Updated textproc/p5-Pod-Readme to 1.1.2

(wen)

Update to 1.1.2
Add missing DEPENDS

Upstream changelog is too long, please visit:
http://cpansearch.perl.org/src/RRWO/Pod-Readme-v1.1.2/Changes

(wen)

Changes 0.8.1:
Unknown.

(adam)

Make python33 and 34 build under Mac OS X by copying over compat hack from
python27. From J. Lewis Muir.

Note that the correct way to solve this is to do this in the Darwin
specific config files, but until that has landed, this at least fixes the
build.

(bsiegert)

Fixes by obache@ and wiz@ from wip/csvkit were applied

(cheusov)

Added textproc/csvkit version 0.9.0

(cheusov)

Updated archivers/unrar to 5.2.4

(adam)

Changes 5.2.4:
Unknown.

(adam)

Updated textproc/p5-Pod-Escapes to 1.07

(wen)

Update to 1.07

Upstream changes:
1.07 2014-12-09 NEILB

    - All changes from Ken Williamson as part of EBCDIC work for 5.22
    - Fix typo in comment
    - Reorder structure definitions
    - Fill %Name2character better for EBCDIC
    - Generalize for EBCDIC
    - doc clarification

1.06_01 2014-12-05 NEILB

    - A bunch of changes from KHW++ for EBCDIC support.
    - Doing a developer release first, to make sure everything's good
      from CPAN Testers.

(wen)

Updated textproc/p5-Pod-Elemental to 0.103004

(wen)

Update to 0.103004
Update DEPENDS

Uptream changes:
0.103004  2014-12-26 22:31:16-05:00 America/New_York
        - fix a regression in 0.103003, in which Nonpod paragraphs were not
          converted into Pod5::Nonpod paragraphs by the Pod5 transformer

0.103003  2014-12-23 21:11:26-05:00 America/New_York
        - remove use of Moose::Autobox

0.103002  2014-10-27 21:12:54-04:00 America/New_York
        - make classes immutable to improve runtime speed

0.103001  2014-05-20 20:45:43-04:00 America/New_York
        - load Class::Load, which older Moose does not automatically load

(wen)

Updated inputmethod/ibus-table to 1.9.2

(obache)

Update ibus-table to 1.9.2.

* Use directories according to theXDG Base Directory Specification
* Resolves: rhbz#1172524 https://bugzilla.redhat.com/show_bug.cgi?id=1172524
* When a leading invalid character is passed through, it needs to be remembered
  in self._prev_char

(obache)

Updated textproc/groonga to 4.1.0

(obache)

Update groonga to 4.1.0.

News
====

.. _release-4-1-0:

Release 4.1.0 - 2015-01-09
--------------------------

It's a bug fix release of 4.0.9.

If you have already upgraded to 4.0.9, please upgrade to 4.1.0. And
re-create your all indexes. You can re-create your indexes by removing
and re-creating your indexes such as::

  column_remove TABLE INDEX_COLUMN
  column_create TABLE INDEX_COLUMN COLUMN_INDEX|...

.. seealso::

  * :doc:`/reference/commands/column_remove`
  * :doc:`/reference/commands/column_create`

.. note::

  If you didn't change your indexes by Groonga 4.0.9, you don't need
  to re-create your indexes. "change" means "add", "remove" and
  "update". If you use your indexes only for "search" by Groonga
  4.0.9, you don't need to re-create your indexes.

Fixes
^^^^^

* Fixed a bug that index may be broken. But the following bug fixed in
  Groonga 4.0.9 is re-appeared.

  * Fixed a crash bug that may be occurred by deleting or updating many
    indexed values at once.
    [groonga-dev,02942] [Reported by kashihara]

(obache)

Updated devel/ruby-msgpack to 0.5.10

(obache)

Update ruby-msgpack to 0.5.10.

2015-01-09 version 0.5.10:

* Merged msgpack-jruby by @iconara. JRuby can run `require 'msgpack'` to use
  msgpack-jruby.

(obache)

Updated security/p5-Digest-SHA3 to 0.24

(wen)

Updated security/p5-Digest-SHA to 5.95

(wen)

Update to 5.95

Upstream changes:
5.95  Sat Jan 10 12:15:36 MST 2015
- modified the bit-ordering test (ref. t/bitorder.t)
-- supplied directory-change preamble for CORE builds

5.94  Sat Jan 10 00:45:28 MST 2015
- added support for threaded builds
-- PERL_GET_NO_CONTEXT, pTHX_, aTHX_, etc.
-- employed 'const' storage class where possible
-- ref. rt.cpan.org #101260
- simplified shabits() routine (bitwise input buffering)
-- slightly less efficient but easier to understand
-- ref. rt.cpan.org #101344
- minor documentation tweaks and additions

(wen)

Retire x11/openmotif.

(joerg)

Removed x11/openmotif

(joerg)

Retire openmotif support, superseded by x11/motif.

(joerg)

Mark this ONLY_FOR_PLATFORM and list the platforms where tcsh is *not*
already in /bin. Otherwise, building and installing it naively clobbers
the native tcsh, which isn't what anyone wants.

I believe these platforms to be: NetBSD, OpenBSD, Solaris -- if anyone
can confirm that others (especially old ones I can't readily check)
don't have a native tcsh, please add.

(dholland)

Updated www/py-uwsgi to 2.0.9

(adam)

Changes 2.0.9:
Bugfixes:
fixed mod_proxy_uwsgi for non-blocking mode
fixed master-fifo + cheaper
fixed leak on error in bind_to_unix
atexit hooks works in cheaped workers too
atexit hooks works in gevent mode too during shutdown
fixed carbon command line option value after reload
do not honour Emperor throttling on the first run
fixed Mono plugin
fixed peer name in corerouters
fixed stop signal for daemons
varios ssl/tls fixes in https/spdy router
fixed python3 窶菟y-auto-reload-ignore
fixed modifiers in corerouters
support for yajl from homebrew (OSX)
psgi: Ensure that we call any DESTROY hooks on psgix.harakiri.commit
systemdlogger: fix compilation with -Werror=format-security
fixed unmasked websockets
perl fixed latent refcounting bug

New Features:
Improved PyPy support for Linux
Fastrouter post-buffering
Perl uwsgi::opt
窶菟ull-header
active-workers signal target
httpdumb routing action

(adam)

Simplify PKGNAME.

(wiz)

Simplify PKGNAME.

(wiz)

Updated net/youtube-dl to 20150110.2

(wiz)

Update to 2015.01.10.2; the usual bugfixes and new extractors.

(wiz)

Simplify PKGNAME.

(wiz)

Simplify PKGNAME.

(wiz)

Updated pkgtools/lintpkgsrc to 4.88

(wiz)

Try making this parallel jobs safe for joerg.

(wiz)

Improve variable expansion, in particular improving EMACS packages.
>From J. Lewis Muir.

Bump version.

(wiz)

Updated multimedia/ffmpeg2 to 2.5.3

(adam)

Changes 2.5.3:
* doc/examples: fix lib math dep for decoding_encoding
* avformat/movenc: workaround bug in "PathScale EKOPath(tm) Compiler Suite Version 4.0.12.1"

(adam)

Updated editors/lyx to 2.1.2.2

(rumko)

editors/lyx: update to 2.1.2.2

Summary of changelog:
* Native IPA inset and IPA toolbar
* New supported languages
* Tex Fonts Additions
* Basic support for Math OpenType fonts
* Document class categories
* Enhanced support for LaTeX options
* New supported LaTeX commands
* New export command-line option
* Table rotations
* Layout enhancements
* New modules
* Equation Editor "mode"

Ok@ reed

(rumko)

Updated devel/at-spi2-core to 2.14.1

(prlw1)

Update at-spi2-core to 2.14.1 [tks mef@]

* Docs: add AtspiTableCell.

(prlw1)

As threatened in April, add --without-emacs to fix build on OSX.

(gdt)

Copy gnulib readlinkat patch from archivers/gtar-base.

This undefines readlink so that the twisty maze of symlinks builds,
and fixes the build on netbsd-5.  Confirmed to work on netbsd-5/amd64
and netbsd-6/i386.  Thanks to obache@ for pointing out the problem.

I will request a pullup to 2014Q4 soon if there are no objections.

(gdt)

Updated textproc/gtk-doc to 1.21

(prlw1)

Update gtk-doc to 1.21

As per warning in 1.20, gtkdoc-scanobj and generating html via
sgml tools (options.mk) have been removed.

Added

  # needed together with pkg-config by gtkdoc-depscan at runtime
  .include "../../devel/glib2/buildlink3.mk"

to buildlink3.mk

GTK-Doc 1.21    (Jul 17 2014)
============

Important notice - starting with the next release these long deprecated
features will be removed, please write to gtk-doc-list@gnome.org and tell us
your concerns:
o gtkdoc-mktmpl - please move all the comments into the sources.
o generating html via sgml tools (jade/openjade), using xsltproc and
  docbook-xslt is pretty common and preferred since version 1.6

Changes

o 170860 : gtk-doc should have definitions for stability
o 644111 : one cannot specify against which libs gtkdoc-fixxref should
            resolve links (problematic with multiple versions)
o 657444 :  " enum foo { ... } " ; not recognized
o 671519 : Self-test relies on nonportable (GNU enhanced) 'date' command
o 678094 : the word "returns" in a function description can be parsed as
            the "Returns:" section
o 722621 : gtk-doc tarball was created with 32bit uid/gid, unusable with
            mingw/msys tar
o 724739 : Self-test fail: gtkdoc-mkdb misusing perl datatype
o 725505 : new syntax highlighting for code is weird
o 725663 : configure: non POSIX test usage
o 730658 : Deprecation warning for non-deprecated type GParamFlags
o 730777 : Add support for nullable and optional annotations

(prlw1)

at-spi2-core-2.14.1 [2.15.x is unstable version, tks prlw1@]

(mef)

Updated games/onscripter to 20150102

(tsutsui)

Update onscripter to 20150102.

Upstream changes (no English changelog):

20150102:
- fix bug that bgm doesn't stop if game is saved during bgmfadeout
- change button drawing when mouse is moved out of window
- fix bug in delay insn that causes extra wait during skip
- fix bug that settings of kidokumode insn in envdata is overwritten
  by kidokuskip insn at the next startup

20150101:
- fix bug of bdown insn
- fix bps insn to ignore undefined lsp
- fix spbtn insn to ignore undefined lsp
- fix infinite loop bug during skip by CTRL-key
- fix segfaults when loading images fails
- fix bug that skip by CTRL-key doesn't stop when it's released during
  SMPEG is played
- fix buffer overflow in ScriptHandler.cpp
- fix bexec insn that can't use number 0
- allow spaces or tabs before labels in game script
- update bps insn to handle third arg (mouse bottun event)

(tsutsui)

Fix distfile checksum, PR pkg/49552

(roy)

Fix comment as noted by obache@

(prlw1)

Updated x11/mlterm to 3.4.2

(tsutsui)

Update mlterm to 3.4.2.

Changes noted in doc/en/ReleaseNote:

ver 3.4.2
* Support colorful emoji with the use of http://github.com/github/gemoji.
  (Copy images/emoji/unicode/*.png in https://github.com/github/gemoji/archive/master.zip
  to ~/.mlterm/emoji/ in advance.)
* Support DCS + q Pt ST which requests termcap/terminfo string.
* Support CSI?8452h and CSI?8452l.
* Support CSI?117h and CSI?117l.
* Add "Bidi Separators" entry to "Encoding" tab of mlconfig.
* Add "Unicode areas you won't convert to other charsets" entry to "Font" tab of mlconfig.
* Add "Word separators", "Don't scroll automatically in scrolling back" and
  "Set full width areas manually" entries to "Others" tab of mlconfig.
* Add "word_separators", "unicode_noconv_areas" and "unicode_full_width_areas"
  to OSC 5380/5381.
* Improve performance of drawing text with cairo.
* Bug fixes:
  Fix incorrect result of searching bold or italic fonts when type_engine == xcore.
  (enbugged at 3.3.0)
  Fix segfault in opening a new channel over an opened session on win32.

(tsutsui)

audio/alsa-lib: on fbsd, we need sys/timespec.h for struct timespec

Ok@ wiz

(rumko)

  RBTools-0.5.5 -> 0.6.3
+ apache-ivy-2.4.0
+ at-spi2-core-2.15.3

(mef)

Add comment with upstream bug report URL for newest chunk.

(wiz)

Updated x11/gtk3 to 3.14.5nb2

(wiz)

Remove adwaita-icon-theme dependency, that package depends on gtk3.
Bump PKGREVISION.

(wiz)

Note update of kpathsea

(minskim)

Update kpathsea to 6.2.0

Changes:
* mktexlsr outputs normal msgs to stdout instead of stderr.
* do not ignore a non-terminated last line of a file.
* new texmf.cnf variables SELFAUTOGRANDPARENT, guess_input_kanji_encoding.

(minskim)

Updated www/py-wtforms to 2.0.1.

(kleink)

Update py-wtforms to 2.0.1.

Version 2.0.1
-------------
Released July 1, 2014

- Update wheel install to conditionally install ordereddict for python 2.6.
- Doc improvements

Version 2.0
-----------
Released May 20, 2014

- Add new `class Meta` paradigm for much more powerful customization
  of WTForms.
- Move i18n into core. Deprecate `wtforms.ext.i18n`.
- Move CSRF into core. Deprecate `wtforms.ext.csrf`.
- Fix issue rendering SelectFields with ``value=True``
- Make `DecimalField` able to use babel locale-based number formatting.
- Drop Python 3.2 support (Python3 support for 3.3+ only)
- passing ``attr=False`` to WTForms widgets causes the value to be ignored.
- `Unique` validator in `wtforms.ext.sqlalchemy` has been removed.

(kleink)

graphics/sane-backends: fix build on FreeBSD due to PLIST problems

Like on some other platforms, sane-pint is not available on fbsd, so
don't include in the PLIST.

Ok@ wiz

(rumko)

audio/esound: fix build on fbsd due to missing libm

As on some other systems, fbsd also needs -lm in LDFLAGS in order
for esound to build successfully.

Ok@ wiz

(rumko)

security/dirmngr: compatibility with libgcrypt>=1.6.0

Before 1.6.0 version, libgcrypt called pth_init() on it's own,
in later version dirmngr has to be the one to call pth_init().
With this dirmngr actually works (does not seg fault immediately).

Since it's a runtime problem, PKGREVISION bumped.

OK@ wiz

(rumko)

lang/openjdk7: make it work on FreeBSD 10.* x86_64

* -Wno-new-returns-null is not currently known to installed clang on fbsd, make it optional
* on fbsd, openjdk builds libjsoundalsa and libsctp, add them optionally to PLIST
* add necessary patches to make it build on fbsd

Reviewed by wiz

(rumko)

Make it buildable on NetBSD/alpha

(martin)

!OSX build use PulseAudio, update PLIST accordingly.

(joerg)

Fix dependencies.

(joerg)

Not MAKE_JOBS_SAFE.

(joerg)

The 'g' constraint allows a memory operand, but assembler dereference on
that again is unsupported. Request a memory operand instead and drop the
dereference.

(joerg)

Expect C89 userland.

(joerg)

Don't depend on parser skeleton to include stdlib.h.

(joerg)

Not MAKE_JOBS_SAFE.

(joerg)

Don't depend on parser skeleton to include stdlib.h.

(joerg)

TypeError with Python 3.x.

(joerg)

Fix C syntax.

(joerg)

Needs bison, yacc is not enough.

(joerg)

Don't depend on parser skeleton to include stdlib.h.

(joerg)

Updated audio/abcmidi to 20141016

(mef)

Updated archivers/p5-Archive-Zip to 1.40
Updated archivers/unalz to 0.65

(mef)

Update 2012-12-01 to 2014-10-16
(doc/readme.txt), this includes the versions of:
-------------------------------
midi2abc version 2.94 January 05 2014
abc2midi version 3.37 October 16 2014
abc2abc  version 1.75 September 08 2013
yaps    version 1.56 November 04 2013
abcmatch version 1.62 January 01 2014
midicopy version 1.18 October 01 2013

(doc/CHANGES)
-------------------------------
too many lines to list here:

(mef)

Fix buiding py-netsnmp

(adam)

Update 0.61 to 0.65
- ChangeLog doesn't seem to be available, but three patches
  are now included in upstream and removing them.

(mef)

Update 1.39 to 1.40
1.40 Sun 04 Jan 2015
    - https://rt.cpan.org/Public/Bug/Display.html?id=92205 [cpan/PMQS]
    - https://rt.cpan.org/Public/Bug/Display.html?id=101092 [cpan/PMQS]

(mef)

Removing shells/mudsh.

(mef)

Removing shells/mudsh. From FreeBSD PR:
  https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=104260
  ---------------------------
  The MASTER_SITES for shells/mudsh is invalid.  The email
  address of the submitter of the port is no longer valid.
  The app itself is a single perl script with no author in it.
  ---------------------------
Thanks wiz@ for review.

(mef)

dependency on default icon theme is in gtk3 base package now, so drop it.

(obache)

Same PKGBASE packages must not be installed, no need to add manual CONFLICTS.

(obache)

Updated x11/gtk3 to 3.14.5nb1

(obache)

Since GTK>=3.14, Adwaita is the default theme, so add dependency on it.

PR pkg/49494.

(obache)

Restore xapian buildlink3.mk, it is required to correctly pull in libuuid
on SunOS.

(jperkin)

Disable coroutine-pool on SunOS to work around "Co-routine is yielding to no one".

(wiedi)

Update HOMEPAGE.

(wiz)

Pullup ticket #4584.

(tron)

Pullup ticket #4584 - requested by ryoon
www/php-basercms: dependence fix

Revisions pulled up:
- www/php-basercms/Makefile                                    1.3
- www/php-basercms/options.mk                                  1.2

---
  Module Name: pkgsrc
  Committed By: ryoon
  Date: Thu Jan  8 13:35:03 UTC 2015

  Modified Files:
  pkgsrc/www/php-basercms: Makefile options.mk

  Log Message:
  Bump PKGREVISION.

  * Fix DEPENDS.
    Recent version of baserCMS requires PDO database drivers.
  * Remove obsolete commented-out lines.

(tron)

Fix build with GSSAPI on NetBSD. Enable gssapi again.

(wiz)

Note update of the "wireshark" package to version 1.10.12.

(tron)

Update "wireshark" package to version 1.10.12. Changes since 1.10.11:
- Bug Fixes
  The following vulnerabilities have been fixed.
    * wnpa-sec-2014-20
      SigComp UDVM buffer overflow. (Bug 10662)
      CVE-2014-8710
    * wnpa-sec-2014-21
      AMQP crash. (Bug 10582) CVE-2014-8711
    * wnpa-sec-2014-22
      NCP crashes. (Bug 10552, Bug 10628) CVE-2014-8712
      CVE-2014-8713
    * wnpa-sec-2014-23
      TN5250 infinite loops. (Bug 10596) CVE-2014-8714
  The following bugs have been fixed:
    * 6LoWPAN Mesh headers not treated as encapsulating address.
      (Bug 10462)
    * UCP dissector bug of operation 31 - PID 0639 not
      recognized. (Bug 10463)
    * iSCSI dissector rejects PDUs with "expected data transfer
      length" > 16M. (Bug 10469)
    * GTPv2: trigging_tree under Trace information has wrong
      length. (Bug 10470)
    * Attempt to render an SMS-DELIVER-REPORT instead of an
      SMS-DELIVER. (Bug 10547)
    * IPv6 Mobility Option IPv6 Address/Prefix marks too many
      bytes for the address/prefix field. (Bug 10576)
    * IPv6 Mobility Option Binding Authorization Data for FMIPv6
      Authenticator field is read beyond the option data.
      (Bug 10577)
    * IPv6 Mobility Option Mobile Node Link Layer Identifier
      Link-layer Identifier field is read beyond the option data.
      (Bug 10578)
    * Malformed PTPoE announce packet. (Bug 10611)
    * IPv6 Permanent Home Keygen Token mobility option includes
      too many bytes for the token field. (Bug 10619)
    * IPv6 Redirect Mobility Option K and N bits are parsed
      incorrectly. (Bug 10622)
    * IPv6 Care Of Test mobility option includes too many bytes
      for the Keygen Token field. (Bug 10624)
    * IPv6 MESG-ID mobility option is parsed incorrectly.
      (Bug 10625)
    * IPv6 AUTH mobility option parses Mobility SPI and
      Authentication Data incorrectly. (Bug 10626)
    * IPv6 DNS-UPDATE-TYPE mobility option includes too many
      bytes for the MD identity field. (Bug 10629)
    * IPv6 Local Mobility Anchor Address mobility option's code
      and reserved fields are parsed as 2 bytes instead of 1.
      (Bug 10630)
    * TShark crashes when running with PDML on a specific packet.
      (Bug 10651)
    * IPv6 Mobility Option Context Request reads an extra
      request. (Bug 10676)
- Updated Protocol Support
  6LoWPAN, AMQP, GSM MAP, GTPv2, H.223, IEEE 802.11, iSCSI, MIH,
  Mobile IPv6, PTPoE, TN5250, and UCP
- New and Updated Capture File Support
  Catapult DCT2000, HP-UX nettl, pcap-ng, and Sniffer (DOS)

(tron)

Updated www/curl to 7.40.0

(wiz)

Update to 7.40.0. Disable gssapi by default on NetBSD, since it doesn't
compile any longer, see
https://sourceforge.net/p/curl/bugs/1469/

Changes:

Curl and libcurl 7.40.0

Public curl releases:        143
Command line options:        162
curl_easy_setopt() options:  208
Public functions in libcurl:  58
Contributors:                1219

This release includes the following changes:

o http_digest: Added support for Windows SSPI based authentication
o version info: Added Kerberos V5 to the supported features
o Makefile: Added VC targets for WinIDN
o config-win32: Introduce build targets for VS2012+
o SSL: Add PEM format support for public key pinning
o smtp: Added support for the conversion of Unix newlines during mail send [8]
o smb: Added initial support for the SMB/CIFS protocol
o Added support for HTTP over unix domain sockets, via
  CURLOPT_UNIX_SOCKET_PATH and --unix-socket
o sasl: Added support for GSS-API based Kerberos V5 authentication

This release includes the following bugfixes:

o darwinssl: fix session ID keys to only reuse identical sessions [18]
o url-parsing: reject CRLFs within URLs [19]
o OS400: Adjust specific support to last release
o THANKS: Remove duplicate names
o url.c: Fixed compilation warning
o ssh: Fixed build on platforms where R_OK is not defined [1]
o tool_strdup.c: include the tool strdup.h
o build: Fixed Visual Studio project file generation of strdup.[c|h]
o curl_easy_setopt.3: add CURLOPT_PINNEDPUBLICKEY [2]
o curl.1: show zone index use in a URL
o mk-ca-bundle.vbs: switch to new certdata.txt url
o Makefile.dist: Added some missing SSPI configurations
o build: Fixed no NTLM support for email when CURL_DISABLE_HTTP is defined
o SSH: use the port number as well for known_known checks [3]
o libssh2: detect features based on version, not configure checks
o http2: Deal with HTTP/2 data inside Upgrade response header buffer [4]
o multi: removed Curl_multi_set_easy_connection
o symbol-scan.pl: do not require autotools
o cmake: add ENABLE_THREADED_RESOLVER, rename ARES
o cmake: build libhostname for test suite
o cmake: fix HAVE_GETHOSTNAME definition
o tests: fix libhostname visibility
o tests: fix memleak in server/resolve.c
o vtls.h: Fixed compiler warning when compiled without SSL
o CMake: Restore order-dependent header checks
o CMake: Restore order-dependent library checks
o tool: Removed krb4 from the supported features
o http2: Don't send Upgrade headers when we already do HTTP/2
o examples: Don't call select() to sleep on windows [6]
o win32: Updated some legacy APIs to use the newer extended versions [5]
o easy.c: Fixed compilation warning when no verbose string support
o connect.c: Fixed compilation warning when no verbose string support
o build: in Makefile.m32 pass -F flag to windres
o build: in Makefile.m32 add -m32 flag for 32bit
o multi: when leaving for timeout, close accordingly
o CMake: Simplify if() conditions on check result variables
o build: in Makefile.m32 try to detect 64bit target
o multi: inform about closed sockets before they are closed
o multi-uv.c: close the file handle after download
o examples: Wait recommended 100ms when no file descriptors are ready
o ntlm: Split the SSPI based messaging code from the native messaging code
o cmake: fix NTLM detection when CURL_DISABLE_HTTP defined
o cmake: add Kerberos to the supported feature
o CURLOPT_POSTFIELDS.3: mention the COPYPOSTFIELDS option
o http: Disable pipelining for HTTP/2 and upgraded connections
o ntlm: Fixed static'ness of local decode function
o sasl: Reduced the need for two sets of NTLM messaging functions
o multi.c: Fixed compilation warnings when no verbose string support
o select.c: fix compilation for VxWorks [7]
o multi-single.c: switch to use curl_multi_wait
o curl_multi_wait.3: clarify numfds being used if not NULL
o http.c: Fixed compilation warnings from features being disabled
o NSS: enable the CAPATH option [9]
o docs: Fix FAILONERROR typos
o HTTP: don't abort connections with pending Negotiate authentication
o HTTP: Free (proxy)userpwd for NTLM/Negotiate after sending a request
o http_perhapsrewind: don't abort CONNECT requests
o build: updated dependencies in makefiles
o multi.c: Fixed compilation warning
o ftp.c: Fixed compilation warnings when proxy support disabled
o get_url_file_name: Fixed crash on OOM on debug build
o cookie.c: Refactored cleanup code to simplify
o OS400: enable NTLM authentication
o ntlm: Use Windows Crypt API
o http2: avoid logging neg "failure" if h2 was not requested
o schannel_recv: return the correct code [10]
o VC build: added sspi define for winssl-zlib builds
o Curl_client_write(): chop long data, convert data only once
o openldap: do not ignore Curl_client_write() return code
o ldap: check Curl_client_write() return codes
o parsedate.c: Fixed compilation warning
o url.c: Fixed compilation warning when USE_NTLM is not defined
o ntlm_wb_response: fix "statement not reached" [11]
o telnet: fix "cast increases required alignment of target type"
o smtp: Fixed dot stuffing when EOL characters at end of input buffers [12]
o ntlm: Allow NTLM2Session messages when USE_NTRESPONSES manually defined
o ntlm: Disable NTLM v2 when 64-bit integers are not supported
o ntlm: Use short integer when decoding 16-bit values
o ftp.c: Fixed compilation warning when no verbose string support
o synctime.c: fixed timeserver URLs
o mk-ca-bundle.pl: restored forced run again
o ntlm: Fixed return code for bad type-2 Target Info
o curl_schannel.c: Data may be available before connection shutdown
o curl_schannel: Improvements to memory re-allocation strategy [13]
o darwinssl: aprintf() to allocate the session key
o tool_util.c: Use GetTickCount64 if it is available
o lib: Fixed multiple code analysis warnings if SAL are available
o tool_binmode.c: Explicitly ignore the return code of setmode
o tool_urlglob.c: Silence warning C6293: Ill-defined for-loop
o opts: Warn CURLOPT_TIMEOUT overrides when set after CURLOPT_TIMEOUT_MS
o SFTP: work-around servers that return zero size on STAT [14]
o connect: singleipconnect(): properly try other address families after failure
o IPV6: address scope != scope id [15]
o parseurlandfillconn(): fix improper non-numeric scope_id stripping [16]
o secureserver.pl: make OpenSSL CApath and cert absolute path values
o secureserver.pl: update Windows detection and fix path conversion
o secureserver.pl: clean up formatting of config and fix verbose output
o tests: Added Windows support using Cygwin-based OpenSSH
o sockfilt.c: use non-Ex functions that are available before WinXP
o VMS: Updates for 0740-0D1220
o openssl: warn for SRP set if SSLv3 is used, not for TLS version
o openssl: make it compile against openssl 1.1.0-DEV master branch
o openssl: fix SSL/TLS versions in verbose output
o curl: show size of inhibited data when using -v
o build: Removed WIN32 definition from the Visual Studio projects
o build: Removed WIN64 definition from the libcurl Visual Studio projects
o vtls: Use bool for Curl_ssl_getsessionid() return type
o sockfilt.c: Replace 100ms sleep with thread throttle
o sockfilt.c: Reduce the number of individual memory allocations
o vtls: Don't set cert info count until memory allocation is successful
o nss: Don't ignore Curl_ssl_init_certinfo() OOM failure
o nss: Don't ignore Curl_extract_certinfo() OOM failure
o vtls: Fixed compilation warning and an ignored return code
o sockfilt.c: Fixed compilation warnings
o darwinssl: Fixed compilation warning
o vtls: Use '(void) arg' for unused parameters
o sepheaders.c: Fixed resource leak on failure
o lib1900.c: Fixed cppcheck error [17]
o ldap: Fixed Unicode connection details in Win32 initialsation / bind calls
o ldap: Fixed Unicode DN, attributes and filter in Win32 search calls

(wiz)

+ redmine.

(wiz)

Nuke zephr related code, the options weren't supported anyway.

(joerg)

Remove patch after 4.0.9 update.

(wiz)

Remove patch after 2.48 update.

(wiz)

Remove patch after update to 0.19.

(wiz)

Updated security/openssl to 1.0.1k

(wiz)

Update to 1.0.1k:

Changes between 1.0.1j and 1.0.1k [8 Jan 2015]

  *) Fix DTLS segmentation fault in dtls1_get_record. A carefully crafted DTLS
    message can cause a segmentation fault in OpenSSL due to a NULL pointer
    dereference. This could lead to a Denial Of Service attack. Thanks to
    Markus Stenberg of Cisco Systems, Inc. for reporting this issue.
    (CVE-2014-3571)
    [Steve Henson]

  *) Fix DTLS memory leak in dtls1_buffer_record. A memory leak can occur in the
    dtls1_buffer_record function under certain conditions. In particular this
    could occur if an attacker sent repeated DTLS records with the same
    sequence number but for the next epoch. The memory leak could be exploited
    by an attacker in a Denial of Service attack through memory exhaustion.
    Thanks to Chris Mueller for reporting this issue.
    (CVE-2015-0206)
    [Matt Caswell]

  *) Fix issue where no-ssl3 configuration sets method to NULL. When openssl is
    built with the no-ssl3 option and a SSL v3 ClientHello is received the ssl
    method would be set to NULL which could later result in a NULL pointer
    dereference. Thanks to Frank Schmirler for reporting this issue.
    (CVE-2014-3569)
    [Kurt Roeckx]

  *) Abort handshake if server key exchange message is omitted for ephemeral
    ECDH ciphersuites.

    Thanks to Karthikeyan Bhargavan of the PROSECCO team at INRIA for
    reporting this issue.
    (CVE-2014-3572)
    [Steve Henson]

  *) Remove non-export ephemeral RSA code on client and server. This code
    violated the TLS standard by allowing the use of temporary RSA keys in
    non-export ciphersuites and could be used by a server to effectively
    downgrade the RSA key length used to a value smaller than the server
    certificate. Thanks for Karthikeyan Bhargavan of the PROSECCO team at
    INRIA or reporting this issue.
    (CVE-2015-0204)
    [Steve Henson]

  *) Fixed issue where DH client certificates are accepted without verification.
    An OpenSSL server will accept a DH certificate for client authentication
    without the certificate verify message. This effectively allows a client to
    authenticate without the use of a private key. This only affects servers
    which trust a client certificate authority which issues certificates
    containing DH keys: these are extremely rare and hardly ever encountered.
    Thanks for Karthikeyan Bhargavan of the PROSECCO team at INRIA or reporting
    this issue.
    (CVE-2015-0205)
    [Steve Henson]

  *) Ensure that the session ID context of an SSL is updated when its
    SSL_CTX is updated via SSL_set_SSL_CTX.

    The session ID context is typically set from the parent SSL_CTX,
    and can vary with the CTX.
    [Adam Langley]

  *) Fix various certificate fingerprint issues.

    By using non-DER or invalid encodings outside the signed portion of a
    certificate the fingerprint can be changed without breaking the signature.
    Although no details of the signed portion of the certificate can be changed
    this can cause problems with some applications: e.g. those using the
    certificate fingerprint for blacklists.

    1. Reject signatures with non zero unused bits.

    If the BIT STRING containing the signature has non zero unused bits reject
    the signature. All current signature algorithms require zero unused bits.

    2. Check certificate algorithm consistency.

    Check the AlgorithmIdentifier inside TBS matches the one in the
    certificate signature. NB: this will result in signature failure
    errors for some broken certificates.

    Thanks to Konrad Kraszewski from Google for reporting this issue.

    3. Check DSA/ECDSA signatures use DER.

    Reencode DSA/ECDSA signatures and compare with the original received
    signature. Return an error if there is a mismatch.

    This will reject various cases including garbage after signature
    (thanks to Antti Karjalainen and Tuomo Untinen from the Codenomicon CROSS
    program for discovering this case) and use of BER or invalid ASN.1 INTEGERs
    (negative or with leading zeroes).

    Further analysis was conducted and fixes were developed by Stephen Henson
    of the OpenSSL core team.

    (CVE-2014-8275)
    [Steve Henson]

  *) Correct Bignum squaring. Bignum squaring (BN_sqr) may produce incorrect
      results on some platforms, including x86_64. This bug occurs at random
      with a very low probability, and is not known to be exploitable in any
      way, though its exact impact is difficult to determine. Thanks to Pieter
      Wuille (Blockstream) who reported this issue and also suggested an initial
      fix. Further analysis was conducted by the OpenSSL development team and
      Adam Langley of Google. The final fix was developed by Andy Polyakov of
      the OpenSSL core team.
      (CVE-2014-3570)
      [Andy Polyakov]

  *) Do not resume sessions on the server if the negotiated protocol
      version does not match the session's version. Resuming with a different
      version, while not strictly forbidden by the RFC, is of questionable
      sanity and breaks all known clients.
      [David Benjamin, Emilia K舖per]

  *) Tighten handling of the ChangeCipherSpec (CCS) message: reject
      early CCS messages during renegotiation. (Note that because
      renegotiation is encrypted, this early CCS was not exploitable.)
      [Emilia K舖per]

  *) Tighten client-side session ticket handling during renegotiation:
      ensure that the client only accepts a session ticket if the server sends
      the extension anew in the ServerHello. Previously, a TLS client would
      reuse the old extension state and thus accept a session ticket if one was
      announced in the initial ServerHello.

      Similarly, ensure that the client requires a session ticket if one
      was advertised in the ServerHello. Previously, a TLS client would
      ignore a missing NewSessionTicket message.
      [Emilia K舖per]

(wiz)

Add links for automake-1.15.

(wiz)

Updated devel/automake to 1.15

(wiz)