Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (2h)  pkgsrc-2024Q1 (14d)  pkgsrc-2023Q4 (42d)  pkgsrc-2023Q2 (74d)  pkgsrc-2023Q3 (154d) 

2024-05-13 02:57:17 UTC Now

2015-06-30 07:29:28 UTC MAIN commitmail json YAML

Updated devel/p5-Canary-Stability to 2006

(wen)

2015-06-30 07:28:29 UTC MAIN commitmail json YAML

Update to 2006

Upstream changes:
2006  Tue Jan 31 01:00:00 UTC 2006
- the year when things were in good shape still.
- the compatibility version test for 5.22 was wrong and errornously
          takes 5.20.1+ as unsupported.
- fix urls.

(wen)

2015-06-30 06:55:50 UTC MAIN commitmail json YAML

Updated devel/p5-Params-Validate to 1.20

(wen)

2015-06-30 06:54:39 UTC MAIN commitmail json YAML

Update to 1.20

Upstream changes:
1.20    2015-06-28

- Fixed a bug with stack handling in the XS code. If a callback sub caused
  Perl to reallocate the stack this could trigger weird errors of the form
  "Bizarre copy of ARRAY" from Perl itself. Fixed by Noel Maddy. GH #5.

- Fixed use of inlining in the XS code to work when "gcc -std=c89" is
  specified. Fixed by Vincent Pit. GH #6.

- Previously, Params::Validate would eagerly stringify all values it was
  validating, even though this stringification was only needed for error
  messages that are used when a parameter fails. For objects which overload
  stringification and do real work, this added an unnecessary
  slowdown. Stringification is now delayed until it is needed. Reported by
  Klaus. RT #105326.

(wen)

2015-06-30 06:49:00 UTC MAIN commitmail json YAML

Updated devel/p5-strictures to 2.000001

(wen)

2015-06-30 06:47:07 UTC MAIN commitmail json YAML

Update to 2.000001

Upstream changes:
2.000001 - 2015-06-28
  - update for perl 5.22 warning categories
  - avoid using goto &UNIVERSAL::VERSION on perl 5.8, since it segfaults some
    builds
  - also detect development directories based on .bzr directory
  - various test cleanups

(wen)

2015-06-30 05:46:56 UTC MAIN commitmail json YAML

update of curl to version 7.43.0. Upstream RELEASE_NOTES:

Curl and libcurl 7.43.0

Public curl releases:        147
Command line options:        176
curl_easy_setopt() options:  219
Public functions in libcurl:  58
Contributors:                1291

This release includes the following changes:

o Added CURLOPT_PROXY_SERVICE_NAME[11]
o Added CURLOPT_SERVICE_NAME[12]
o New curl option: --proxy-service-name[13]
o Mew curl option: --service-name [14]
o New curl option: --data-raw [5]
o Added CURLOPT_PIPEWAIT [15]
o Added support for multiplexing transfers using HTTP/2, enable this
  with the new CURLPIPE_MULTIPLEX bit for CURLMOPT_PIPELINING [16]
o HTTP/2: requires nghttp2 1.0.0 or later
o scripts: add zsh.pl for generating zsh completion
o curl.h: add CURL_HTTP_VERSION_2

This release includes the following bugfixes:

o CVE-2015-3236: lingering HTTP credentials in connection re-use [30]
o CVE-2015-3237: SMB send off unrelated memory contents [31]
o nss: fix compilation failure with old versions of NSS [1]
o curl_easy_getinfo.3: document 'internals' in CURLINFO_TLS_SESSION
o schannel.c: Fix possible SEC_E_BUFFER_TOO_SMALL error
o Curl_ossl_init: load builtin modules [2]
o configure: follow-up fix for krb5-config [3]
o sasl_sspi: Populate domain from the realm in the challenge [4]
o netrc: support 'default' token
o README: convert to UTF-8
o cyassl: Implement public key pinning
o nss: implement public key pinning for NSS backend
o mingw build: add arch -m32/-m64 to LDFLAGS
o schannel: Fix out of bounds array [6]
o configure: remove autogenerated files by autoconf
o configure: remove --automake from libtoolize call
o acinclude.m4: fix shell test for default CA cert bundle/path
o schannel: fix regression in schannel_recv [7]
o openssl: skip trace outputs for ssl_ver == 0 [8]
o gnutls: properly retrieve certificate status
o netrc: Read in text mode when cygwin [9]
o winbuild: Document the option used to statically link the CRT [10]
o FTP: Make EPSV use the control IP address rather than the original host
o FTP: fix dangling conn->ip_addr dereference on verbose EPSV
o conncache: keep bundles on host+port bases, not only host names
o runtests.pl: use 'h2c' now, no -14 anymore
o curlver: introducing new version number (checking) macros
o openssl: boringssl build brekage, use SSL_CTX_set_msg_callback [17]
o CURLOPT_POSTFIELDS.3: correct variable names [18]
o curl_easy_unescape.3: update RFC reference [19]
o gnutls: don't fail on non-fatal alerts during handshake
o testcurl.pl: allow source to be in an arbitrary directory
o CURLOPT_HTTPPROXYTUNNEL.3: only works with a HTTP proxy
o SSPI-error: Change SEC_E_ILLEGAL_MESSAGE description [20]
o parse_proxy: switch off tunneling if non-HTTP proxy [21]
o share_init: fix OOM crash
o perl: remove subdir, not touched in 9 years
o CURLOPT_COOKIELIST.3: Add example
o CURLOPT_COOKIE.3: Explain that the cookies won't be modified [22]
o CURLOPT_COOKIELIST.3: Explain Set-Cookie without a domain [23]
o FAQ: How do I port libcurl to my OS?
o openssl: Use TLS_client_method for OpenSSL 1.1.0+
o HTTP-NTLM: fail auth on connection close instead of looping [24]
o curl_setup: Add macros for FOPEN_READTEXT, FOPEN_WRITETEXT [25]
o curl_getdate.3: update RFC reference
o curl_multi_info_read.3: added example
o curl_multi_perform.3: added example
o curl_multi_timeout.3: added example
o cookie: Stop exporting any-domain cookies [26]
o openssl: remove dummy callback use from SSL_CTX_set_verify()
o openssl: remove SSL_get_session()-using code
o openssl: removed USERDATA_IN_PWD_CALLBACK kludge
o openssl: removed error string #ifdef
o openssl: Fix verification of server-sent legacy intermediates [27]
o docs: man page indentation and syntax fixes
o docs: Spelling fixes
o fopen.c: fix a few compiler warnings
o CURLOPT_OPENSOCKETFUNCTION: return error at once [28]
o schannel: Add support for optional client certificates
o build: Properly detect OpenSSL 1.0.2 when using configure
o urldata: store POST size in state.infilesize too [29]
o security:choose_mech remove dead code
o rtsp_do: remove dead code
o docs: many HTTP URIs changed to HTTPS
o schannel: schannel_recv overhaul [32]

This release includes the following known bugs:

o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

  Alessandro Ghedini, Alexander Dyagilev, Anders Bakken, Anthony Avina,
  Ashish Shukla, Bert Huijben, Brian Chrisman, Brian Prodoehl, Chris Araman,
  Dagobert Michelsen, Dan Fandrich, Daniel Melani, Daniel Stenberg,
  Dmitry Eremin-Solenikov, Drake Arconis, Egon Eckert, Frank Meier, Fred Stluka,
  Gisle Vanem, Grant Pannell, Isaac Boukris, Jens Rantil, Joel Depooter,
  Kamil Dudka, Linus Nielsen Feltzing, Linus Nielsen Feltzing Feltzing,
  Liviu Chircu, Marc Hoersken, Michael Osipov, Oren Souroujon, Orgad Shaneh,
  Patrick Monnerat, Patrick Rapin, Paul Howarth, Paul Oliver, Rafayel Mkrtchyan,
  Ray Satiro, Sean Boudreau, Tatsuhiro Tsujikawa, Tomas Tomecek, Viktor Szak叩ts,
  Ville Skytt辰, Yehezkel Horowitz,
  (43 contributors)

        Thanks! (and sorry if I forgot to mention someone)

References to bug reports and discussions on issues:

[1] = http://curl.haxx.se/mail/lib-2015-04/0095.html
[2] = https://github.com/bagder/curl/pull/206
[3] = https://github.com/bagder/curl/commit/5b668606527613179d0349f21b4ab0df2971e3d2#commitcomment-10473445
[4] = https://github.com/bagder/curl/pull/141
[5] = https://github.com/bagder/curl/issues/198
[6] = http://curl.haxx.se/mail/lib-2015-04/0199.html
[7] = https://github.com/bagder/curl/issues/244
[8] = https://github.com/bagder/curl/issues/219
[9] = https://github.com/bagder/curl/pull/258
[10] = https://github.com/bagder/curl/issues/254
[11] = http://curl.haxx.se/libcurl/c/CURLOPT_PROXY_SERVICE_NAME.html
[12] = http://curl.haxx.se/libcurl/c/CURLOPT_SERVICE_NAME.html
[13] = http://curl.haxx.se/docs/manpage.html#--proxy-service-name
[14] = http://curl.haxx.se/docs/manpage.html#--service-name
[15] = http://curl.haxx.se/libcurl/c/CURLOPT_PIPEWAIT.html
[16] = http://curl.haxx.se/libcurl/c/CURLMOPT_PIPELINING.html
[17] = https://github.com/bagder/curl/issues/275
[18] = https://github.com/bagder/curl/issues/281
[19] = https://github.com/bagder/curl/issues/282
[20] = https://github.com/bagder/curl/issues/267
[21] = http://curl.haxx.se/mail/lib-2015-05/0056.html
[22] = http://curl.haxx.se/mail/lib-2015-05/0115.html
[23] = http://curl.haxx.se/mail/lib-2015-05/0137.html
[24] = https://github.com/bagder/curl/issues/256
[25] = https://github.com/bagder/curl/pull/258#issuecomment-107093055
[26] = https://github.com/bagder/curl/issues/292
[27] = https://rt.openssl.org/Ticket/Display.html?id=3621&user=guest&pass=guest
[28] = http://curl.haxx.se/mail/lib-2015-06/0047.html
[29] = http://curl.haxx.se/mail/lib-2015-06/0019.html
[30] = http://curl.haxx.se/docs/adv_20150617A.html
[31] = http://curl.haxx.se/docs/adv_20150617B.html
[32] = https://github.com/bagder/curl/issues/244

(spz)

2015-06-30 04:12:17 UTC MAIN commitmail json YAML

2015-06-30 03:27:01 UTC MAIN commitmail json YAML

remove redundant patch, fixed in 1af15aaf278edcf6f6de94774350e34a80883c24

(tnn)

2015-06-30 02:40:40 UTC MAIN commitmail json YAML

Updated math/R to 3.2.1

(wen)

2015-06-30 02:38:52 UTC MAIN commitmail json YAML

Update to 3.2.1

Upstream changes:
CHANGES IN R 3.2.1
NEW FEATURES

    utf8ToInt() now checks that its input is valid UTF-8 and returns NA if it is not.

    install.packages() now allows type = "both" with repos = NULL if it can infer the type of file.

    nchar(x, *) and nzchar(x) gain a new argument keepNA which governs how the result for NAs in x is determined. For the R 3.2.x series, the default remains FALSE which is fully back compatible. From R 3.3.0, the default will change to keepNA = NA and you are advised to consider this for code portability.

    news() more flexibly extracts dates from package ���NEWS.Rd��� files.

    lengths(x) now also works (trivially) for atomic x and hence can be used more generally as an efficient replacement of sapply(x, length) and similar.

    The included version of PCRE has been updated to 8.37, a bug-fix release.

    diag() no longer duplicates a matrix when extracting its diagonal.

    as.character.srcref() gains an argument to allow characters corresponding to a range of source references to be extracted.

BUG FIXES

    acf() and ccf() now guarantee values strictly in [-1,1] (instead of sometimes very slightly outside). PR#15832.

    as.integer("111111111111") now gives NA (with a warning) as it does for the corresponding numeric or negative number coercions. Further, as.integer(M + 0.1) now gives M (instead of NA) when M is the maximal representable integer.

    On some platforms nchar(x, "c") and nchar(x, "w") would return values (possibly NA) for inputs which were declared to be UTF-8 but were not, or for invalid strings without a marked encoding in a multi-byte locale, rather than give an error. Additional checks have been added to mitigate this.

    apply(a, M, function(u) c(X = ., Y = .)) again has dimnames containing "X" and "Y" (as in R < 3.2.0).

    (Windows only) In some cases, the --clean option to R CMD INSTALL could fail. (PR#16178)

    (Windows only) choose.files() would occasionally include characters from the result of an earlier call in the result of a later one. (PR#16270)

    A change in RSiteSearch() in R 3.2.0 caused it to submit invalid URLs. (PR#16329)

    Rscript and command line R silently ignored incomplete statements at the end of a script; now they are reported as parse errors. (PR#16350)

    Parse data for very long strings was not stored. (PR#16354)

    plotNode(), the workhorse of the plot method for "dendrogram"s is no longer recursive, thanks to Suharto Anggono, and hence also works for deeply nested dendrograms. (PR#15215)

    The parser could overflow internally when given numbers in scientific format with extremely large exponents. (PR#16358)

    If the CRAN mirror was not set, install.packages(type = "both") and related functions could repeatedly query the user for it. (Part of PR#16362)

    The low-level functions .rowSums() etc. did not check the length of their argument, so could segfault. (PR#16367)

    The quietly argument of library() is now correctly propagated from .getRequiredPackages2().

    Under some circumstances using the internal PCRE when building R fron source would cause external libs such as -llzma to be omitted from the main link.

    The .Primitive default methods of the logic operators, i.e., !, & and |, now give correct error messages when appropriate, e.g., for `&`(TRUE) or `!`(). (PR#16385)

    cummax(x) now correctly propagates NAs also when x is of type integer and begins with an NA.

    summaryRprof() could fail when the profile contained only two records. (PR#16395)

    HTML vignettes opened using vignette() did not support links into the rest of the HTML help system. (Links worked properly when the vignette was opened using browseVignettes() or from within the help system.)

    arima(*, xreg = .) (for d >= 1) computes estimated variances based on a the number of effective observations as in R version 3.0.1 and earlier. (PR#16278)

    slotNames(.) is now correct for "signature" objects (mostly used internally in methods).

    On some systems, the first string comparison after a locale change would result in NA.

(wen)

2015-06-29 21:44:34 UTC MAIN commitmail json YAML

2015-06-29 21:44:22 UTC MAIN commitmail json YAML

Updated chat/ejabberd to 15.06

(fhajny)

2015-06-29 21:44:10 UTC MAIN commitmail json YAML

Update chat/ejabberd to 15.06.

Message archiving
- Add support for message archiving in Mnesia or relational databases.

Protocol
- Document protocol support and version inside each module and use that
  info in documentation
- Remove deprecated XEP-0090 Entity Time and XEP-0091 Delayed Delivery
- Don't add body element to MUC subject messages
- Do not bounce normal messages sent to unavailable resource

Admin command-line tool
- Fixed several ejabberd commands
- Allow password with ';' passed in ejabberdctl
- Improve ejabberdctl external module install code, allows better
  error checking
- New ping ejabberdctl command to check if the node is up and running
- New commands for Multi-User chat management: get_room_options and
  get_user_rooms

Configuration
- Add config validation at startup
- Fix include of non yaml config files
- New option hide_sensitive_log_data to hide client IP address in log
- New option net_ticktime, to fine tune Erlang cluster networking
- New option max_users_presence in mod_muc, to avoid broadcasting
  presence packet from users after a chat room has reached a given size

Elixir
- Add correct package version for mix

Security
- New options to configure your own custom Diffie-Helman parameters:
  dhfile and s2s_dhfile

PubSub
- Enforce definition of pubsub node max_items
- Fix pubsub/odbc crash on remote user unsubscribe
- Fix use of publish_only affiliation with odbc backend

Multicast
- Pick first local multicast service, otherwise remote

Databases
- Fix anonymous user login, it wasn't stored in anonymous mnesia table
- Fixed some string/binary issues in ejabberd_odbc
- PostgreSQL storage: added missing sm (session manager) table

Packaging
- Microsoft Windows 64 bits installer
- Provide RPM and DEB binary packages for linux 64 bits.

Clean up
- Remove obsolete doc and win32 files

(fhajny)

2015-06-29 21:41:11 UTC MAIN commitmail json YAML

2015-06-29 21:35:04 UTC MAIN commitmail json YAML

2015-06-29 21:31:43 UTC MAIN commitmail json YAML

2015-06-29 21:27:01 UTC MAIN commitmail json YAML

2015-06-29 21:18:09 UTC MAIN commitmail json YAML

Make sure we pickup the correct javac.

(markd)

2015-06-29 21:13:30 UTC MAIN commitmail json YAML

2015-06-29 21:09:11 UTC MAIN commitmail json YAML

2015-06-29 21:06:14 UTC MAIN commitmail json YAML

2015-06-29 17:02:23 UTC MAIN commitmail json YAML

Updated security/py-ecdsa to 0.13

(gls)

2015-06-29 17:01:09 UTC MAIN commitmail json YAML

2015-06-29 17:00:00 UTC MAIN commitmail json YAML

Update security/py-ecdsa to 0.13
--------------------------------

pkgsrc changes:

- Adjust EGG_NAME

Upstream changes:

* Release 0.13 (07 Feb 2015)

Fix the argument order for Curve constructor (put openssl_name= at the end,
with a default value) to unbreak compatibility with external callers who used
the 0.11 convention.

* Release 0.12 (06 Feb 2015)

Switch to Versioneer for version-string management (fixing the broken
`ecdsa.__version__` attribute). Add Curve.openssl_name property. Mention
secp256k1 in README, test against OpenSSL. Produce "wheel" distributions. Add
py3.4 and pypy3 compatibility testing. Other minor fixes.

(gls)

2015-06-29 16:50:38 UTC MAIN commitmail json YAML

Updated x11/xfce4-session to 4.12.1

(youri)

2015-06-29 16:50:01 UTC MAIN commitmail json YAML

Update to 4.12.1:
4.12.0
======
Stable release of xfce4-session for Xfce 4.12.

* Miscellaneous bug fixes:
- Remove AC_CHECK_HEADER_STDBOOL, it was only
  added in autoconf 2.69 and we dont use
  stdbool.h anyway
- Add symlinks to the old icons (Bug #11513)
- Rename action icon names (Bug #11513)
- Gracefully handle the sessions dir being
  readonly (Bug #11307)
- Add ConsoleKit2 support
- Create scripts/xinitrc from scripts/xinitrc.in
  created by configure

* Translation updates:
  Asturian (ast), Bulgarian (bg), Spanish (Castilian) (es),
  Finnish (fi), French (fr), Hebrew (he), Romanian (ro),
  Slovak (sk), Slovenian (sl).

4.11.1
======
- Add DesktopNames to .desktop file
- Export XDG_CURRENT_DESKTOP (Bug #11239)
- Expand usage of xfsm_verbose for debugging
- Don't log errors when trying to close non-existent FDs
- Add error checking for fcntl
- Properly print the dbus error message
- Check the return value of select
- atoi (argv[2]) is unsafe
- Check the return value of gtk_tree_selection_get_selected
- gtk_cell_renderer_text_new is never used
- Minor Autotools Updates
- Add fallback DragonflyBSD support for suspend/hibernate
- Use pkexec for xfsm-shutdown (Bug 9952)
- Handle gpg and ssh agents separately
  Patch by Mikhail Efremov
- Non-POSIX compliant test used in startxfce4 (Bug 10828)
  Patch by seejay
- Update copyright year (Bug 10768)
- polkit_unix_process_new is deprecated (Bug 10793)
  Patch by Baurzhan Muftakhidinov
- Add logind runtime detection to support suspend/hibernate (Bug 9952)
  Patch by Guido Berhoerster
- Translation Updates: Asturian (ast), Bulgarian (bg),
  German (de), Spanish (Castilian) (es), Finnish (fi),
  French (fr), Norwegian Bokmål (nb), Dutch (Flemish) (nl),
  Polish (pl), Swedish (sv), Phan Vĩnh Thịnh (vi).

4.11.0
======
- Remove gnome-keyring remains.
- Remove xfce environment functions and use glib.
- Add shutdown/reboot functionality for systemd (bug #8729).
- Fix duplicated accelerators.
- Use the async spawn function of glib.
- Store the watch function id to avoid possible double free (bug #9709).
- Translation updates: Amharic, Arabic, Asturian, Azerbaijani,
  Belarusian, Bulgarian, Bengali, Bengali (India), Catalan (Valencian),
  Czech, Danish, German, Dzongkha, Greek, English (Australia), English
  (United Kingdom), Spanish (Castilian), Basque, Persian, Finnish,
  French, Galician, Gujarati, Hindi, Croatian, Hungarian, Indonesian,
  Icelandic, Italian, Japanese, Georgian, Kazakh, Korean, Lithuanian,
  Latvian, Macedonian, Marathi, Malay, Norwegian Bokmal, Dutch
  (Flemish), Norwegian Nynorsk, Occitan (post 1500), Polish,
  Portuguese, Portuguese (Brazilian), Romanian, Russian, Slovak,
  Albanian, Serbian, Swedish, Tamil, Thai, Turkish, Uyghur, Ukrainian,
  Urdu, Urdu (Pakistan), Chinese (China), Chinese (Hong Kong), Chinese
  (Taiwan).

(youri)

2015-06-29 15:51:31 UTC MAIN commitmail json YAML

Updated x11/xfce4-notes-plugin to 1.8.1

(youri)

2015-06-29 15:51:11 UTC MAIN commitmail json YAML

Update to 1.8.1:

=== Release 1.8.1 ===
build: install graphics tabs/ for gtk-2.0 theme (bug #11839) bis
panel-plugin: fit button inside a single panel row
build: install graphics tabs/ for gtk-2.0 theme (bug #11839)

=== Release 1.8.0 ===
gtkrc: always show steppers
gtkrc: theme GtkNotebook
gtkrc: fix top tabs gap
gtkrc: set background tabs less opaque
gtkrc: no need for bg[ACTIVE], use shade on fg[ACTIVE], and redefine tabs
border
gtkrc: fix syntax and switch fg[NORMAL] to @notes_fg_color
build: remove soname versioning and install panel plugin to
$datadir/xfce4/panel/plugins
build: bump automake to 1.13
build: adjust to newer AM/AC macros
build: fix s/AM_CFLAGS/AM_CPPFLAGS
build: Uinstall hook for icon cache file

(youri)

2015-06-29 15:03:30 UTC MAIN commitmail json YAML

Updated time/xfce4-orage to 4.12.1

(youri)

2015-06-29 15:03:01 UTC MAIN commitmail json YAML

Update to 4.12.1:

Release 4.12.1
Fixed critical bug preventing the use of panel plugin due to wrong name.

Release 4.12.0
Mainly translation updates.

(youri)

2015-06-29 14:48:01 UTC MAIN commitmail json YAML

Updated sysutils/xfce4-xkb-plugin to 0.7.1

(youri)

2015-06-29 14:47:31 UTC MAIN commitmail json YAML

Update to 0.7.1:
2015-02-27 18:29
    * New version 0.7.1 - to be used with xfce4-settings 4.11 or later;
      do *not* use this version with XFCE 4.8 or 4.10, it won't work!
    * Many translation updates
    * Fix crash in xkb_util_normalize_group_name
    * Add Montenegrin flag; add el.svg as a synonym for gr.svg

(youri)

2015-06-29 13:18:26 UTC MAIN commitmail json YAML

Updated www/p5-Mojolicious to 6.12

(wen)

2015-06-29 13:16:52 UTC MAIN commitmail json YAML

Updated multimedia/ffmpeg2 to 2.7.1; graphics/lensfun to 0.3.1

(adam)

2015-06-29 13:15:22 UTC MAIN commitmail json YAML

Update to 6.12

Upstream changes:
6.12  2015-06-18
  - Welcome to the Mojolicious core team Dan Book.
  - Added TO_JSON method to Mojo::Collection. (wttw)
  - Added find_packages function to Mojo::Loader.
  - Fixed bug in Mojo::Message where multipart content would get downgraded
    unnecessarily.

(wen)

2015-06-29 13:12:27 UTC MAIN commitmail json YAML

version 2.7.1:
- postproc: fix unaligned access
- avformat: clarify what package needs to be compiled with SSL support
- avcodec/libx264: Avoid reconfig on equivalent aspect ratios
- avcodec/flacenc: Fix Invalid Rice order
- tls_gnutls: fix hang on disconnection
- avcodec/hevc_ps: Only discard overread VPS if a previous is available
- ffmpeg: Free last_frame instead of just unref
- avcodec/ffv1enc: fix bps for >8bit yuv when not explicitly set
- avio: fix potential crashes when combining ffio_ensure_seekback + crc
- examples/demuxing_decoding: use properties from frame instead of video_dec_ctx
- h264: er: Copy from the previous reference only if compatible
- doc: fix spelling errors
- configure: only disable VSX for !ppc64el
- ffmpeg_opt: Check for localtime() failure
- avformat/singlejpeg: fix standalone compilation
- configure: Disable VSX on unspecified / generic CPUs
- avformat: Fix bug in parse_rps for HEVC.
- takdec: ensure chan2 is a valid channel index
- avcodec/h264_slice: Use AVFrame dimensions for grayscale handling

(adam)

2015-06-29 13:11:12 UTC MAIN commitmail json YAML

Release 0.3.1

Lensfun 0.3.1 maintenance release is out with more than 60 new lens profiles and another 30 updated calibrations.

Other changes:

Improved performance when used with 32-bit float image buffers
Introduced automated testing
lensfun-update-data now also works without root privileges
Fixed autoscaling for panoramic and equirectangular projections

(adam)

2015-06-29 12:30:46 UTC MAIN commitmail json YAML

Updated sysutils/logrotate to 0.9.1

(nils)

2015-06-29 12:28:55 UTC MAIN commitmail json YAML

Updated to version 3.9.1. Changelog :
3.9.0 -> 3.9.1
- Fix off-by-one error which can lead to crash when copytruncate is used.
3.8.9 -> 3.9.0
- Fix crash when using long dateformat. [nmerdan]
- Add support for %H dateformat. [czchen]
- Fix regression introduced in 3.8.9 when when rotating multiple
  logs when one of them is missing.
- In the debug mode, do not skip the code-path which handles the case when
  the last rotation does not exist. [Sergey Vidishev]
- Show more precise description when "log does not need rotating".\
- Add new -l option to log verbose output to file. The file is overwritten
  on every logrotate execution.
- Allow rotation of sparse files with copytruncate.

PKgsrc changes :
Switched from old Makefile to new building procedure, using autogen,
configure and (g)make, which was introduced in version 3.8.8.
The new patch file contains a workaround to get the new building procedure
working.

(nils)

2015-06-29 11:24:32 UTC MAIN commitmail json YAML

2015-06-29 11:17:24 UTC MAIN commitmail json YAML

Updated sysutils/xfce4-diskperf-plugin to 2.5.5

(youri)

2015-06-29 11:16:48 UTC MAIN commitmail json YAML

Update to 2.5.5 (2015/3/3):
-----------------
* Use the new GtkTooltip API
* Fix a memory leak in the FreeBSD codepath (#11153)
* Add support for FreeBSD (bug #10350)
* New translations: th, ms, bg, oc, hr, en_AU, sr
* Updated translations: ar, ast, bg, cs, de, es, fr, it,
  hr, hu. ko, nb, nl, ug, pl, sv, tr, zh_CN, zh_TW

(youri)

2015-06-29 11:15:14 UTC MAIN commitmail json YAML

Updated x11/xf86-input-vmmouse to 13.1.0

(wiz)

2015-06-29 11:15:05 UTC MAIN commitmail json YAML

Update to 13.1.0 (all new patches have already been accepted upstream):

This release is intended for general distro inclusion,
Testing has been performed on various linux distros, FreeBSD 10.1 and
Solaris 11.2.

This release contains a number of build fixes and also changes to deal with
improved vmmouse port security and backoff if a vmmouse kernel module is
encountered. An additional dependency on libudev is introduced on linux.

Note that if the new linux 4.1 vmmouse functionality is used, the user-space
xf86-input-vmmouse driver can be skipped. Distros that want to keep the
xf86-input-vmmouse driver as a backup should *not* use any version prior to
13.0.99 since those versions would compete with the in-kernel vmmouse driver
for mouse input.

13.1.0:
Thomas Hellstrom (1):
      Bump version number for release

13.0.99:

Gaetan Nadon (6):
      Autoconf: remove AC_PROG_CC which overrides AC_PROG_CC_C99 from util-macros
      Autoconf: replace deprecated AC_HELP_STRING with AS_HELP_STRING
      Autoconf: minimum level required is 2.60
      Autoconf: Fix deprecated use of AC_OUTPUT
      "make dist" fails when workstation has no udev package
      tools: make install fails when user has no write permission in /lib

Jeremy Huddleston Sequoia (1):
      Always include config.h first

Lo誰c Yhuel (1):
      Fix wheel button labels

Peter Hutterer (4):
      Free the vmmouse data on UnInit
      Handle DEVICE_ABORT on ABI 19.1
      Don't de-reference pMse if it hasn't been initialised yet
      Drop AM_MAINTAINER_MODE

Stefan Dirsch (1):
      vmmouse_client.h: Include xorg-server.h before xf86_OSproc.h

Thomas Hellstrom (5):
      Back off if we detect a vmmouse kernel driver v3
      vmmouse: Run vmmouse_detect as an io privileged process
      vmmouse: Add support for the access restrict command
      vmmouse: Fix vmmouse_detect build on BSD
      vmmouse: Bump version number for release

(wiz)

2015-06-29 11:13:58 UTC MAIN commitmail json YAML

Updated time/p5-DateTime-TimeZone to 1.92

(wiz)

2015-06-29 11:13:50 UTC MAIN commitmail json YAML

Update to 1.92:

1.92    2015-06-22

- This distro now depends on DateTime::TimeZone::Local::Win32 when it is being
  installed on a Windows OS. This should lead to a better experience for
  Windows users. Requested by Matthew Horsfall and Karen Etheridge. RT
  #103275.

(wiz)

2015-06-29 11:13:38 UTC MAIN commitmail json YAML

Updated mail/p5-Net-SMTP-SSL to 1.03

(wiz)

2015-06-29 11:13:30 UTC MAIN commitmail json YAML

Update to 1.03:

1.03    2015-06-20

  - $net_smtp_ssl->isa('Net::SMTP') is now true

(wiz)

2015-06-29 11:13:17 UTC MAIN commitmail json YAML

Updated www/p5-CGI to 4.21

(wiz)

2015-06-29 11:13:09 UTC MAIN commitmail json YAML

Update to 4.21:

4.21 2015-06-16
- Fix regression of tmpFileName when calling with a plain string (GH #178,
  thanks to Simon McVittie for the report and fix)

(wiz)

2015-06-29 11:12:55 UTC MAIN commitmail json YAML

Updated x11/modular-xorg-server to 1.17.2

(wiz)

2015-06-29 11:12:45 UTC MAIN commitmail json YAML

Update to 1.17.2:

This picks up a pile of fixes from master.  Notable highlights:

- Fix for CVE-2015-3164 in Xwayland
- Fix int10 setup for vesa
- Fix regression in server-interpreted auth
- Fix fb setup on big-endian CPUs
- Build fix for for gcc5

Complete changelog:

Aaron Plattner (2):
      xfree86: Fix xf86_check_platform_slot's handling of PCI
      xfree86: Add GPU screens even if there are no active GDevs

Adam Jackson (1):
      xserver 1.17.2

Adel Gadllah (1):
      modesetting: Fix software cursor fallback

Alan Coopersmith (2):
      Clear ListenTransConns entries in CloseWellKnownConnections
      Accept x86_64 as well as i*86 for $host_cpu in Solaris on x86

Brent Collins (1):
      shm: Fix xselinux resource initialization for xinerama pixmaps

Chris Wilson (2):
      shm: Fix use-after-free in ShmDestroyPixmap
      present: Copy unflip contents back to the Screen Pixmap

Colin Harrison (2):
      os/xdmcp.c: Include Xtrans.h when building for WIN32
      os/utils.c: Don't try to build os_move_fd() for WIN32

Dave Airlie (2):
      os/access: fix regression in server interpreted auth
      glamor: don't do render ops with matching source/dest (v2)

Dima Ryazanov (1):
      xwayland: Implement smooth scrolling

Egbert Eich (6):
      symbols: Fix sdksyms.sh to cope with gcc5
      Xephyr: Don't crash when no command line argument is specified
      Xephyr: Print default server display number if none is specified
      Xephyr: Fix compile when debugging is enabled
      Xephyr: Fix screen image draw for the non-Glamor & non-XHSM case
      Xephyr: Fix broken image when endianess of client machine and host-Xserver differ

Emil Velikov (2):
      randr: remove chatty error messages
      randr: use randr: prefix in ErrorF()

Hans de Goede (1):
      Re-enable non serverfd input devices immediately on vtenter

Jason Gerecke (2):
      xfree86: Return NULL from xf86CompatOutput if no compat_output is defined
      dix: Do not allow device transform to be set on valuatorless devices

Jon TURNEY (9):
      ephyr: Avoid a segfault with 'DISPLAY= Xephy -glamor'
      os: XDMCP options like -query etc. should imply -listen tcp
      os: Teach vpnprintf() how to handle "%*.*s"
      hw/xwin/glx: Refactor parsing of the <proto> XML element
      hw/xwin/glx: Improve code generator to deal with latest Khronos OpenGL registry XML
      hw/xwin: Report Cygwin version information in log
      glamor: Fix build when configured --enable-glamor --disable-xshmfence
      hw/xwin/winclipboard: Link xwinclip with -lpthread
      hw/xnest: Fix build for MinGW

Jonathan Gray (2):
      glamor: remove const from the return type of glamor_get_drawable_location()
      glamor: fix build when DRI3 is not defined

J端rg Billeter (1):
      int10: Fix error check for pci_device_map_legacy

Keith Packard (1):
      mi: Partial pie-slice filled arcs may need more space for spans

Maarten Lankhorst (4):
      glamor: only use (un)pack_subimage when available
      glamor: do not check for gl errors in glamor_build_program
      glamor: Use GL_FRAMEBUFFER instead of GL_READ_FRAMEBUFFER
      glamor: GL_TEXTURE_MAX_LEVEL is not available on GLES2

Michal Srb (1):
      Expose GetMaster to modules.

Michel D辰nzer (2):
      Add AC_SYS_LARGEFILE defines to dix-config.h
      modesetting: Include dix-config.h from dumb_bo.c

Olivier Fourdan (4):
      ephyr: Fail if glamor is requested but not usable
      xwayland: Add dependency on glamor libs
      glamor: check max native ALU instructions
      dix: Fix image byte order on big endian hardware

Ray Strode (5):
      systemd-logind: filter out non-signal messages from message filter
      systemd-logind: don't second guess D-Bus default timeout
      xwayland: Enable access control on open sockets [CVE-2015-3164 1/3]
      os: support new implicit local user access mode [CVE-2015-3164 2/3]
      xwayland: default to local user if no xauth file given. [CVE-2015-3164 3/3]

Robert Ancell (1):
      xwayland: Fix error strings

Rui Matos (2):
      dix/events: Set currentTime to the given time stamp in NoticeTime
      xwayland: Throttle our cursor surface updates with a frame callback

Vicente Olivert Riera (1):
      backtrace.c: Fix word cast to a pointer

(wiz)

2015-06-29 11:12:14 UTC MAIN commitmail json YAML

Updated x11/xf86-video-vesa to 2.3.4

(wiz)

2015-06-29 11:12:05 UTC MAIN commitmail json YAML

Update to 2.3.4:

Minor update to fix PanelID support.  The minimum xserver version is
now 1.6; if you haven't updated your xserver in the last six years, now
would be a good time.

Adam Jackson (3):
      configure: Drop PanelID test
      Don't include deprecated xf86PciInfo.h
      vesa 2.3.4

Alan Coopersmith (1):
      Raise required version of xorg-server to >= 1.6

(wiz)

2015-06-29 11:06:49 UTC MAIN commitmail json YAML

2015-06-29 11:02:49 UTC MAIN commitmail json YAML

Updated net/xfce4-wavelan-plugin to 0.5.12

(youri)

2015-06-29 11:02:30 UTC MAIN commitmail json YAML

2015-06-29 10:50:29 UTC MAIN commitmail json YAML

Updated x11/xfce4-garcon to 0.5.0

(youri)

2015-06-29 10:50:17 UTC MAIN commitmail json YAML

Update to 0.5.0, this bring a new dependency; gtk3.

(youri)

2015-06-29 10:46:42 UTC MAIN commitmail json YAML

Updated x11/xfce4-places-plugin to 1.7.0

(youri)

2015-06-29 10:46:31 UTC MAIN commitmail json YAML

2015-06-29 10:41:36 UTC MAIN commitmail json YAML

Updated x11/xfce4-eyes-plugin to 4.4.4

(youri)

2015-06-29 10:41:25 UTC MAIN commitmail json YAML

2015-06-29 10:38:11 UTC MAIN commitmail json YAML

Updated x11/xfce4-exo to 0.10.6

(youri)

2015-06-29 10:38:00 UTC MAIN commitmail json YAML

2015-06-29 10:36:50 UTC MAIN commitmail json YAML

Updated x11/xfce4-desktop to 4.12.2

(youri)

2015-06-29 10:36:40 UTC MAIN commitmail json YAML

2015-06-29 10:35:29 UTC MAIN commitmail json YAML

Updated wm/xfce4-wm to 4.12.3

(youri)

2015-06-29 10:35:18 UTC MAIN commitmail json YAML

2015-06-29 10:29:17 UTC MAIN commitmail json YAML

Updated sysutils/xfce4-fsguard-plugin to 1.0.2

(youri)

2015-06-29 10:29:06 UTC MAIN commitmail json YAML

2015-06-29 10:26:07 UTC MAIN commitmail json YAML

Updated multimedia/xfce4-mpc-plugin to 0.4.5

(youri)

2015-06-29 10:25:53 UTC MAIN commitmail json YAML

2015-06-29 09:49:51 UTC MAIN commitmail json YAML

2015-06-29 09:24:15 UTC MAIN commitmail json YAML

Mention freeze end.

(wiz)

2015-06-29 09:23:22 UTC pkgsrc-2015Q2 commitmail json YAML

Add CHANGES file for pkgsrc-2015Q2

(wiz)

2015-06-28 17:11:13 UTC MAIN commitmail json YAML

2015-06-28 16:32:25 UTC MAIN commitmail json YAML

Explicitly restrict upper version, ghc and ghc7 have incompatible
buildlink3.mk files.

(joerg)

2015-06-28 15:36:27 UTC MAIN commitmail json YAML

Note update of php packages:

lang/php54 5.4.42nb1
lang/php55 5.5.26nb1
lang/php56 5.6.10nb1

(taca)

2015-06-28 15:35:33 UTC MAIN commitmail json YAML

2015-06-28 15:34:50 UTC MAIN commitmail json YAML

2015-06-28 15:34:16 UTC MAIN commitmail json YAML

2015-06-28 15:18:09 UTC MAIN commitmail json YAML

2015-06-28 15:16:42 UTC MAIN commitmail json YAML

+ colordiff-1.0.15, cups-filters-1.0.70, digikam-4.11, erlang-18.0,
  gcc48-4.8.5, git-base-2.4.5, gtexinfo-6.0, libetonyek-0.1.3,
  liblangtag-0.5.7, mame-0.163, mono-4.0.2.5, musicpd-0.19.10,
  pango-1.37.1, pspp-0.8.5, py-setuptools-18.0.1, py-test-2.7.2,
  raine-0.64.5, socat-1.7.3.0 [pkg/49996], waf-1.8.11, x264-devel-20150627,
  xf86-input-vmmouse-13.1.0 [wiz].

(wiz)

2015-06-28 13:09:35 UTC MAIN commitmail json YAML

Adjust perl script for 5.22 fallout.

Now, if defined(%foo) is an error, and one must use if %foo.

(gdt)

2015-06-27 22:38:33 UTC MAIN commitmail json YAML

Not MAKE_JOBS_SAFE.

(joerg)

2015-06-27 22:38:07 UTC MAIN commitmail json YAML

2015-06-27 22:37:42 UTC MAIN commitmail json YAML

Tighten JVM_MAX_HEAP used during the build to 800MB, so that the build
will work comfortable within a 2GB limit.

(joerg)

2015-06-27 22:35:41 UTC MAIN commitmail json YAML

Explicitly specify build system type, so that Module::Build::Compat is
not tried.

(joerg)

2015-06-27 22:35:00 UTC MAIN commitmail json YAML

Kill a symlink from the distfile that prevents build with Perl 5.22.

(joerg)

2015-06-27 18:46:35 UTC MAIN commitmail json YAML

MirBSD also has SHA1Init() in libc.

Pointed out by bsiegert@

(sevan)

2015-06-27 18:43:05 UTC MAIN commitmail json YAML

Fix missing config directory during build.

(joerg)

2015-06-27 18:42:42 UTC MAIN commitmail json YAML

2015-06-27 18:41:40 UTC MAIN commitmail json YAML

Disable register use warning for clang, gperf still has no way to create
modern code without such nonsense. Fix definition inconsistency.

(joerg)

2015-06-27 09:34:36 UTC MAIN commitmail json YAML

2015-06-27 09:32:15 UTC MAIN commitmail json YAML

Depends on netpbm. PKGREVISION -> 18

(dholland)

2015-06-27 07:08:14 UTC MAIN commitmail json YAML

Pass -freal-loops if the compiler is clang or gcc. This does not fix
the build, but it gets further now.

(dholland)

2015-06-27 06:30:04 UTC MAIN commitmail json YAML

Add oracle-jdk8 to the accepted list.

NB: I'm not game enough to do it in the freeze, but it looks like the
JVM version detection patching could be removed - it appears no longer
necessary now that Pkgsrc passes in the correct RXTX_PATH and JHOME_PATH
itself.  At any rate, adding version 8 is not required for the oracle-jdk8
build to complete smoothly.

(dsainty)

2015-06-26 19:25:12 UTC MAIN commitmail json YAML

Fix configure stage error when both of -apache-mpm-event and
-apache-mpm-worker is set.
And fix PLIST mismatch error.

(ryoon)

2015-06-26 16:51:53 UTC MAIN commitmail json YAML

Updated devel/py-astor to 0.5

(rodent)

2015-06-26 16:51:36 UTC MAIN commitmail json YAML

0.5    -- Added support for Python 3.5 infix matrix
          multiplication

(rodent)

2015-06-26 16:14:04 UTC MAIN commitmail json YAML

Updated databases/py-python-sql to 0.7

(rodent)

2015-06-26 16:13:51 UTC MAIN commitmail json YAML

Version 0.7 - 2015-05-19
* Fix WINDOW and HAVING params order in Select
* Add window functions
* Add filter and within group to aggregate
* Add limitstyle with 'offset' and 'limit'
* Add Lateral

(rodent)

2015-06-26 16:10:11 UTC MAIN commitmail json YAML

Updated converters/py-cairosvg to 1.0.15

(rodent)

2015-06-26 16:09:59 UTC MAIN commitmail json YAML

Version 1.0.15, released on 2015-06-22
======================================

* Use xMidYMid as default preserveAspectRatio value

Version 1.0.14, released on 2015-06-02
======================================

* Support the shape-rendering property

Version 1.0.13, released on 2015-02-26
======================================

* Fix end markers

Version 1.0.12, released on 2015-02-26
======================================

* Don't crash when paths with markers end with a move_to action

Version 1.0.11, released on 2015-02-11
======================================

* Allow commas in viewboxes

Version 1.0.10, released on 2015-02-09
======================================

* Allow quotes around font names

(rodent)

2015-06-26 16:09:49 UTC MAIN commitmail json YAML

Attempt to fix various build issues:

- Explicitly disable samba-regedit for now, it is built depending on
  various curses characteristics that we do not currently support.

- Avoid epoll implementation on SmartOS.

- Pull in Active Directory and LDAP options from net/samba, LDAP support
  is dynamically configured and we need to ensure that, if enabled, we
  correctly pull in openldap.  The SunOS native LDAP is missing some TLS
  functions that Samba depends upon.

Tested with various PKG_OPTIONS combinations, fixes build on SmartOS.

(jperkin)

2015-06-26 13:51:57 UTC MAIN commitmail json YAML

Always use current system version SDK avoiding future SDKs, because this makes unuable binaries; use ksh as wrapper script on newer systems as well

(adam)

2015-06-26 13:48:18 UTC MAIN commitmail json YAML

+nginx-devel-1.9.2 - for whomever cares about this.

(rodent)

2015-06-26 13:47:08 UTC MAIN commitmail json YAML

2015-06-26 13:46:53 UTC MAIN commitmail json YAML

Update to latest stable. Resolves CVE-2014-3616. From CHANGELOG:

Changes with nginx 1.8.0                                        21 Apr 2015
    *) 1.8.x stable branch.

Changes with nginx 1.7.12                                        07 Apr 2015
    *) Feature: now the "tcp_nodelay" directive works with backend SSL
      connections.
    *) Feature: now thread pools can be used to read cache file headers.
    *) Bugfix: in the "proxy_request_buffering" directive.
    *) Bugfix: a segmentation fault might occur in a worker process when
      using thread pools on Linux.
    *) Bugfix: in error handling when using the "ssl_stapling" directive.
    *) Bugfix: in the ngx_http_spdy_module.

Changes with nginx 1.7.11                                        24 Mar 2015
    *) Change: the "sendfile" parameter of the "aio" directive is
      deprecated; now nginx automatically uses AIO to pre-load data for
      sendfile if both "aio" and "sendfile" directives are used.
    *) Feature: experimental thread pools support.
    *) Feature: the "proxy_request_buffering", "fastcgi_request_buffering",
      "scgi_request_buffering", and "uwsgi_request_buffering" directives.
    *) Feature: request body filters experimental API.
    *) Feature: client SSL certificates support in mail proxy.
    *) Feature: startup speedup when using the "hash ... consistent"
      directive in the upstream block.
    *) Feature: debug logging into a cyclic memory buffer.
    *) Bugfix: in hash table handling.
    *) Bugfix: in the "proxy_cache_revalidate" directive.
    *) Bugfix: SSL connections might hang if deferred accept or the
      "proxy_protocol" parameter of the "listen" directive were used.
    *) Bugfix: the $upstream_response_time variable might contain a wrong
      value if the "image_filter" directive was used.
    *) Bugfix: in integer overflow handling.
    *) Bugfix: it was not possible to enable SSLv3 with LibreSSL.
    *) Bugfix: the "ignoring stale global SSL error ... called a function
      you should not call" alerts appeared in logs when using LibreSSL.
    *) Bugfix: certificates specified by the "ssl_client_certificate" and
      "ssl_trusted_certificate" directives were inadvertently used to
      automatically construct certificate chains.

Changes with nginx 1.7.10                                        10 Feb 2015
    *) Feature: the "use_temp_path" parameter of the "proxy_cache_path",
      "fastcgi_cache_path", "scgi_cache_path", and "uwsgi_cache_path"
      directives.
    *) Feature: the $upstream_header_time variable.
    *) Workaround: now on disk overflow nginx tries to write error logs once
      a second only.
    *) Bugfix: the "try_files" directive did not ignore normal files while
      testing directories.
    *) Bugfix: alerts "sendfile() failed" if the "sendfile" directive was
      used on OS X; the bug had appeared in 1.7.8.
    *) Bugfix: alerts "sem_post() failed" might appear in logs.
    *) Bugfix: nginx could not be built with musl libc.
    *) Bugfix: nginx could not be built on Tru64 UNIX.

Changes with nginx 1.7.9                                        23 Dec 2014
    *) Feature: variables support in the "proxy_cache", "fastcgi_cache",
      "scgi_cache", and "uwsgi_cache" directives.
    *) Feature: variables support in the "expires" directive.
    *) Feature: loading of secret keys from hardware tokens with OpenSSL
      engines.
    *) Feature: the "autoindex_format" directive.
    *) Bugfix: cache revalidation is now only used for responses with 200
      and 206 status codes.
    *) Bugfix: the "TE" client request header line was passed to backends
      while proxying.
    *) Bugfix: the "proxy_pass", "fastcgi_pass", "scgi_pass", and
      "uwsgi_pass" directives might not work correctly inside the "if" and
      "limit_except" blocks.
    *) Bugfix: the "proxy_store" directive with the "on" parameter was
      ignored if the "proxy_store" directive with an explicitly specified
      file path was used on a previous level.
    *) Bugfix: nginx could not be built with BoringSSL.

Changes with nginx 1.7.8                                        02 Dec 2014
    *) Change: now the "If-Modified-Since", "If-Range", etc. client request
      header lines are passed to a backend while caching if nginx knows in
      advance that the response will not be cached (e.g., when using
      proxy_cache_min_uses).
    *) Change: now after proxy_cache_lock_timeout nginx sends a request to a
      backend with caching disabled; the new directives
      "proxy_cache_lock_age", "fastcgi_cache_lock_age",
      "scgi_cache_lock_age", and "uwsgi_cache_lock_age" specify a time
      after which the lock will be released and another attempt to cache a
      response will be made.
    *) Change: the "log_format" directive can now be used only at http
      level.
    *) Feature: the "proxy_ssl_certificate", "proxy_ssl_certificate_key",
      "proxy_ssl_password_file", "uwsgi_ssl_certificate",
      "uwsgi_ssl_certificate_key", and "uwsgi_ssl_password_file"
      directives.
    *) Feature: it is now possible to switch to a named location using
      "X-Accel-Redirect".
    *) Feature: now the "tcp_nodelay" directive works with SPDY connections.
    *) Feature: new directives in vim syntax highliting scripts.
    *) Bugfix: nginx ignored the "s-maxage" value in the "Cache-Control"
      backend response header line.
    *) Bugfix: in the ngx_http_spdy_module.
    *) Bugfix: in the "ssl_password_file" directive when using OpenSSL
      0.9.8zc, 1.0.0o, 1.0.1j.
    *) Bugfix: alerts "header already sent" appeared in logs if the
      "post_action" directive was used; the bug had appeared in 1.5.4.
    *) Bugfix: alerts "the http output chain is empty" might appear in logs
      if the "postpone_output 0" directive was used with SSI includes.
    *) Bugfix: in the "proxy_cache_lock" directive with SSI subrequests.

Changes with nginx 1.7.7                                        28 Oct 2014

    *) Change: now nginx takes into account the "Vary" header line in a
      backend response while caching.
    *) Feature: the "proxy_force_ranges", "fastcgi_force_ranges",
      "scgi_force_ranges", and "uwsgi_force_ranges" directives.
    *) Feature: the "proxy_limit_rate", "fastcgi_limit_rate",
      "scgi_limit_rate", and "uwsgi_limit_rate" directives.
    *) Feature: the "Vary" parameter of the "proxy_ignore_headers",
      "fastcgi_ignore_headers", "scgi_ignore_headers", and
      "uwsgi_ignore_headers" directives.
    *) Bugfix: the last part of a response received from a backend with
      unbufferred proxy might not be sent to a client if "gzip" or "gunzip"
      directives were used.
    *) Bugfix: in the "proxy_cache_revalidate" directive.
    *) Bugfix: in error handling.
    *) Bugfix: in the "proxy_next_upstream_tries" and
      "proxy_next_upstream_timeout" directives.
    *) Bugfix: nginx/Windows could not be built with MinGW-w64 gcc.

Changes with nginx 1.7.6                                        30 Sep 2014

    *) Change: the deprecated "limit_zone" directive is not supported
      anymore.
    *) Feature: the "limit_conn_zone" and "limit_req_zone" directives now
      can be used with combinations of multiple variables.
    *) Bugfix: request body might be transmitted incorrectly when retrying a
      FastCGI request to the next upstream server.
    *) Bugfix: in logging to syslog.
Changes with nginx 1.7.5                                        16 Sep 2014

    *) Security: it was possible to reuse SSL sessions in unrelated contexts
      if a shared SSL session cache or the same TLS session ticket key was
      used for multiple "server" blocks (CVE-2014-3616).
    *) Change: now the "stub_status" directive does not require a parameter.
    *) Feature: the "always" parameter of the "add_header" directive.
    *) Feature: the "proxy_next_upstream_tries",
      "proxy_next_upstream_timeout", "fastcgi_next_upstream_tries",
      "fastcgi_next_upstream_timeout", "memcached_next_upstream_tries",
      "memcached_next_upstream_timeout", "scgi_next_upstream_tries",
      "scgi_next_upstream_timeout", "uwsgi_next_upstream_tries", and
      "uwsgi_next_upstream_timeout" directives.
    *) Bugfix: in the "if" parameter of the "access_log" directive.
    *) Bugfix: in the ngx_http_perl_module.
    *) Bugfix: the "listen" directive of the mail proxy module did not allow
      to specify more than two parameters.
    *) Bugfix: the "sub_filter" directive did not work with a string to
      replace consisting of a single character.
    *) Bugfix: requests might hang if resolver was used and a timeout
      occurred during a DNS request.
    *) Bugfix: in the ngx_http_spdy_module when using with AIO.
    *) Bugfix: a segmentation fault might occur in a worker process if the
      "set" directive was used to change the "$http_...", "$sent_http_...",
      or "$upstream_http_..." variables.
    *) Bugfix: in memory allocation error handling.

Changes with nginx 1.7.4                                        05 Aug 2014

    *) Security: pipelined commands were not discarded after STARTTLS
      command in SMTP proxy (CVE-2014-3556); the bug had appeared in 1.5.6.
    *) Change: URI escaping now uses uppercase hexadecimal digits.
    *) Feature: now nginx can be build with BoringSSL and LibreSSL.
    *) Bugfix: requests might hang if resolver was used and a DNS server
      returned a malformed response; the bug had appeared in 1.5.8.
    *) Bugfix: in the ngx_http_spdy_module.
    *) Bugfix: the $uri variable might contain garbage when returning errors
      with code 400.
    *) Bugfix: in error handling in the "proxy_store" directive and the
      ngx_http_dav_module.
    *) Bugfix: a segmentation fault might occur if logging of errors to
      syslog was used; the bug had appeared in 1.7.1.
    *) Bugfix: the $geoip_latitude, $geoip_longitude, $geoip_dma_code, and
      $geoip_area_code variables might not work.
    *) Bugfix: in memory allocation error handling.

Changes with nginx 1.7.3                                        08 Jul 2014
    *) Feature: weak entity tags are now preserved on response
      modifications, and strong ones are changed to weak.
    *) Feature: cache revalidation now uses If-None-Match header if
      possible.
    *) Feature: the "ssl_password_file" directive.
    *) Bugfix: the If-None-Match request header line was ignored if there
      was no Last-Modified header in a response returned from cache.
    *) Bugfix: "peer closed connection in SSL handshake" messages were
      logged at "info" level instead of "error" while connecting to
      backends.
    *) Bugfix: in the ngx_http_dav_module module in nginx/Windows.
    *) Bugfix: SPDY connections might be closed prematurely if caching was
      used.

Changes with nginx 1.7.2                                        17 Jun 2014
    *) Feature: the "hash" directive inside the "upstream" block.
    *) Feature: defragmentation of free shared memory blocks.
    *) Bugfix: a segmentation fault might occur in a worker process if the
      default value of the "access_log" directive was used; the bug had
      appeared in 1.7.0.
    *) Bugfix: trailing slash was mistakenly removed from the last parameter
      of the "try_files" directive.
    *) Bugfix: nginx could not be built on OS X in some cases.
    *) Bugfix: in the ngx_http_spdy_module.

Changes with nginx 1.7.1                                        27 May 2014
    *) Feature: the "$upstream_cookie_..." variables.
    *) Feature: the $ssl_client_fingerprint variable.
    *) Feature: the "error_log" and "access_log" directives now support
      logging to syslog.
    *) Feature: the mail proxy now logs client port on connect.
    *) Bugfix: memory leak if the "ssl_stapling" directive was used.
    *) Bugfix: the "alias" directive used inside a location given by a
      regular expression worked incorrectly if the "if" or "limit_except"
      directives were used.
    *) Bugfix: the "charset" directive did not set a charset to encoded
      backend responses.
    *) Bugfix: a "proxy_pass" directive without URI part might use original
      request after the $args variable was set.
    *) Bugfix: in the "none" parameter in the "smtp_auth" directive; the bug
      had appeared in 1.5.6.
    *) Bugfix: if sub_filter and SSI were used together, then responses
      might be transferred incorrectly.
    *) Bugfix: nginx could not be built with the --with-file-aio option on
      Linux/aarch64.

Changes with nginx 1.7.0                                        24 Apr 2014
    *) Feature: backend SSL certificate verification.
    *) Feature: support for SNI while working with SSL backends.
    *) Feature: the $ssl_server_name variable.
    *) Feature: the "if" parameter of the "access_log" directive.

(rodent)

2015-06-26 13:37:55 UTC MAIN commitmail json YAML

Updated net/haproxy to 1.5.12

(rodent)

2015-06-26 13:37:27 UTC MAIN commitmail json YAML

Update to 1.5.12. Fixes a pile of bugs. From CHANGELOG:

2015/05/02 : 1.5.12
    - BUG/MINOR: ssl: Display correct filename in error message
    - DOC: Fix L4TOUT typo in documentation
    - BUG/MEDIUM: Do not consider an agent check as failed on L7 error
    - BUG/MINOR: pattern: error message missing
    - BUG/MEDIUM: pattern: some entries are not deleted with case insensitive match
    - BUG/MEDIUM: buffer: one byte miss in buffer free space check
    - BUG/MAJOR: http: don't read past buffer's end in http_replace_value
    - BUG/MEDIUM: http: the function "(req|res)-replace-value" doesn't respect the HTTP syntax
    - BUG/MEDIUM: peers: correctly configure the client timeout
    - BUG/MINOR: compression: consider the expansion factor in init
    - BUG/MEDIUM: http: hdr_cnt would not count any header when called without name
    - BUG/MEDIUM: listener: don't report an error when resuming unbound listeners
    - BUG/MEDIUM: init: don't limit cpu-map to the first 32 processes only
    - BUG/MEDIUM: stream-int: always reset si->ops when si->end is nullified
    - BUG/MEDIUM: http: remove content-length from chunked messages
    - DOC: http: update the comments about the rules for determining transfer-length
    - BUG/MEDIUM: http: do not restrict parsing of transfer-encoding to HTTP/1.1
    - BUG/MEDIUM: http: incorrect transfer-coding in the request is a bad request
    - BUG/MEDIUM: http: remove content-length form responses with bad transfer-encoding
    - MEDIUM: http: restrict the HTTP version token to 1 digit as per RFC7230
    - MEDIUM: http: add option-ignore-probes to get rid of the floods of 408
    - BUG/MINOR: config: clear proxy->table.peers.p for disabled proxies
    - MINOR: stick-table: don't attach to peers in stopped state
    - MEDIUM: config: initialize stick-tables after peers, not before
    - MEDIUM: peers: add the ability to disable a peers section
    - DOC: document option http-ignore-probes
    - DOC: fix the comments about the meaning of msg->sol in HTTP
    - BUG/MEDIUM: http: wait for the exact amount of body bytes in wait_for_request_body
    - BUG/MAJOR: http: prevent risk of reading past end with balance url_param
    - DOC: update the doc on the proxy protocol

(rodent)

2015-06-26 11:16:41 UTC MAIN commitmail json YAML

deduplicate configure argument.

(szptvlfn)

2015-06-25 13:24:29 UTC MAIN commitmail json YAML

Updated sysutils/ansible to 1.6.10nb1

(jperkin)

2015-06-25 13:21:03 UTC MAIN commitmail json YAML

Fix a couple of issues:

- pkgin changed its output delimiter from a space to ';' when outputting
  to a non-tty, breaking various configuration management systems which
  relied on the previous behaviour.  Handle both types in ansible until
  NetBSDfr/pkgin#46 is resolved.

- OS X 10.10 changed the behaviour of sysctl(8) to hide certain entries
  unless they are explicitly named.  Apply patch to fix hw.model and
  hw.usermem from https://github.com/ansible/ansible/pull/8171/files

Clean up patches while here.  Bump PKGREVISION.

(jperkin)

2015-06-25 10:20:16 UTC MAIN commitmail json YAML

SHA1Init() is only present in the libc of NetBSD, OpenBSD & Bitrig.
Switch if statment from a *BSD wildcard to specifically listing these operating
systems so FreeBSD & DragonFlyBSD can then use security/nettle.

Reviewed by wiz@

(sevan)

2015-06-25 08:02:25 UTC MAIN commitmail json YAML

For NetBSD, use TLS if available. Fixes rare asserts in automoc4 on
exit. Bump revision.

(joerg)

2015-06-25 07:52:13 UTC MAIN commitmail json YAML

2015-06-25 07:44:46 UTC MAIN commitmail json YAML

2015-06-25 07:43:09 UTC MAIN commitmail json YAML

Explicitly specify order for library installation, since libUtils.la is
used by others and needs to be installed before to allow relinking.

(joerg)

2015-06-25 07:39:26 UTC MAIN commitmail json YAML

2015-06-25 07:38:52 UTC MAIN commitmail json YAML

Use the buildlink3.mk of the choosen PHP to get the dependency,
otherwise bulk builds may get inconcistent versions installed.

(joerg)

2015-06-25 07:37:58 UTC MAIN commitmail json YAML

Needs pkg-config.

(joerg)

2015-06-25 07:36:56 UTC MAIN commitmail json YAML

2015-06-25 07:36:19 UTC MAIN commitmail json YAML

Explicitly depend on libxml2 now.

(joerg)

2015-06-25 07:30:30 UTC MAIN commitmail json YAML

Treat bitrig like openbsd.

(dholland)

2015-06-25 07:27:32 UTC MAIN commitmail json YAML

2015-06-25 07:02:42 UTC MAIN commitmail json YAML

Remove explicit depends on files in /usr/include, some of which may not
exist on some platforms... and some of which weren't actually used anyway.

Also fix build failure that cropped up on netbsd-current while testing
the previous.

(dholland)

2015-06-25 06:22:11 UTC MAIN commitmail json YAML

Cast argument of sqrt to double to placate Solaris compiler.
Also while here remove one article of pkglint.

(dholland)

2015-06-25 06:01:01 UTC MAIN commitmail json YAML

Extend this patch to a second chunk of code with the same logic.
Seen in the Solaris build.

(dholland)

2015-06-24 19:57:20 UTC MAIN commitmail json YAML

Updated www/aipo to 8.0.1

(ryoon)

2015-06-24 19:56:28 UTC MAIN commitmail json YAML

Update to 8.0.1

Changelog:
* Add messaging.
* UI improvements including for Smartphone.
* Many improvements.

(ryoon)

2015-06-24 19:49:56 UTC MAIN commitmail json YAML

Properly install our config.guess, the symlink isn't picked up
otherwise. Fix makefml for Perl 5.22. Drop now redundant patch against
the original config.guess.

(joerg)

2015-06-24 18:09:59 UTC MAIN commitmail json YAML

Update the list of build dependencies for devel/py-protobuf

This should effectively fix building this package.

(khorben)

2015-06-24 18:07:45 UTC MAIN commitmail json YAML

Add a missing PERL5_PACKLIST entry, should fix build with new perl

(bouyer)

2015-06-24 18:05:57 UTC MAIN commitmail json YAML

Also depend on p5-CGI and p5-CGI-Fast. Should fix build with new perl

(bouyer)

2015-06-24 18:05:50 UTC MAIN commitmail json YAML

Add devel/py-google-apputils

This is necessary to fix building devel/py-protobuf.

(khorben)

2015-06-24 18:01:27 UTC MAIN commitmail json YAML

Add devel/py-google-apputils

This is necessary to fix building devel/py-protobuf.

(khorben)

2015-06-24 17:59:19 UTC MAIN commitmail json YAML

Add devel/py-google-apputils 0.4.2

I am doing this in the freeze period because it is a necessary addition to
effectively be able to let devel/py-protobuf build again. My apologies if
this is not good enough a reason.

(khorben)

2015-06-24 12:18:03 UTC MAIN commitmail json YAML

NSD 4.1.3
=========

FEATURES:
- nsd-control addzones and delzones read list of zones from stdin.
- hmac sha224, sha384 and sha512 support.
- max-interfaces raised to 32.

BUG FIXES:
- Fix #665: when removing subdomain, nsd does not reparse parent zone.
- Fix task and zonestat files to be stored in a subdirectory in tmp
  to stop privilege elevation.
- Fix crash in zone parser for relative dname after error in origin.
- Fix that formerrors are ratelimited.

(pettai)

2015-06-24 11:43:42 UTC MAIN commitmail json YAML

Remove reference to file no longer part of the perl distribution.

Add a Configure test to verify that including <fenv.h> doesn't produce
a build error, as it will in quite few cases on NetBSD on archs which
are not amd64, i386 or sparc in NetBSD 6.x.  If the test build fails,
pretend we don't have fenv.h.

Validated that the result builds on NetBSD/evbarm 6.0 and NetBSD/i386 6.1.5.

Build fix, so no need to bump PKGREVISION.

OK by wiz@

(he)

2015-06-24 10:54:38 UTC MAIN commitmail json YAML

Add -lclucene-shared on FreeBSD

Reviewed by wiz@

(sevan)

2015-06-24 09:54:10 UTC MAIN commitmail json YAML

Fix linking with pulseaudio.
Bump pkgrevision.
Requested by wiz.

(nros)

2015-06-24 07:17:21 UTC MAIN commitmail json YAML

Enable long double math on OS X Mavericks.

(jperkin)

2015-06-24 01:23:41 UTC pkgsrc-2015Q1 commitmail json YAML

2015-06-24 01:16:39 UTC pkgsrc-2015Q1 commitmail json YAML

Pullup ticket #4750 - requested by taca
lang/php54: security update

Revisions pulled up:
- pkgsrc/lang/php/phpversion.mk                                1.102
- pkgsrc/lang/php54/distinfo                                    1.58

---
  Module Name:    pkgsrc
  Committed By:  taca
  Date:          Fri Jun 12 04:51:01 UTC 2015

  Modified Files:
          pkgsrc/lang/php: phpversion.mk
          pkgsrc/lang/php54: distinfo

  Log Message:
  Update php54 to 5.4.42.

  11 Jun 2015 PHP 5.4.42

  - Core:
    . Imroved fix for bug #69545 (Integer overflow in ftp_genlist() resulting in
      heap overflow). (Max Spelsberg)
    . Fixed bug #69646 (OS command injection vulnerability in escapeshellarg).
      (Anatol Belski)
    . Fixed bug #69719 (Incorrect handling of paths with NULs). (Stas)

  - Litespeed SAPI:
    . Fixed bug #68812 (Unchecked return value). (George Wang)

  - Mail:
    . Fixed bug #68776 (mail() does not have mail header injection prevention for
      additional headers). (Yasuo)

  - Postgres:
    . Fixed bug #69667 (segfault in php_pgsql_meta_data). (Remi)

  - Sqlite3:
    . Upgrade bundled sqlite to 3.8.10.2. (CVE-2015-3414, CVE-2015-3415,
      CVE-2015-3416) (Kaplan)

(hiramatsu)

2015-06-23 17:47:19 UTC MAIN commitmail json YAML

Updated sysutils/xenkernel45 to 4.5.1
Updated sysutils/xentools45 to 4.5.1

(bouyer)

2015-06-23 17:45:34 UTC MAIN commitmail json YAML

Upgrade xenkernel45 and xentools45 to 4.5.1.
Note that the  patch for XSA135 for qemu-traditional, which was
no applied  to the 4.5 branch before the release due to an oversight,
is applied here (xentools45/patches/patch-XSA135).

Selected entries from the relase notes:
    a246727: cpupool: fix shutdown with cpupools with different schedulers [Dario Faggioli]
    5b2f480: libelf: fix elf_parse_bsdsyms call [Roger Pau Monn饐
    8faef24: VT-d: extend quirks to newer desktop chipsets [Jan Beulich]
    24fcf17: x86/VPMU: add lost Intel processor [Alan Robinson]
    131889c: x86/crash: don't use set_fixmap() in the crash path [Andrew Cooper]
    8791a30: x86/apic: Disable the LAPIC later in smp_send_stop() [Andrew Cooper]
    fbd26f2: x86/pvh: disable posted interrupts [Roger Pau Monn饐
    0d8cbca: libxl: In libxl_set_vcpuonline check for maximum number of VCPUs against the cpumap. [Konrad Rzeszutek Wilk]
    bf06e40: libxl: event handling: ao_inprogress does waits while reports outstanding [Ian Jackson]
    97051bd: libxl: event handling: Break out ao_work_outstanding [Ian Jackson]
    0bc9f98: x86/traps: loop in the correct direction in compat_iret() [Andrew Cooper]
    fcfbdb4: gnttab: add missing version check to GNTTABOP_swap_grant_ref handling [Jan Beulich]
    09f76cb: cpupools: avoid crashing if shutting down with free CPUs [Dario Faggioli]
    f237ee4: cpupool: assigning a CPU to a pool can fail [Dario Faggioli]
    b986072: xen: common: Use unbounded array for symbols_offset. [Ian Campbell]
    5eac1be: x86/irq: limit the maximum number of domain PIRQs [Andrew Cooper]
    9c3d34d: x86: don't unconditionally touch the hvm_domain union during domain construction [Andrew Cooper]
    9d5b2b0: tools/xenconsoled: Increase file descriptor limit [Andrew Cooper]
    cfc4c43: ocaml/xenctrl: Fix stub_xc_readconsolering() [Andrew Cooper]
    032673c: ocaml/xenctrl: Make failwith_xc() thread safe [Andrew Cooper]
    c91ed88: ocaml/xenctrl: Check return values from hypercalls [Andrew Cooper]
    fa62913: libxl: Domain destroy: fork [Ian Jackson]
    c9b13f3: libxl: Domain destroy: unlock userdata earlier [Ian Jackson]
    0b19348: libxl: In domain death search, start search at first domid we want [Ian Jackson]
    ddfe333: x86: don't change affinity with interrupt unmasked [Jan Beulich]
    bf30232: x86: don't clear high 32 bits of RAX on sub-word guest I/O port reads [Jan Beulich]
    a824bf9: x86_emulate: fix EFLAGS setting of CMPXCHG emulation [Eugene Korenevsky]
    f653b7f: x86/hvm: implicitly disable an ioreq server when it is destroyed [Paul Durrant]
    8dbdcc3: x86/hvm: actually release ioreq server pages [Paul Durrant]
    56fe488: x86/hvm: fix the unknown nested vmexit reason 80000021 bug [Liang Li]
    4a52101: VT-d: improve fault info logging [Jan Beulich]
    5a7c042: x86/MSI: fix error handling [Jan Beulich]
    51d8325: LZ4 : fix the data abort issue [JeHyeon Yeon]
    0327c93: hvmloader: don't treat ROM BAR like other BARs [Jan Beulich]
    f2e08aa: domctl/sysctl: don't leak hypervisor stack to toolstacks [Andrew Cooper]
    3771b5a: arm64: fix fls() [Jan Beulich]
    9246d2e: domctl: don't allow a toolstack domain to call domain_pause() on itself [Andrew Cooper]
    f5bca81: Limit XEN_DOMCTL_memory_mapping hypercall to only process up to 64 GFNs (or less) [Konrad Rzeszutek Wilk]
    7fe1c1b: x86: don't apply reboot quirks if reboot set by user [Ross Lagerwall]
    969df12: Revert "cpupools: update domU's node-affinity on the cpupool_unassign_cpu() path" [Jan Beulich]
    483c6cd: honor MEMF_no_refcount in alloc_heap_pages() [Jan Beulich]
    6616c4d: tools: libxl: Explicitly disable graphics backends on qemu cmdline [Ian Campbell]
    d0b141e: x86/tboot: invalidate FIX_TBOOT_MAP_ADDRESS mapping after use [Jan Beulich]
    902998e: x86emul: fully ignore segment override for register-only operations [Jan Beulich]
    25c6ee8: pre-fill structures for certain HYPERVISOR_xen_version sub-ops [Aaron Adams]
    7ef0364: x86/HVM: return all ones on wrong-sized reads of system device I/O ports [Jan Beulich]
    3665563: tools/libxc: Don't leave scratch_pfn uninitialised if the domain has no memory [Andrew Cooper]
    75ac8cf: x86/nmi: fix shootdown of pcpus running in VMX non-root mode [Andrew Cooper]
    1e44c92: x86/hvm: explicitly mark ioreq server pages dirty [Paul Durrant]
    2bfef90: x86/hvm: wait for at least one ioreq server to be enabled [Paul Durrant]
    d976397: x86/VPMU: disable when NMI watchdog is on [Boris Ostrovsky]
    84f2484: libxc: introduce a per architecture scratch pfn for temporary grant mapping [Julien Grall]
    6302c61: Install libxlutil.h [Jim Fehlig]
    d8e78d6: bunzip2: off by one in get_next_block() [Dan Carpenter]
    8a855b3: docs/commandline: correct information for 'x2apic_phys' parameter [Andrew Cooper]
    3a777be: x86: vcpu_destroy_pagetables() must not return -EINTR [Konrad Rzeszutek Wilk]
    1acb3b6: handle XENMEM_get_vnumainfo in compat_memory_op [Wei Liu]
    4eec09f: x86: correctly check for sub-leaf zero of leaf 7 in pv_cpuid() [Jan Beulich]
    7788cbb: x86: don't expose XSAVES capability to PV guests [Jan Beulich]
    4cfc54b: xsm/evtchn: never pretend to have successfully created a Xen event channel [Andrew Cooper]
    2fdd521: common/memory: fix an XSM error path [Jan Beulich]
    ad83ad9: x86emul: tighten CLFLUSH emulation [Jan Beulich]
    1928318: dt-uart: use ':' as separator between path and options [Ian Campbell]
    9ae1853: libxl: Don't ignore error when we fail to give access to ioport/irq/iomem [Julien Grall]

In addition, this release also contains the following fixes to qemu-traditional:

    afaa35b: ... by default. Add a per-device "permissive" mode similar to pciback's to allow restoring previous behavior (and hence break security again, i.e. should be used only for trusted guests). [Jan Beulich]
    3cff7ad: Since the next patch will turn all not explicitly described fields read-only by default, those fields that have guest writable bits need to be given explicit descriptors. [Jan Beulich]
    ec61b93: The adjustments are solely to make the subsequent patches work right (and hence make the patch set consistent), namely if permissive mode (introduced by the last patch) gets used (as both reserved registers and reserved fields must be similarly protected from guest access in default mode, but the guest should be allowed access to them in permissive mode). [Jan Beulich]
    37c77b8: xen_pt_emu_reg_pcie[]'s PCI_EXP_DEVCAP needs to cover all bits as read- only to avoid unintended write-back (just a precaution, the field ought to be read-only in hardware). [Jan Beulich]
    2dc4059: This is just to avoid having to adjust that calculation later in multiple places. [Jan Beulich]
    29d9566: xen_pt_pmcsr_reg_write() needs an adjustment to deal with the RW1C nature of the not passed through bit 15 (PCI_PM_CTRL_PME_STATUS). [Jan Beulich]
    2e19270: There's no point in xen_pt_pmcsr_reg_{read,write}() each ORing PCI_PM_CTRL_STATE_MASK and PCI_PM_CTRL_NO_SOFT_RESET into a local emu_mask variable - we can have the same effect by setting the field descriptor's emu_mask member suitably right away. Note that xen_pt_pmcsr_reg_write() is being retained in order to allow later patches to be less intrusive. [Jan Beulich]
    751d20d: Without this the actual XSA-131 fix would cause the enable bit to not get set anymore (due to the write back getting suppressed there based on the OR of emu_mask, ro_mask, and res_mask). [Jan Beulich]
    51f3b5b: ... to avoid allowing the guest to cause the control domain's disk to fill. [Jan Beulich]
    7f99bb9: It's being used by the hypervisor. For now simply mimic a device not capable of masking, and fully emulate any accesses a guest may issue nevertheless as simple reads/writes without side effects. [Jan Beulich]
    6fc82bf: The old logic didn't work as intended when an access spanned multiple fields (for example a 32-bit access to the location of the MSI Message Data field with the high 16 bits not being covered by any known field). Remove it and derive which fields not to write to from the accessed fields' emulation masks: When they're all ones, there's no point in doing any host write. [Jan Beulich]
    e42b84c: fdc: force the fifo access to be in bounds of the allocated buffer [Petr Matousek]
    62e4158: xen: limit guest control of PCI command register [Jan Beulich]
    3499745: cirrus: fix an uninitialized variable [Jan Beulich]

This release also contains the security fixes for XSA-117 to XSA-136, with the exception of XSA-124 which documents security risks of non-standard PCI device functionality that cannot be addressed in software. It also includes an update to XSA-98 and XSA-59.

(bouyer)

2015-06-23 15:05:11 UTC MAIN commitmail json YAML

Updated misc/tmux to 2.0nb1

(jperkin)

2015-06-23 15:05:02 UTC MAIN commitmail json YAML

Apply build change from MacPorts to fix open(1) behaviour from within a
tmux session on Darwin.  Noticed by Cesar Crusius in joyent/pkgsrc#246.

Bump PKGREVISION.

(jperkin)

2015-06-23 14:08:26 UTC MAIN commitmail json YAML

Note update of misc/rubygems package to 2.4.8.

(taca)

2015-06-23 14:07:37 UTC MAIN commitmail json YAML

Update rubygems to 2.4.8, including security fix for CVE-2015-3900.

=== 2.4.8 / 2015-06-08

Bug fixes:

* Tightened API endpoint checks for CVE-2015-3900

=== 2.4.7 / 2015-05-14

Bug fixes:

* Backport: Limit API endpoint to original security domain for CVE-2015-3900.
  Fix by claudijd

(taca)

2015-06-23 14:05:25 UTC MAIN commitmail json YAML

Note update of ruby200-base, ruby21-base and ruby22-base.

(taca)

2015-06-23 14:04:40 UTC MAIN commitmail json YAML

2015-06-23 14:04:03 UTC MAIN commitmail json YAML

2015-06-23 14:03:02 UTC MAIN commitmail json YAML

2015-06-23 13:31:48 UTC MAIN commitmail json YAML

Updated databases/mongodb to 3.0.4

(ryoon)

2015-06-23 13:31:24 UTC MAIN commitmail json YAML

Update to 3.0.4

Changelog:
MongoDB 3.0.4 is released
June 6, 2015

MongoDB 3.0.4 is out and is ready for production deployment. This release contains only fixes since 3.0.3, and is a recommended upgrade for all 3.0 users.

Fixed in this release:

    SERVER-17923 Creating/dropping multiple background indexes on the same collection can cause fatal error on secondaries
    SERVER-18079 Large performance drop with documents > 16k on Windows
    SERVER-18190 Secondary reads block replication
    SERVER-18213 Lots of WriteConflict during multi-upsert with WiredTiger storage engine
    SERVER-18316 Database with WT engine fails to recover after system crash
    SERVER-18475 authSchemaUpgrade fails when the system.users contains non MONGODB-CR users
    SERVER-18629 WiredTiger journal system syncs wrong directory
    SERVER-18822 Sharded clusters with WiredTiger primaries may lose writes during chunk migration

Announcing MongoDB 3.0 and Bug Hunt Winners
March 3, 2015

Today MongoDB 3.0 is generally available; you can download now.

Our community was critical to ensuring the quality of the release. Thank you to everyone who participated in our 3.0 Bug Hunt. From the submissions, we've selected winners based on the user impact and severity of the bugs found.

First Prize

Mark Callaghan, Member of Technical Staff, Facebook
During the 3.0 release cycle, Mark submitted 10 bug reports and collaborated closely with the MongoDB engineering team to debug the issues he uncovered. As a first place winner, Mark will receive a free pass to MongoDB World in New York City on June 1-2, including a front row seat to the keynote sessions. Mark was also eligible to receive a $1,000 Amazon gift card but opted to donate the award to a charity. We are donating $1,000 to CodeStarters.org in his name.

Honorable Mentions

Nick Judson, Conevity
Nick submitted SERVER-17299, uncovering excessive memory allocation on Windows when using "snappy" compression in WiredTiger.

Koshelyaev Konstantin, RTEC
Koshelyaev submitted SERVER-16664, which uncovered a memory overflow in WiredTiger when using "zlib" compression.

Tim Callaghan, Crunchtime!
In submitting SERVER-16867, Tim found an uncaught WriteConflict exception affecting replicated writes during insert-heavy workloads.

Nathan Arthur, PreEmptive Solutions
Nathan submitted SERVER-16724, which found an issue with how collection metadata is persisted.

Thijs Cadier, AppSignal
Thijs submitted SERVER-16197, which revealed a bug in the build system interaction with the new MongoDB tools.

Nick, Koshelyaev, Tim, Nathan, and Thijs will also receive tickets to MongoDB World in New York City on June 1-2 (with reserved front-row seat for keynote sessions), $250 Amazon Gift Cards, and MongoDB t-shirts.

Congratulations to the winners and thanks to everyone who downloaded, tested and gave feedback on the release candidates.

(ryoon)

2015-06-23 13:29:01 UTC MAIN commitmail json YAML

Updated net/owncloudclient to 1.8.1

(ryoon)

2015-06-23 13:28:35 UTC MAIN commitmail json YAML

Update to 1.8.1

Changelog:
Release 1.8.1 May 7th 2015

    Make "operation canceled" error a soft error
    Do not throw an error for files that are scheduled to be removed, but can not be found on the server. (#2919)
    Windows: Reset QNAM to proper function after hibernation. (#2899, #2895, #2973)
    Fix argument verification of --confdir (#2453)
    Fix a crash when accessing a dangling UploadDevice pointer (#2984)
    Add-folder wizard: Make sure there is a scrollbar if folder names are too long (#2962)
    Add-folder Wizard: Select the newly created folder
    Activity: Correctly restore column sizes (#3005)
    SSL Button: do not crash on empty certificate chain
    SSL Button: Make menu creation lazy (#3007, #2990)
    Lookup system proxy async to avoid hangs (#2993, #2802)
    ShareDialog: Some GUI refinements
    ShareDialog: On creation of a share always retrieve the share. This makes sure that if a default expiration date is set this is reflected in the dialog. (#2889)
    ShareDialog: Only show share dialog if we are connected.
    HttpCreds: Fill pw dialog with previous password. (#2848, #2879)
    HttpCreds: Delete password from old location. (#2186)
    Do not store Session Cookies in the client cookie storage
    CookieJar: Don't accidentally overwrite cookies. (#2808)
    ProtocolWidget: Always add seconds to the DateTime locale. (#2535)
    Updater: Give context as to which app is about to be updated (#3040)
    Windows: Add version information for owncloud.exe. This should help us know what version or build number a crash report was generated with.
    Fix a crash on shutdown in ~SocketApi (#3057)
    SyncEngine: Show more timing measurements (#3064)
    Discovery: Add warning if returned etag is 0
    Fix a crash caused by an invalid DiscoveryDirectoryResult::iterator (#3051)
    Sync: Fix sync of deletions during 503. (#2894)
    Handle redirect of auth request. (#3082)
    Discovery: Fix parsing of broken XML replies, which fixes local file disappearing (#3102)
    Migration: Silently restore files that were deleted locally by bug (#3102)
    Sort folder sizes SelectiveSyncTreeView numerically (#3112)
    Sync: PropagateDownload: Read the mtime from the file system after writing it (#3103)
    Sync: Propagate download: Fix restoring files for which the conflict file exists (#3106)
    Use identical User Agents and version for csync and the Qt parts
    Prevent another crash in ~SocketApi (#3118)
    Windows: Fix rename of finished file (#3073)
    AccountWizard: Fix auth error handling (#3155)
    Documentation fixes
    Infrastructure/build fixes
    Win32/OS X: Apply patch from OpenSSL to handle oudated intermediates gracefully (#3087)

(ryoon)

2015-06-23 13:17:13 UTC MAIN commitmail json YAML

2015-06-23 13:16:47 UTC MAIN commitmail json YAML

Update to 3.19.2

* Approved by wiz@.

Changelog:
Network Security Services (NSS) is a patch release for NSS 3.19.

No new functionality is introduced in this release. This release addresses
a backwards compatibility issue with the NSS 3.19.1 release.

Notable Changes:
* In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
implementation (part of the softoken cryptographic module used by default
by NSS) was willing to generate or use was increased - for RSA keys, to
512 bits, and for DH keys, 1023 bits. This was done as part of a security
fix for Bug 1138554 / CVE-2015-4000. Applications that requested or
attempted to use keys smaller then the minimum size would fail. However,
this change in behaviour unintentionally broke existing NSS applications
that need to generate or use such keys, via APIs such as
SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey.

In NSS 3.19.2, this change in freebl behaviour has been reverted. The fix
for Bug 1138554 has been moved to libssl, and will now only affect the
minimum keystrengths used in SSL/TLS.

(ryoon)

2015-06-23 09:42:09 UTC MAIN commitmail json YAML

Updated lang/nodejs to 0.12.5

(fhajny)

2015-06-23 09:41:50 UTC MAIN commitmail json YAML

Update lang/nodejs to 0.12.5.

2015.06.22, Version 0.12.5 (Stable)
- openssl: upgrade to 1.0.1o (Addressing multiple CVEs)
- npm: upgrade to 2.11.2
- uv: upgrade to 1.6.1
- V8: avoid deadlock when profiling is active (Dmitri Melikyan)
- install: fix source path for openssl headers (Oguz Bastemur)
- install: make sure opensslconf.h is overwritten (Oguz Bastemur)
- timers: fix timeout when added in timer's callback (Julien Gilli)
- windows: broadcast WM_SETTINGCHANGE after install (Mathias K端sel)

(fhajny)

2015-06-22 22:45:06 UTC MAIN commitmail json YAML

Ensure BUILDLINK_API_DEPENDS are only set when not using the builtin
version, otherwise those dependency builtins are not included when
building x11-links.  Fixes missing libxcb links on Linux.

(jperkin)

2015-06-22 22:29:54 UTC MAIN commitmail json YAML

Pass -DENABLE_LARGEFILE=1 to the build on SunOS, the configure test
only checks for the presence of open64() rather than doing a proper
largefile check.  Fixes 64-bit build.

(jperkin)

2015-06-22 21:28:38 UTC MAIN commitmail json YAML

Be more forceful in checking for XInput2.1.  Fixes build on
NetBSD-6.1.5 with native X.  PR pkg/49986.

(markd)

2015-06-22 18:51:02 UTC MAIN commitmail json YAML

Substitute hardcoded path to the C++ wrapper, fixing CHECK_WRKREF builds.

(jperkin)

2015-06-22 16:50:38 UTC MAIN commitmail json YAML

Substitute hardcoded path to the C++ wrapper.  Fixes CHECK_WRKREF builds.

(jperkin)

2015-06-22 16:22:21 UTC MAIN commitmail json YAML

Substitute hardcoded path to the libtool wrapper.  Fixes CHECK_WRKREF builds.

(jperkin)

2015-06-22 16:16:50 UTC MAIN commitmail json YAML

Substitute hardcoded paths to compiler wrapper.  Fixes CHECK_WRKREF builds.

(jperkin)

2015-06-22 16:07:22 UTC MAIN commitmail json YAML

Ride previous versin bump.

DEPENDS on php-posix and php-curl.
Based on PR pkg/49916 from hauke@.

(ryoon)

2015-06-22 16:03:57 UTC MAIN commitmail json YAML

Updated www/php-owncloud to 8.0.4

(ryoon)

2015-06-22 16:03:20 UTC MAIN commitmail json YAML

Update to 8.0.4

Changelog:
Version 8.0.4 June 9th 2015

    occ can now optionally run the update routines without disabling all third party apps
    Database handling changes which should improve performance on big systems
    better support for very old cURL versions (for QNAP users)
    Extended X-Accel-Redirect functionality in nginx
    Added work-around for file transfers on 32bit systems
    Improved quota calculation
    Many fixes and improvements to sharing
    Several fixes to upgrade process
    Fix deleted folders on client not showing up in trash
    fix inability to delete files when quota is 0
    Change WebDAV error to 500 instead of 403 on denying overwrite of read-only file
    Fixed enforcing expiration date
    Fix to Provisioning API
    Fixing shared document editing by shared LDAP users
    IE 8/9 fixes
    Several smaller fixes

(ryoon)

2015-06-22 15:38:08 UTC MAIN commitmail json YAML

Disable CHECK_SHLIBS for the GCC library packages.  The libraries will
find their parent GCC package libraries first in RPATH at install time
but will correctly resolve to their own copies at runtime thanks to the
additional paths encoded at build time.  Fixes CHECK_WRKREF builds.

(jperkin)

2015-06-22 15:16:24 UTC MAIN commitmail json YAML

2015-06-22 14:00:39 UTC MAIN commitmail json YAML

Note update of Rack related pacakges:

www/ruby-rack14 1.4.7
www/ruby-rack15 1.5.5
www/ruby-rack 1.6.4

(taca)

2015-06-22 13:59:29 UTC MAIN commitmail json YAML

Update ruby-rack to 1.6.4, security fixes.

* Fix CVE-2015-3225.
* Only count files (not all form elements) against the Multipart File Limit.
* Work around a Rails incompatibility in our private API

(taca)

2015-06-22 13:58:44 UTC MAIN commitmail json YAML

Update ruby-rack15 to 1.5.5, security fixes.

* Fix CVE-2014-9490.
* Fix CVE-2015-3225.
* Only count files (not all form elements) against the Multipart File Limit.

(taca)

2015-06-22 13:57:59 UTC MAIN commitmail json YAML

Update ruby-rack14 to 1.4.7, security fix.

* Fix CVE-2015-3225.
* Only count files (not all form elements) against the Multipart File Limit.

(taca)

2015-06-22 13:56:46 UTC MAIN commitmail json YAML

Note update of Ruby on Rails packages to 3.2.22.

devel/ruby-activesupport32
devel/ruby-activemodel32
databases/ruby-activerecord32
www/ruby-activeresource32
www/ruby-actionpack32
mail/ruby-actionmailer32
devel/ruby-railties32
www/ruby-rails32

(taca)

2015-06-22 13:55:30 UTC MAIN commitmail json YAML

Update ruby-rails32 to 3.2.22.

No change except version.

(taca)

2015-06-22 13:54:57 UTC MAIN commitmail json YAML

Update ruby-railties32to 3.2.22.

## Rails 3.2.22 (Jun 16, 2015) ##

* No changes.

(taca)

2015-06-22 13:54:26 UTC MAIN commitmail json YAML

Update ruby-actionmailer32 to 3.2.22.

## Rails 3.2.22 (Jun 16, 2015) ##

* No changes.

(taca)

2015-06-22 13:53:15 UTC MAIN commitmail json YAML

Update ruby-actionpack32 to 3.2.22.

## Rails 3.2.22 (Jun 16, 2015) ##

* No changes.

(taca)

2015-06-22 13:52:44 UTC MAIN commitmail json YAML

Update ruby-activeresource32 to 3.2.22.

No change except version.

(taca)

2015-06-22 13:52:10 UTC MAIN commitmail json YAML

Update ruby-activerecord32 to 3.2.22.

## Rails 3.2.22 (Jun 16, 2015) ##

* No changes.

(taca)

2015-06-22 13:51:26 UTC MAIN commitmail json YAML

Update ruby-activemodel32 to 3.2.22.

## Rails 3.2.22 (Jun 16, 2015) ##

* No changes.

(taca)

2015-06-22 13:50:34 UTC MAIN commitmail json YAML

Update ruby-activesupport32 to 3.2.22, security fix of activesupport.

## Rails 3.2.22 (Jun 16, 2015) ##

*  Fix denial of service vulnerability in the XML processing.

    CVE-2015-3227.

    *Aaron Patterson*

(taca)

2015-06-22 13:49:38 UTC MAIN commitmail json YAML

Start update of Ruby on Rails to 3.2.22.

(taca)

2015-06-22 13:21:59 UTC MAIN commitmail json YAML

Update the fixwrap substitution to work correctly after the recent
libtool changes.  Fixes CHECK_WRKREF builds.

(jperkin)

2015-06-22 10:38:17 UTC MAIN commitmail json YAML

2015-06-21 15:10:17 UTC MAIN commitmail json YAML

On EL6 systems the 'systemtap-sdt-devel' RPM installs a /usr/bin/dtrace
which is emphatically not DTrace, causing nothing but problems for
builds.  Explicitly disable DTrace support if /usr/bin/dtrace is found.

(jperkin)

2015-06-21 14:58:07 UTC MAIN commitmail json YAML

On EL6 systems the 'systemtap-sdt-devel' RPM installs a /usr/bin/dtrace
which is emphatically not DTrace, causing nothing but problems for
builds.  Explicitly disable DTrace support if /usr/bin/dtrace is found.

(jperkin)

2015-06-21 10:05:29 UTC MAIN commitmail json YAML

+ ImageMagick-6.9.1.6, abcde-2.7, afl-1.83b, ap2-perl-2.0.9,
  apache-ant-1.9.5, calibre-2.31.0, curl-7.43.0, ffmpeg2-2.7.1,
  git-base-2.4.4, harfbuzz-0.9.41, help2man-1.47.1, mpfr-3.1.3,
  nss-3.19.2, ocaml-4.02.2, py-cython-0.22.1, py-psycopg2-2.6.1,
  py-vdirsyncer-0.5.2, tahoe-lafs-1.10.1, wireshark-1.12.6.

(wiz)

2015-06-20 18:24:14 UTC MAIN commitmail json YAML

Updated lang/lua53 to 5.3.1.

(alnsn)

2015-06-20 18:22:56 UTC MAIN commitmail json YAML

Update lang/lua53 to 5.3.1.

The following bugs have been fixed (from http://www.lua.org/bugs.html):
    1. string.format("%f") can cause a buffer overflow (only when
      'lua_Number' is long double!).
      reported by Roberto on 13 Jan 2015. existed since 5.3. fixed in
      5.3.1.
    2. debug.getlocal on a coroutine suspended in a hook can crash the
      interpreter.
      reported by on 11 Feb 2015. existed since 5.2. fixed in 5.3.1.
      Example: See
      http://lua-users.org/lists/lua-l/2015-02/msg00146.html.
    3. Suspended __le metamethod can give wrong result.
      reported by Eric Zhong on 07 Apr 2015. existed since 5.2. fixed in
      5.3.1.
      Example:
mt = {__le = function (a,b) coroutine.yield("yield"); return a.x <= b.x end}
t1 = setmetatable({x=1}, mt)
t2 = {x=2}
co = coroutine.wrap(function (a,b) return t2 <= t1 end)
co()
print(co())  --> true  (should be false)
    4. Return hook may not see correct values for active local variables
      when function returns.
      reported by Philipp Janda and Peng Yi on 19 May 2015. existed since
      5.0. fixed in 5.3.1.
      Example: See
      http://lua-users.org/lists/lua-l/2015-05/msg00376.html.

(alnsn)

2015-06-20 08:22:51 UTC MAIN commitmail json YAML

2015-06-20 08:21:50 UTC MAIN commitmail json YAML

+ pure-ftpd-1.0.40, radare2-0.9.9.

(wiz)