Ben Skeggs (14):
      nouveau: import and install a selection of nvif headers from the kernel
      nouveau: move more abi16-specific logic into abi16.c
      nouveau: move object functions up, to avoid future foward decls
      nouveau: make it possible to init object in pre-allocated memory
      nouveau: add interface to call an object's methods
      nouveau: add interfaces to query information about supported classes
      nouveau: introduce object to represent the kernel client
      nouveau: stack legacy nouveau_device on top of nouveau_drm
      nouveau: make use of nouveau_drm::fd instead of nouveau_device::fd
      nouveau: remove nouveau_object_find()
      nouveau: add new interface to create a nouveau_device
      nouveau: add support for newer kernel interfaces
      nouveau: clean up nouveau.h, noting deprecated members/functions
      Bump version for release

Ben Widawsky (2):
      intel: Add SKL GT4 PCI IDs
      intel: Cleanup SKL PCI ID definitions.

Chih-Wei Huang (1):
      intel: add the missing <strings.h> include

Dave Airlie (1):
      drm: add virtgpu_drm.h

Emil Velikov (17):
      automake: set --enable-valgrind during make distcheck
      xf86drmMode: smoke-test the atomic API
      tests/drmdevice: add new 'test'
      xf86drm: flex platform specifics into drmParsePciBusInfo
      xf86drm: move platform details to drmParsePciDeviceInfo()
      xf86drm: move the final linux specific bits out of drmGetDevices
      xf86drm: rename drmSameDevice to drmCompareBusInfo
      util_math: add MAX3 macro
      xf86drm: rework drmGetDevices()
      xf86drm: move ifdef __linux__ guards where needed
      xf86drm: warn on missing drmGetMinorNameForFD implementation
      xf86drm: split out drmProcessPciDevice and drmFoldDuplicatedDevices
      xf86drm: add drm{Get,Free}Device
      tests/drmdevice: add drm{Get,Free}Device() example
      Fix SunOS/NetBSD atomic macro
      xf86drm: remove makedev() hack/workaround
      configure.ac: test for the same atomic function as the one we use

Felix Janda (1):
      xf86drm: include <limits.h> for PATH_MAX

Jammy Zhou (1):
      amdgpu: fix overflow for timeout calculation

Jonathan Gray (1):
      configure.ac: rework compiler builtin atomic tests

Kristian Høgsberg Kristensen (3):
      intel: Update i915_drm.h
      Add tests/drmdevice to .gitignore
      intel: Add drm_intel_bo_set_softpin_offset to intel-symbol-check

Matt Roper (3):
      xf86drm: Fix error handling for drmGetDevices()
      xf86drm: Fix error handling for drmGetDevice()
      xf86drm: Handle unrecognized subsystems safely in drmGetDevice[s]()

Michał Winiarski (2):
      intel: Add support for softpin
      intel: Restore formatting of offsets in debug statements

Michel Dänzer (2):
      Fix void pointer arithmetic in drmProcessPciDevice
      radeon: Handle surface offsets exceeding 32 bits correctly

Michel Thierry (2):
      intel: 48b ppgtt support (EXEC_OBJECT_SUPPORTS_48B_ADDRESS flag)
      intel: add drm_intel_bo_use_48b_address_range to symbol-check test

Rob Clark (3):
      freedreno: don't reuse exported buffers
      freedreno: drop exported dmabuf fd tracking
      freedreno: debug msg cleanup

Stefan Agner (1):
      tests: remove missleading comments

Thierry Reding (10):
      tests: Split helpers into library
      tests: Move name tables to libutil
      proptest: Add Android support
      tests: Add libkms-test library
      tests: kms: Implement CRTC stealing test
      tests: kms: Implement universal planes test
      tests: Add helper to open a device/module
      modetest: Use util_open()
      proptest: Use util_open()
      vbltest: Use util_open()

Tobias Jakobi (18):
      exynos/fimg2d: fix empty buffer handling in g2d_flush()
      exynos/fimg2d: simplify base address submission in g2d_scale_and_blend()
      exynos/fimg2d: add g2d_check_space()
      exynos/fimg2d: add g2d_validate_xyz() functions
      exynos/fimg2d: remove default case from g2d_get_blend_op()
      exynos/fimg2d: remove superfluous initialization of g2d_point_val
      exynos/fimg2d: make g2d_add_cmd() less heavy
      exynos/fimg2d: add message prefix
      exynos/fimg2d: remove g2d_context from public header
      exynos: Introduce exynos_handle_event()
      tests/exynos: add fimg2d performance analysis
      exynos/fimg2d: add g2d_config_event
      tests/exynos: add fimg2d event test
      tests/exynos: use XRGB8888 for framebuffer
      exynos: fimg2d: add g2d_set_direction
      exynos/fimg2d: add g2d_move
      tests/exynos: add test for g2d_move
      exynos: bump version number

Tom St Denis (4):
      amdgpu: Unlock mutex if base_required is invalid
      amdgpu:  Fix use-after-free bug in vamgr_deinit
      amdgpu: Cleanly handle ENOMEM on result in amdgpu_bo_list_create()
      amdgpu:  Make amdgpu_cs_calculate_timeout() return something sensible on error

Tvrtko Ursulin (1):
      libdrm: Use userspace compatible type in fourcc_mod_code macro

(wiz)

2015-12-29 22:09:32 UTC MAIN commitmail json YAML

Forgot to bump revision, prodded by wiz@.

(bsiegert)

2015-12-29 22:07:20 UTC MAIN commitmail json YAML

Add a missing REPLACE_BASH. Patch from Kamel Derouiche in PR pkg/50598.

(bsiegert)

2015-12-29 22:01:07 UTC MAIN commitmail json YAML

Updated devel/fossil to 1.34

(nros)

2015-12-29 21:56:29 UTC MAIN commitmail json YAML

Convert sift to buildlink3.

(wiz)

2015-12-29 21:56:01 UTC MAIN commitmail json YAML

Add buildlink3.mk file for go-crypto.

(wiz)

2015-12-29 21:51:09 UTC MAIN commitmail json YAML

Go buildlink changes

(bsiegert)

2015-12-29 21:49:21 UTC MAIN commitmail json YAML

Add buildlink file here, too

(bsiegert)

2015-12-29 21:47:48 UTC MAIN commitmail json YAML

Real buildlink support for Go, hacked with wiz@.

Go packages now define a set of files to buildlink in their buildlink3.mk.
go-packages.mk no longer looks in ${PREFIX}/gopkg during the build. This
should also fix the spurious issues with rebuilds of .a files during bulk
builds of Go packages.

(bsiegert)

2015-12-29 21:36:49 UTC MAIN commitmail json YAML

2015-12-29 21:21:30 UTC MAIN commitmail json YAML

Updated pkgtools/createbuildlink to 3.17

(wiz)

2015-12-29 20:53:06 UTC MAIN commitmail json YAML

Updated lang/nodejs to 5.3.0

(fhajny)

2015-12-29 20:52:54 UTC MAIN commitmail json YAML

Update lang/nodejs to 5.3.0.

- buffer: Buffer.prototype.includes() has been added to keep parity
  with TypedArrays.
- domains: Fix handling of uncaught exceptions.
- https: Added support for disabling session caching.
- repl: Allow third party modules to be imported using require().
  This corrects a regression from 5.2.0.
- deps: Upgrade libuv to 1.8.0.

(fhajny)

2015-12-29 20:47:00 UTC MAIN commitmail json YAML

Updated textproc/libodfgen to 0.1.5

(wiz)

2015-12-29 20:34:10 UTC MAIN commitmail json YAML

Updated lang/nodejs4 to 4.2.4

(fhajny)

2015-12-29 19:40:14 UTC MAIN commitmail json YAML

Updated archivers/p7zip to 15.09

(adam)

2015-12-29 19:39:35 UTC MAIN commitmail json YAML

2015-12-29 19:39:21 UTC MAIN commitmail json YAML

What's new after p7zip 9.38.1 :

  - 7-Zip now can extract ext2 and multivolume VMDK images.
  - 7-Zip now can extract ext3 and ext4 (Linux file system) images.
  - support of cygwin 64 bits
  - support of cygwin 64 bits with asm
  - cygwin : fix in GetRamSize()
  - cross building added :
makefile.linux_cross_aarch64
makefile.linux_cross_arm
makefile.linux_cross_ppc
makefile.linux_cross_ppc64
makefile.linux_cross_ppc64le
makefile.linux_cross_s390x  (7za and 7zr pass tests, 7z does not pass tests)

  - 7-Zip now can extract GPT images and single file QCOW2, VMDK, VDI images.
  - 7-Zip now can extract solid WIM archives with LZMS compression.
  - 7-Zip now can extract RAR5 archives.
  - 7-Zip now doesn't sort files by type while adding to solid 7z archive.
      new -mqs switch to sort files by type while adding to solid 7z archive.
  - 7-Zip now can create 7z, xz and zip archives with 1536 MB dictionary for LZMA/LZMA2.
  - 7-Zip now can extract .zipx (WinZip) archives that use xz compression.

(adam)

2015-12-29 19:35:39 UTC MAIN commitmail json YAML

2015-12-29 19:14:35 UTC MAIN commitmail json YAML

Document --binary-macpkg.

XXX: there should be a man page for the bootstrap script, or something.
XXX: AFAICT there is no one place its arguments are documented...

(dholland)

2015-12-29 18:17:04 UTC MAIN commitmail json YAML

2015-12-29 17:56:34 UTC MAIN commitmail json YAML

2015-12-29 17:55:01 UTC MAIN commitmail json YAML

Rework (and simplify) docs installation to avoid share/doc/html.
Mostly silences pkglint.

Bump PKGREVISION again (to 6).

(dholland)

2015-12-29 17:27:25 UTC MAIN commitmail json YAML

Add dependency on dconf so settings can be saved - issue reported by Jan Danielsson and fix from wiz@

(abs)

2015-12-29 15:31:13 UTC MAIN commitmail json YAML

Update fossil to version 1.34.

Remove readline dependency fossil now uses the linenoise library
(embedded src).
Install manpage, license and linenoise license.

Changelog:
* Make the fossil clean command undoable for files less than 10MiB.
* Update internal Unicode character tables, used in regular expression
  handling, from version 7.0 to 8.0.
* Add the new amend command which is used to modify tags of a "check-in".
* Fix bug in import command, handling version 3 of the svndump format for
  subversion.
* Add the all cache command.
* TH1 enhancements:
    Add minimal [lsearch] command. Only exact case-sensitive matching is
    supported.
    Add the [glob_match], [markdown], [dir], and [encode64] commands.
    Add the [tclIsSafe] and [tclMakeSafe] commands to the Tcl integration
    subsystem.
    Add 'double', 'integer', and 'list' classes to the [string is] command.
* Add the --undo option to the diff command.
* Build-in Antirez's "linenoise" command-line editing library
  for use with the fossil sql command on Unix platforms.
* Add stash cat as an alias for the stash show command.
* Automatically pull before fossil merge when auto-sync is enabled.
* Fix --hard option to fossil mv and fossil rm to enable them to work properly
  with certain relative paths.
* Change the mimetype for ".n" and ".man" files to text/plain.
* Display improvements in the fossil bisect chart command.
* Updated the built-in SQLite to version 3.9.1 and activated JSON1 and
  FTS5 support (both currently unused within Fossil).

(nros)

2015-12-29 15:12:20 UTC MAIN commitmail json YAML

Fix CVE-2015-6749 in vorbis-tools: Buffer overflow in the aiff_open function in
oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to
cause a denial of service (crash) via a crafted AIFF file.

Bump pkgrevision.

(bsiegert)

2015-12-29 14:40:20 UTC MAIN commitmail json YAML

Update pcre2 to 10.20. Fix CVE-2015-8381.

Version 10.20 30-June-2015
--------------------------

1. Callouts with string arguments have been added.

2. Assertion code generator in JIT has been optimized.

3. The invalid pattern (?(?C) has a missing assertion condition at the end. The
pcre2_compile() function read past the end of the input before diagnosing an
error. This bug was discovered by the LLVM fuzzer.

4. Implemented pcre2_callout_enumerate().

5. Fix JIT compilation of conditional blocks whose assertion is converted to
(*FAIL). E.g: /(?(?!))/.

6. The pattern /(?(?!)^)/ caused references to random memory. This bug was
discovered by the LLVM fuzzer.

7. The assertion (?!) is optimized to (*FAIL). This was not handled correctly
when this assertion was used as a condition, for example (?(?!)a|b). In
pcre2_match() it worked by luck; in pcre2_dfa_match() it gave an incorrect
error about an unsupported item.

8. For some types of pattern, for example /Z*(|d*){216}/, the auto-
possessification code could take exponential time to complete. A recursion
depth limit of 1000 has been imposed to limit the resources used by this
optimization. This infelicity was discovered by the LLVM fuzzer.

9. A pattern such as /(*UTF)[\S\V\H]/, which contains a negated special class
such as \S in non-UCP mode, explicit wide characters (> 255) can be ignored
because \S ensures they are all in the class. The code for doing this was
interacting badly with the code for computing the amount of space needed to
compile the pattern, leading to a buffer overflow. This bug was discovered by
the LLVM fuzzer.

10. A pattern such as /((?2)+)((?1))/ which has mutual recursion nested inside
other kinds of group caused stack overflow at compile time. This bug was
discovered by the LLVM fuzzer.

11. A pattern such as /(?1)(?#?'){8}(a)/ which had a parenthesized comment
between a subroutine call and its quantifier was incorrectly compiled, leading
to buffer overflow or other errors. This bug was discovered by the LLVM fuzzer.

12. The illegal pattern /(?(?<E>.*!.*)?)/ was not being diagnosed as missing an
assertion after (?(. The code was failing to check the character after (?(?<
for the ! or = that would indicate a lookbehind assertion. This bug was
discovered by the LLVM fuzzer.

13. A pattern such as /X((?2)()*+){2}+/ which has a possessive quantifier with
a fixed maximum following a group that contains a subroutine reference was
incorrectly compiled and could trigger buffer overflow. This bug was discovered
by the LLVM fuzzer.

14. Negative relative recursive references such as (?-7) to non-existent
subpatterns were not being diagnosed and could lead to unpredictable behaviour.
This bug was discovered by the LLVM fuzzer.

15. The bug fixed in 14 was due to an integer variable that was unsigned when
it should have been signed. Some other "int" variables, having been checked,
have either been changed to uint32_t or commented as "must be signed".

16. A mutual recursion within a lookbehind assertion such as (?<=((?2))((?1)))
caused a stack overflow instead of the diagnosis of a non-fixed length
lookbehind assertion. This bug was discovered by the LLVM fuzzer.

17. The use of \K in a positive lookbehind assertion in a non-anchored pattern
(e.g. /(?<=\Ka)/) could make pcre2grep loop.

18. There was a similar problem to 17 in pcre2test for global matches, though
the code there did catch the loop.

19. If a greedy quantified \X was preceded by \C in UTF mode (e.g. \C\X*),
and a subsequent item in the pattern caused a non-match, backtracking over the
repeated \X did not stop, but carried on past the start of the subject, causing
reference to random memory and/or a segfault. There were also some other cases
where backtracking after \C could crash. This set of bugs was discovered by the
LLVM fuzzer.

20. The function for finding the minimum length of a matching string could take
a very long time if mutual recursion was present many times in a pattern, for
example, /((?2){73}(?2))((?1))/. A better mutual recursion detection method has
been implemented. This infelicity was discovered by the LLVM fuzzer.

21. Implemented PCRE2_NEVER_BACKSLASH_C.

22. The feature for string replication in pcre2test could read from freed
memory if the replication required a buffer to be extended, and it was not
working properly in 16-bit and 32-bit modes. This issue was discovered by a
fuzzer: see http://lcamtuf.coredump.cx/afl/.

23. Added the PCRE2_ALT_CIRCUMFLEX option.

24. Adjust the treatment of \8 and \9 to be the same as the current Perl
behaviour.

25. Static linking against the PCRE2 library using the pkg-config module was
failing on missing pthread symbols.

26. If a group that contained a recursive back reference also contained a
forward reference subroutine call followed by a non-forward-reference
subroutine call, for example /.((?2)(?R)\1)()/, pcre2_compile() failed to
compile correct code, leading to undefined behaviour or an internally detected
error. This bug was discovered by the LLVM fuzzer.

27. Quantification of certain items (e.g. atomic back references) could cause
incorrect code to be compiled when recursive forward references were involved.
For example, in this pattern: /(?1)()((((((\1++))\x85)+)|))/. This bug was
discovered by the LLVM fuzzer.

28. A repeated conditional group whose condition was a reference by name caused
a buffer overflow if there was more than one group with the given name. This
bug was discovered by the LLVM fuzzer.

29. A recursive back reference by name within a group that had the same name as
another group caused a buffer overflow. For example: /(?J)(?'d'(?'d'\g{d}))/.
This bug was discovered by the LLVM fuzzer.

30. A forward reference by name to a group whose number is the same as the
current group, for example in this pattern: /(?|(\k'Pm')|(?'Pm'))/, caused a
buffer overflow at compile time. This bug was discovered by the LLVM fuzzer.

31. Fix -fsanitize=undefined warnings for left shifts of 1 by 31 (it treats 1
as an int; fixed by writing it as 1u).

32. Fix pcre2grep compile when -std=c99 is used with gcc, though it still gives
a warning for "fileno" unless -std=gnu99 us used.

33. A lookbehind assertion within a set of mutually recursive subpatterns could
provoke a buffer overflow. This bug was discovered by the LLVM fuzzer.

34. Give an error for an empty subpattern name such as (?'').

35. Make pcre2test give an error if a pattern that follows #forbud_utf contains
\P, \p, or \X.

36. The way named subpatterns are handled has been refactored. There is now a
pre-pass over the regex which does nothing other than identify named
subpatterns and count the total captures. This means that information about
named patterns is known before the rest of the compile. In particular, it means
that forward references can be checked as they are encountered. Previously, the
code for handling forward references was contorted and led to several errors in
computing the memory requirements for some patterns, leading to buffer
overflows.

37. There was no check for integer overflow in subroutine calls such as (?123).

38. The table entry for \l in EBCDIC environments was incorrect, leading to its
being treated as a literal 'l' instead of causing an error.

39. If a non-capturing group containing a conditional group that could match
an empty string was repeated, it was not identified as matching an empty string
itself. For example: /^(?:(?(1)x|)+)+$()/.

40. In an EBCDIC environment, pcretest was mishandling the escape sequences
\a and \e in test subject lines.

41. In an EBCDIC environment, \a in a pattern was converted to the ASCII
instead of the EBCDIC value.

42. The handling of \c in an EBCDIC environment has been revised so that it is
now compatible with the specification in Perl's perlebcdic page.

43. Single character repetition in JIT has been improved. 20-30% speedup
was achieved on certain patterns.

44. The EBCDIC character 0x41 is a non-breaking space, equivalent to 0xa0 in
ASCII/Unicode. This has now been added to the list of characters that are
recognized as white space in EBCDIC.

45. When PCRE2 was compiled without Unicode support, the use of \p and \P gave
an error (correctly) when used outside a class, but did not give an error
within a class.

46. \h within a class was incorrectly compiled in EBCDIC environments.

47. JIT should return with error when the compiled pattern requires
more stack space than the maximum.

48. Fixed a memory leak in pcre2grep when a locale is set.

(bsiegert)

2015-12-29 13:41:58 UTC MAIN commitmail json YAML

2015-12-29 12:44:42 UTC MAIN commitmail json YAML

scamper and lsof updates.

(bsiegert)

2015-12-29 12:42:58 UTC MAIN commitmail json YAML

Update lsof to 4.88. From David H. Gutteridge in PR pkg/50487.

Reduced to 50 the number of open file descriptors lsof
attempts to close while trying to protect itself from a
file descriptor exec() attack.  This limits the overhead
lsof incurs on systems that have large file descriptor
limits, yet provides sufficient open descriptors for the
library functions lsof calls.

Updated for changes in FreeBSD 10 with advice from Eygene
Ryabinkin <rea@freebsd.org>.  Taught Configure to recognize
FreeBSD 8.4.

Herein am noting that lsof for Solaris 10 or 11 is no longer
supported.  I no longer have test systems.  Some support is
still available from Casper Dik <Casper.Dik@oracle.com> and a
Solaris 11 patch he provided is included in this revision.

Initialized local variables in the Linux process_id() function.
Jia He <jiakernel@gmail.com> reported the problem.

Added support for FreeBSD 11.

Updated FreeBSD ZFS Configure stanza to supply a dummy
opt_kdtrace.h when needed.

Added tmpfs file system support for FreeBSD.

Since a test system is no longer available, dropped the
claim of FreeBSD 4.9 support.

Added the +|-E options for Linux.  -E displays endpoint info;
+E displays endpoint info and endpopint files.  Masatake YAMATO
<yamato@redhat.com> requested this support and suggested code
to implement it.

Fixed a Linux bug handling processes whose command includes a
non-printing character, particularly a NEWLINE character, and
clarified printing of single '\\' characters in command and
file names.  Stephane Chazelas <stephane.chazelas@gmail.com>
reported the problem.

Added support for Linux RDMA and CRYPTO protocal names and UNIX
socket type with code from Masatake YAMATO <yamato@redhat.com>.

Fixed field output to insure that the field descriptor field is
always selected, since it identifies the file set.  The bug was
reported by Gary Plewa <gary.m.plewa-1@lowes.com>.

(bsiegert)

2015-12-29 12:13:30 UTC MAIN commitmail json YAML

Since DISTINFO_FILE is defined in lang/ruby/Makefile.common, no need to
define it here.

(taca)

2015-12-29 06:42:54 UTC MAIN commitmail json YAML

Drop libXp; bump PKGREVISION.

(dholland)

2015-12-29 06:30:24 UTC MAIN commitmail json YAML

2015-12-29 06:28:48 UTC MAIN commitmail json YAML

2015-12-29 06:27:56 UTC MAIN commitmail json YAML

2015-12-29 06:25:34 UTC MAIN commitmail json YAML

2015-12-29 06:23:55 UTC MAIN commitmail json YAML

2015-12-29 06:23:20 UTC MAIN commitmail json YAML

2015-12-29 06:22:54 UTC MAIN commitmail json YAML

2015-12-29 06:22:22 UTC MAIN commitmail json YAML

2015-12-29 06:20:30 UTC MAIN commitmail json YAML

Sort and remove duplicates.

(dholland)

2015-12-29 06:18:00 UTC MAIN commitmail json YAML

2015-12-29 06:17:08 UTC MAIN commitmail json YAML

2015-12-29 06:16:22 UTC MAIN commitmail json YAML

2015-12-29 06:15:29 UTC MAIN commitmail json YAML

2015-12-29 06:14:58 UTC MAIN commitmail json YAML

2015-12-29 06:14:06 UTC MAIN commitmail json YAML

2015-12-29 06:13:27 UTC MAIN commitmail json YAML

2015-12-29 06:12:53 UTC MAIN commitmail json YAML

2015-12-29 06:07:40 UTC MAIN commitmail json YAML

2015-12-29 06:06:30 UTC MAIN commitmail json YAML

2015-12-29 06:02:25 UTC MAIN commitmail json YAML

2015-12-29 06:00:28 UTC MAIN commitmail json YAML

2015-12-29 05:57:02 UTC MAIN commitmail json YAML

Drop checksum for nonexistent patch.

(dholland)

2015-12-29 05:56:01 UTC MAIN commitmail json YAML

Drop checksum for nonexistent patch.

(dholland)

2015-12-29 05:54:18 UTC MAIN commitmail json YAML

Drop checksum for nonexistent patch.

(dholland)

2015-12-29 05:11:43 UTC MAIN commitmail json YAML

Updated multimedia/adobe-flash-plugin11 to 11.2.202.559

(tsutsui)

2015-12-29 05:10:55 UTC MAIN commitmail json YAML

Update adobe-flash-plugin11 to 11.2.202.559.

Upstream announcement:

https://helpx.adobe.com/security/products/flash-player/apsb16-01.html

Adobe Security Bulletin

Security updates available for Adobe Flash Player

Release date: December 28, 2015

Vulnerability identifier: APSB16-01

CVE number: CVE-2015-8459, CVE-2015-8460, CVE-2015-8634, CVE-2015-8635,
CVE-2015-8636, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641,
CVE-2015-8642, CVE-2015-8643, CVE-2015-8644, CVE-2015-8645, CVE-2015-8646,
CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, CVE-2015-8650, CVE-2015-8651

Platform: All Platforms

(tsutsui)

2015-12-29 05:06:06 UTC MAIN commitmail json YAML

2015-12-29 05:00:14 UTC MAIN commitmail json YAML

Use canonical relative path.

(dholland)

2015-12-29 04:59:19 UTC MAIN commitmail json YAML

2015-12-29 04:54:40 UTC MAIN commitmail json YAML

2015-12-29 04:30:29 UTC MAIN commitmail json YAML

2015-12-29 04:25:32 UTC MAIN commitmail json YAML

Use canonical relative paths.

(dholland)

2015-12-29 04:22:50 UTC MAIN commitmail json YAML

2015-12-29 04:22:33 UTC MAIN commitmail json YAML

2015-12-29 04:04:32 UTC MAIN commitmail json YAML

2015-12-29 03:38:03 UTC MAIN commitmail json YAML

2015-12-29 03:23:50 UTC MAIN commitmail json YAML

2015-12-29 03:23:31 UTC MAIN commitmail json YAML

2015-12-29 03:20:56 UTC MAIN commitmail json YAML

2015-12-29 02:05:35 UTC MAIN commitmail json YAML

note addition of math/pcg

(agc)

2015-12-29 02:04:08 UTC MAIN commitmail json YAML

Add pcg version 0.94 to the packages collection

The PCG family of Random Number Generators combines properties not
previously seen together in the same generation scheme:

+ It's really easy to use, and yet its very flexible and offers
powerful features (including some that allow you to perform silly
party tricks).

+ It's very fast, and can occupy very little space.

+ It has small code size.

+ It's performance in statistical tests is excellent (see the PCG
paper for full details).

+ It's much less predictable and thus more secure than most generators.

+ It's open source software, with a permissive license (the Apache license).

(agc)

2015-12-29 00:57:28 UTC MAIN commitmail json YAML

Removed leading whitespace in variable assignment (found by pkglint)

(rillig)

2015-12-29 00:06:45 UTC MAIN commitmail json YAML

2015-12-29 00:05:54 UTC MAIN commitmail json YAML

2015-12-28 22:35:12 UTC MAIN commitmail json YAML

2015-12-28 21:17:20 UTC MAIN commitmail json YAML

Updated audio/mp3diags to 1.2.02

(adam)

2015-12-28 21:16:32 UTC MAIN commitmail json YAML

Changes 1.2.02:
- integrated changes from 1.3.01:
- fixed incorrect message occurring some times when start after a crash
- better logging and retries for write errors
- added offset to the output created via the command line
- fixed crash caused by saving very small images
- build fix
- disabled Discogs integration

(adam)

2015-12-28 21:01:40 UTC MAIN commitmail json YAML

Updated converters/librevenge to 0.0.3nb1

(ryoon)

2015-12-28 21:00:16 UTC MAIN commitmail json YAML

Restore -lboost_system to librevenge's pc file. Bump PKGREVISION
This fixes converters/libabw build at least.

(ryoon)

2015-12-28 15:10:27 UTC MAIN commitmail json YAML

Added graphics/wm-icons version 0.4.0

(tsutsui)

2015-12-28 15:08:55 UTC MAIN commitmail json YAML

Import wm-icons 0.4.0 as graphics/wm-icons.

The Window Manager Icons is an efficient icon distribution designed to
be standardized and configurable.  Includes several themed icon sets,
a template icon set to help building new themed icon sets, scripts and
configurations for several window managers.

Closes my PR pkg/50545 assuming "approved by silence."

(tsutsui)

2015-12-28 14:35:12 UTC MAIN commitmail json YAML

Updated math/py-pandas to 0.17.1

(wiz)

2015-12-28 14:35:02 UTC MAIN commitmail json YAML

Update py-pandas to 0.17.1.

0.17.1

This is a minor bug-fix release from 0.17.0 and includes a large
number of bug fixes along several new features, enhancements, and
performance improvements. We recommend that all users upgrade to
this version.

Highlights include:

    Support for Conditional HTML Formatting, see here
    Releasing the GIL on the csv reader & other ops, see here
    Fixed regression in DataFrame.drop_duplicates from 0.16.2,
    causing incorrect results on integer values (GH11376)

0.17.0

This is a major release from 0.16.2 and includes a small number of
API changes, several new features, enhancements, and performance
improvements along with a large number of bug fixes. We recommend
that all users upgrade to this version.

Highlights include:

    Release the Global Interpreter Lock (GIL) on some cython
    operations, see here
    Plotting methods are now available as attributes of the .plot
    accessor, see here
    The sorting API has been revamped to remove some long-time
    inconsistencies, see here
    Support for a datetime64[ns] with timezones as a first-class
    dtype, see here
    The default for to_datetime will now be to raise when presented
    with unparseable formats, previously this would return the
    original input. Also, date parse functions now return consistent
    results. See here
    The default for dropna in HDFStore has changed to False, to
    store by default all rows even if they are all NaN, see here
    Datetime accessor (dt) now supports Series.dt.strftime to
    generate formatted strings for datetime-likes, and
    Series.dt.total_seconds to generate each duration of the
    timedelta in seconds. See here
    Period and PeriodIndex can handle multiplied freq like 3D,
    which corresponding to 3 days span. See here
    Development installed versions of pandas will now have PEP440
    compliant version strings (GH9518)
    Development support for benchmarking with the Air Speed Velocity
    library (GH8361)
    Support for reading SAS xport files, see here
    Documentation comparing SAS to pandas, see here
    Removal of the automatic TimeSeries broadcasting, deprecated
    since 0.8.0, see here
    Display format with plain text can optionally align with Unicode
    East Asian Width, see here
    Compatibility with Python 3.5 (GH11097)
    Compatibility with matplotlib 1.5.0 (GH11111)

(wiz)

2015-12-28 14:34:30 UTC MAIN commitmail json YAML

Update to 1.4.38
----------------------
- 1.4.38 - 2015-12-05
  * [stat-cache] fix handling of collisions, might have returned wrong
    data (fixes #2669)
  * [core] allocate at least 4k buffer for incoming data
  * [core] fix search for header end if split across chunks (fixes #2670)
  * [core] check configparserAlloc() result with force_assert
  * [mod_auth] implement and use safe_memclear, using memset_s or
    explicit_bzero if available (thx loganaden)
  * [core] don't buffer request bodies smaller than 64k on disk
  * add force_assert for many allocations and function results
  * [mod_secdownload] use a hopefully constant time comparison to check
    hash (fixes #2679)
  * [config] check config option scope; warn if server option is given
    in conditional
  * [core] revert increase of temp file size back to 1MB, provide a
    configure option "server.upload-temp-file-size" instead (fixes
    #2680)
  * [core] add '~' to safe characters in
    ENCODING_REL_URI/ENCODING_REL_URI_PART encoding
  * [core] encode path with ENCODING_REL_URI in redirect to directory
    (fixes #2661, thx gstrauss)
  * [mod_secdownload] add required algorithm option; old behaviour
    available as "md5", new options "hmac-sha1" and "hmac-sha256"
  * [mod_fastcgi/mod_scgi] zero sockaddr structs before use (fixes
    #2691, thx Kyle J. McKay)
  * [network] add darwin-sendfile backend (fixes #2687, thx Kyle J. McKay)
  * [core] show correct crypt support result (fixes #2690, thx Kyle J. McKay)

(mef)

2015-12-28 13:53:21 UTC MAIN commitmail json YAML

Updated devel/boost-headers to 1.60.0nb1

(ryoon)

2015-12-28 13:52:18 UTC MAIN commitmail json YAML

Add workaround for NetBSD 7.99 and 7. Fix converters/librevenge build
Bump PKGREVISION of devel/boost-headers.

(ryoon)

2015-12-28 13:48:30 UTC MAIN commitmail json YAML

Fix name of the flag variable in rc.d script. From ISIHARA Takanori in
PR pkg/50595.

(bsiegert)

2015-12-28 13:46:15 UTC MAIN commitmail json YAML

Updated lang/perl5 to 5.22.1

(adam)

2015-12-28 13:45:57 UTC MAIN commitmail json YAML

PKGREVISION removed after updating lang/perl5 to 5.22.1

(adam)

2015-12-28 13:44:03 UTC MAIN commitmail json YAML

Changes 5.22.1:
Several bugs, including a segmentation fault, have been fixed with the bounds checking constructs (introduced in Perl 5.22) \b{gcb}, \b{sb}, \b{wb}, \B{gcb}, \B{sb}, and \B{wb}. All the \B{} ones now match an empty string; none of the \b{} ones do.

* Module::CoreList has been upgraded from version 5.20150520 to 5.20151213.
* PerlIO::scalar has been upgraded from version 0.22 to 0.23.
* POSIX has been upgraded from version 1.53 to 1.53_01.
* Storable has been upgraded from version 2.53 to 2.53_01.
* warnings has been upgraded from version 1.32 to 1.34.
* Win32 has been upgraded from version 0.51 to 0.52.

(adam)

2015-12-28 13:31:37 UTC MAIN commitmail json YAML

Add dependency on adwaita-icon-theme if using gtk3. Fixes PR pkg/50268.
Bump pkgrevision.

(bsiegert)

2015-12-28 13:10:13 UTC MAIN commitmail json YAML

Updated converters/librevenge to 0.0.3

(adam)

2015-12-28 13:09:28 UTC MAIN commitmail json YAML

librevenge 0.0.3

- SVG generator: fix the center of rotation.
- Remove bashism in configure (libwpd#5).
- Fix some syntax errors in documentation.
- Text generator: handle footnotes and endnotes.
- Improve performance of RVNGPropertyListVector::append() and
  RVNGBinaryData::append().
- Fix several crashes or hangs when reading broken OLE2 or Zip files, found
  with the help of american-fuzzy-lop.
- Fix build with boost 1.59 (libwpd#6).
- Handle table:number-columns-repeated and table:number-rows-repeated in
  all spreadsheet generators.
- CSV generator: handle rows with uneven number of columns correctly.
- CSV generator: ignore empty rows at the end.
- Several minor improvements and fixes.

(adam)

2015-12-28 13:08:57 UTC MAIN commitmail json YAML

librevenge 0.0.3

- SVG generator: fix the center of rotation.
- Remove bashism in configure (libwpd-5).
- Fix some syntax errors in documentation.
- Text generator: handle footnotes and endnotes.
- Improve performance of RVNGPropertyListVector::append() and
  RVNGBinaryData::append().
- Fix several crashes or hangs when reading broken OLE2 or Zip files, found
  with the help of american-fuzzy-lop.
- Fix build with boost 1.59 (libwpd-6).
- Handle table:number-columns-repeated and table:number-rows-repeated in
  all spreadsheet generators.
- CSV generator: handle rows with uneven number of columns correctly.
- CSV generator: ignore empty rows at the end.
- Several minor improvements and fixes.

(adam)

2015-12-28 12:15:19 UTC MAIN commitmail json YAML

Update net/scamper to 20141211a. From maintainer in PR pkg/50138.

>From https://rommie.caida.org/pipermail/scamper-announce/2015-August/000003.html

* provide the ability for scamper's control socket to bind to a
  specific address.  this allows external systems to contact and drive
  scamper processes.  a more secure solution will follow in a month or
  two.

* when converting the source port of a control socket client to a
  string, print it in host byte order rather than network byte order

* add a TBT (too-big-trick) option to ping, use it in sc_speedtrap.  a
  simple optimisation to send up to M packets to get N fragmented
  responses.

* if an input list to sc_speedtrap contains the same IP address twice,
  ignore the duplicate address, rather than crash later.

* use a quicksort with a 3-way partition.  will make scamper more
  efficient in many places.

* add sc_warts2csv for samknows

* fix sc_tracediff so that it doesn't crash if the two warts files
  being compared traceroute to different sets of addresses.  reported
  by Job Snijders.

(bsiegert)

2015-12-28 12:03:44 UTC MAIN commitmail json YAML

go-tools and darkstat update

(bsiegert)

2015-12-28 12:02:10 UTC MAIN commitmail json YAML

Update darkstat to 3.0.719. From Bartosz Kuzma in PR pkg/50113.

v3.0.719 (24 May 2015)
- Implement tracking of remote ports: shows which ports the host
  is making outgoing connections to. Long time feature request.
- Bugfix: when the capture interface goes down, exit instead of
  busy-looping forever.
- Fix "clock error" due to machine reboot.
- SIGUSR1 now resets the time and bytes reported on the graphs
  page.
- Account for all IP protocols.
- Change the default ports_max to only twice the default
  ports_keep.

(bsiegert)

2015-12-28 11:58:12 UTC MAIN commitmail json YAML

Update go-tools to 1.5. cover and vet are no longer in the tools subdirectory
as they are now delivered with the main Go release as well.

>From David Bariod via email to pkgsrc-users.

(bsiegert)

2015-12-28 11:47:52 UTC MAIN commitmail json YAML

Updated multimedia/x264-devel to 20151227

(adam)

2015-12-28 11:44:46 UTC MAIN commitmail json YAML

2015-12-28 11:37:03 UTC MAIN commitmail json YAML

Changes 20151227:
* ppc: Add detection of AltiVec support for FreeBSD
* Don't assume 16-byte stack alignment by default on x86-32
* Fix a few static analyzer performance hints
* Revise the row VBV algorithm
* Fix high bit depth lookahead cost compensation algorithm
* Correctly update the intra row predictor in B-frames
* Change the predictors update algorithm

(adam)

2015-12-28 10:04:10 UTC MAIN commitmail json YAML

Updated www/py-djangocms-admin-style to 1.0.7

(adam)

2015-12-28 10:03:01 UTC MAIN commitmail json YAML

Changes 1.0.7:
revert changes on dashboard
adapt changelog [ci skip]
fix jumping on mobile devices
more comments
Revert dashboard and adaptions

(adam)

2015-12-28 03:32:37 UTC MAIN commitmail json YAML

Added audio/rubberband version 1.8.1

(kamil)

2015-12-28 03:30:37 UTC MAIN commitmail json YAML

2015-12-28 03:29:33 UTC MAIN commitmail json YAML

2015-12-28 00:21:23 UTC MAIN commitmail json YAML

Add build dependence on libX11. This is normally already included via
cairo, but if one turns off X in cairo it starts failing. Thanks to
markd for pointing out it's apparently only a build dependence.
Closes PR 50582.

(dholland)

2015-12-27 23:49:24 UTC MAIN commitmail json YAML

Updated devel/global to 6.5.2

(wiz)

2015-12-27 23:49:14 UTC MAIN commitmail json YAML

Update global to 6.5.2:

Version 6.5.2 - Dec 16 2015

[CHANGES]
New facilities:
o Improvements of gtags.conf
  - Including from another file: Label syntax is expanded. (:tc=label[@file]:)
  - Variable substitution: B shell like variable substitution is available.
  - Addition of variables: 'bindir', 'datadir', 'libdir' and 'localstatedir'.
    By default, these variables has a value given by the configure script.
  - gtags.conf(5): Online manual of the configuration file.
o global: Now the -N(--nearness) option also works with the -P and -g command
  as well as the tag search command.
o gtags.vim: New custom variable 'Gtags_Close_When_Single' (default 0).
  If this variable is set to 1, quickfix window is closed when single tag.

Changed:
o gtags-cscope: Title changed to reduce misunderstanding.
  Find locations calling this function: -> Find references of this function:

[FIXED BUGS]
o gtags.el: a strange error message in gtags-visit-rootdir was fixed.

$ cp /dev/null main.c
$ ls
main.c
$ emacs -f gtags-mode main.c
[Emacs mini buffer]
M-x gtags-visit-rootdir[ENTER]
Visit root directory: /tmp/test/[ENTER]
/tmp/test/main.c is not directory.      <= STRANGE ERROR

o gtags (C, C++): Gtags couldn't handle enums in the case that there are
  newlines between "enum" and " {". Now it can handle correctly.

+-------------
|typedef enum
|{
|  E_FIRST = 1,
|  E_SECOND
|} FIRST_SECOND;
+-------------
$ global -x '.*'
E_FIRST            3 test.h            E_FIRST = 1,
FIRST_SECOND        5 test.h          } FIRST_SECOND; <= E_SECOND not found
$ _

+-------------
|enum
|tag
|{ ... };
+-------------
$ global -x '.*'
$ _ <= tag not found

o gtags.conf: some part of a comment line (start with '#') was not skipped
  when the line is very large. Now it is skipped correctly.
o gtags: If the DLL path includes ':', loading failed. Now it works.

(wiz)

2015-12-27 23:46:35 UTC MAIN commitmail json YAML

Updated misc/p5-Business-ISBN-Data to 20140910.003

(wiz)

2015-12-27 23:46:26 UTC MAIN commitmail json YAML

Update p5-Business-ISBN-Data to 20140910.003.

20140910.003 2015-12-15T12:25:58Z
* Hide the Business::ISBN namespace

(wiz)

2015-12-27 23:44:39 UTC MAIN commitmail json YAML

Updated devel/py-tortoisehg to 3.6.2

(wiz)

2015-12-27 23:44:26 UTC MAIN commitmail json YAML

Update py-tortoisehg to 3.6.2:

Bugs Fixes

    repowidget: fix handling of patch.extract() result (hg 3.6) (fixes #4390)

Improvements

    doc: include link to download and use Python 2.7 SWIG bindings

(wiz)

2015-12-27 23:42:48 UTC MAIN commitmail json YAML

Added audio/vamp-plugin-sdk version 2.6

(kamil)

2015-12-27 23:41:35 UTC MAIN commitmail json YAML

Updated time/py-vdirsyncer to 0.7.4

(wiz)

2015-12-27 23:41:25 UTC MAIN commitmail json YAML

Update py-vdirsyncer to 0.7.4:

Version 0.7.4
=============

*released on 22 December 2015*

- Improved error messages instead of faulty server behavior, see :gh:`290` and
  :gh:`300`.
- Safer shutdown of threadpool, avoid exceptions, see :gh:`291`.
- Fix a sync bug for read-only storages see commmit
  `ed22764921b2e5bf6a934cf14aa9c5fede804d8e`.
- Etag changes are no longer sufficient to trigger sync operations. An actual
  content change is also necessary. See :gh:`257`.
- :storage:`remotestorage` now automatically opens authentication dialogs in
  your configured GUI browser.
- **Packagers:** ``lxml>=3.1`` is now required (newer lower-bound version).

(wiz)

2015-12-27 23:38:55 UTC MAIN commitmail json YAML

Updated devel/py-requests to 2.9.0

(wiz)

2015-12-27 23:38:46 UTC MAIN commitmail json YAML

Update to 2.9.0:

2.9.0 (2015-12-15)
++++++++++++++++++

**Minor Improvements** (Backwards compatible)

- The ``verify`` keyword argument now supports being passed a path to a
  directory of CA certificates, not just a single-file bundle.
- Warnings are now emitted when sending files opened in text mode.
- Added the 511 Network Authentication Required status code to the status code
  registry.

**Bugfixes**

- For file-like objects that are not seeked to the very beginning, we now
  send the content length for the number of bytes we will actually read, rather
  than the total size of the file, allowing partial file uploads.
- When uploading file-like objects, if they are empty or have no obvious
  content length we set ``Transfer-Encoding: chunked`` rather than
  ``Content-Length: 0``.
- We correctly receive the response in buffered mode when uploading chunked
  bodies.
- We now handle being passed a query string as a bytestring on Python 3, by
  decoding it as UTF-8.
- Sessions are now closed in all cases (exceptional and not) when using the
  functional API rather than leaking and waiting for the garbage collector to
  clean them up.
- Correctly handle digest auth headers with a malformed ``qop`` directive that
  contains no token, by treating it the same as if no ``qop`` directive was
  provided at all.
- Minor performance improvements when removing specific cookies by name.

(wiz)

2015-12-27 23:37:15 UTC MAIN commitmail json YAML

+vamp-plugin-sdk

(kamil)

2015-12-27 23:36:52 UTC MAIN commitmail json YAML

Updated devel/py-requests-toolbelt to 0.5.1

(wiz)

2015-12-27 23:36:43 UTC MAIN commitmail json YAML

Update py-requests-toolbelt to 0.5.1:

0.5.1 -- 2015-12-16
-------------------

More information about this release can be found on the `0.5.1 milestone`_.

Fixed Bugs
~~~~~~~~~~

- Now papers over the differences in requests' ``super_len`` function from
  versions prior to 2.9.0 and versions 2.9.0 and later.

(wiz)

2015-12-27 23:35:33 UTC MAIN commitmail json YAML

Import vamp-plugin-sdk 2.6 as audio/vamp-plugin-sdk

Vamp is an audio processing plugin system for plugins that extract descriptive
information from audio typically referred to as audio analysis plugins or
audio feature extraction plugins.

Just like an audio effects plugin (such as a VST), a Vamp plugin is a binary
module that can be loaded up by a host application and fed audio data. However,
unlike an effects plugin, a Vamp plugin generates not more audio, but some sort
of symbolic information. Typical things that a Vamp plugin might calculate
include the locations of moments such as note onset times, visualisable
representations of the audio such as spectrograms, or curve data such as power
or fundamental frequency.

(kamil)

2015-12-27 22:58:28 UTC MAIN commitmail json YAML

Updated devel/py-setuptools to 19.2

(wiz)

2015-12-27 22:58:18 UTC MAIN commitmail json YAML

Update py-setuptools to 19.2:

----
19.2
----

* Pull Request #163: Add get_command_list method to Distribution.
* Pull Request #162: Add missing whitespace to multiline string
  literals.

------
19.1.1
------

* Issue #476: Cast version to string (using default encoding)
  to avoid creating Unicode types on Python 2 clients.
* Issue #477: In Powershell downloader, use explicit rendering
  of strings, rather than rely on ``repr``, which can be
  incorrect (especially on Python 2).

----
19.1
----

* Issue #215: The bootstrap script ``ez_setup.py`` now
  automatically detects
  the latest version of setuptools (using PyPI JSON API) rather
  than hard-coding a particular value.
* Issue #475: Fix incorrect usage in _translate_metadata2.

----
19.0
----

* Issue #442: Use RawConfigParser for parsing .pypirc file.
  Interpolated values are no longer honored in .pypirc files.

------
18.8.1
------

* Issue #440: Prevent infinite recursion when a SandboxViolation
  or other UnpickleableException occurs in a sandbox context
  with setuptools hidden. Fixes regression introduced in Setuptools
  12.0.

(wiz)

2015-12-27 22:57:00 UTC MAIN commitmail json YAML

Updated archivers/p5-Archive-Zip to 1.56

(wiz)

2015-12-27 22:56:51 UTC MAIN commitmail json YAML

Update p5-Archive-Zip to 1.56:

1.56 Thu 17 Dec 2015
    - fix $Archive::Zip::UNICODE issues [github/xlat]
        - on MSWin32 in methods addFile, addDirectory, addTree: the externalFileName was
          used in place of newName
        - make sure that file names are utf8 in memberNames
        - use Encode on all platform

(wiz)

2015-12-27 22:54:30 UTC MAIN commitmail json YAML

Updated audio/playitslowly to 1.5.0

(wiz)

2015-12-27 22:54:21 UTC MAIN commitmail json YAML

Update playitslowly to 1.5.0:

playitslowly 1.5
================
* Update to Python3, GTK3 and GStreamer 1.0
* Minor design cleanup
* Fixed a bug where the file chooser would not show the currently selected file

(wiz)

2015-12-27 22:52:51 UTC MAIN commitmail json YAML

Updated audio/musicpd to 0.19.12

(wiz)

2015-12-27 22:52:41 UTC MAIN commitmail json YAML

Updated musicpd to 0.9.12:

ver 0.19.12 (2015/12/15)
* fix assertion failure on malformed UTF-8 tag
* fix build failure on non-Linux systems
* fix LimitRTTIME in systemd unit file

(wiz)

2015-12-27 22:49:27 UTC MAIN commitmail json YAML

Mention "# used by audio/gst-plugins1-soundtouch/Makefile"

(wiz)

2015-12-27 22:48:19 UTC MAIN commitmail json YAML

Added audio/gst-plugins1-soundtouch version 1.6.1

(wiz)

2015-12-27 22:48:07 UTC MAIN commitmail json YAML

+ gst-plugins1-soundtouch

(wiz)

2015-12-27 22:47:53 UTC MAIN commitmail json YAML

Import gst-plugins1-soundtouch-1.6.1 as audio/gst-plugins1-soundtouch.

GStreamer is a library that allows the construction of graphs of
media-handling components, ranging from simple Ogg/Vorbis playback to
complex audio (mixing) and video (non-linear editing) processing.

Applications can take advantage of advances in codec and filter technology
transparently.  Developers can add new codecs and filters by writing a
simple plugin with a clean, generic interface.

GStreamer is released under the LGPL.

This package is part of the 'bad' plugins for GStreamer.  It provides the
soundtouch plugin, which allows detecting BPM and changing pitch
of audio files.

(wiz)

2015-12-27 22:39:28 UTC MAIN commitmail json YAML

2015-12-27 22:39:19 UTC MAIN commitmail json YAML

Update p5-CGI to 4.25.

4.25 2015-12-17

    [ DOCUMENTATION ]
    - fix link to CONTRIBUTING file (thanks to Manwar for the fix)
    - clarify that "soft" deprecation means that the HTML functions
      are deprecated but will not raise any deprecation warnings

    [ SPEC / BUG FIXES ]
    - make the list context warning only happen once per process (or
      thread) to prevent excessive log noise in long running or in
      persistent processes (thanks to @dadamail for the suggestion)

4.23 2015-12-17

    [ DOCUMENTATION ]
    - add LICENSE file and LICENSE info to Makefile.PL

(wiz)

2015-12-27 22:37:01 UTC MAIN commitmail json YAML

Updated devel/py-cffi to 1.4.2

(wiz)

2015-12-27 22:36:52 UTC MAIN commitmail json YAML

Update py-cffi to 1.4.2:

v1.4.2
======

Nothing changed from v1.4.1.

v1.4.1
======

* Fix the compilation failure of cffi on CPython 3.5.0.  (3.5.1 works;
  some detail changed that makes some underscore-starting macros
  disappear from view of extension modules, and I worked around it,
  thinking it changed in all 3.5 versions---but no: it was only in
  3.5.1.)

v1.4.0
======

* A `better way to do callbacks`__ has been added (faster and more
  portable, and usually cleaner).  It is a mechanism for the
  out-of-line API mode that replaces the dynamic creation of callback
  objects (i.e. C functions that invoke Python) with the static
  declaration in ``cdef()`` of which callbacks are needed.  This is
  more C-like, in that you have to structure your code around the idea
  that you get a fixed number of function pointers, instead of
  creating them on-the-fly.

* ``ffi.compile()`` now takes an optional ``verbose`` argument.  When
  ``True``, distutils prints the calls to the compiler.

* ``ffi.compile()`` used to fail if given ``sources`` with a path that
  includes ``".."``.  Fixed.

* ``ffi.init_once()`` added.  See docs__.

* ``dir(lib)`` now works on libs returned by ``ffi.dlopen()`` too.

* Cleaned up and modernized the content of the ``demo`` subdirectory
  in the sources (thanks matti!).

* ``ffi.new_handle()`` is now guaranteed to return unique ``void *``
  values, even if called twice on the same object.  Previously, in
  that case, CPython would return two ``cdata`` objects with the same
  ``void *`` value.  This change is useful to add and remove handles
  from a global dict (or set) without worrying about duplicates.
  It already used to work like that on PyPy.
  *This change can break code that used to work on CPython by relying
  on the object to be kept alive by other means than keeping the
  result of ffi.new_handle() alive.*  (The corresponding `warning in
  the docs`__ of ``ffi.new_handle()`` has been here since v0.8!)

.. __: using.html#extern-python
.. __: using.html#initonce
.. __: using.html#ffi-new-handle

(wiz)

2015-12-27 22:26:52 UTC MAIN commitmail json YAML

Added security/py-simplesha3 version 2015.09.22.post1

(wiz)

2015-12-27 22:26:39 UTC MAIN commitmail json YAML

+py-simplesha3

(wiz)

2015-12-27 22:26:23 UTC MAIN commitmail json YAML

Import py-simplesha3-2015.09.22.post1 as security/py-simplesha3.

This is a modified version of Daniel J. Bernstein's simplesha3
Python library that works in Python 3 in addition to the Python 2
of the original. This modified version is also available on pypi.

(wiz)

2015-12-27 22:17:38 UTC MAIN commitmail json YAML

Updated finance/gnucash to 2.6.10

(wiz)

2015-12-27 22:16:52 UTC MAIN commitmail json YAML

Update gnucash to 2.6.10:

2.6.10 - 20 December 2015
Announcement: GnuCash 2.6.10 Release 2015-12-20
GnuCash 2.6.10 released

The GnuCash development team proudly announces GnuCash 2.6.10, the
tenth maintenance release in the 2.6-stable series.

The following bugs are fixed:
    Bug 627692 - Report options, Account Selection, "select all" => not all
                  accounts selected, only visible ones
    Bug 646129 - Account selection in reports: 'Select Children' doesn't
                  actually select children if they are collapsed.
    Bug 662126 - Cannot create scheduled transaction for dividend reinvestment
    Bug 742321 - Reset temporary prefs on application startup
    Bug 745101 - No warning when quitting with unsaved file.
      When the file was first created without the New File Assistant.
    Bug 746155 - Reports: html-acct-table prepend-row! & prepend-col!
      unknown variables Fixed following the suggestions by
  Tony Kerns.
    Bug 754192 - Since Last Run Dialog asks for security price even if not
                  needed.
    Bug 754533 -  No Account Templates Error Patch
    Bug 755781 - Files with copyright but no grant of license.
    Bug 756335 - When importing, date selection causes exit crash
    Bug 756339 - Prices table not updated
    Bug 756720 - configure fails to find libgoffice 0.10-10 (0.10.18-1)
      While we can't support libgoffice 0.10 because that would
  require gtk3 we can improve the error message if no libgoffice
  0.8.x version is found.
    Bug 757378 - Display the user-defined display symbol for non-currency
                  commodities.
    Bug 759224 - illegal dates in stock transactions cause corrupt file.
    Bug 759294 - New the billing term are not saved during invoice editing.
                  Prevent editing the terms from the invoice view.

Other repairs that weren't marked as bugs in git:
    Revert the automatic inversion of prices whose value is less than 1.0.
        This corrects several regressions from 2.6.8 and 2.6.9; it proved to
be to big a change for a maintenance branch and will re-appear in the
next major release.
    Fix test failure due to trying to parse nanoseconds, which we don't
        actually use.
    Use @SHELL@ instead of hardcode /bin/sh in test shell scripts.
        This is a workaround for MacOS X 10.11's System Integrity Protection.
    Improve the revert action: Ask user confirmation and don't ask to save
        before reverting
    Have a more generic mechanism to set Save action's sensitivity and use it
        for Revert action as well
    Avoid assert in gnc_split_register_balance_trans if default_account is null.
    Performance improvements in the Cash Flow report.
    Add new account chart for Duch small businesses.
    Add some developer documentation.

New Translations:
    Portugal Portuguese
Updated Translations:
    Arabic, German

(wiz)

2015-12-27 21:53:33 UTC MAIN commitmail json YAML

Updated textproc/hunspell-de to 20151222

(wiz)

2015-12-27 21:53:23 UTC MAIN commitmail json YAML

Update hunspell-de to 20151222:

since 20131206:
- lots of new words
- some typo fixes
- affix fix for superlatives of adjectives ending on -igt
- fix or drop outdated documentation
- drop the additional obsolete OASIS license
- remove build date from dictionaries to make reproducible builds possible

(wiz)

2015-12-27 21:49:00 UTC MAIN commitmail json YAML

Updated devel/meld to 3.15.1

(wiz)

2015-12-27 21:48:50 UTC MAIN commitmail json YAML

Update meld to 3.15.1:

2015-12-15 meld 3.15.1
======================

  Features:

  * Text ignored by filters is now dimmed to give some visual feedback that
    it's being ignored (David Rabel)
  * Text filters now apply independently, improving consistency; note that
    this is a behaviour change as filter order no longer matters, and filters
    will always apply to the original (not the filtered) text (David Rabel,
    Kai Willadsen)
  * Recent menu items now show more detail in tooltips (Alan Suran)
  * Update dialog action area layout for GTK+ theme changes (Kai Willadsen)

  Fixes:

  * Conflict resolution prompt now resolves properly again (Andrew Sutherland)
  * Silence some GTK+ assertions on window close (Zain)
  * Fix default filter issues from recent rework (Erik Schilling)
  * Percent-containing commit messages no longer corrupt our recent commit
    messages store (Kai Willadsen)
  * Fix some problems with unicode user directories on Windows (Kai Willadsen)
  * Fix encoding issues when saving files with load errors (Kai Willadsen)
  * Fix drawing corruption when scrolling horizontally (Kai Willadsen)
  * Fix clicking on the diffmap scrolling to the wrong location (Kai Willadsen)
  * Fix off-by-one drawing error for final line in file (Kai Willadsen)
  * Fix introspection requires to silence startup warnings (Kai Willadsen)
  * Fix clearing syncpoints (Kai Willadsen)
  * Add manual appdata kudos markers (Kai Willadsen)
  * PEP8 fixes (David Rabel, Kai Willadsen)

  Translations:

  * Daniel Mustieles (es)
  * Marek ÄŒernocký (cs)
  * Milo Casagrande (it)
  * Pedro Albuquerque (pt)
  * Piotr DrÄ…g (pl)
  * Rafael Fontenelle (pt_BR)

(wiz)

2015-12-27 21:46:18 UTC MAIN commitmail json YAML

Updated multimedia/ffmpeg2 to 2.8.4

(wiz)

2015-12-27 21:45:56 UTC MAIN commitmail json YAML

Update ffmpeg2 to 2.8.4.

version 2.8.4
- rawdec: only exempt BIT0 with need_copy from buffer sanity check
- mlvdec: check that index_entries exist
- avcodec/mpeg4videodec: also for empty partitioned slices
- avcodec/h264_refs: Fix long_idx check
- avcodec/h264_mc_template: prefetch list1 only if it is used in the MB
- avcodec/h264_slice: Simplify ref2frm indexing
- avfilter/vf_mpdecimate: Add missing emms_c()
- sonic: make sure num_taps * channels is not larger than frame_size
- opus_silk: fix typo causing overflow in silk_stabilize_lsf
- ffm: reject invalid codec_id and codec_type
- golomb: always check for invalid UE golomb codes in get_ue_golomb
- sbr_qmf_analysis: sanitize input for 32-bit imdct
- sbrdsp_fixed: assert that input values are in the valid range
- aacsbr: ensure strictly monotone time borders
- aacenc: update max_sfb when num_swb changes
- aaccoder: prevent crash of anmr coder
- ffmdec: reject zero-sized chunks
- swscale/x86/rgb2rgb_template: Fallback to mmx in interleaveBytes() if the alignment is insufficient for SSE*
- swscale/x86/rgb2rgb_template: Do not crash on misaligend stride
- avformat/mxfenc: Do not crash if there is no packet in the first stream
- lavf/tee: fix side data double free.
- avformat/hlsenc: Check the return code of avformat_write_header()
- avformat/mov: Enable parser for mp3s by old HandBrake
- avformat/mxfenc: Fix integer overflow in length computation
- avformat/utils: estimate_timings_from_pts - increase retry counter, fixes invalid duration for ts files with hevc codec
- avformat/matroskaenc: Check codecdelay before use
- avutil/mathematics: Fix division by 0
- mjpegdec: consider chroma subsampling in size check
- libvpxenc: remove some unused ctrl id mappings
- avcodec/vp3: ensure header is parsed successfully before tables
- avcodec/jpeg2000dec: Check bpno in decode_cblk()
- avcodec/pgssubdec: Fix left shift of 255 by 24 places cannot be represented in type int
- swscale/utils: Fix for runtime error: left shift of negative value -1
- avcodec/hevc: Fix integer overflow of entry_point_offset
- avcodec/dirac_parser: Check that there is a previous PU before accessing it
- avcodec/dirac_parser: Add basic validity checks for next_pu_offset and prev_pu_offset
- avcodec/dirac_parser: Fix potential overflows in pointer checks
- avcodec/wmaprodec: Check bits per sample to be within the range not causing integer overflows
- avcodec/wmaprodec: Fix overflow of cutoff
- avformat/smacker: fix integer overflow with pts_inc
- avcodec/vp3: Fix "runtime error: left shift of negative value"
- avformat/riffdec: Initialize bitrate
- mpegencts: Fix overflow in cbr mode period calculations
- avutil/timecode: Fix fps check
- avutil/mathematics: return INT64_MIN (=AV_NOPTS_VALUE) from av_rescale_rnd() for overflows
- avcodec/apedec: Check length in long_filter_high_3800()
- avcodec/vp3: always set pix_fmt in theora_decode_header()
- avcodec/mpeg4videodec: Check available data before reading custom matrix
- avutil/mathematics: Do not treat INT64_MIN as positive in av_rescale_rnd
- avutil/integer: Fix av_mod_i() with negative dividend
- avformat/dump: Fix integer overflow in av_dump_format()
- avcodec/h264_refs: Check that long references match before use
- avcodec/utils: Clear dimensions in ff_get_buffer() on failure
- avcodec/utils: Use 64bit for aspect ratio calculation in avcodec_string()
- avcodec/hevc: Check max ctb addresses for WPP
- avcodec/vp3: Clear context on reinitialization failure
- avcodec/hevc: allocate entries unconditionally
- avcodec/hevc_cabac: Fix multiple integer overflows
- avcodec/jpeg2000dwt: Check ndeclevels before calling dwt_encode*()
- avcodec/jpeg2000dwt: Check ndeclevels before calling dwt_decode*()
- avcodec/hevc: Check entry_point_offsets
- lavf/rtpenc_jpeg: Less strict check for standard Huffman tables.
- avcodec/ffv1dec: Clear quant_table_count if its invalid
- avcodec/ffv1dec: Print an error if the quant table count is invalid
- doc/filters/drawtext: fix centering example

(wiz)

2015-12-27 21:38:21 UTC MAIN commitmail json YAML

2015-12-27 21:38:12 UTC MAIN commitmail json YAML

Update afl to 1.96b:

--------------
Version 1.96b:
--------------

  - Added -fpic to CFLAGS for the clang plugin, as suggested by Hanno Boeck.

  - Made another clang change (IRBuilder) suggested by Jeff Trull.

  - Fixed several typos, spotted by Jakub Wilk.

  - Added support for AFL_SHUFFLE_QUEUE, based on discussions with
    Christian Holler.

(wiz)

2015-12-27 21:32:23 UTC MAIN commitmail json YAML

Updated security/caff to 2.2

(wiz)

2015-12-27 21:32:14 UTC MAIN commitmail json YAML

Update caff to 2.2.

Pattern fixes for signature recognition.

(wiz)

2015-12-27 21:27:50 UTC MAIN commitmail json YAML

2015-12-27 21:08:45 UTC MAIN commitmail json YAML

Add a PRINT_PLIST_AWK pattern for python-3.5.

(wiz)

2015-12-27 21:08:10 UTC MAIN commitmail json YAML

py-borg update done.

(wiz)

2015-12-27 21:07:52 UTC MAIN commitmail json YAML

Mention py-borg update as py-borgbackup.

(wiz)

2015-12-27 21:06:49 UTC MAIN commitmail json YAML

2015-12-27 21:06:06 UTC MAIN commitmail json YAML

Re-Import sysutils/py-borg as sysutils/py-borgbackup.

Ok MAINTAINER bsiegert.

While doing that, update to current release, 0.29.0.
Changes since 0.24.0:

Version 0.29.0
--------------

Compatibility notes:

- when upgrading to 0.29.0 you need to upgrade client as well as server
  installations due to the locking and commandline interface changes otherwise
  you'll get an error msg about a RPC protocol mismatch or a wrong commandline
  option.
  if you run a server that needs to support both old and new clients, it is
  suggested that you have a "borg-0.28.2" and a "borg-0.29.0" command.
  clients then can choose via e.g. "borg --remote-path=borg-0.29.0 ...".
- the default waiting time for a lock changed from infinity to 1 second for a
  better interactive user experience. if the repo you want to access is
  currently locked, borg will now terminate after 1s with an error message.
  if you have scripts that shall wait for the lock for a longer time, use
  --lock-wait N (with N being the maximum wait time in seconds).

Bug fixes:

- hash table tuning (better chosen hashtable load factor 0.75 and prime initial
  size of 1031 gave ~1000x speedup in some scenarios)
- avoid creation of an orphan lock for one case, #285
- --keep-tag-files: fix file mode and multiple tag files in one directory, #432
- fixes for "borg upgrade" (attic repo converter), #466
- remove --progress isatty magic (and also --no-progress option) again, #476
- borg init: display proper repo URL
- fix format of umask in help pages, #463

New features:

- implement --lock-wait, support timeout for UpgradableLock, #210
- implement borg break-lock command, #157
- include system info below traceback, #324
- sane remote logging, remote stderr, #461:

  - remote log output: intercept it and log it via local logging system,
    with "Remote: " prefixed to message. log remote tracebacks.
  - remote stderr: output it to local stderr with "Remote: " prefixed.
- add --debug and --info (same as --verbose) to set the log level of the
  builtin logging configuration (which otherwise defaults to warning), #426
  note: there are few messages emitted at DEBUG level currently.
- optionally configure logging via env var BORG_LOGGING_CONF
- add --filter option for status characters: e.g. to show only the added
  or modified files (and also errors), use "borg create -v --filter=AME ...".
- more progress indicators, #394
- use ISO-8601 date and time format, #375
- "borg check --prefix" to restrict archive checking to that name prefix, #206

Other changes:

- hashindex_add C implementation (speed up cache re-sync for new archives)
- increase FUSE read_size to 1024 (speed up metadata operations)
- check/delete/prune --save-space: free unused segments quickly, #239
- increase rpc protocol version to 2 (see also Compatibility notes), #458
- silence borg by default (via default log level WARNING)
- get rid of C compiler warnings, #391
- upgrade OS X FUSE to 3.0.9 on the OS X binary build system
- use python 3.5.1 to build binaries
- docs:

  - new mailing list borgbackup@python.org, #468
  - readthedocs: color and logo improvements
  - load coverage icons over SSL (avoids mixed content)
  - more precise binary installation steps
  - update release procedure docs about OS X FUSE
  - FAQ entry about unexpected 'A' status for unchanged file(s), #403
  - add docs about 'E' file status
  - add "borg upgrade" docs, #464
  - add developer docs about output and logging
  - clarify encryption, add note about client-side encryption
  - add resources section, with videos, talks, presentations, #149
  - Borg moved to Arch Linux [community]
  - fix wrong installation instructions for archlinux

Version 0.28.2
--------------

New features:

- borg create --exclude-if-present TAGFILE - exclude directories that have the
  given file from the backup. You can additionally give --keep-tag-files to
  preserve just the directory roots and the tag-files (but not backup other
  directory contents), #395, attic #128, attic #142

Other changes:

- do not create docs sources at build time (just have them in the repo),
  completely remove have_cython() hack, do not use the "mock" library at build
  time, #384
- avoid hidden import, make it easier for PyInstaller, easier fix for #218
- docs:

  - add description of item flags / status output, fixes #402
  - explain how to regenerate usage and API files (build_api or
    build_usage) and when to commit usage files directly into git, #384
  - minor install docs improvements

Version 0.28.1
--------------

Bug fixes:

- do not try to build api / usage docs for production install,
  fixes unexpected "mock" build dependency, #384

Other changes:

- avoid using msgpack.packb at import time
- fix formatting issue in changes.rst
- fix build on readthedocs

Version 0.28.0
--------------

Compatibility notes:

- changed return codes (exit codes), see docs. in short:
  old: 0 = ok, 1 = error. now: 0 = ok, 1 = warning, 2 = error

New features:

- refactor return codes (exit codes), fixes #61
- add --show-rc option enable "terminating with X status, rc N" output, fixes 58, #351
- borg create backups atime and ctime additionally to mtime, fixes #317
  - extract: support atime additionally to mtime
  - FUSE: support ctime and atime additionally to mtime
- support borg --version
- emit a warning if we have a slow msgpack installed
- borg list --prefix=thishostname- REPO, fixes #205
- Debug commands (do not use except if you know what you do: debug-get-obj,
  debug-put-obj, debug-delete-obj, debug-dump-archive-items.

Bug fixes:

- setup.py: fix bug related to BORG_LZ4_PREFIX processing
- fix "check" for repos that have incomplete chunks, fixes #364
- borg mount: fix unlocking of repository at umount time, fixes #331
- fix reading files without touching their atime, #334
- non-ascii ACL fixes for Linux, FreeBSD and OS X, #277
- fix acl_use_local_uid_gid() and add a test for it, attic #359
- borg upgrade: do not upgrade repositories in place by default, #299
- fix cascading failure with the index conversion code, #269
- borg check: implement 'cmdline' archive metadata value decoding, #311
- fix RobustUnpacker, it missed some metadata keys (new atime and ctime keys
  were missing, but also bsdflags). add check for unknown metadata keys.
- create from stdin: also save atime, ctime (cosmetic)
- use default_notty=False for confirmations, fixes #345
- vagrant: fix msgpack installation on centos, fixes #342
- deal with unicode errors for symlinks in same way as for regular files and
  have a helpful warning message about how to fix wrong locale setup, fixes #382
- add ACL keys the RobustUnpacker must know about

Other changes:

- improve file size displays, more flexible size formatters
- explicitly commit to the units standard, #289
- archiver: add E status (means that an error occured when processing this
  (single) item
- do binary releases via "github releases", closes #214
- create: use -x and --one-file-system (was: --do-not-cross-mountpoints), #296
- a lot of changes related to using "logging" module and screen output, #233
- show progress display if on a tty, output more progress information, #303
- factor out status output so it is consistent, fix surrogates removal,
  maybe fixes #309
- move away from RawConfigParser to ConfigParser
- archive checker: better error logging, give chunk_id and sequence numbers
  (can be used together with borg debug-dump-archive-items).
- do not mention the deprecated passphrase mode
- emit a deprecation warning for --compression N (giving a just a number)
- misc .coverragerc fixes (and coverage measurement improvements), fixes #319
- refactor confirmation code, reduce code duplication, add tests
- prettier error messages, fixes #307, #57
- tests:

  - add a test to find disk-full issues, #327
  - travis: also run tests on Python 3.5
  - travis: use tox -r so it rebuilds the tox environments
  - test the generated pyinstaller-based binary by archiver unit tests, #215
  - vagrant: tests: announce whether fakeroot is used or not
  - vagrant: add vagrant user to fuse group for debianoid systems also
  - vagrant: llfuse install on darwin needs pkgconfig installed
  - vagrant: use pyinstaller from develop branch, fixes #336
  - benchmarks: test create, extract, list, delete, info, check, help, fixes #146
  - benchmarks: test with both the binary and the python code
  - archiver tests: test with both the binary and the python code, fixes #215
  - make basic test more robust
- docs:

  - moved docs to borgbackup.readthedocs.org, #155
  - a lot of fixes and improvements, use mobile-friendly RTD standard theme
  - use zlib,6 compression in some examples, fixes #275
  - add missing rename usage to docs, closes #279
  - include the help offered by borg help <topic> in the usage docs, fixes #293
  - include a list of major changes compared to attic into README, fixes #224
  - add OS X install instructions, #197
  - more details about the release process, #260
  - fix linux glibc requirement (binaries built on debian7 now)
  - build: move usage and API generation to setup.py
  - update docs about return codes, #61
  - remove api docs (too much breakage on rtd)
  - borgbackup install + basics presentation (asciinema)
  - describe the current style guide in documentation
  - add section about debug commands
  - warn about not running out of space
  - add example for rename
  - improve chunker params docs, fixes #362
  - minor development docs update

Version 0.27.0
--------------

New features:

- "borg upgrade" command - attic -> borg one time converter / migration, #21
- temporary hack to avoid using lots of disk space for chunks.archive.d, #235:
  To use it: rm -rf chunks.archive.d ; touch chunks.archive.d
- respect XDG_CACHE_HOME, attic #181
- add support for arbitrary SSH commands, attic #99
- borg delete --cache-only REPO (only delete cache, not REPO), attic #123

Bug fixes:

- use Debian 7 (wheezy) to build pyinstaller borgbackup binaries, fixes slow
  down observed when running the Centos6-built binary on Ubuntu, #222
- do not crash on empty lock.roster, fixes #232
- fix multiple issues with the cache config version check, #234
- fix segment entry header size check, attic #352
  plus other error handling improvements / code deduplication there.
- always give segment and offset in repo IntegrityErrors

Other changes:

- stop producing binary wheels, remove docs about it, #147
- docs:
  - add warning about prune
  - generate usage include files only as needed
  - development docs: add Vagrant section
  - update / improve / reformat FAQ
  - hint to single-file pyinstaller binaries from README

Version 0.26.1
--------------

This is a minor update, just docs and new pyinstaller binaries.

- docs update about python and binary requirements
- better docs for --read-special, fix #220
- re-built the binaries, fix #218 and #213 (glibc version issue)
- update web site about single-file pyinstaller binaries

Note: if you did a python-based installation, there is no need to upgrade.

Version 0.26.0
--------------

New features:

- Faster cache sync (do all in one pass, remove tar/compression stuff), #163
- BORG_REPO env var to specify the default repo, #168
- read special files as if they were regular files, #79
- implement borg create --dry-run, attic issue #267
- Normalize paths before pattern matching on OS X, #143
- support OpenBSD and NetBSD (except xattrs/ACLs)
- support / run tests on Python 3.5

Bug fixes:

- borg mount repo: use absolute path, attic #200, attic #137
- chunker: use off_t to get 64bit on 32bit platform, #178
- initialize chunker fd to -1, so it's not equal to STDIN_FILENO (0)
- fix reaction to "no" answer at delete repo prompt, #182
- setup.py: detect lz4.h header file location
- to support python < 3.2.4, add less buggy argparse lib from 3.2.6 (#194)
- fix for obtaining ``char *`` from temporary Python value (old code causes
  a compile error on Mint 17.2)
- llfuse 0.41 install troubles on some platforms, require < 0.41
  (UnicodeDecodeError exception due to non-ascii llfuse setup.py)
- cython code: add some int types to get rid of unspecific python add /
  subtract operations (avoid ``undefined symbol FPE_``... error on some platforms)
- fix verbose mode display of stdin backup
- extract: warn if a include pattern never matched, fixes #209,
  implement counters for Include/ExcludePatterns
- archive names with slashes are invalid, attic issue #180
- chunker: add a check whether the POSIX_FADV_DONTNEED constant is defined -
  fixes building on OpenBSD.

Other changes:

- detect inconsistency / corruption / hash collision, #170
- replace versioneer with setuptools_scm, #106
- docs:

  - pkg-config is needed for llfuse installation
  - be more clear about pruning, attic issue #132
- unit tests:

  - xattr: ignore security.selinux attribute showing up
  - ext3 seems to need a bit more space for a sparse file
  - do not test lzma level 9 compression (avoid MemoryError)
  - work around strange mtime granularity issue on netbsd, fixes #204
  - ignore st_rdev if file is not a block/char device, fixes #203
  - stay away from the setgid and sticky mode bits
- use Vagrant to do easy cross-platform testing (#196), currently:

  - Debian 7 "wheezy" 32bit, Debian 8 "jessie" 64bit
  - Ubuntu 12.04 32bit, Ubuntu 14.04 64bit
  - Centos 7 64bit
  - FreeBSD 10.2 64bit
  - OpenBSD 5.7 64bit
  - NetBSD 6.1.5 64bit
  - Darwin (OS X Yosemite)

Version 0.25.0
--------------

Compatibility notes:

- lz4 compression library (liblz4) is a new requirement (#156)
- the new compression code is very compatible: as long as you stay with zlib
  compression, older borg releases will still be able to read data from a
  repo/archive made with the new code (note: this is not the case for the
  default "none" compression, use "zlib,0" if you want a "no compression" mode
  that can be read by older borg). Also the new code is able to read repos and
  archives made with older borg versions (for all zlib levels  0..9).

Deprecations:

- --compression N (with N being a number, as in 0.24) is deprecated.
  We keep the --compression 0..9 for now to not break scripts, but it is
  deprecated and will be removed later, so better fix your scripts now:
  --compression 0 (as in 0.24) is the same as --compression zlib,0 (now).
  BUT: if you do not want compression, you rather want --compression none
  (which is the default).
  --compression 1 (in 0.24) is the same as --compression zlib,1 (now)
  --compression 9 (in 0.24) is the same as --compression zlib,9 (now)

New features:

- create --compression none (default, means: do not compress, just pass through
  data "as is". this is more efficient than zlib level 0 as used in borg 0.24)
- create --compression lz4 (super-fast, but not very high compression)
- create --compression zlib,N (slower, higher compression, default for N is 6)
- create --compression lzma,N (slowest, highest compression, default N is 6)
- honor the nodump flag (UF_NODUMP) and do not backup such items
- list --short just outputs a simple list of the files/directories in an archive

Bug fixes:

- fixed --chunker-params parameter order confusion / malfunction, fixes #154
- close fds of segments we delete (during compaction)
- close files which fell out the lrucache
- fadvise DONTNEED now is only called for the byte range actually read, not for
  the whole file, fixes #158.
- fix issue with negative "all archives" size, fixes #165
- restore_xattrs: ignore if setxattr fails with EACCES, fixes #162

Other changes:

- remove fakeroot requirement for tests, tests run faster without fakeroot
  (test setup does not fail any more without fakeroot, so you can run with or
  without fakeroot), fixes #151 and #91.
- more tests for archiver
- recover_segment(): don't assume we have an fd for segment
- lrucache refactoring / cleanup, add dispose function, py.test tests
- generalize hashindex code for any key length (less hardcoding)
- lock roster: catch file not found in remove() method and ignore it
- travis CI: use requirements file
- improved docs:

  - replace hack for llfuse with proper solution (install libfuse-dev)
  - update docs about compression
  - update development docs about fakeroot
  - internals: add some words about lock files / locking system
  - support: mention BountySource and for what it can be used
  - theme: use a lighter green
  - add pypi, wheel, dist package based install docs
  - split install docs into system-specific preparations and generic instructions

(wiz)

2015-12-27 20:51:05 UTC MAIN commitmail json YAML

Added textproc/sift version 0.6.0

(wiz)

2015-12-27 20:50:50 UTC MAIN commitmail json YAML

2015-12-27 20:50:40 UTC MAIN commitmail json YAML

Import sift-0.6.0 as textproc/sift.

All the features you expect from a modern grep alternative.

RegEx - perl compatible regular expression syntax (no more escape
hell)

usable defaults - basic options known from grep but with usable
defaults

multiline support - find matches spanning over multiple lines
replace - replace output to reformat it to your needs without
relying on awk/sed

gzip files - search through normal and gzip'ed files in one program
call

multiple patterns - search for multiple patterns in one run
target selection - select or exclude search targets based on file
name, directory name, path and type

handling big data - sift handles big files without problems: files
>50GB, >5,000,000,000 lines and >5,000,000,000 matches successfully
tested

(wiz)

2015-12-27 20:44:45 UTC MAIN commitmail json YAML

Added devel/go-nbreader version 0.0.20150201

(wiz)

2015-12-27 20:44:34 UTC MAIN commitmail json YAML

+ go-nbreader.

(wiz)

2015-12-27 20:44:13 UTC MAIN commitmail json YAML

Import go-nbreader-0.0.20150201 as devel/go-nbreader.

go-nbreader provides a non-blocking io.Reader for go (golang).

(wiz)

2015-12-27 20:38:04 UTC MAIN commitmail json YAML

Added devel/go-flags-svent version 0.0.20141123

(wiz)

2015-12-27 20:37:32 UTC MAIN commitmail json YAML

+ go-flags-svent.

(wiz)

2015-12-27 20:37:11 UTC MAIN commitmail json YAML

Import go-flags-svent-0.0.20141123 as devel/go-flags-svent.

This library provides similar functionality to the builtin flag
library of go, but provides much more functionality and nicer
formatting. From the documentation:

Package flags provides an extensive command line option parser.
The flags package is similar in functionality to the go builtin
flag package but provides more options and uses reflection to
provide a convenient and succinct way of specifying command line
options.

(wiz)

2015-12-27 20:13:18 UTC MAIN commitmail json YAML

Added security/go-crypto version 0.0.20151215

(wiz)

2015-12-27 20:13:06 UTC MAIN commitmail json YAML

2015-12-27 20:12:47 UTC MAIN commitmail json YAML

Import go-crypto-0.0.20151215 as security/go-crypto.

Supplementary Go cryptography libraries.

XXX: there is no proper release for this, so this packages todays
git master head.

(wiz)

2015-12-27 19:41:29 UTC MAIN commitmail json YAML

Look in lang/go/*.mk for help topics too.

(wiz)

2015-12-27 19:41:10 UTC MAIN commitmail json YAML

Document variables this mk file provides.
Ok bsiegert@

(wiz)

2015-12-27 18:56:33 UTC MAIN commitmail json YAML

2015-12-27 18:40:34 UTC MAIN commitmail json YAML

Updated www/php-ja-wordpress to 4.4

(ryoon)

2015-12-27 18:39:57 UTC MAIN commitmail json YAML

Update to 4.4

Changelog:
On December 8, 2015, WordPress Version 4.4, named for jazz musician Clifford Brown, was released to the public. For more information on this enhancement and bug-fix release, read the WordPress Blog, and see the Changelog for 4.4.

For Version 4.4, the database version (db_version in wp_options) changed to 35700, and the Trac revision was 35842.

Highlights

twenty-sixteen-white-desktop-1x.png

    New Default Theme - Twenty Sixteen
        Modern take on the classic blog design
        Flexible header and fun color schemes will make your content shine
        Mobile-first and responsive

The Finer Points
responsive-devices-desktop-1x.png

    Responsive images:

WordPress now takes a smarter approach to displaying appropriate image sizes on any device, ensuring a perfect fit every time. You don窶冲 need to do anything to your theme, it just works.
wp embed preview.png

    Embed your WordPress content:

Now you can embed your posts on other sites, even other WordPress sites. Simply drop a post URL into the editor and see an instant embed preview, complete with the title, excerpt, and featured image if you窶况e set one. We窶冤l even include your site icon and links for comments and sharing.
reverbnation embed.png

    Even more embed providers:

In addition to post embeds, WordPress 4.4 also adds support for five new oEmbed providers: Cloudup, Reddit Comments, ReverbNation, Speaker Deck, and VideoPress.
For Developers

    REST API infrastructure: Infrastructure for the REST API has been integrated into core, the first part of a multi-stage rollout. Inclusion of core endpoints is targeted for an upcoming release. To get a sneak peek of the core endpoints, and for more information on extending the REST API, check out the official WordPress REST API plugin.
    Term meta: Terms now support metadata, just like posts. See add_term_meta(), get_term_meta(), and update_term_meta() for more information.
    Comment query improvements: Comment queries now have cache handling to improve performance. New arguments in WP_Comment_Query make crafting robust comment queries simpler.
    Term, comment, and network objects: New WP_Term, WP_Comment, and WP_Network objects make interacting with terms, comments, and networks more predictable and intuitive in code.

What's New
General

    Developer reference - Improvements to inline code documentation.
    i18n support - Improvements to translation strings all over the core.
    Admin page headings were adjusted from H3 to H2 tags to reinforce page hierarchy
    Improvements to how list tables are displayed on all size screens

Posts

    The post/page permalink UI was simplified, linking the permalink and removing the "View" button

Media
Comments

    The "View Comment" link was relocated from the Status meta box in the comment-editing screen
    Many comment functions can now accept a full object instead of 'comment_ID' to reduce cache/db lookups
    Orphaned comments now fall back to the 'edit_posts' capability

Appearance

    Site icons will now fall back to the 'full' size URL when the 'thumbnail' size doesn't exist

Users
Install Process
Multisite

    The language chooser was added to the new site form on wp-signup.php
    Sites may no longer be created with the following reserved slugs: wp-admin, wp-content, wp-includes, or wp-json

Accessibility
Under The Hood
General

    Unclosed HTML elements in shortcode attributes were disallowed
    HTML was removed from all translatable text strings
    Rewrite rules are now flushed on theme switch
    Most core classes were moved to their own files

Embeds

    Add oEmbed support for Cloudup.
    Add oEmbed support for Reddit Comments.
    Add oEmbed support for ReverbNation.
    Add oEmbed support for Speaker Deck.
    Add oEmbed support for VideoPress.
    Remove oEmbed support for Blip.

JavaScript

    Customizer: Ensure persistence of unchanged active state for controls, sections, and panels
    Customizer: Fixed logic for determining the container element when focusing on a panel, section, or control
    Customizer: Fixed clearing of a color control's setting by using proper empty value

Bug Fixes

    Fail gracefully when checking mapped capabilities against unregistered post types
    Visibility was restored for the Tags auto-suggest tooltip in Quick Edit
    The $public_only parameter was added to count_user_posts()
    Cron: Events are now rejected when the provided $timestamp value is not a valid timestamp
    Users with no role are now redirected to the home page on login instead of their profile-editing screen

Multisite

    A network can now be retrieved by its ID through WP_Network::get_instance()
    A network can now be created or completed by passing arguments to WP_Network
    Network-level capabilities were clarified and some long-time bugs were fixed

Classes
What's New

    WP_Comment

    WP_Comment_Query->$found_comments
    WP_Comment_Query->$max_num_pages
    WP_Comment_Query->$meta_query_clauses
    WP_Comment_Query->$sql_clauses
    WP_Comment_Query::fill_descendants()
    WP_Comment_Query::get_comment_ids()

    WP_Customize_Manager->$autofocus
    WP_Customize_Manager->$preview_url
    WP_Customize_Manager->$return_url
    WP_Customize_Manager::customize_pane_settings()
    WP_Customize_Manager::get_autofocus()
    WP_Customize_Manager::get_document_title_template()
    WP_Customize_Manager::get_preview_url()
    WP_Customize_Manager::get_return_url()
    WP_Customize_Manager::is_ios()
    WP_Customize_Manager::set_autofocus()
    WP_Customize_Manager::set_preview_url()
    WP_Customize_Manager::set_return_url()

    WP_Customize_Setting->$is_multidimensional_aggregated
    WP_Customize_Setting->$is_previewed
    WP_Customize_Setting::$aggregated_multidimensionals
    WP_Customize_Setting::_multidimensional_preview_filter()
    WP_Customize_Setting::aggregate_multidimensional()
    get_root_value/ WP_Customize_Setting::get_root_value()
    id_data/ WP_Customize_Setting::id_data()
    set_root_value/ WP_Customize_Setting::set_root_value()

    WP_Customize_Widgets::get_widget_control_parts()
    WP_Customize_Widgets::is_panel_active()

    WP_Filesystem_SSH2::sftp_path()

    WP_HTTP_Response

    WP_List_Table::get_primary_column()

    WP_Locale->$start_of_week

    WP_MS_Sites_List_Table::column_id()

    WP_MS_Users_List_Table::column_id()

    WP_Media_List_Table->$comment_pending_count

    WP_Network

    WP_Posts_List_Table::get_edit_link()

    WP_Query->$is_embed
    WP_Query->$updated_comment_meta_cache
    WP_Query->$updated_term_meta_cache
    WP_Query::is_embed()
    WP_Query::lazyload_comment_meta()
    WP_Query::lazyload_term_meta()

    WP_REST_Request

    WP_REST_Response

    WP_REST_Server

    WP_Screen->$_screen_reader_content
    WP_Screen::get_screen_reader_content()
    WP_Screen::get_screen_reader_text()
    WP_Screen::remove_screen_reader_content()
    WP_Screen::render_list_table_columns_preferences()
    WP_Screen::render_meta_boxes_preferences()
    WP_Screen::render_screen_reader_content()
    WP_Screeb::render_view_mode()
    WP_Screen::set_screen_reader_content()

    WP_Term

    >$update WP_Theme

    WP_User::__unset()
    >$request WP_User_Query
    WP_User_Query::fill_query_vars()

    WP_Users_List_Table::get_role_list()

    WP_Widget_Calendar::$instance

    WP_Widget_Tag_Cloud::_get_current_taxonomy()

    WP_oEmbed_Controller

    wpdb->$termmeta

Deprecated
Functions
What's New

    _prime_comment_caches()
    add_network_option()
    add_term_meta()
    delete_network_option()
    delete_term_meta()
    enqueue_embed_scripts()
    get_header_image_tag()
    get_html_split_regex()
    get_network_option()
    get_oembed_endpoint_url()
    get_oembed_response_data()
    get_oembed_response_data_rich()
    get_password_reset_key()
    get_post_embed_html()
    get_post_embed_url()
    get_preview_post_link()
    get_rest_url()
    get_shortcode_atts_regex()
    get_subdirectory_reserved_names()
    get_term_meta()
    get_the_author_posts_link()
    get_the_comments_navigation()
    get_the_comments_pagination()
    get_the_post_thumbnail_url()
    is_embed()
    is_post_type_viewable()
    is_registered_sidebar()
    map_deep()
    print_embed_comments_button()
    print_embed_scripts()
    print_embed_sharing_button()
    print_embed_sharing_dialog()
    print_embed_styles()
    register_rest_route()
    rest_api_default_filters()
    rest_api_init()
    rest_api_loaded()
    rest_api_register_rewrites()
    rest_cookie_check_errors()
    rest_cookie_collect_status()
    rest_do_request()
    rest_ensure_request()
    rest_ensure_response()
    rest_get_date_with_gmt()
    rest_get_url_prefix()
    rest_handle_deprecated_argument()
    rest_handle_deprecated_function()
    rest_handle_options_request()
    rest_output_link_header()
    rest_output_link_wp_head()
    rest_output_rsd()
    rest_parse_date()
    rest_send_allow_header()
    rest_send_cors_headers()
    rest_url()
    signup_get_available_languages()
    strip_fragment_from_url()
    stripslashes_from_strings_only()
    the_comments_navigation()
    the_comments_pagination()
    the_excerpt_embed()
    the_header_image_tag()
    the_post_thumbnail_url()
    update_network_option()
    update_term_meta()
    update_termmeta_cache()
    urldecode_deep()
    wp_ajax_delete_inactive_widgets()
    wp_ajax_generate_password()
    wp_ajax_save_wporg_username()
    wp_calculate_image_sizes()
    wp_calculate_image_srcset()
    wp_embed_excerpt_attachment()
    wp_embed_excerpt_attachment()
    wp_filter_oembed_result()
    wp_get_attachment_image_sizes()
    wp_get_attachment_image_srcset()
    wp_get_attachment_image_url()
    wp_get_document_title()
    wp_get_server_protocol()
    wp_get_users_with_no_role()
    wp_handle_comment_submission()
    wp_image_add_srcset_and_sizes()
    wp_installing()
    wp_is_numeric_array()
    wp_make_content_images_responsive()
    wp_maybe_decline_date()
    wp_new_comment_notify_moderator()
    wp_new_comment_notify_postauthor()
    wp_oembed_add_discovery_links()
    wp_oembed_add_host_js()
    wp_oembed_ensure_format()
    wp_oembed_register_route()
    wp_parse_url()
    wp_remote_retrieve_cookie()
    wp_remote_retrieve_cookie_value()
    wp_remote_retrieve_cookies()
    wp_removable_query_args()
    wp_rest_server_class()
    wp_send_new_user_notifications()
    wp_term_is_shared()

Deprecated

    wp_get_http()

Actions & Filters
New Actions

    after_password_reset
    after_signup_site
    after_signup_user
    attachment_updated
    before_signup_header
    clean_user_cache
    customize_post_value_set
    customize_post_value_set_{$setting_id}
    delete_plugin
    delete_widget
    deleted_plugin
    edit_user_created_user
    embed_content
    embed_content_meta
    embed_footer
    embed_head
    enqueue_embed_scripts
    invite_user
    manage_posts_extra_tablenav
    ms_network_not_found
    network_site_new_created_user
    network_site_users_created_user
    network_user_new_created_user
    page_attributes_meta_box_template
    post_submitbox_minor_actions
    pre_auto_update
    register_new_user
    rest_api_init
    wp_add_nav_menu_item
    wp_mail_failed
    wp_verify_nonce_failed

New Filters

    admin_post_thumbnail_size
    comment_excerpt_length
    comment_form_fields
    content_pagination
    customize_loaded_components
    dashboard_recent_drafts_query_args
    dashboard_secondary_items
    default_hidden_columns
    document_title_parts
    document_title_separator
    duplicate_comment_id
    embed_html
    embed_oembed_discover
    embed_site_title_html
    embed_template
    embed_thumbnail_image_shape
    embed_thumbnail_image_size
    enclosure_links
    expiration_of_site_transient_{$transient}
    expiration_of_transient_{$transient}
    export_wp_filename
    feed_links_show_comments_feed
    feed_links_show_posts_feed
    found_comments_query
    get_header_image_tag
    get_page_of_comment
    get_page_uri
    get_post_status
    get_role_list
    get_sample_permalink
    get_terms_defaults
    get_{$adjacent}_post_excluded_terms
    hidden_columns
    illegal_user_logins
    image_get_intermediate_size
    insert_user_meta
    max_srcset_image_width
    mejs_settings
    nav_menu_item_args
    nav_menu_item_title
    navigation_markup_template
    network_admin_plugin_action_links
    network_admin_plugin_action_links_{$plugin_file}
    notify_moderator
    notify_post_author
    oembed_discovery_links
    oembed_endpoint_url
    oembed_min_max_width
    oembed_response_data
    old_slug_redirect_url
    plugin_action_links
    plugin_action_links_{$plugin_file}
    post_edit_category_parent_dropdown_args
    post_embed_url
    postmeta_form_keys
    pre_delete_post
    pre_get_document_title
    pre_get_lastpostmodified
    register_post_type_args
    register_taxonomy_args
    respond_link
    rest_url
    rest_url_prefix
    screen_options_show_submit
    show_network_active_plugins
    signup_get_available_languages
    subdirectory_reserved_names
    submenu_file
    taxonomy_labels_{$taxonomy}
    the_category_list
    the_excerpt_embed
    update_right_now_text
    user_profile_picture_description
    users_list_table_query_args
    view_mode_post_types
    wp_calculate_image_sizes
    wp_calculate_image_srcset
    wp_dropdown_users_args
    wp_http_ixr_client_headers
    wp_post_revision_title_expanded
    wp_prepare_revision_for_js
    wp_theme_editor_filetypes
    xmlrpc_chunk_parsing_size

(ryoon)

2015-12-27 18:36:40 UTC MAIN commitmail json YAML

Updated security/stunnel to 5.28

(ryoon)

2015-12-27 18:36:06 UTC MAIN commitmail json YAML

Update to 5.28

Changelog:
Version 5.28, 2015.12.11, urgency: HIGH
* New features
  - Build matrix (.travis.yml) extended with ./configure options.
  - mingw.mak updated to build tstunnel.exe (thx to Jose Alf.).
* Bugfixes
  - Fixed incomplete initialization.
  - Fixed UCONTEXT threading on OSX.
  - Fixed exit codes for information requests (as
    in "stunnel -version" or "stunnel -help").

Version 5.27, 2015.12.03, urgency: MEDIUM
* Security bugfixes
  - OpenSSL DLLs updated to version 1.0.2e.
    https://www.openssl.org/news/secadv_20151203.txt
* New features
  - Automated build testing configured with .travis.yml.
  - Added reading server certificates from hardware engines.
    For example: cert = id_45
  - Only attempt to use potentially harmful compiler or linker
    options if gcc was detected.
  - /opt/csw added to the OpenSSL directory lookup list.
  - mingw.mak updates (thx to Jose Alf.).
  - TODO list updated.

Version 5.26, 2015.11.06, urgency: MEDIUM
* Bugfixes
  - Compilation fixes for OSX, *BSD and Solaris.

Version 5.25, 2015.11.02, urgency: MEDIUM
* New features
  - SMTP client protocol negotiation support for
    "protocolUsername", "protocolPassword", and
    "protocolAuthentication" (thx to Douglas Harris).
  - New service-level option "config" to specify configuration
    commands introduced in OpenSSL 1.0.2 (thx to Stephen Wall).
  - The global option "foreground" now also accepts "quiet"
    parameter, which does not enable logging to stderr.
  - Manual page updated.
  - Obsolete OpenSSL engines removed from the Windows build:
    4758cca, aep, atalla, cswift, nuron, sureware.
  - Improved compatibility with the current OpenSSL 1.1.0-dev tree:
    gracefully handle symbols renamed from SSLeay* to OpenSSL*.
* Bugfixes
  - Fixed the "s_poll_wait returned 1, but no descriptor
    is ready" internal error.
  - Fixed "exec" hangs due to incorrect thread-local
    storage handling (thx to Philip Craig).
  - Fixed PRNG initialization (thx to Philip Craig).
  - Setting socket options no longer performed on PTYs.
  - Fixed 64-bit Windows build.

Version 5.24, 2015.10.08, urgency: MEDIUM
* New features
  - Custom CRL verification was replaced with the internal
    OpenSSL functionality.
  - *BSD support for "transparent = destination" and
    client-side "protocol = socks". This feature should
    work at least on FreeBSD, OpenBSD and OS X.
  - Added a new "protocolDomain" option for the NTLM
    authentication (thx to Andreas Botsikas).
  - Improved compatibility of the NTLM phase 1 message (thx
    to Andreas Botsikas).
  - "setuid" and "setgid" options are now also available
    in service sections.  They can be used to set owner
    and group of the Unix socket specified with "accept".
  - Added support for the new OpenSSL 1.0.2 SSL options.
  - Added OPENSSL_NO_EGD support (thx to Bernard Spil).
  - VC autodetection added to makew32.bat (thx to Andreas
    Botsikas).
* Bugfixes
  - Fixed the RESOLVE [F0] TOR extension support in SOCKS5.
  - Fixed the error code reported on the failed bind()
    requests.
  - Fixed the sequential log id with the FORK threading.
  - Restored the missing Microsoft.VC90.CRT.manifest file.

Version 5.23, 2015.09.02, urgency: LOW
* New features
  - Client-side support for the SOCKS protocol.
    See https://www.stunnel.org/socksvpn.html for details.
  - Reject SOCKS requests to connect loopback addresses.
  - New service-level option "OCSPnonce".
    The default value is "OCSPnonce = no".
  - Win32 directory structure rearranged.  The installer
    script provides automatic migration for common setups.
  - Added Win32 installer option to install stunnel for the
    current user only.  This feature does not deploy the NT
    service, but it also does not require aministrative
    privileges to install and configure stunnel.
  - stunnel.cnf was renamed to openssl.cnf in order to
    to prevent users from mixing it up with stunnel.conf.
  - Win32 desktop is automatically refreshed when the icon
    is created or removed.
  - The ca-certs.pem file is now updated on stunnel upgrade.
  - Inactive ports were removed from the PORTS file.
  - Added IPv6 support to the transparent proxy code.
* Bugfixes
  - Compilation fix for OpenSSL version older than 1.0.0.
  - Compilation fix for mingw.

Version 5.22, 2015.07.30, urgency: HIGH
* New features
  - "OCSPaia = yes" added to the configuration file templates.
  - Improved double free detection.
* Bugfixes
  - Fixed a number of OCSP bugs.  The most severe of those
    bugs caused stunnel to treat OCSP responses that failed
    OCSP_basic_verify() checks as if they were successful.
  - Fixed the passive IPv6 resolver (broken in stunnel 5.21).

Version 5.21, 2015.07.27, urgency: MEDIUM
* New features
  - Signal names are displayed instead of numbers.
  - First resolve IPv4 addresses on passive resolver requests.
    This speeds up stunnel startup on Win32 with a slow/defunct
    DNS service.
  - The "make check" target was modified to only build Win32
    executables when stunnel is built from a git repository (thx
    to Peter Pentchev).
  - More elaborate descriptions were added to the warning about
    using "verify = 2" without "checkHost" or "checkIP".
  - Performance optimization was performed on the debug code.
* Bugfixes
  - Fixed the FORK and UCONTEXT threading support.
  - Fixed "failover=prio" (broken since stunnel 5.15).
  - Added a retry when sleep(3) was interrupted by a signal
    in the cron thread scheduler.

(ryoon)

2015-12-27 18:27:19 UTC MAIN commitmail json YAML

Updated www/firefox-l10n to 43.0.2

(ryoon)