No reason to require gtar.

(obache)

Updated devel/libelf to 0.8.13nb1

(obache)

Fixes missing override of pc file.

Bump PKGREVISION.

(obache)

Updated devel/libatomic_ops to 7.4.0nb1

(obache)

Fixes path for pc files to overwrite.

Bump PKGREVISION.

(obache)

Note update of the "phpmyadmin" package to version 4.2.2.

(tron)

Update "phpmyadmin" package to version 4.2.2:
This release contains several improvements and bug fixes. This version
removes support for the deprecated PHP extension "mysql".

Some highlights include:
- Added the ability to save and load queries in Query By Example.
- Navigation tabs are now fixed and don't scroll off screen.
- Easily add a function to all rows when inserting several rows at once.
- Added a favorite tables feature for quick access to often-used tables.
- Quick filter displayed rows.

(tron)

security/gnutls: security update

(schnoebe)

Pullup ticket #4430 - requested by tron
security/gnutls: security update

Revisions pulled up:
- security/gnutls/Makefile                                      1.146
- security/gnutls/distinfo                                      1.106

---
  Module Name: pkgsrc
  Committed By: wiz
  Date: Fri May 30 13:20:23 UTC 2014

  Modified Files:
  pkgsrc/security/gnutls: Makefile distinfo

  Log Message:
  Update to 3.2.15:

  * Version 3.2.15 (released 2014-05-30)

  ** libgnutls: Eliminated memory corruption issue in Server Hello parsing.
  Issue reported by Joonas Kuorilehto of Codenomicon.

  ** libgnutls: Several memory leaks caused by error conditions were
  fixed. The leaks were identified using valgrind and the Codenomicon
  TLS test suite.

  ** libgnutls: Increased the maximum certificate size buffer
  in the PKCS #11 subsystem.

  ** libgnutls: Check the return code of getpwuid_r() instead of relying
  on the result value. That avoids issue in certain systems, when using
  tofu authentication and the home path cannot be determined. Issue reported
  by Viktor Dukhovni.

  ** gnutls-cli: if dane is requested but not PKIX verification, then
  only do verify the end certificate.

  ** ocsptool: Include path in ocsp request. This resolves #108582
  (https://savannah.gnu.org/support/?108582), reported by Matt McCutchen.

  ** API and ABI modifications:
  No changes since last version.

  * Version 3.2.14 (released 2014-05-06)

  ** libgnutls: Fixed issue with the check of incoming data when two
  different recv and send pointers have been specified. Reported and
  investigated by JMRecio.

  ** libgnutls: Fixed issue in the RSA-PSK key exchange, which would
  result to illegal memory access if a server hint was provided.

  ** libgnutls: Fixed client memory leak in the PSK key exchange, if a
  server hint was provided.

  ** libgnutls: Several small bug fixes identified using valgrind and
  the Codenomicon TLS test suite.

  ** libgnutls: Several small bug fixes found by coverity.

  ** libgnutls-dane: Accept a certificate using DANE if there is at least one
  entry that matches the certificate. Patch by simon [at] arlott.org.

  ** configure: Added --with-nettle-mini option, which allows linking
  with a libnettle that contains gmp.

  ** certtool: The ECDSA keys generated by default use the SECP256R1 curve
  which is supported more widely than the previously used SECP224R1.

  ** API and ABI modifications:
  No changes since last version.

  * Version 3.2.13 (released 2014-04-07)

  ** libgnutls: gnutls_openpgp_keyring_import will no longer fail silently
  if there are no base64 data. Report and patch by Ramkumar Chinchani.

  ** libgnutls: gnutls_record_send is now safe to be called under DTLS when
  in corked mode.

  ** libgnutls: Ciphersuites that use the SHA256 or SHA384 MACs are
  only available in TLS 1.0 as SSL 3.0 doesn't specify parameters for
  these algorithms.

  ** libgnutls: Changed the behaviour in wildcard acceptance in certificates.
  Wildcards are only accepted when there are more than two domain components
  after the wildcard. This drops support for the permissive RFC2818 wildcards
  and adds more conservative support based on the suggestions in RFC6125. Suggested
  by Jeffrey Walton.

  ** certtool: When no password is provided to export a PKCS #8 keys, do
  not encrypt by default. This reverts to the certtool behavior of gnutls
  3.0. The previous behavior of encrypting using an empty password can be
  replicating using the new parameter --empty-password.

  ** p11tool: Avoid dual initialization of the PKCS #11 subsystem when
  the --provider option is given.

  ** API and ABI modifications:
  No changes since last version.

(schnoebe)

Enable "iso" by default.

This makes the package more useful for users of binary packages, who
can then burn a bootable memtest CD, and only costs 1.8 MB without
adding any run-time dependencies.  Source users get a dependency on
cdrtools, but that's likely already installed, and the option can
easily be turned off in that case (unlike binary package users, who
can't change options).

(gdt)

Workaround perldtrace.h dependency problem

(richard)

Updated pkgtools/rc.subr to 20140604

(ryoon)

Update to 20140604

* Enable for CentOS/RHEL, fix su(1) path.

(ryoon)

Updated multimedia/xvidcore to 1.3.3

(adam)

Changes 1.3.3:
* xvidcore/examples/xvid_encraw.c: Help info about zones usage and
  various fixes for compiler warnings
* xvidcore/examples/xvid_encraw.c: Improved help texts and defaults
  handling.
* xvidcore/examples/Makefile, xvidcore/examples/xvid_encraw.c:
  Better environment detection for Makefile
* xvidcore/examples/xvid_encraw.c: Fix out of bound access to
  framestats struct.

(adam)

Updated multimedia/libass to 0.11.2; multimedia/ffmpeg2 to 2.2.3

(adam)

Changes 2.2.3:
* avformat/h263dec/h263_probe: Check TR
* avformat/h263dec/h263_probe: Check PSC bit 9 and 13 in
* avformat/h263dec: shift data in state to make more bits available to probe
* avcodec/svq3: Fix "incompatible pointer type" warnings
* avformat/utils: Call ff_rfps_add_frame() only for video
* avformat/flvenc: fix assertion failure after 4h muxing
* avcodec/mss4: Fix () in MKVAL() macro
* avcodec/mss34dsp: fix () in SOP* macros
more...

(adam)

Changes 0.11.2:
* Improve yasm version check
* Fix \fscx0 crashes
* Actually export ass_library_version
* Fix change detection with vector clips
* SIMD assembly bugfixes
* Parse drawing numbers as floats
* Fix shaper sign bug
* Initialize \pbo correctly

(adam)

Changes 0.11.2:
* Improve yasm version check
* Fix \fscx0 crashes
* Actually export ass_library_version
* Fix change detection with vector clips
* SIMD assembly bugfixes
* Parse drawing numbers as floats
* Fix shaper sign bug
* Initialize \pbo correctly

(adam)

Move Haiku pthread hack to options.mk.
"pthreads broken on vax" hack had been removed, but it is also used for Haiku.

(obache)

This package builds using cmake these days, so CONFIGURE_ARGS isn't useful.
Port the intended flags to cmake arguments.

Fixes the build in obscure circumstances where doxygen is installed, but
some documentation python build-time requirements happen to be missing.

(dsainty)

Updated devel/py-mercurial to 3.0.1

(wiz)

Update to 3.0.1:

This is a regularly-scheduled bugfix release.

    alias: change return code of bad definition to 255
    alias: fix loss of non-zero return code in command aliases
    alias: handle shlex error in command aliases
    bookmarks: properly align multi-byte characters
    bugzilla: support Bugzilla 4.4.3+ API login token authentication (issue4257)
    bundle2: fix bundle2 pulling all revs on empty pulls
    bundle2: fix configuration name mismatch
    changelog: ensure changelog._delaybuf is initialized
    color: don't fail on error messages when no curses (issue4237)
    exchange: propagate arguments to the _getbundleextrapart function
    localrepo: prevent leak of transaction object (issue4258)
    proxy: remove unneeded _set_hostport for compatibility with Python 2.7.7rc1
    setup.py, make: avoid problems with outdated, existing hgext/index.py*
    subrepo: avoid sanitizing ".hg/hgrc" in meta data area for non-hg subrepos
    subrepo: invoke "_sanitize()" also after "git merge --ff"
    subrepo: make "_sanitize()" take absolute path to the root of subrepo
    subrepo: make "_sanitize()" work
    subrepo: normalize path in the specific way for problematic encodings
    templates: fix ifcontains against sets with length > 1 (issue4259)
    win32: backout 1a9ebc83a74c

(wiz)

For Perl 5.20.0, update patch to not introduce an empty if/then/else block,
which some shells prohibit.

Fixes build on Linux.

(dsainty)

Add ruby-chef.

(jperkin)

Added sysutils/ruby-chef version 11.12.4

(jperkin)

Import sysutils/ruby-chef into pkgsrc.

Chef is a configuration management tool.  It uses a pure-Ruby,
domain-specific language (DSL) for writing system configuration
"recipes".  Chef is used to streamline the task of configuring and
maintaining a company's servers, and can integrate with cloud-based
platforms such as Rackspace, Amazon EC2, and Microsoft Azure to
automatically provision and configure new machines.

(jperkin)

Remove the addition of devel/ruby-yajl-ruby.

(jperkin)

Remove ruby-yajl-ruby.

(jperkin)

Remove devel/ruby-yajl-ruby, there is already textprocy/ruby-yajl with
a version which satisfies all current dependencies.

(jperkin)

Switch to the existing ruby-yajl package.

(jperkin)

Added misc/ruby-pry version 0.9.12.6

(jperkin)

Update MASTER_SITES. From Thomas Mueller.

(wiz)

Add ruby-pry.

(jperkin)

Import misc/ruby-pry into pkgsrc.

Pry is a powerful alternative to the standard IRB shell for Ruby. It
is written from scratch to provide a number of advanced features.

Pry also aims to be more than an IRB replacement; it is an attempt to
bring REPL driven programming to the Ruby language. It is currently
not as powerful as tools like SLIME for lisp, but that is the general
direction Pry is heading.

Pry is also fairly flexible and allows significant user customization
is trivial to set it to read from any object that has a readline
method and write to any object that has a puts method - many other
aspects of Pry are also configurable making it a good choice for
implementing custom shells.

(jperkin)

Add ruby-net-ssh-multi.

(jperkin)

Added security/ruby-net-ssh-multi version 1.2.0

(jperkin)

Import security/ruby-net-ssh-multi into pkgsrc.

Net::SSH::Multi is a library for controlling multiple Net::SSH
connections via a single interface. It exposes an API similar to that
of Net::SSH::Connection::Session and Net::SSH::Connection::Channel,
making it simpler to adapt programs designed for single connections to
be used with multiple connections.

This library is particularly useful for automating repetitive tasks
that must be performed on multiple machines. It executes the commands
in parallel, and allows commands to be executed on subsets of servers
(defined by groups).

(jperkin)

Added sysutils/ruby-chef-zero version 2.0.2

(jperkin)

Add ruby-chef-zero.

(jperkin)

Import sysutils/ruby-chef-zero into pkgsrc.

Chef Zero is a simple, easy-install, in-memory Chef server that can be
useful for Chef Client testing and chef-solo-like tasks that require a
full Chef Server. It IS intended to be simple, Chef 11 compliant, easy
to run and fast to start. It is NOT intended to be secure, scalable,
performant or persistent. It does NO input validation, authentication
or authorization (it will not throw a 400, 401 or 403). It does not
save data, and will start up empty each time you start it.

Because Chef Zero runs in memory, it's super fast and lightweight.
This makes it perfect for testing against a "real" Chef Server without
mocking the entire Internet.

(jperkin)

Limit to ruby-yajl 1.1.x to avoid pulling in yajl-ruby-1.2.0.

(jperkin)

Add ruby-rest-client.

(jperkin)

Added www/ruby-rest-client version 1.6.7

(jperkin)

Import www/ruby-rest-client into pkgsrc.

A simple HTTP and REST client for Ruby, inspired by the Sinatra
microframework style of specifying actions: get, put, post, delete.

(jperkin)

Add ruby-slop.

(jperkin)

Added misc/ruby-slop version 3.5.0

(jperkin)

Import misc/ruby-slop into pkgsrc.

Slop is a simple option parser with an easy to remember syntax and
friendly API.

(jperkin)

Add ruby-yajl-ruby.

(jperkin)

Added devel/ruby-yajl-ruby version 1.2.0

(jperkin)

Import devel/ruby-yajl-ruby into pkgsrc.

This gem is a C binding to the excellent YAJL JSON parsing and
generation library.

Features:

* JSON parsing and encoding directly to and from an IO stream (file,
  socket, etc) or String. Compressed stream parsing and encoding
  supported for Bzip2, Gzip and Deflate.

* Parse and encode multiple JSON objects to and from streams or
  strings continuously.

* JSON gem compatibility API - allows yajl-ruby to be used as a
  drop-in replacement for the JSON gem

* Basic HTTP client (only GET requests supported for now) which
  parses JSON directly off the response body as it's being received

* ~3.5x faster than JSON.generate

* ~1.9x faster than JSON.parse

* ~4.5x faster than YAML.load

* ~377.5x faster than YAML.dump

* ~1.5x faster than Marshal.load

* ~2x faster than Marshal.dump

(jperkin)

Added misc/ruby-ohai version 7.0.4

(jperkin)

Add ruby-ohai.

(jperkin)

Import misc/ruby-ohai into pkgsrc.

Ohai detects data about your operating system. It can be used
standalone, but it's primary purpose is to provide node data to Chef.

Ohai will print out a JSON data blob for all the known data about your
system. When used with Chef, that data is reported back via node
attributes.

(jperkin)

Added net/ruby-ipaddress version 0.8.0

(jperkin)

Add ruby-ipaddress.

(jperkin)

Import net/ruby-ipaddress into pkgsrc.

IPAddress is a Ruby library designed to make the use of IPv4 and IPv6
addresses simple, powerful and enjoyable. It provides a complete set
of methods to handle IP addresses for any need, from simple scripting
to full network design.

IPAddress is written with a full OO interface, and its code is easy to
read, maintain and extend. The documentation is full of examples, to
let you start being productive immediately.

(jperkin)

Add ruby-systemu.

(jperkin)

Added misc/ruby-systemu version 2.5.2

(jperkin)

Import misc/ruby-systemu into pkgsrc.

Universal capture of stdout and stderr and handling of child process
pid for Windows, *nix, etc.

(jperkin)

Add the new ruby-mixlib-* packages:

- ruby-mixlib-authentication
- ruby-mixlib-cli
- ruby-mixlib-config
- ruby-mixlib-log
- ruby-mixlib-shellout

(jperkin)

Added devel/ruby-mixlib-shellout version 1.4.0

(jperkin)

Import devel/ruby-mixlib-shellout into pkgsrc.

Provides a simplified interface to shelling out yet still collecting
both standard out and standard error and providing full control over
environment, working directory, uid, gid, etc.

(jperkin)

Added devel/ruby-mixlib-log version 1.6.0

(jperkin)

Import devel/ruby-mixlib-log into pkgsrc.

A simple class based Log mechanism, similar to Merb and Chef, that you
can mix in to your project.  Mixlib::Log provides a mixin for enabling
a class based logger object, a-la Merb, Chef, and Nanite.

(jperkin)

Added devel/ruby-mixlib-config version 2.1.0

(jperkin)

Import devel/ruby-mixlib-config into pkgsrc.

A simple class based Config mechanism, similar to the one found in
Chef.

(jperkin)

Added devel/ruby-mixlib-cli version 1.5.0

(jperkin)

Import devel/ruby-mixlib-cli into pkgsrc.

A mixin for creating command line applications - gives an easy DSL for
argument specification and processing.  Mixlib::CLI provides a
class-based command line option parsing object, like the one used in
Chef, Ohai and Relish.

(jperkin)

Added devel/ruby-mixlib-authentication version 1.3.0

(jperkin)

Import devel/ruby-mixlib-authentication into pkgsrc.

Mixlib::Authentication provides a class-based header signing
authentication object, like the one used in Chef.

(jperkin)

Add ruby-method_source.

(jperkin)

Added misc/ruby-method_source version 0.8.2

(jperkin)

Import ruby-method_source into pkgsrc.

method_source is a utility to return a method's source code as a Ruby
string.  Also returns Proc and Lambda source code.

(jperkin)

Add ruby-hashie2.

(jperkin)

Added misc/ruby-hashie2 version 2.0.5

(jperkin)

Import misc/ruby-hashie2 into pkgsrc.  This package is the same software as
misc/ruby-hashie but for version 2.0.5 which is required for some new
packages.  The original version 1.2.0 has been retained as it is still
required for ruby-userstream which has not yet been updated for the newer API.

Hashie is a growing collection of tools that extend Hashes and make
them more useful. The library is broken up into a number of atomically
includeable Hash extension modules as described below. This provides
maximum flexibility for users to mix and match functionality while
maintaining feature parity with earlier versions of Hashie.

* Mash is an extended Hash that gives simple pseudo-object
  functionality that can be built from hashes and easily extended.

* Dash is an extended Hash that has a discrete set of defined
  properties and only those properties may be set on the hash.

* A Trash is a Dash that allows you to translate keys on
  initialization.

* Clash is a Chainable Lazy Hash that allows you to easily construct
  complex hashes using method notation chaining

* Rash is a Hash whose keys can be Regexps or Ranges, which will map
  many input keys to a value.

(jperkin)

Update MH_NAME list from ICU_CHECK_MH_FRAG in source/acinclude.m4
Fixes PLIST for various platforms.

(obache)

security/py-{cybox,stix,libtaxii} and sysutils/py-pefile do not seem to have
been ported to either Python 3.3 or 3.4.

(khorben)

Updated security/sks to 1.1.5

(pettai)

1.1.5
  - Fixes for machine-readable indices. Key expiration times are now read
    from self-signatures on the key's UIDs. In addition, instead of 8-digit
    key IDs, index entries now return the most specific key ID possible:
    16-digit key ID for V3 keys, and the full fingerprint for V4 keys.
  - Add metadata information (number of keys, number of files,
    checksums, etc) to key dump. This allows for information on the
    key dump ahead of download/import, and direct verification of checksums
    using md5sum -c <metadata-file>.
  - Replaced occurrances of the deprecated operator 'or' with '||' (BB issue #2)
  - Upgraded to cryptlib-1.7 and own changes are now packaged as separate
    patches that is installed during 'make'. Added the SHA-3 algorithm, Keccak
  - Option max_matches was setting max_internal_matches. Fixed (BB issue #4)
  - op=hget now supports option=mr for completeness (BB issue #17)
  - Add CORS header to web server responses. Allows JavaScript code to
    interact with keyservers, for example the OpenPGP.js project.
  - Change the default hkp_address and recon_address to making the
    default configuration support IPv6. (Requires OCaml 3.11.0 or newer)
  - Only use '-warn-error A' if the source is marked as development as per
    the version suffix (+) (part of BB Issue #2)
  - Reduce logging verbosity for debug level lower than 6 for (i) bad requests,
    and (ii) no results found (removal of HTTP headers in log) (BB Issue #13)
  - Add additional OIDs for ECC RFC6637 style implementations
    (brainpool and secp256k1) (BB Issue #25) and fix issue for 32 bit arches.
  - Fix a non-persistent cross-site scripting possibility resulting from
    improper input sanitation before writing to client. (BB Issue #26 | CVE-2014-3207)

(pettai)

makeinfo is required to build.

(obache)

Updated www/php-sugarcrm to 6.5.16

(wen)

Updated www/php-sugarcrm to 6.5.16

(wen)

Update to 6.5.16

Upstream changes:
Please visit: http://support.sugarcrm.com/02_Documentation/01_Sugar_Editions/05_Sugar_Community_Edition/

(wen)

Mark as conflicting with p5-CGI<4.0, where it was included.

(wiz)

Updated misc/libreoffice4 to 4.2.4.2nb3

(ryoon)

Bump PKGREVISION

* Disable JavaScript scripting (macro) support, it conflicts with
  OpenJDK7's Rhino JavaScript support. Use beanshell or Python.
* Remove redundant CONFIGURE_ARGS

(ryoon)

Updated lang/openjdk7 to 1.7.55nb2

(ryoon)

Bump PKGREVISION

Fix PR pkg/48246 again.
Add rhino.jar to library path.
And remove stale patch

(ryoon)

Fix build on at least SunOS, variable changed name in the last release.

(fhajny)

Updated security/libtasn1 to 3.6; devel/git to 1.9.4

(adam)

Fixes since v1.9.3
------------------

* Commands that take pathspecs on the command line misbehaved when
  the pathspec is given as an absolute pathname (which is a
  practice not particularly encouraged) that points at a symbolic
  link in the working tree.

* An earlier fix to the shell prompt script (in contrib/) for using
  the PROMPT_COMMAND interface did not correctly check if the extra
  code path needs to trigger, causing the branch name not to appear
  when 'promptvars' option is disabled in bash or PROMPT_SUBST is
  unset in zsh.

(adam)

Changes 3.6:
- Corrected an off-by-one error in ASN.1 DER tag decoding.
- Several improvements and new safety checks on DER decoding;
  issues found using Codenomicon TLS test suite.
- Marked asn1_der_decoding_element() as deprecated. Use
  asn1_der_decoding() instead.

(adam)

Pullup tickets #4427, #4428 and #4429.

(tron)

Pullup ticket #4429 - requested by taca
lang/php53: match option handling of "php54" and "php55"

Revisions pulled up:
- lang/php53/Makefile.php                                      1.39

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sat May 31 04:30:30 UTC 2014

  Modified Files:
  pkgsrc/lang/php53: Makefile.php

  Log Message:
  Use PKG_OPTIONS.${PHP_PKG_PREFIX} as PKG_OPTIONS_VAR in order to consistent
  PKG_OPTIONS amaong packages which use lang/php/Makefile.php.

(tron)

Pullup ticket #4428 - requested by taca
lang/php54: security update

Revisions pulled up:
- lang/php/phpversion.mk                                        1.64
- lang/php54/Makefile.php                                      1.8
- lang/php54/distinfo                                          1.40

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sat May 31 04:28:57 UTC 2014

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php54: Makefile.php distinfo

  Log Message:
  Update php54 to 5.4.29, contains fix for CVE-2014-0237 and CVE-2014-0238.

  29 May 2014, PHP 5.4.29

  - COM:
    . Fixed bug #66431 (Special Character via COM Interface (CP_UTF8)). (Anatol)

  - Core:
    . Fixed bug #65701 (copy() doesn't work when destination filename is created
      by tempnam()). (Boro Sitnikovski)
    . Fixed bug #67072 (Echoing unserialized "SplFileObject" crash). (Anatol)
    . Fixed bug #67245 (usage of memcpy() with overlapping src and dst in
      zend_exceptions.c). (Bob)
    . Fixed bug #67247 (spl_fixedarray_resize integer overflow). (Stas)
    . Fixed bug #67249 (printf out-of-bounds read). (Stas)
    . Fixed bug #67250 (iptcparse out-of-bounds read). (Stas)
    . Fixed bug #67252 (convert_uudecode out-of-bounds read). (Stas)

  - Date:
    . Fixed bug #67118 (DateTime constructor crash with invalid data). (Anatol)
    . Fixed bug #67251 (date_parse_from_format out-of-bounds read). (Stas)
    . Fixed bug #67253 (timelib_meridian_with_check out-of-bounds read). (Stas)

  - DOM:
    . Fixed bug #67081 (DOMDocumentType->internalSubset returns entire DOCTYPE tag,
      not only the subset). (Anatol)

    - Fileinfo:
      . Fixed bug #66307 (Fileinfo crashes with powerpoint files). (Anatol)
      . Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS).
        (CVE-2014-0238)
      . Fixed bug #67328 (fileinfo: fileinfo: numerous file_printf calls resulting in
        performance degradation). (CVE-2014-0237)

  - FPM:
    . Fixed bug #66908 (php-fpm reload leaks epoll_create() file descriptor).
      (Julio Pintos)

  - Phar:
    . Fix bug #64498 ($phar->buildFromDirectory can't compress file with an accent
      in its name). (PR #588)

(tron)

Pullup ticket #4427 - requested by taca
lang/php55: security update

Revisions pulled up:
- lang/php/phpversion.mk                                        1.63
- lang/php55/Makefile.php                                      1.3
- lang/php55/distinfo                                          1.22

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sat May 31 04:26:40 UTC 2014

  Modified Files:
  pkgsrc/lang/php: phpversion.mk
  pkgsrc/lang/php55: Makefile.php distinfo

  Log Message:
  Update php55 to 5.5.13, contains fix for CVE-2014-0237 and CVE-2014-0238.

  29 May 2014, PHP 5.5.13

  - CLI server:
    . Fixed bug #67079 (Missing MIME types for XML/XSL files). (Anatol)

  - COM:
    . Fixed bug #66431 (Special Character via COM Interface (CP_UTF8)). (Anatol)

  - Core:
    . Fixed bug #65701 (copy() doesn't work when destination filename is created
      by tempnam()). (Boro Sitnikovski)
    . Fixed bug #67072 (Echoing unserialized "SplFileObject" crash). (Anatol)
    . Fixed bug #67245 (usage of memcpy() with overlapping src and dst in
      zend_exceptions.c). (Bob)
    . Fixed bug #67247 (spl_fixedarray_resize integer overflow). (Stas)
    . Fixed bug #67249 (printf out-of-bounds read). (Stas)
    . Fixed bug #67250 (iptcparse out-of-bounds read). (Stas)
    . Fixed bug #67252 (convert_uudecode out-of-bounds read). (Stas)

  - Curl:
    . Fixed bug #64247 (CURLOPT_INFILE doesn't allow reset). (Mike)

  - Date:
    . Fixed bug #67118 (DateTime constructor crash with invalid data). (Anatol)
    . Fixed bug #67251 (date_parse_from_format out-of-bounds read). (Stas)
    . Fixed bug #67253 (timelib_meridian_with_check out-of-bounds read). (Stas)

  - DOM:
    . Fixed bug #67081 (DOMDocumentType->internalSubset returns entire DOCTYPE tag,
      not only the subset). (Anatol)

  - Fileinfo:
    . Fixed bug #66307 (Fileinfo crashes with powerpoint files). (Anatol)
    . Fixed bug #67327 (fileinfo: CDF infinite loop in nelements DoS) (CVE-2014-0238).
    . Fixed bug #67328 (fileinfo: fileinfo: numerous file_printf calls resulting in
      performance degradation) (CVE-2014-0237).

  - FPM:
    . Fixed bug #66908 (php-fpm reload leaks epoll_create() file descriptor).
      (Julio Pintos)

  - GD:
    . Fixed bug #67248 (imageaffinematrixget missing check of parameters). (Stas)

  - PCRE:
    . Fixed bug #67238 (Ungreedy and min/max quantifier bug, applied patch
      from the upstream). (Anatol)

  - Phar:
    . Fix bug #64498 ($phar->buildFromDirectory can't compress file with an accent
      in its name). (PR #588)

(tron)

Updated www/moodle to 2.7

(wen)

Update to 2.7
Add missing php module zlib
Update minimum php version to 5.4.4

Upstream changes:
Please visiti: http://docs.moodle.org/27/en/New_features

(wen)

Indent and remove unneeded definition of WRKSRC.

(schmonz)

Updated mail/qmqtool to 1.14

(schmonz)

Update to 1.14. From the changelog:

* changed english and added Total on qmqtool -s
* added more stats with qmqtool -s -V
* modified some regexs to be arithmetic instead
* changed string finding code:
  increased speed
  removed fallback routine
  use grep -E (egrep) when /pattern/ is used
  support case insensitive search with /pattern/i
* rely on PATH instead of statically searching
* improved queue consistency check
* -[lRTLx] /displays/ calculated size
* added -x feature for extended information on a message
* created ./configure ; make ; make install process
  (even though we're just a light perl script)

(schmonz)

Loosen up the dependency on the main package. Fixes revbump'ed cases.

(fhajny)

Not compatible with python3.

(obache)

Since 0.2.4, changed license from 3-clause to 2-clause BSD.

(obache)

DB_File was first released with perl 5

(obache)

Replace HOMEPAGE and MASTER_SITES with appropriate one.

(obache)

Remove unneeded lines

(pettai)

Fixes missing buidlink with curses.
Noticed by diger in pkgsrc-users@.

Also fixes missing buildlink with libiconv and zlib.

(obache)

Updated mail/mimedefang to 2.75

(pettai)

MIMEDefang 2.75

* Many cosmetic improvements to watch-multiple-mimedefangs.tcl
* Fix md_get_bogus_mx_hosts so it checks A records iff a domain has
  no MX records.
* Add a forward declaration of rebuild_entity to avoid warnings on
  recent Perl versions.

(pettai)

Needs gethostbyaddr_r(). include mk/resolv.buildlink3.mk

(rodent)

Updated net/knot to 1.4.6

(pettai)

v1.4.6 - May 22, 2014
---------------------
Bugfixes:
        * Fix possible signing loop when doing key rollover
        * Fixed sending of malformed UDP empty responses

(pettai)