Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (3m)  pkgsrc-2024Q1 (14d)  pkgsrc-2023Q4 (42d)  pkgsrc-2023Q2 (74d)  pkgsrc-2023Q3 (154d) 

2024-05-12 18:50:12 UTC Now

2014-02-09 05:31:26 UTC MAIN commitmail json YAML

Update ruby-cassandra to 0.23.0.

v0.23.0
- Update simple_uuid dependency (issue #197, courtesy @tsenart)
- Changed to new github url: github.com/cassandra-rb/cassandra

(taca)

2014-02-09 05:29:51 UTC MAIN commitmail json YAML

Note update of databases/ruby-arel package to 3.0.3.

(taca)

2014-02-09 05:29:26 UTC MAIN commitmail json YAML

Update ruby-arel to 3.0.3.

== 3.0.3 / 2013-11-12

* Enhancements

  * Support ANSI 2003 window functions

* Bug Fixes

  * Fix joins in Informix

(taca)

2014-02-09 05:22:03 UTC MAIN commitmail json YAML

Note update of devel/ruby-rake package to 10.0.4nb1.

(taca)

2014-02-09 05:21:19 UTC MAIN commitmail json YAML

* Preserve modified time of saveing rake command file.
* Improve handling of gemspec file when the version of bundlerd dosen't
  match with ruby-rake's version.  Should be fix PR pkg/48485.

(taca)

2014-02-09 05:15:21 UTC MAIN commitmail json YAML

Use versions in rubyversion.mk.

(taca)

2014-02-09 05:14:39 UTC MAIN commitmail json YAML

* Define versions of gems, rdoc rake and json which bundled
  with Ruby's distribution.
* Define some variable for Ruby 2.1.0.

(taca)

2014-02-09 04:36:15 UTC MAIN commitmail json YAML

Note update of ISC DHCP related pacakges:

net/isc-dhcp4 4.3.0
net/isc-dhclient4 4.3.0
net/isc-dhcpd4 4.3.0
net/isc-dhcrelay4 4.3.0

(taca)

2014-02-09 04:34:31 UTC MAIN commitmail json YAML

Update ISC DHCP related pacakges to 4.2.0.

Changes since 4.2.0 (new features)

- If a client renews before 'dhcp-cache-threshold' percent of its lease
  has elapsed (default 25%), the server will reuse the allocated lease
  (provide a lease within the currently allocated lease-time) rather
  than extend or renew the lease.  This absolves the server of needing
  to perform an fsync() operation on the lease database before reply,
  which improves performance. [ISC-Bugs #22228]
  Updated this patch to support asynchronous DDNS.  If the server is
  attempting to do DDNS on a lease it should be udpated and written to
  disk even if that wouldn't be necessary due to the thresholding.
  [ISC-Bugs #26311]

- The 'no available billing' log line now also logs the name of the last
  matching billing class tried before failing to provide a billing.
  [ISC-Bugs #21759]

- A problem with missing get_hw_addr function when --enable-use-sockets
  was used is now solved on GNU/Linux, BSD and GNU/Hurd systems. Note
  that use-sockets feature was not tested on those systems. Client and
  server code no longer use MAX_PATH constant that is not defined on
  GNU/Hurd systems. [ISC-Bugs #25979]

- Add a perl script in the contrib directory, dhcp-lease-list.pl, which
  can parse v4 lease files and output the lease information in a more
  human friendly manner.  This was written by Christian Hammers with
  some updates by vom and ISC.  This is contributed code and is not
  supported by ISC; however it may be useful to some users.
  [ISC-Bugs #20680]

- Add support in v6 for on-commit, on-expire and on-release.
  [ISC-Bugs #27912]

- Add support for using classes with v6.
  [ISC-Bugs #26510]

- Update the DDNS code to current standards and allow for sharing
  of DDNS entries between v4 and v6 clients.  The new code is used
  if the ddns-update-style is set to "standard", the older code is
  still available if ddns-update-style is set to "interim".  The
  oldest DDNS code "ad-hoc" has been removed.  Thanks to Thomas Pegeot
  who submitted a patch for this issue.  This patch is based on
  that work with some modifications.
  [ISC-Bugs #21139]

- Add a configuration option to the server to suppress using fsync().
  Enabling this option will mean that fsync() is never called.  This
  may provide better performance but there is also a risk that a lease
  will not be properly written to the disk after it has been issued
  to a client and before the server stops.  Using this option is
  not recommended.
  [ISC-Bugs #34810]

- Add some logging statements to indicate when the server is ready
  to serve.  One statement is emitted after the server has finished
  reading its files and is about to enter the dispatch loop.
  This is "Server starting service.".
  The second is emitted when a server determines that both it and
  its failover peer are in the normal state.
  This is "failover peer <name>: Both servers normal."
  [ISC-Bugs #33208]

- Add support for accessing options from v6 relays.  The v6relay
  statement allows the administrator to choose which relay to
  use when searching for an option, see the dhcp-options man page
  for a description.  The host-identifier option has also been
  updated to support the use of relay options, see the dhcpd.conf
  man page for a description.
  [ISC-Bugs #19598]

- When doing DDNS if there isn't an appropriate zone statement attempt
  to find a reasonable nameserver via a DNS resolver.  This restores
  some functionality that was lost in the transition to asynchronous
  DDNS.  Due to the lack of security and increase in fragility of the
  system when using this feature we strongly recommend the use of
  appropriate zone statements rather than using this functionality.
  [ISC-Bugs #30461]

- Add support for specifying the address from which to send
  DDNS updates on the DHCP server.  There are two new options
  "ddns-local-address4" and "ddns-local-address6" that each take
  one instance of their respective address types.
  [ISC-Bugs #34779]

- Add ignore-client-uids option in the server.  This option causes
  the server to not record a client's uid in its lease.  This
  violates the specification but may also be useful when a client
  can dual boot using different client ids but the same mac address.
  Thank you to Brian De Wolf at Cal Poly Pomona for the patch.
  [ISC-Bugs #32427]
  [ISC-Bugs #35066]

- Extend the DHCPINFORM processing to honor the subnet selection option
  and take host declarations into account.
  Thanks to Christof Chen for testing and submitting the patch.
  [ISC-Bugs #35015]

- Extend the hardware expression to look into the lease structure
  for a hardware address if there is no packet.  This allows the
  server to find the hardware address during on-expiry processing.
  [ISC-Bugs #24584]

- Add definitions for some options that have been specified by the IETF.
  [ISC-Bugs #29268]
  [ISC-Bugs #35198]

Changes since 4.3.0b1

- Tidy up receive packet processing.
  Thanks to Brad Plank of GTA for reporting the issue and suggesting
  a possible patch.
  [ISC-Bugs #34447]

Changes since 4.3.0a1

- Modify the message displayed when a process hits a fatal error.
  The new message is much shorter and simply points to the README
  and our website for directions on bug submissions.
  [ISC-Bugs #24789]

- Handle an absent resolv.conf file better.
  [ISC-Bugs #35194]

(taca)

2014-02-09 04:31:38 UTC MAIN commitmail json YAML

Updated devel/p5-Module-Runtime to 0.014

(wen)

2014-02-09 04:30:09 UTC MAIN commitmail json YAML

Update to 0.014

Upstream changes:
version 0.014; 2014-02-06

  * bugfix: suppress any CORE::GLOBAL::require override, where possible,
    to avoid use_package_optimistically() being misled into treating
    missing modules as broken

  * bugfix: in use_module() and use_package_optimistically(), pass a
    supplied VERSION parameter through for the version check even if it
    is undef

  * tighten use_package_optimistically()'s recognition of can't-locate
    errors (the same way that base.pm has recently been tightened),
    so that, when a module fails to load because a module that it uses
    isn't available, the outer module will be perceived as broken rather
    than missing

  * update documentation notes about the state of Unicode handling for
    module names

  * in META.{yml,json}, point to public git repository

(wen)

2014-02-09 02:24:30 UTC MAIN commitmail json YAML

Updated mail/sendmail-cidrexpand to 8.14.8

(jnemeth)

2014-02-09 02:24:18 UTC MAIN commitmail json YAML

reset PKGREVISION for sendmail update

(jnemeth)

2014-02-09 02:17:10 UTC MAIN commitmail json YAML

Updated mail/sendmail-qtool to 8.14.8

(jnemeth)

2014-02-09 02:16:57 UTC MAIN commitmail json YAML

reset PKGREVISION for sendmail update

(jnemeth)

2014-02-09 02:03:44 UTC MAIN commitmail json YAML

Updated mail/sendmail to 8.14.8

(jnemeth)

2014-02-09 02:02:46 UTC MAIN commitmail json YAML

Update to sendmail 8.14.8:  this release contains some bug fixes plus some
minor feature additions.

8.14.8/8.14.8 2014/01/26
Properly initialize all OpenSSL algorithms for versions before
OpenSSL 0.9.8o. Without this SHA2 algorithms may not
work properly, causing for example failures for certs
that use sha256WithRSAEncryption as signature algorithm.
When looking up hostnames, ensure only to return those records
for the requested family (AF_INET or AF_INET6).
On system that have NEEDSGETIPNODE and NETINET6
this may have failed and cause delivery problems.
Problem noted by Kees Cook.
A new mailer flag '!' is available to suppress an MH hack
that drops an explicit From: header if it is the
same as what sendmail would generate.
Add an FFR (for future release) to use uncompressed IPv6 addresses,
i.e., they will not contain "::".  For example, instead
of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
configuration data (including maps, files, classes,
custom ruleset, etc) have to use the same format.
This will be turned on in 8.15.  It can be enabled in 8.14
by compiling with:
APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
in your devtools/Site/site.config.m4 file.
Add an additional case for the WorkAroundBrokenAAAA check when
dealing with broken nameservers by ignoring SERVFAIL
errors returned on T_AAAA (IPv6) lookups at delivery time.
Problem noted by Pavel Timofeev of OCS.
If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
setusercontext() on deliveries as a different user.
Patch from Edward Tomasz Napierala from FreeBSD.
Avoid compiler warnings from a change in Cyrus-SASL 2.1.25.
Patch from Hajimu UMEMOTO from FreeBSD.
Add support for DHParameters 2048-bit primes.
CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
Patch from Bill Parker.
LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
fail.  Patch from John Beck of Oracle.
Portability:
Add support for Darwin 12.x and 13.x (Mac OS X 10.8 and 10.9).
On Linux use socklen_t as the type for the 3rd argument
for getsockname/getpeername if the glibc version is at
least 2.1.
Added Files:
devtools/OS/Darwin.12.x
devtools/OS/Darwin.13.x

(jnemeth)

2014-02-09 00:51:23 UTC MAIN commitmail json YAML

2014-02-09 00:44:36 UTC MAIN commitmail json YAML

Add network libs on SunOS

(wiedi)

2014-02-09 00:26:50 UTC MAIN commitmail json YAML

Add missing lib for SunOS

(wiedi)

2014-02-09 00:22:11 UTC MAIN commitmail json YAML

2014-02-08 23:54:35 UTC MAIN commitmail json YAML

Add missing int types on SunOS

(wiedi)

2014-02-08 23:50:08 UTC MAIN commitmail json YAML

fix build on SunOS

(wiedi)

2014-02-08 23:39:55 UTC MAIN commitmail json YAML

Add network libs on SunOS

(wiedi)

2014-02-08 23:34:05 UTC MAIN commitmail json YAML

fix build on SunOS

(wiedi)

2014-02-08 23:21:48 UTC MAIN commitmail json YAML

Add network libs on SunOS

(wiedi)

2014-02-08 22:54:45 UTC MAIN commitmail json YAML

add missing libs on SunOS

(wiedi)

2014-02-08 18:50:52 UTC MAIN commitmail json YAML

Updated editors/lyx to 2.0.7

(rumko)

2014-02-08 18:49:05 UTC MAIN commitmail json YAML

editors/lyx: update to 2.0.7 and add missing boost dep

Changes from upstream (snipped, full changelog at http://www.lyx.org/announce/2_0_7.txt):
** Bug fixes:
*************
* DOCUMENT INPUT/OUTPUT
- Fix garbage in document export (and maybe other places) by making encoding
  conversions thread-safe (bug 8854).
- Fix output of ulem commands (underline etc.) which was broken as of
  LyX 2.0.6 (bug 8733).
- Fix problem with unbalanced braces in XeTeX output (bug 8765).
- Fix problems with unbalanced braces with a secondary CJK language
  (bug 8215).
- Fix state of certain language packages (polyglossia, japanese) in
  child documents (bug 8770).
- Fix compilation of documents containing chemical equations and math
  integrals (bug 8731).
- Fix compilation with nested ("sub") custom floats.
- Fix import of CSV-files.

* LYXHTML
- Fix random character inserted as year modifier in author-year citations.

* BUILD/INSTALLATION
- Add support for automake 1.13.
- Fix compilation with clang LLVM compiler.
- Fix Qt tools search when a Qt directory has been specified.

(rumko)

2014-02-08 17:45:29 UTC MAIN commitmail json YAML

Add missing network libs on SunOS

(wiedi)

2014-02-08 17:08:47 UTC MAIN commitmail json YAML

Updated pkgtools/x11-links to 0.82

(jperkin)

2014-02-08 17:08:33 UTC MAIN commitmail json YAML

Update x11-links to 0.82.  Changes:

- Add xcb-util files.

Fixes various builds on Darwin when using Xquartz.

(jperkin)

2014-02-08 16:46:05 UTC MAIN commitmail json YAML

2014-02-08 16:00:21 UTC MAIN commitmail json YAML

Note update of atf to 0.20 and all related revision bumpds.

(jmmv)

2014-02-08 15:59:30 UTC MAIN commitmail json YAML

2014-02-08 15:54:58 UTC MAIN commitmail json YAML

Update ATF to 0.20.

This change upgrades devel/atf to 0.20 and removes devel/atf-libs.  The
upstream atf distfile has dropped the code for the deprecated tools so
it makes little sense to keep the two packages any longer.

As a result of this, the devel/atf package is now much simplified as
there is no need for a Makefile.common any longer and matches exactly
what upstream ships.

Changes in version 0.20
***********************

Experimental version released on February 7th, 2014.

This is the first release without the code for the deprecated tools.  If
you require such code, please fetch a copy of the 0.19 release and extract
the 'tools' directory for your own consumption.

* Removed the deprecated tools.  This includes atf-config, atf-report,
  atf-run and atf-version.

Changes in version 0.19
***********************

Experimental version released on February 7th, 2014.

This is the last release to bundle the code for the deprecated tools.
The next release will drop their code and will stop worrying about
backwards compatibility between the ATF libraries and what the old tools
may or may not support.

If you still require the old tools for some reason, grab a copy of the
'tools' directory now.  The code in this directory is standalone and
does not depend on any internal details of atf-c++ any longer.

* Various fixes and improvements to support running as part of the FreeBSD
  test suite.

* Project hosting moved from Google Code (as a subproject of Kyua) to
  GitHub (as a first-class project).  The main reason for the change is
  the suppression of binary downloads in Google Code on Jan 15th, 2014.
  See https://github.com/jmmv/atf/

* Removed builtin help from atf-sh(1) and atf-check(1) for simplicity
  reasons.  In other words, their -h option is gone.

* Moved the code of the deprecated tools into a 'tools' directory and
  completely decoupled their code from the internals of atf-c++.  The
  reason for this is to painlessly allow a third-party to maintain a
  copy of these tools after we delete them because upcoming changes to
  atf-c++ would break the stale tools.

(jmmv)

2014-02-08 15:43:25 UTC MAIN commitmail json YAML

Updated www/p5-HTTP-Tiny to 0.039

(wen)

2014-02-08 15:41:35 UTC MAIN commitmail json YAML

Update to 0.039

Upstream changes:
0.039    2013-11-27 19:48:29 America/New_York

    [FIXED]

    - Temporary file creating during mirror() is now opened with O_EXCL
      for added security

(wen)

2014-02-08 15:38:44 UTC MAIN commitmail json YAML

2014-02-08 14:43:27 UTC MAIN commitmail json YAML

Updated x11/py-xcbgen to 1.10nb1

(wiz)

2014-02-08 14:43:17 UTC MAIN commitmail json YAML

At least python-3.3's /usr/pkg/lib/python3.3/xml/etree/ElementTree.py
needs py-expat, and this package uses that file.
Depend on py-expant and bump PKGREVISION.

(wiz)

2014-02-08 12:59:31 UTC MAIN commitmail json YAML

add int type on SunOS

(wiedi)

2014-02-08 12:53:32 UTC MAIN commitmail json YAML

2014-02-08 12:44:16 UTC MAIN commitmail json YAML

fixes in ncurses -> curses replacement.
noticed by szptvlfn@.

(obache)

2014-02-08 12:44:05 UTC MAIN commitmail json YAML

2014-02-08 12:42:25 UTC MAIN commitmail json YAML

fixes platform triplet for SunOS-5.11.

(obache)

2014-02-08 12:27:14 UTC MAIN commitmail json YAML

2014-02-08 12:20:39 UTC MAIN commitmail json YAML

Updated math/cgal to 3.9nb20

(wiedi)

2014-02-08 12:16:12 UTC MAIN commitmail json YAML

add patch to fix building other packages (e.g. openscad) with gcc 4.7 that link cgal

(wiedi)

2014-02-08 12:14:43 UTC MAIN commitmail json YAML

Updated devel/cutter to 1.2.3

(obache)

2014-02-08 12:14:32 UTC MAIN commitmail json YAML

Update cutter to 1.2.3.

== [release-1-2-3] 1.2.3: 2014-02-09

As long time has passed since Cutter 1.2.2 release,
there are some improvements and fixed bugs.

After Cutter 1.2.2 release, you can install Cutter from
Fedora's official yum repository. No need to register Cutter yum repository on Fedora anymore.

=== Cutter

==== Improvements

  * [doc] Removed a needless period from installation link.
    [GitHub #6] [Patch by Masafumi Yokoyama]
  * Supported lcov 1.10. [cutter-users-ja:92] [Reported by Siganai SE]
  * [doc] Updated download URL on SF.net. [cutter-users-ja:91] [Reported by Siganai SE]
  * [doc] Updated XML report format. [cutter-users-ja:91] [Reported by Siganai SE]
  * Added more trace logs for loader. It helps you to investigate the case when no tests are loaded.
  * [doc] Updated Cygwin's setup.exe URL.
  * Added --log-level option. The value of default log level is "critical|error|warning|message".

==== Fixes

  * [loader] Fixed a bug that ELF loader can't collect symbol because of wrong comparison.
  * Fixed memory leaks on loading all modules.
  * Fixed a warning from GCC 4.8.1 on Ubuntu 13.10
    [GitHub #9] [Reported by Kazuhiro Yamato]

=== CppCutter

==== Improvements

  * Supported cppcut_assert_equal(const type_info &, const type_info &)
    [GitHub #4] [Patch by Kazuhiro Yamato]
  * Supported to catch unhandled C++ exception in test case.
    This change avoids to crash when unexpected exception is thrown.
    [GitHub #8] [Suggested by Kazuhiro Yamato] [Patch by Kazuhiro Yamato]
  * Supported to call destructors of objects on a stack even when an assertion is failed.
    [GitHub #10] [Patch by Kazuhiro Yamato]

==== Fixes

  * [Clang] Fixed a compile error which is caused by missing std::type_info forward declaration.
  * Fixed an invalid memory access when an exception is thrown in cutter's
    assertion function.
    [GitHub #11] [Patch by Kazuhiro Yamato]

=== GCutter

==== Fixes

  * [doc] Fixed a signal name typo about gcut-egg example.

=== Thanks

  * Kazuhiro Yamato
  * Masafumi Yokoyama
  * Siganai SE

(obache)

2014-02-08 09:43:25 UTC MAIN commitmail json YAML

Updated lang/jamvm to 1.5.4

(obache)

2014-02-08 09:41:41 UTC MAIN commitmail json YAML

Updated lang/jamvm to 1.5.4

(obache)

2014-02-08 09:41:29 UTC MAIN commitmail json YAML

Update jamvm to 1.5.4.
Based on PR pkg/45604 by Nikolai Lifanov.

JamVM 1.5.4 released on 1st January 2010
========================================

A summary of changes since 1.5.3:

- GC changes:

  - Mark phase rewritten to use an explicit fixed-size mark stack,
    with a moving heap scan pointer.  The previous recursive marking
    could lead to stack overflow when marking complex, deeply-linked
    structures.  If the explicit mark stack overflows, a slower,
    fallback mechanism is used of scanning the heap.  The new mark
    phase is upto 50% faster than the old recursive marking.

  - bug fix for unallocated blocks within the heap of >= 1 GB.

- JNI changes:

  - Updated to JNI version 1.6.  This adds the function
    GetObjectRefType().

  - Fully implemented JNI weak global references (NewWeakGlobalRef
    and DeleteWeakGloablRef).  Note, these are different to Java
    Soft/Weak/Phantom References which have been supported since
    JamVM 1.4.0.

  - verbose:jni now shows details of the opening of native libraries.
    If a library fails to open a diagnostic message is shown (if
    available).  This is intended to help debug common library
    problems.

  - bug fix for ToReflected[Method|Field] and GetSuperClass.  A
    local reference must be created for the return value.

- Platform changes:

  - Interpreter inlining (aka code-copying JIT) now enabled by
    default on ARM systems.  Testing on Cortex-A8 indicates
    82% speed improvement on integer benchmarks, and 55% on
    floating-point.

  - If cross-compiling, and interpreter inlining is enabled, runtime
    relocation checks will be enabled (relocation information is
    normally generated at compile time; as this can't be done
    when cross-compiling it must be done at runtime, but it
    increases the size of the executable by ~30%).

  - Initial port to Sparc/FreeBSD.  My thanks to Per Ola Ingvarsson
    for architecture dependent definitions.  Interpreter inlining
    (aka code-copying JIT) is currently not supported due to missing
    code for flushing the instruction/data caches, and branch
    generation. It also requires libffi, which is enabled by default.

  - Changes to x86 and x86_64 across all platforms to zero/sign
    extend return values from native methods whose size is less
    than an int (i.e. boolean, byte, char and short).  This is
    necessary due to changes in code produced by gcc >= 4.3.

  - Rare race-condition in thin-locking code on x86 and x86_64
    architectures, leading to deadlock.  On modern x86 CPUs, an
    extra memory barrier is required.  Seen intermittently while
    running a thread intensive benchmark using at least 4 cores.

  - Extensive changes to support 64-bit Big Endian systems.  These
    were previously supported, but support was completely broken
    with the introduction of the new object layout in JamVM 1.5.2.

- Miscellaneous fixes:

  - Interpreter inlining bug fix: reference to memory after it
    had been freed

  - java.lang.reflect.VMField getAnnotation() implemented.  This
    has been missing since the reflection rework in JamVM 1.5.2.

  - ThreadMXBean: fixes for getThreadInfoForId (VMThreadMXBeanImpl).

    - Did not correctly report lock or lock owner, when the thread was
      blocked on an object which was thin-locked by another thread

    - It was using a constructor which has since been removed

  - Fixes for NULL handling in findClassFromSignature() and
    utf8CharLen()

  - Fixed memory leak in bytecode rewriting.  Due to missing
    parantheses, old bytecode stream was not being freed (for
    example, this leaks 47K when running "Hello, World")

  - Bug-fix for theoretical race-condition in thread deletion when
    notifying joining threads after thread ID has been reused.

JamVM 1.5.3 released on 14th April 2009
=======================================

JamVM 1.5.3 is primarily a bug-fix release.  It fixes issues seen
while running Eclipse 3.4.2 and JRuby 1.2.0RC2, and adds some minor
features.  A summary of the changes:

- Zip/Jar support in the boot classloader has been rewritten to
  no longer require the Zip/Jar files to be mmap-ed read/write.
  This increases shareability between multiple VM instances, and
  improves memory-usage on embedded systems.

- JNI invocation API:
  - set thread-self to NULL when thread detaches (if the thread tries
    to re-attach, it appears to still be attached)

  - init args_count in dummy stack frame (fix problem if the thread
    detaches and then re-attaches)

- Do not create a library unloader for libraries loaded by the bootstrap
  loader if they have an JNI_OnUnload method (the bootstrap loader is
  never unloaded, and so they will never be called).  Fixes a SEGV with
  JRuby.

- Fix to annotation handling.  When the annotation value is an array,
  the native annotation parser constructs an Object array.  However,
  the method return value is the specific type.  This leads to an
  AnnotationTypeMismatchException.  The fix coerces the Object
  array to the correct type.

- Simple implementation of java.lang.management.VMManagementFactory
  (returns no memory pool, memory manager or GC names).  Sufficient
  to run JRuby.

- Implemented package support in the bootstrap class loader.  Package
  information is obtained from the manifest file if it exists.  However,
  GNU Classpath's glibj.zip's manifest has no package information.
  The class library is therefore recognised by the presence of
  java/lang/Object.class, and appropriate package information is
  constructed.

- Fix broken implementation of VMClass.getSimpleName() (use the
  implementation from gcj)

- Default Java stack size increased to 256K from 64K

- Fix to bootstrap loader getResources() when the bootclasspath
  entry is relative (prepend the current working directory)

- Fix minor memory leak in bootstrap loader getResources()

- Add --enable-tls option to configure, enabling thread-local-storage
  (__thread) to be disabled

JamVM 1.5.2 released on 1st February 2009
=========================================

A summary of changes since 1.5.1:

- Interpreter inlining changes

  - Basic-blocks are now inlined across block boundaries removing
    the need for dispatching between blocks in the case of
    fall-through control flow

  - Control-flow within inlined sequences now patched with real jumps,
    removing the need for computed jumps

  - Control flow between non-shared sequences now patched, replacing
    dispatch with real jumps

  - Simple basic-block profiling is now implemented.  This considerably
    reduces the size of the code-cache, without reducing performance

- Reworked Object layout

  - Previously, on 64-bit machines the object layout was wasteful, with
    padding on fields less than 64-bits (to preserve 64-bit alignment).
    The new object layout on average reduces heap usage by approx
    10 - 15%

  - On 32-bit machines, 64-bit fields are now 64-bit aligned (without
    introducing extra padding if possible)

- Various alignment fixes

  - 64-bit alignment of operand stack
  - 64-bit alignment of static variable data

- Reflection support

  - Reworking required for new object layout

  - Reworked to use VMConstructor, VMMethod, etc.

  - Reworked to improve field access and method invocation performance
    (this offsets the extra costs of the VM interface, and improves
    performance over 1.5.1).

  - Access permission checks take precedence over other errors

  - Class/method signatures : do not convert slash to dots

- JNI fixes/improvements

  - Class references returned by JNI now use local references

  - Throw InstantiationException not InstantiationError when allocating
    objects and the class is an interface or abstract

  - Reworked JNI global references

    - Fix memory leak when expanding list

    - Improve performance (optimise case where references are
      created/deleted in a stack-like manner)

- OpenSolaris/Solaris/x86 port

- GC fixes

  - Fix race-condition in registering references with the GC

  - Separate "Async GC" thread is now disabled by default.  It didn't
    improve performance, and could increase power-consumption on
    embedded systems

- Exception handling

  - Fix method-skipping when filling in stack trace (methods could
    be incorrectly excluded from the trace when a class subclassed
    Throwable)

  - Uncaught exceptions in the "main" thread will now use the thread's
    uncaughtExceptionHandler

- Various compatibility command line options recognised (and
  ignored).  These include -XX:PermSize and XX:MaxPermSize
  required to build OpenJDK.

- sun.misc.Unsafe

  - Object methods (compareAndSwapObject, etc.) fixed on 64-bit
    machines

  - Implemented support for thread park and unpark (removing previous
    highly inefficient "empty" implementation)

- Use thread-local storage (__thread), if available, instead of
  pthread keys

- Various minor race-conditions seen while running Dacapo benchmarks

- Strict-aliasing fixes when compiled with GCC 4.3, interpreter
  stack-caching is enabled, and interpreter inlining is on

- A large amount of code-tidying throughout the VM

- Minimum heap size increased to 16MB

- Various compiler warnings.

(obache)

2014-02-08 09:38:41 UTC MAIN commitmail json YAML

We have libreoffice4-4.2.*

(ryoon)

2014-02-08 09:38:17 UTC MAIN commitmail json YAML

Updated www/firefox to 27.0

(ryoon)

2014-02-08 09:36:48 UTC MAIN commitmail json YAML

Fix broken distinfo

(ryoon)

2014-02-08 09:36:01 UTC MAIN commitmail json YAML

Update to 27.0

Changelog:
NEW
You can now run more than one service at a time with Firefox SocialAPI, allowing you to receive notifications, chat and more from multiple integrated services
CHANGED
Enabled TLS 1.1 (RFC 4346) and TLS 1.2 (RFC 5246) by default
CHANGED
Added support for SPDY 3.1 protocol
DEVELOPER
Ability to reset style sheets using 'all:unset'
DEVELOPER
You can now choose to deobfuscate javascript in the debugger (see 762761)
DEVELOPER
Added support for scrolled fieldsets (see 261037)
DEVELOPER
Implemented allow-popups directive for iframe sandbox, enabling increased security (see 766282)
DEVELOPER
CSS cursor keywords -moz-grab and -moz-grabbing have been unprefixed (see 880672)
DEVELOPER
Added support for ES6 generators in SpiderMonkey (see blog post)
DEVELOPER
Implemented support for mathematical function Math.hypot() in ES6 (see 896264)
HTML5
Dashed line support on Canvas (see 768067)
FIXED
Get Azure/Skia content rendering working on Linux (see 740200)
FIXED
27.0: Security fixes can be found here

Fixed in Firefox 27
MFSA 2014-13 Inconsistent JavaScript handling of access to Window objects
MFSA 2014-12 NSS ticket handling issues
MFSA 2014-11 Crash when using web workers with asm.js
MFSA 2014-10 Firefox default start page UI content invokable by script
MFSA 2014-09 Cross-origin information leak through web workers
MFSA 2014-08 Use-after-free with imgRequestProxy and image proccessing
MFSA 2014-07 XSLT stylesheets treated as styles in Content Security Policy
MFSA 2014-06 Profile path leaks to Android system log
MFSA 2014-05 Information disclosure with *FromPoint on iframes
MFSA 2014-04 Incorrect use of discarded images by RasterImage
MFSA 2014-03 UI selection timeout missing on download prompts
MFSA 2014-02 Clone protected content with XBL scopes
MFSA 2014-01 Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)

(ryoon)

2014-02-08 06:47:09 UTC MAIN commitmail json YAML

Update patches for NetBSD/powerpc.
Fixes line comments in assembly, and patch-xk is not required.

PR pkg/48350 by John D. Baker.

(obache)

2014-02-08 02:53:05 UTC MAIN commitmail json YAML

add missing network libs on sunos

(wiedi)

2014-02-07 21:53:29 UTC MAIN commitmail json YAML

+ Mesa-10.0.3, MesaLib-10.0.3, album-4.11, calibre-1.23, cln-1.33,
  cvs-fast-export-1.4, etm2-2.3.22 [etm successor], firefox-27,
  gdb-7.7, glu-10.0.3, httping-2.3.4, imapsync-1.580 [pkg/48578],
  libusb], openmpi-1.7.4, py-django-1.6.2, qt5-5.2.1, reposurgeon-3.2,
  seamonkey-2.24, sympa-6.1.19, tcpreplay-4.0.3, thunderbird-24.3.0.

(wiz)

2014-02-07 21:29:19 UTC MAIN commitmail json YAML

Updated shells/fish to 1.23.1nb1

(wiz)

2014-02-07 21:29:09 UTC MAIN commitmail json YAML

Remove doxygen build dependency. I don't see it used anywhere in a build,
and removing it doesn't change the list of installed files.
Bump PKGREVISION.

Requested by Zbigniew Baniewski <zb@islandsoft.pl>.

(wiz)

2014-02-07 15:36:53 UTC MAIN commitmail json YAML

Note update of lang/php55 package to 5.5.9 and lang/php54 package to 5.4.25.

(taca)

2014-02-07 15:36:07 UTC MAIN commitmail json YAML

Update php54 to 5.4.25.

06 Feb 2014, PHP 5.4.25

- Core:
  . Fixed bug #66286 (Incorrect object comparison with inheritance). (Nikita)
  . Fixed bug #66509 (copy() arginfo has changed starting from 5.4).
    (Will Fitch)

- mysqlnd
  . Fixed bug #66283 (Segmentation fault after memory_limit). (Johannes)

- PDO_pgsql:
  . Fixed bug #62479 (PDO-psql cannot connect if password contains spaces).
    (Will Fitch, Ilia)

- Session:
  . Fixed bug #66481 (Calls to session_name() segfault when session.name is
    null). (Laruence)

(taca)

2014-02-07 15:35:05 UTC MAIN commitmail json YAML

Update php55 to 5.5.9 (PHP 5.5.9).

06 Feb 2014, PHP 5.5.9

- Core:
  . Fixed bug #66509 (copy() arginfo has changed starting from 5.4). (willfitch)

- GD:
  . Fixed bug #66356 (Heap Overflow Vulnerability in imagecrop()).
    (Laruence, Remi)

- OPCache:
  . Fixed bug #66474 (Optimizer bug in constant string to boolean conversion).
    (Dmitry)
  . Fixed bug #66461 (PHP crashes if opcache.interned_strings_buffer=0).
    (Dmitry)
  . Fixed bug #66298 (ext/opcache/Optimizer/zend_optimizer.c has dos-style
    ^M as lineend). (Laruence)

- PDO_pgsql:
  . Fixed bug #62479 (PDO-psql cannot connect if password contains
spaces) (willfitch, iliaa)

- Readline
  . Fixed Bug #66412 (readline_clear_history() with libedit causes segfault after
    #65714). (Remi)

- Session
  . Fixed bug #66469 (Session module is sending multiple set-cookie headers when
    session.use_strict_mode=1) (Yasuo)
  . Fixed bug #66481 (Segfaults on session_name()).
    (cmcdermottroe at engineyard dot com, Yasuo)

- Standard
  . Fixed bug #66395 (basename function doesn't remove drive letter). (Anatol)

- Sockets:
  . Fixed bug #66381 (__ss_family was changed on AIX 5.3). (Felipe)

- Zend Engine
  . Fixed bug #66009 (Failed compilation of PHP extension with C++ std
    library using VS 2012). (Anatol)

(taca)

2014-02-07 14:46:14 UTC MAIN commitmail json YAML

Added mail/rspamd version 0.6.8

(wiedi)

2014-02-07 14:41:31 UTC MAIN commitmail json YAML

2014-02-07 14:39:19 UTC MAIN commitmail json YAML

Import rspamd-0.6.8 as mail/rspamd
Rspamd is fast, modular and lightweight spam filter. It is designed to work
with big ammount of mail and can be easily extended with own filters written in
lua.

(wiedi)

2014-02-07 14:29:41 UTC MAIN commitmail json YAML

Updated multimedia/mediatomb to 0.12.1nb20

(wiedi)

2014-02-07 14:28:09 UTC MAIN commitmail json YAML

Add link to upstream bug report about python 3.x support.
(Hint: not coming)

(wiz)

2014-02-07 14:25:15 UTC MAIN commitmail json YAML

2014-02-07 14:16:34 UTC MAIN commitmail json YAML

2014-02-07 13:57:31 UTC MAIN commitmail json YAML

add missing int types on SunOS

(wiedi)

2014-02-07 13:27:46 UTC MAIN commitmail json YAML

Updated devel/GConf to 2.32.4nb8

(wiz)

2014-02-07 13:27:37 UTC MAIN commitmail json YAML

Mark as not ready for python-3.x. Bump PKGREVISION.

(wiz)

2014-02-07 13:25:38 UTC MAIN commitmail json YAML

Updated x11/gtk2 to 2.24.22nb1

(wiz)

2014-02-07 13:25:27 UTC MAIN commitmail json YAML

Mark as not ready for python-3.x.
Bump PKGREVISION.

(wiz)

2014-02-07 13:20:50 UTC MAIN commitmail json YAML

Updated ham/gpredict to 1.3

(mef)

2014-02-07 13:20:17 UTC MAIN commitmail json YAML

Version 1.3 02 Mar 2011
  This release includes a few minor enhancements of the user
  interface and several bug fixes.

Version 1.2 12 Oct 2010
  This release includes a new layout manager, satellite
  tooltips, improved interactivity, as well as fixes for many
  bugs discovered in the previous releases.

Version 1.1 08 Oct 2010
  This release includes a new satellite data management
  module and a database that includes all satellites from
  CelesTrak. Several bugs have been fixed. This release also
  includes several bugfixes and minor user interface
  improvements

Version 1.0 beta 5 24 May 2009
  This release includes several minor bugfixes in the radio
  controller and new satellite transponder data files
  submitted by users.

Version 1.0 beta 4 15 May 2009
  Doppler tuning using full-duplex radios has been
  implemented, and several minor bugs have been fixed.

Version 0.9.0
  This release includes many bugfixes, and new functionality
  to save satellite pass predictions.

(mef)

2014-02-07 13:14:15 UTC MAIN commitmail json YAML

Updated devel/doxygen to 1.8.6nb1

(wiz)

2014-02-07 13:14:06 UTC MAIN commitmail json YAML

Mark as not ready for python-3.x.
Improve a comment.
Bump PKGREVISION.

(wiz)

2014-02-07 13:11:07 UTC MAIN commitmail json YAML

Updated graphics/inkscape to 0.48.4nb17

(wiz)

2014-02-07 13:10:58 UTC MAIN commitmail json YAML

Fix interpreter path in installed python scripts.
Add some missing python dependency modules.
Mark as not ready for python 3.x.
Bump PKGREVISION.

(wiz)

2014-02-07 13:07:26 UTC MAIN commitmail json YAML

+goocanvas-2.0.2

(mef)

2014-02-07 12:27:16 UTC MAIN commitmail json YAML

Updated games/wesnoth to 1.10.6nb6

(wiz)

2014-02-07 12:27:06 UTC MAIN commitmail json YAML

Mark as not ready for python-3.x. Bump PKGREVISION.

(wiz)

2014-02-07 10:19:27 UTC MAIN commitmail json YAML

2014-02-07 09:21:15 UTC MAIN commitmail json YAML

Pass zlib location explicitly (fixed build on recent SmartOS).

(fhajny)

2014-02-07 08:56:52 UTC MAIN commitmail json YAML

Add xml and gnutls option, requested by Danie Roux via PR pkg/48382.

(obache)

2014-02-07 08:54:06 UTC MAIN commitmail json YAML

Remove the _scratch_ paths from the PLIST.  They shouldn't be there, but they
should have been removed by the Makefile's post-install before the PLIST is
constructed too.

(dsainty)

2014-02-07 05:28:56 UTC MAIN commitmail json YAML

Updated www/squid3 to 3.4.3nb1

(obache)

2014-02-07 05:28:19 UTC MAIN commitmail json YAML

Remove tons of unwanted dir in INSTALLATION_DIRS, and remove last backslash,
it will concat to next line "SPECIAL_PERMS", then it result in creating unwanted
directory and let "pinger" to install into wrong directry, and permission is not
set correctly.

Bump PKGREVISION.

(obache)

2014-02-07 03:52:30 UTC MAIN commitmail json YAML

Added textproc/p5-Text-Nimble version 0.002001

(schmonz)

2014-02-07 03:52:06 UTC MAIN commitmail json YAML

Add and enable p5-Text-Nimble.

(schmonz)

2014-02-07 03:50:59 UTC MAIN commitmail json YAML

Initial import of Nimble, a markup language that tries to make it
easy to author semantically-useful documents with special consideration
given to HTML5 output. Things like blog posts, wiki articles, and
documentation are meant to be easy to write using Nimble.

(schmonz)

2014-02-06 18:37:23 UTC MAIN commitmail json YAML

2014-02-06 18:37:16 UTC MAIN commitmail json YAML

Updated audio/libao to 1.2.0

(wiz)

2014-02-06 18:37:08 UTC MAIN commitmail json YAML

Update to 1.2.0:

1.2.0 - January 27, 2014
- Added missing ao_file_extension() (see Trac #1841)
- Fixed memory leak in ao_shutdown() (see Trac #1799)
- Updated manpage libao.conf.5 (see Trac #1822)
- Corrected doc/ao_play.html (see Trac #1808)
- Latency adjustments
- Implement PulseAudio client_name (see Trac #1924)
- Other ALSA, Pulse, Roar, sndio and MacOS driver improvements

(wiz)

2014-02-06 18:24:25 UTC MAIN commitmail json YAML

Updated graphics/png to 1.6.9

(wiz)

2014-02-06 18:24:11 UTC MAIN commitmail json YAML

Update to 1.6.9, getting rid of the final two patches after discussion
with very helpful upstream.

Changes:

Version 1.6.9beta01 [December 26, 2013]
  Bookkeeping: Moved functions around (no changes). Moved transform
    function definitions before the place where they are called so that
    they can be masde static. Move the intrapixel functions and the
    grayscale palette builder out of the png?tran.c files. The latter
    isn't a transform function and is no longer used internally, and the
    former MNG specific functions are better placed in pngread/pngwrite.c
  Made transform implementation functions static. This makes the internal
    functions called by png_do_{read|write}_transformations static. On an
    x86-64 DLL build (Gentoo Linux) this reduces the size of the text
    segment of the DLL by 1208 bytes, about 0.6%. It also simplifies
    maintenance by removing the declarations from pngpriv.h and allowing
    easier changes to the internal interfaces.
  Rebuilt configure scripts with automake-1.14.1 and autoconf-2.69
    in the tar distributions.

Version 1.6.9beta02 [January 1, 2014]
  Added checks for libpng 1.5 to pngvalid.c.  This supports the use of
    this version of pngvalid in libpng 1.5
  Merged with pngvalid.c from libpng-1.7 changes to create a single
    pngvalid.c
  Removed #error macro from contrib/tools/pngfix.c (Thomas Klausner).
  Merged pngrio.c, pngtrans.c, pngwio.c, and pngerror.c with libpng-1.7.0
  Merged libpng-1.7.0 changes to make no-interlace configurations work
    with test programs.
  Revised pngvalid.c to support libpng 1.5, which does not support the
    PNG_MAXIMUM_INFLATE_WINDOW option, so #define it out when appropriate in
    pngvalid.c
  Allow unversioned links created on install to be disabled in configure.
    In configure builds 'make install' changes/adds links like png.h
    and libpng.a to point to the newly installed, versioned, files (e.g.
    libpng17/png.h and libpng17.a). Three new configure options and some
    rearrangement of Makefile.am allow creation of these links to be disabled.

Version 1.6.9beta03 [January 10, 2014]
  Removed potentially misleading warning from png_check_IHDR().

Version 1.6.9beta04 [January 20, 2014]
  Updated scripts/makefile.* to use CPPFLAGS (Cosmin).
  Added clang attribute support (Cosmin).

Version 1.6.9rc01 [January 28, 2014]
  No changes.

Version 1.6.9rc02 [January 30, 2014]
  Quiet an uninitialized memory warning from VC2013 in png_get_png().

Version 1.6.9 [February 6, 2014]

(wiz)

2014-02-06 18:18:23 UTC MAIN commitmail json YAML

Updated finance/gnucash to 2.6.1nb1

(wiz)

2014-02-06 18:18:11 UTC MAIN commitmail json YAML

Mark as not ready for python-3.x. Bump PKGREVISION.

(wiz)

2014-02-06 17:35:22 UTC MAIN commitmail json YAML

Updated devel/git to 1.8.5.4

(adam)

2014-02-06 17:34:02 UTC MAIN commitmail json YAML

Changes 1.8.5.4:

* "git fetch --depth=0" was a no-op, and was silently ignored.
  Diagnose it as an error.

* Remote repository URL expressed in scp-style host:path notation are
  parsed more carefully (e.g. "foo/bar:baz" is local, "[::1]:/~user" asks
  to connect to user's home directory on host at address ::1.

* SSL-related options were not passed correctly to underlying socket
  layer in "git send-email".

* "git commit -v" appends the patch to the log message before
  editing, and then removes the patch when the editor returned
  control. However, the patch was not stripped correctly when the
  first modified path was a submodule.

* "git mv A B/", when B does not exist as a directory, should error
  out, but it didn't.

* When we figure out how many file descriptors to allocate for
  keeping packfiles open, a system with non-working getrlimit() could
  cause us to die(), but because we make this call only to get a
  rough estimate of how many is available and we do not even attempt
  to use up all file descriptors available ourselves, it is nicer to
  fall back to a reasonable low value rather than dying.

* "git log --decorate" did not handle a tag pointed by another tag
  nicely.

* "git add -A" (no other arguments) in a totally empty working tree
  used to emit an error.

* There is no reason to have a hardcoded upper limit of the number of
  parents for an octopus merge, created via the graft mechanism, but
  there was.

* The implementation of 'git stash $cmd "stash@{...}"' did not quote
  the stash argument properly and left it split at IFS whitespace.

* The documentation to "git pull" hinted there is an "-m" option
  because it incorrectly shared the documentation with "git merge".

Also contains typofixes, documentation updates and trivial code clean-ups.

(adam)

2014-02-06 17:28:54 UTC MAIN commitmail json YAML

2014-02-06 17:28:24 UTC MAIN commitmail json YAML

2014-02-06 17:27:47 UTC MAIN commitmail json YAML

2014-02-06 17:26:32 UTC MAIN commitmail json YAML

2014-02-06 17:25:49 UTC MAIN commitmail json YAML

update to 3.3.9
changes:
-improved language support
-improved drawing quality
-bugfixes

(drochner)

2014-02-06 17:22:19 UTC MAIN commitmail json YAML

update to 1.20
changes:
* Add HDF5 file data import
* Allow expressions to be edited for linked 2D datasets
* Add support for 2D datasets with irregular gridpoints
* Add 2D data CSV import
* Allow safe renaming of linked datasets
* Support importing text from FITS files
+bugfixes

(drochner)

2014-02-06 14:59:11 UTC MAIN commitmail json YAML

2014-02-06 14:24:22 UTC MAIN commitmail json YAML

2014-02-06 14:22:51 UTC MAIN commitmail json YAML

add py-h5py-2.2.1, Python bindings to hdf5, from Kamel Derouiche
per pkgsrc-wip

(drochner)

2014-02-06 13:15:06 UTC MAIN commitmail json YAML

Updated www/p5-CatalystX-Component-Traits to 0.19
Updated www/p5-Catalyst-Plugin-StackTrace to 0.12
Updated www/p5-Catalyst-Plugin-Session to 0.39
Updated databases/p5-Catalyst-Model-DBIC-Schema to 0.62
Updated www/p5-Catalyst-Plugin-ConfigLoader to 0.33
Updated mail/p5-MIME-Types to 2.04
Updated www/p5-Catalyst-Plugin-Static-Simple to 0.31
Updated www/p5-Catalyst-Authentication-Store-DBIx-Class to 0.1505
Added www/p5-CGI-Cookie-XS version 0.18
Added www/p5-Cookie-XS version 0.11
Added www/p5-HTTP-HeaderParser-XS version 0.20
Added www/p5-Catalyst-Engine-HTTP-Prefork version 0.51
Updated archivers/p5-Archive-Any to 0.0941
Updated archivers/p5-Archive-Zip to 1.37
Updated archivers/p5-Archive-Tar to 1.96
Updated comms/p5-Device-Modem to 1.57
Updated converters/p5-Convert-Color to 0.10
Updated converters/p5-JSON to 2.90
Updated converters/p5-JSON-Any to 1.32
Added devel/p5-Types-Serialiser version 1.0
Updated converters/p5-JSON-XS to 3.010
Updated converters/p5-Sereal-Decoder to 2.03
Updated converters/p5-Sereal-Encoder to 2.03
Updated converters/p5-Unicode-Collate to 1.04
Updated converters/p5-Unicode-Normalize to 1.17
Updated devel/p5-Rose-Object to 0.860
Updated time/p5-Rose-DateTime to 0.540
Updated www/p5-Rose-HTML-Objects to 0.620
Updated databases/p5-Rose-DB to 0.775
Updated databases/p5-Rose-DB-Object to 0.810
Updated databases/p5-DBD-postgresql to 3.0.0
Updated databases/p5-DBI to 1.631

(abs)

2014-02-06 13:14:06 UTC MAIN commitmail json YAML

Updated databases/p5-DBI to 1.631

Changes in DBI 1.631

NOTE: This release changes the handle passed to Callbacks from being an 'inner'
handle to being an 'outer' handle. If you have code that makes use of Callbacks,
ensure that you understand what this change means and review your callback code.

    Fixed err_hash handling of integer err RT#92172 [Dagfinn Ilmari]
    Fixed use of \Q vs \E in t/70callbacks.t

    Changed the handle passed to Callbacks from being an 'inner'
        handle to being an 'outer' handle.

    Improved reliability of concurrent testing
        PR#8 [Peter Rabbitson]
    Changed optional dependencies to "suggest"
        PR#9 [Karen Etheridge]
    Changed to avoid mg_get in neatsvpv during global destruction
        PR#10 [Matt Phillips]

(abs)

2014-02-06 13:11:32 UTC MAIN commitmail json YAML

Updated databases/p5-DBD-postgresql to 3.0.0

Version 3.0.0

  - Major change in UTF-8 handling. If client_encoding is set to UTF-8,
    always mark returned Perl strings as utf8. See the pg_enable_utf8 docs
    for more information.
    [Greg Sabino Mullane, David E. Wheeler, David Christensen]

  - Bump DBI requirement to 1.614

  - Bump Perl requirement to 5.8.1

  - Add new handle attribute, switch_prepared, to control when we stop
    using PQexecParams and start using PQexecPrepared. The default is 2:
    in previous versions, the effective behavior was 1 (i.e. PQexecParams
    was never used).
    [Greg Sabino Mullane]

  - Better handling of items inside of arrays, particularly bytea arrays.
    [Greg Sabino Mullane] (CPAN bug #91454)

  - Map SQL_CHAR back to bpchar, not char
    [Greg Sabino Mullane, reported by H.Merijn Brand]

  - Do not force oids to Perl ints
    [Greg Sabino Mullane] (CPAN bug #85836)

  - Return better sqlstate codes on fatal errors
    [Rainer Weikusat]

  - Better prepared statement names to avoid bug
    [Spencer Sun] (CPAN bug #88827)

  - Add pg_expression field to statistics_info output to show
    functional index information
    [Greg Sabino Mullane] (CPAN bug #76608)

  - Adjust lo_import_with_oid check for 8.3
    (CPAN bug #83145)

  - Better handling of libpq errors to return SQLSTATE 08000
    [Stephen Keller]

  - Make sure CREATE TABLE .. AS SELECT returns rows in non do() cases

  - Add support for AutoInactiveDestroy
    [David Dick] (CPAN bug #68893)

  - Fix ORDINAL_POSITION in foreign_key_info
    [Dagfinn Ilmari Manns奪ker] (CPAN bug #88794)

  - Fix foreign_key_info with unspecified schema
    [Dagfinn Ilmari Manns奪ker] (CPAN bug #88787)

  - Allow foreign_key_info to work when pg_expand_array is off
    [Greg Sabino Mullane and Tim Bunce] (CPAN bug #51780)

  - Remove math.h linking, as we no longer need it
    (CPAN bug #79256)

  - Spelling fixes
    (CPAN bug #78168)

  - Better wording for the AutoCommit docs
    (CPAN bug #82536)

  - Change NOTICE to DEBUG1 in t/02attribs.t test for handle attribute "PrintWarn":
    implicit index creation is now quieter in Postgres.
    [Erik Rijkers]

  - Use correct SQL_BIGINT constant for int8
    [Dagfinn Ilmari Manns奪ker]

  - Fix assertion when binding array columns on debug perls >= 5.16
    [Dagfinn Ilmari Manns奪ker]

  - Adjust test to use 3 digit exponential values
    [Greg Sabino Mullane] (CPAN bug #59449)

  - Avoid reinstalling driver methods in threads
    [Dagfinn Ilmari Manns奪ker] (CPAN bug #83638)

  - Make sure App::Info does not prompt for pg_config location
    if AUTOMATED_TESTING or PERL_MM_USE_DEFAULT is set
    [David E. Wheeler] (CPAN bug #90799)

  - Fix typo in docs for pg_placeholder_dollaronly
    [Bryan Carpenter] (CPAN bug #91400)

  - Cleanup dangling largeobjects in tests
    [Fitz Elliott] (CPAN bug #92212)

  - Fix skip test counting in t/09arrays.t
    [Greg Sabino Mullane] (CPAN bug #79544)

  - Explicitly specify en_US for spell checking
    [Dagfinn Ilmari Manns奪ker] (CPAN bug #91804)

(abs)

2014-02-06 13:05:05 UTC MAIN commitmail json YAML

Updated databases/p5-Rose-DB-Object to 0.810

0.810 (01.18.2013) - John Siracusa <siracusa@gmail.com>

    * Improved automated installation detection (RT 92255)

0.809 (12.04.2013) - John Siracusa <siracusa@gmail.com>

    * Corrected precision and scale for auto-loaded numeric column metadata.
      (Reported by Justin Hawkins)

0.808 (11.03.2013) - John Siracusa <siracusa@gmail.com>

    * Fixed typos.

0.807 (08.28.2013) - John Siracusa <siracusa@gmail.com>

    * Fixed inheritance of Rose::DB::Object::Cached's cached_objects_expire_in
      attribute.  (Patch by Frank Wesemann)

(abs)

2014-02-06 13:03:18 UTC MAIN commitmail json YAML

Updated databases/p5-Rose-DB to 0.775

0.775 (01.18.2013) - John Siracusa <siracusa@gmail.com>

    * Improved automated installation detection (RT 92254)

0.774 (11.01.2013) - John Siracusa <siracusa@gmail.com>

    * Fixed typos.

0.773 (10.28.2013) - John Siracusa <siracusa@gmail.com>

    * Fixed bad skip count on test file.

0.772 (10.28.2013) - John Siracusa <siracusa@gmail.com>

    * Fixed a bug that caused nested arrays to be incorrectly formatted by
      Rose::DB::Pg's format_array() method.  (Patch by Brian Duggan.)
    * Updated contributors list.

(abs)

2014-02-06 13:02:42 UTC MAIN commitmail json YAML

Updated www/p5-Rose-HTML-Objects to 0.620

0.620 (12.18.2013) - John Siracusa <siracusa@gmail.com>

    * Eliminate a perl 5.19 "precedence issue with control flow operator"
      warning.

0.619 (07.24.2013) - John Siracusa <siracusa@gmail.com>

    * Fixed incorrect return statements (RT 87253) (Patch by Reini Urban)

(abs)

2014-02-06 13:00:59 UTC MAIN commitmail json YAML

Updated time/p5-Rose-DateTime to 0.540

0.540 (12.08.2013) - John Siracusa <siracusa@gmail.com>

    * Handle object return value from DateTime->DefaultLocale.

0.539 (10.03.2013) - John Siracusa <siracusa@gmail.com>

    * Fixed a typo in the documentation. (RT 89224)

(abs)

2014-02-06 12:59:21 UTC MAIN commitmail json YAML

Updated devel/p5-Rose-Object to 0.860

0.860 (10.03.2013) - John Siracusa <siracusa@gmail.com>

* Fixed typos in the documentation. (RT 89241)

(abs)

2014-02-06 12:56:32 UTC MAIN commitmail json YAML

Updated converters/p5-Unicode-Normalize to 1.17

1.17  Sat Oct  5 11:36:43 2013
    - assertion using unpack

(abs)

2014-02-06 12:54:50 UTC MAIN commitmail json YAML

Updated converters/p5-Unicode-Collate to 1.04

1.04  Sat Dec  7 11:34:18 2013
    - XS: a workaround for perl 5.6.x to handle U+FFFF correctly.
      unpack_U() is implemented by using XS again as well as that in 1.02,
      but now that is used only in the versions before perl 5.8.0.

1.03  Sun Dec  1 21:45:46 2013
    - XS: now unpack_U() uses unpack('U*') in pure perl.
      avoid XS for the internal "utf8" encoding of perl.

1.02  Sun Nov 10 18:39:37 2013
    - POD: fix [rt.cpan.org #90170] about iso-8859-1 letters in pod.
      E<> is used for the compatibility with perl 5.6.1 and possibly EBCDIC.
    - 1.01 forgot to increase the version number of CJK/Korean.pm.
    - modified tests: cjkrange.t, compatui.t, hangtype.t, illegal.t,
      loc_ja.t, loc_ta.t, overcjk0.t, overcjk1.t, view.t in t.

1.01  Sat Nov  2 19:00:38 2013
    - DUCET is updated (for Unicode 6.3.0) as Collate/allkeys.txt.
    ! Please notice that allkeys.txt will be overwritten if you have had
      other allkeys.txt already.
    - The default UCA_Version is 28.
    - Locale/*.pl (except fr.pl) and CJK/Korean.pm are updated.
    - modified tests: loc_es.t, loc_estr.t, rewrite.t, version.t in t.

1.00  Sun Oct 27 13:22:17 2013
    - When a subroutine by 'overrideOut' taking a out-of-range value and
      returning undef, now the value is treated as if it were U+FFFD.
      * 0.99 wrongly calculates implicit weights based on out-of-range values.
    - Assertion using unpack 'U' is added. If not only pack('U') but also
      unpack('U') of CORE:: don't work as expected, this module will die.

(abs)

2014-02-06 12:52:14 UTC MAIN commitmail json YAML

Updated converters/p5-Sereal-Encoder to 2.03

2.03 Tue Jan  7 20:00 2014 (AMS time)
  - (Hopefully) final fixes to FREEZE/THAW functionality:
    => Add safe assertion to make sure that we don't segfault on invalid
      data.
    => Fix encoding/decoding of data structures with repeated references
      to the same instance of a class that has FREEZE/THAW hooks.
      Thanks to Christian Hansen for a test case.
  - Distribution dependency fix.

2.02 Mon Jan  6 15:00 2014 (AMS time)
  - Fundamental fixes for FREEZE/THAW support in previous Sereal v2
    releases. If you plan to use FREEZE/THAW, make sure you have 2.02
    or better (dito for the decoder).

2.01 Tue Dec 31 08:15 2013 (AMS time)
  - Promoting changes from 0.37 to 2.00_03 to a stable release.
    (This being the first protocol v2 stable release.)
  - Minor performance tweaks.

2.00_03 Sun Dec 29 10:33 2013 (AMS time)
  - FREEZE/THAW hooks for object serialization.
  - Test improvements (allowing for partial parallel run)
  - Minor optimizations.

2.00_02 Mon Oct 28 19:32 2013 (AMS time)
  - Sereal::Encoder now requires Sereal::Decoder for better testing.
  - Fix Test::Warn dependency problem of 2.00_01.

2.00_01 tue Oct 1 07:34 2013 (AMS time)
  - NEW PROTOCOL VERSION: V2
  - User-data in header functionality: You may embed arbitrary
    Sereal-serializable data in a document header. The document
    header isn't compressed, so this is ideal for retrieving
    small chunks of meta-data (eg. routing information) without
    having to deserialize the entire document.
  - Relocatable Sereal document bodies
  - Encoder never emits non-incremental Snappy encoding for V2
  - Offsets now 1-based in relocatable format, not 0
  - Fixed VERY obscure (and rare) memory leak.
  - Improved error messages
  - Remove warning about Sereal not being production-grade
    (because it IS).
  - Detect when the Snappy compression was net negative in size
    and back out
  - C89/Windows fixes (bulk88)
  - 5.18 compat: Skip test failing due to hash-randomization (Zefram)

(abs)

2014-02-06 12:48:52 UTC MAIN commitmail json YAML

Updated converters/p5-Sereal-Decoder to 2.03

2.03 Tue Jan  7 20:00 2014 (AMS time)
  - (Hopefully) final fixes to FREEZE/THAW functionality:
    => Add safe assertion to make sure that we don't segfault on invalid
      data.
    => Fix encoding/decoding of data structures with repeated references
      to the same instance of a class that has FREEZE/THAW hooks.
      Thanks to Christian Hansen for a test case.
  - Distribution dependency fix.

2.02 Mon Jan  6 15:00 2014 (AMS time)
  - Fundamental fixes for FREEZE/THAW support in previous Sereal v2
    releases. If you plan to use FREEZE/THAW, make sure you have 2.02
    or better (dito for the encoder).

2.01 Tue Dec 31 08:15 2013 (AMS time)
  - Promoting changes from 0.37 to 2.00_03 to a stable release.
    (This being the first protocol v2 stable release.)
  - Minor performance tweaks.

2.00_03 Sun Dec 29 10:33 2013 (AMS time)
  - FREEZE/THAW hooks for object serialization.
  - Test improvements (allowing for partial parallel run)

2.00_02 Mon Oct 28 19:23 2013 (AMS time)
  - Fix Test::Warn dependency problem of 2.00_01.

2.00_01 Tue Oct 1 07:34 2013 (AMS time)
  - NEW PROTOCOL VERSION: V2
  - User-data in header functionality: You may embed arbitrary
    Sereal-serializable data in a document header. The document
    header isn't compressed, so this is ideal for retrieving
    small chunks of meta-data (eg. routing information) without
    having to deserialize the entire document.
  - Relocatable Sereal document bodies
  - Encoder never emits non-incremental Snappy encoding for V2
  - Offsets now 1-based in relocatable format, not 0
  - Fixed VERY obscure (and rare) memory leak.
  - Fixed VERY obscure crash on invalid data.
  - Improved error messages
  - Remove warning about Sereal not being production-grade
    (because it IS).
  - C89/Windows fixes (bulk88)
  - 5.18 compat: Skip test failing due to hash-randomization (Zefram)

(abs)

2014-02-06 12:47:41 UTC MAIN commitmail json YAML

+p5-CGI-Cookie-XS +p5-Cookie-XS +p5-HTTP-HeaderParser-XS

(abs)

2014-02-06 12:46:55 UTC MAIN commitmail json YAML

+p5-Types-Serialiser

(abs)

2014-02-06 12:45:44 UTC MAIN commitmail json YAML

Updated converters/p5-JSON-XS to 3.010

3.01 Tue Oct 29 16:55:15 CET 2013
- backport to perls < 5.18 (reported by Paul Howarth).

3.0  Tue Oct 29 01:35:37 CET 2013
        - implemented an object tagging extension (using the
          Types::Serialiser serialisation protocol).
        - reworked the documentation regarding object serialisation,
          add a new OBJECT SERIALISATION section that explains the
          whole process.
        - new setting: allow_tags.
- switch to Types::Serialiser booleans.
- remove to_json/from_json.
        - other minor improvements to the documentation.

(abs)

2014-02-06 12:37:52 UTC MAIN commitmail json YAML

Updated converters/p5-JSON-Any to 1.32

-----------------------------------------
version 1.32 at 2013-11-07 15:56:33 +0000
-----------------------------------------

  Change: e1fbae5ccddc7becce7b1bcff1a8ac99075bc136
  Author: Chris Prather <chris@prather.org>
  Date : 2013-11-07 07:52:41 +0000

    Merge pull request #3 from wolfsage/t_fix_deps

    Include dep Test::Requires in dist.ini

  Change: 0880faaaf3c8194acc3a70a387d94ff69633b333
  Author: Matthew Horsfall <wolfsage@gmail.com>
  Date : 2013-11-07 10:51:02 +0000

    Include dep Test::Requires in dist.ini

-----------------------------------------
version 1.31 at 2013-11-06 21:46:52 +0000
-----------------------------------------

  Change: 87ce2b21a27c984d71ec9b2a94847ae99d48445b
  Author: Chris Prather <chris@prather.org>
  Date : 2013-11-06 21:46:52 +0000

    ignore a few more directories

  Change: d585c4cdccb59c96d7a3ab78e1881edd7e4d4e59
  Author: Chris Prather <chris@prather.org>
  Date : 2013-11-06 21:44:04 +0000

    bump minimum version requirement for JSON.pm

  Change: f5200618645fc09d27856b921bc9be43cf35b039
  Author: Chris Prather <chris@prather.org>
  Date : 2013-11-06 21:41:22 +0000

    fix the tests to properly exclude JSON::XS

    A bug came up where JSON::XS and JSON.pm had incompatible revisions
    but installed just fine. This was a problem because JSON.pm will
    silently load JSON::XS in the background and caused explosions.

    We now try to exclude JSON::XS except in the case we're actually
    testing it directly.

    Also we've removed some of the tests for JSON::Syck as it's been
    deprecated. We also add in tests for Cpanel::JSON::XS which got
    missed when it was added as a choice.

  Change: 14744d6d0cce26bc867638ec5aaea9594c292efe
  Author: Chris Prather <chris@prather.org>
  Date : 2013-10-31 22:45:19 +0000

    add a todo note for ether (or whomever) to pick up before I get back
    to it

  Change: 360853b664817a0ed0e4b473dfbf1dbf1e56dd77
  Author: Chris Prather <chris@prather.org>
  Date : 2013-10-31 17:51:41 +0000

    test without JSON::XS and add a compat note

    JSON::XS 3.x is incompatible with JSON.pm < 2.90 in the exact way
    that JSON::Any uses things in the test suite.

    So we set the tests to ignore JSON::XS (using Test::Without::Module)
    thanks to ether for suggesting it.

    And we add a note about the situation to the POD so that others can
    figure out what is going on.

  Change: 756c6ac460c92d425d970e113465ce1e9a6b40a9
  Author: Chris Prather <chris@prather.org>
  Date : 2013-10-31 15:29:16 +0000

    test for more accpetable backends on install

    We have added more acceptable backends (Cpanel::JSON::XS and
    JSON::PP) but we didn't update the tests during installation.

  Change: cc51c101a1aa0d45573d25cd6bad3c9eb07006f5
  Author: Chris Prather <chris@prather.org>
  Date : 2013-10-31 14:59:45 +0000

    Pull Changes from Git and prune local/

    Migrating out Changes file to ChangesFromGit so I won't have to
    remember to update it manually. If people desperately need the old
    commit messages broken out by release I can go back and tag the
    releases based on the old changes file.

    Additional to prevent myself from pulling a "perigrin" as rjbs put
    it, I've added a directive to prune Carton stile local/ directories.

  Change: ed357ecabed9ede1cfffb021f5c922a4bcc5c828
  Author: Chris Prather <chris@prather.org>
  Date : 2013-10-30 06:19:58 +0000

    Merge pull request #2 from ilmari/json-xs-3

    Add support for JSON::XS version 3

  Change: 6bd1def2e2fddfd79aff4b36e2f05519bc89366e
  Author: Dagfinn Ilmari Manns奪ker <ilmari@ilmari.org>
  Date : 2013-10-30 11:19:24 +0000

    Add support for JSON::XS version 3

    For added future robustness, skip modules we manage to load but don't
    know how to handle.

  Change: 75a29b8203bc430481b5afed2a08a78e52edc037
  Author: Dagfinn Ilmari Manns奪ker <ilmari@ilmari.org>
  Date : 2013-10-30 11:15:55 +0000

    Test string escaping with JSON:PP as well

  Change: f8fb91cf5911ea5022883a34d69f362bbf5f59a4
  Author: Dagfinn Ilmari Manns奪ker <ilmari@ilmari.org>
  Date : 2013-10-30 11:15:55 +0000

    Fix no_plan usage

(abs)

2014-02-06 12:34:51 UTC MAIN commitmail json YAML

Updated converters/p5-JSON to 2.90

## JSON version 2.9 #####################################################

CAUTION!!!
INCOMPATIBLE CHANGE

JSON.pm had patched JSON::XS::Boolean and JSON::PP::Boolean internally
on loading time for making these modules inherit JSON::Boolean.
But since JSON::XS v3.0 it use Types::Serialiser as boolean class.
Then now JSON.pm breaks boolean classe overload features and
-support_by_pp if JSON::XS v3.0 or later is installed.

JSON::true and JSON::false returned JSON::Boolean objects.
For workaround, they return JSON::PP::Boolean objects in this version.

    isa_ok(JSON::true, 'JSON::PP::Boolean');

And it discards a feature:

    ok(JSON::true eq 'true');

In other word, JSON::PP::Boolean overload numeric only.

    ok( JSON::true == 1 );

##########################################################################

2.90  Wed Oct 30 19:48:43 2013

**** Please see to the headline in this file. ****

- workaround for JSON::XS version 3.0 or later installed case.

  * the objects returned by JSON::true/false are JSON::PP::Boolean.
  * they do not overload 'eq'.

- changed test cases for this patch.

  t/e02_bool.t
  t/e03_bool2.t
  t/x17_strange_overload.t
  t/xe02_bool.t
  t/xe03_bool2.t
  t/xe12_boolean.t

**** Please see to the headline in this file. ****

2.61  Thu Oct 17 19:38:55 2013
- fixed return/or in _incr_parse
  reported and patched by MAUKE, sprout and rjbs
  https://rt.cpan.org/Public/Bug/Display.html?id=86948

2.60
- $json->is_xs, $json->is_pp was completely broken.
    pointed by rt#75867 and emceelam

(abs)

2014-02-06 12:30:20 UTC MAIN commitmail json YAML

Updated converters/p5-Convert-Color to 0.10

0.10    2013/12/30 01:07:36
        [CHANGES]
        * Resolve a cornercase ambiguity between CORE::hex() and sub hex
          which affects unclean code reloading on 5.16 (RT91722)

(abs)

2014-02-06 12:28:26 UTC MAIN commitmail json YAML

Updated comms/p5-Device-Modem to 1.57

Revision history for Perl extension Device::Modem.

1.57  Sun Jan 26 11:36:11 CET 2014
    - Added a "handshake" option to the connect() method.
      Allowed values are "xoff", "rts" or "none" (default).
      Thanks to Ezio Bonsi for suggesting the idea.

(abs)

2014-02-06 12:25:52 UTC MAIN commitmail json YAML

Updated archivers/p5-Archive-Tar to 1.96

1.96  24/10/2013
- integrate Package::Constants into Constant module
  and remove requirement on it.

1.94  24/10/2013
- install into site if >= 5.012

1.93_02 22/10/2013 (XLAT)
- [rt.cpan.org #78030] symlinks resolution on MSWin32

(abs)

2014-02-06 12:23:33 UTC MAIN commitmail json YAML

Updated archivers/p5-Archive-Zip to 1.37

1.37 Wed 08 Jan 2014
    - Need newer Test::More to support done_testing() [thaljef]

1.36 Mon 30 Dec 2013
    - Fix error in version update with 1.35 [RT #91744]

1.35 Mon 30 Dec 2013
    - fallback on copy if move gives permission denied [github.com/plicease]

1.34 Mon 2 Dec 2013
    - Restore svn history from svn.ali.as (thanks H. Merijn Brand)
    - #90854 Test 17 in t/03_ex.t is failing
    - Allow reading ZIP from seekable streams (like PerlIO::Scalar)
    - RT#75197
    - Fixes: #76780: Cannot create member called "0" with addString (HAGGAI)

1.33 Sat 9 Nov 2013
    - #59102 (Spelling error in manapage) [github.com/dsteinbrunner]
    - #86600 typo fixes [github.com/dsteinbrunner]

1.32 Fri 8 Nov 2013
    - #89777 Unlink temp files generated by tempFile. [PHRED]

1.31_04 Fri 14 Oct 2011 - Alan Haggai Alavi
    - Updated Perl dependency to 5.006 to reflect implicit dependencies
      in the code exposed by Perl::MinimumVersion xt test (ADAMK)
    - Fixes: #68446: Set compressed size and uncompressed size of an entry to 0
      if either of them is 0 (HAGGAI)
    - Added $VERSION to crc32 (ADAMK)

1.31_03 Thu 30 Jun 2011 - H.Merijn Brand
    - Add decryption support

1.31_02 Wed 9 Mar 2011 - Adam Kennedy
    - More fixes by HAGGAI, which he still doesn't detail in Changes

1.31_01 Fri  5 Mar 2010 - Adam Kennedy
    - Various fixes by HAGGAI, which he has not yet provided details on:
    - Experimental Unicode in file/dir names

(abs)

2014-02-06 12:20:45 UTC MAIN commitmail json YAML

Updated archivers/p5-Archive-Any to 0.0941

0.0941 2013-11-06 21:38:55 America/Toronto
    - Fixes version number in lib/Archive/Any.pm
    - Previous release had broken permissions.

0.0940 2013-10-18 01:35:34 America/Toronto
    - Adds x-bzip2 as per PERLER's patch in RT#67738.
    - Converts dist to Dist::Zilla

(abs)

2014-02-06 12:01:58 UTC MAIN commitmail json YAML

Updated www/p5-Catalyst-Authentication-Store-DBIx-Class to 0.1505

0.1505 2013-06-10
      * Fix RT#82944 - test fails on perl >= 5.17.3

      * Return undef if there isn't a user. This will cause an exception
          but a more helpful exception (probably from DBIC) than the inability
          to call a method in this code.

0.1504  2012-10-05
        * Make use_userdata_from_session use inflate_result since this is
          already-stored data, not a "new" object being created

(abs)

2014-02-06 12:01:43 UTC MAIN commitmail json YAML

Update apache-tomcat6 to 6.0.39, including avoidance for CVE-2013-1571.
Upstream changelog:

Tomcat 6.0.39 (markt)
    Catalina
        fix 55166: Fix regression that broke XML validation when
                running on some Java 5 JVMs. (kkolinko)

    Coyote
        fix Make the HTTP NIO connector tolerant of whitespace
                in the individual values used for the ciphers attribute.
                (markt)
        fix Remove dependency introduced on the jsp-api.jar as
                part of the XML validation changes introduced in 6.0.38.
                (markt)

    Jasper
        fix Correct several errors in jspxml Schema and DTD. (kkolinko)

    Cluster
        code Remove an empty TestTwoPhaseCommit test from Tribes. (kkolinko)

    Web applications
        fix Fix broken link in Jasper How-To documentation. (markt)
        fix Align index.html and index.jsp in ROOT web application.
                Correct links to specifications and to the Tomcat mailing
                lists. (kkolinko)
        fix Remove second copy of RUNNING.txt from the full-docs
                distribution. Some unpacking utilities can't handle
                multiple copies of a file with the same name in a directory.
                (kkolinko)

    Other
        update Update sample Eclipse IDE project: use JUnit 4 library
                and prefer a Java 5 JDK when several JDKs are configured.
                Cleanup the Ant build files. (kkolinko)
        fix Correct Maven dependencies for individual JAR files. (markt)

Tomcat 6.0.38 (markt) not released

    Catalina
        fix Ensure that when Tomcat's anti-resource locking features
                are used that the temporary copy of the web application
                and not the original is removed when the web application
                stops. (markt/kkolinko)
        fix 55019: Fix a potential exception when accessing JSPs
                while running under a SecurityManager. (jfclere)
        fix 55052: Make JULI's LogManager to additionally look for
                logging properties without prefixes if the property
                cannot be found with a prefix. (kkolinko)
        fix 55266: Ensure that the session ID is parsed from the
                request before any redirect as the session ID may need
                to be encoded as part of the redirect URL. (markt)
        fix 55404: Log warnings about using security roles in web.xml
                as warnings. (markt)
        fix 55268: Added optional --service-start-wait-time
                command-line option to change service start wait time
                from default of 10 seconds. (schultz)
        fix Correctly associate the default resource bundle with
                the English locale so that requests that specify an
                Accept-Language of English ahead of French, Spanish or
                Japanese get the English messages they asked for. (markt)
        fix Add missing JavaEE 5 XML schema definitions. (markt)
        fix When Catalina parses TLD files, always use a namespace
                aware parser to be consistent with how Jasper parses
                TLD files. The tldNamespaceAware attribute of the Context
                is now ignored. (markt)
        fix As per section SRV.14.4.3 of the Servlet 2.5 specification,
                a namespace aware, validating parser will be used when
                processing *.tld and web.xml files if the system property
                org.apache.catalina.STRICT_SERVLET_COMPLIANCE is set
                to true. (markt)
        fix Ensure that sessions IDs are not parsed from URLs for
                Contexts where disableURLRewriting is true. (markt)
        add Add an option to the Context to control the blocking of
                XML external entities when parsing XML configuration
                files and enable this blocking by default when a security
                manager is used. The block is implemented via a custom
                resolver to enable the logging of any blocked entities.
                (markt)
        fix 56016: When loading resources for XML schema validation,
                take account of the possibility that servlet-api.jar and
                jsp-api.jar may not be loaded by the same class loader.
                Patch by Juan Carlos Estibariz. (markt)

    Coyote
        fix 52811: Fix parsing of Content-Type header in
                HttpServletResponse.setContentType(). Introduces a new
                HTTP header parser that follows RFC2616. (markt)
        fix 54691: Add configuration attribute "sslEnabledProtocols"
                to HTTP connector and document it. (Internally this
                attribute has been already implemented but not documented,
                under names "protocols" and "sslProtocols". Those names
                of this attribute are now deprecated). (schultz)
        fix 54947: Fix the HTTP NIO connector that incorrectly
                rejected a request if the CRLF terminating the request
                line was split across multiple packets.
                Patch by Konstantin Preißer. (markt)
        fix 55228: Allow web applications to set a HTTP Date header.
                (markt)
        fix Better adherence to RFC2616 for content-length headers.
                (markt)
        fix Add support for limiting the size of chunk extensions
                when using chunked encoding. (markt)
        fix 55749: Improve the error message when SSLEngine is
                disabled in the AprLifecycleListener and SSL is
                configured for an APR/native connector. (markt)
        fix Avoid possible NPE if a content type is specified without
                a character set. (markt)

    Jasper
        fix 55198: Ensure attribute values in tagx files that include
                EL and quoted XML characters are correctly quoted in
                the output. (markt)
        fix 55671: Consistently use the configuration option name
                genStringAsCharArray rather than a mixture of
                genStrAsCharArray and genStringAsCharArray but retain
                support for genStrAsCharArray as in initialisation
                parameter for the JSP servlet to retain backwards
                compatibility with existing configurations. (markt)
        fix 55691: Fix javax.el.ArrayELResolver to correctly handle
                the case where the base object is an array of primitives.
                (markt)
        fix 55973: Fix processing of XML schemas when validation
                is enabled in Jasper. (kkolinko)

    Web applications
        add Add documentation for
                o.a.c.tribes.group.interceptors.TcpFailureDetector. (kfujino)
        add Complete the documentation for MessageDispatch15Interceptor.
                (kfujino)
        add Add to cluster document a description of
                notifyLifecycleListenerOnFailure and
                heartbeatBackgroundEnabled. (kfujino)
        fix 55746: Add documentation on the allRolesMode to the
                CombinedRealm and LockOutRealm. Patch by Cédric Couralet.
                (markt)
        fix Fix the sample configuration of StaticMembershipInterceptor
                in order to prevent warning log. uniqueId must be 16 bytes.
                (kfujino)
        fix 55119: Avoid CVE-2013-1571 when generating Javadoc. (markt)

    Other
        update Update Maven Central location used to download
                dependencies at build time to be repo.maven.apache.org.
                (kkolinko)
        fix 55663: Minor correction to the wording of the NOTICE files
                to align them with the requirements for NOTICE files.
                (violetagg)
        fix Add @since markers to the common annotations classes and
                fix a few specification compliance issues. (markt)
        update Update to Eclipse JDT Compiler 4.3.1. (markt)
        update Update the Apache Jakarta JSTL implementation used by
                the exmaples web application to 1.1.2. (markt)

(spz)

2014-02-06 12:01:09 UTC MAIN commitmail json YAML

Updated www/p5-Catalyst-Plugin-Static-Simple to 0.31

0.31  2013-09-09 16:30:00
        - Updated docs to reflect config key change from 'static' to
          'Plugin::Static::Simple' (RT#77709)
        - Migrated repository from subversion to git
        - Fixed MIME::Types 2.xx compatibility be removing call to an
          undocumented method
        - Bumped the MIME::Types requirement to 2.03 to ensure its
          improvements make it into Catalyst environments

0.30  2012-05-04 17:05:00
        - Add Cache-Control:public header
        - Optionally provide Expires header
        - Change configuration key to 'Plugin::Static::Simple' by default.
          The old 'static' key is still supported, but issues a warning.

(abs)

2014-02-06 11:58:17 UTC MAIN commitmail json YAML

Updated mail/p5-MIME-Types to 2.04

version 2.04: Thu Sep 12 15:46:28 CEST 2013
Fixes:
- one more localize $_ in ::Types::_read_db()
  rt.cpan.org#87856 [Gerda Shank]

version 2.03: Wed Sep  4 17:12:27 CEST 2013
Improvements:
- typo in docs, rt.cpan.org#88394 [Gregor Herrmann, Debian]
- require perl 5.8.8, because <:encoding [cpantesters]
- updated IANA
- a bit more DESCRIPTION

version 2.02: Sun Aug 18 12:49:23 CEST 2013
Fixes:
- localize DB and $_ in ::Types::_read_db()
  rt.cpan.org#87856 [Gerda Shank]

(abs)

2014-02-06 11:05:33 UTC MAIN commitmail json YAML

Updated www/p5-Catalyst-Plugin-ConfigLoader to 0.33

pkgsrc changes: distfile now apparently in 'gtar' format, not standard. annoying

0.33  Mon Jan 13 2014
  - Fix config loading so that if passed a directory including
    a . in the file name, then loading it as a directory works
    (would have previously tried to force a specific filename
    and failed)
  - More comprehensive tests

(abs)

2014-02-06 11:05:11 UTC MAIN commitmail json YAML

2014-02-06 11:02:12 UTC MAIN commitmail json YAML

Enable gssapi support.  Bump PKGREVISION.

(markd)

2014-02-06 10:57:21 UTC MAIN commitmail json YAML

Update to R 3.0.2

* The NEWS files have been re-organized.

  This file contains news for R >= 3.0.0: news for the 0.x.y, 1.x.y
  and 2.x.y releases is in files NEWS.0, NEWS.1 and NEWS.2.  The
  latter files are now installed when R is installed.  An HTML
  version of news from 2.10.0 to 2.15.3 is available as
  doc/html/NEWS.2.html.

* sum() for integer arguments now uses an integer accumulator of at
  least 64 bits and so will be more accurate in the very rare case
  that a cumulative sum exceeds 2^53 (necessarily summing more than
  4 million elements).

* The example() and tools::Rd2ex() functions now have parameters to
  allow them to ignore \dontrun markup in examples.  (Suggested by
  Peter Solymos.)

* str(x) is considerably faster for very large lists, or factors
  with 100,000 levels, the latter as in PR#15337.

* col2rgb() now converts factors to character strings not integer
  codes (suggested by Bryan Hanson).

* tail(warnings()) now works, via the new `[` method.

* There is now support for the LaTeX style file zi4.sty which has
  in some distributions replaced inconsolata.sty.

* unlist(x) now typically returns all non-list xs unchanged, not
  just the "vector" ones.  Consequently, format(lst) now also works
  when the list lst has non-vector elements.

* The tools::getVignetteInfo() function has been added to give
  information about installed vignettes.

* New assertCondition(), etc. utilities in tools, useful for
  testing.

* Profiling now records non-inlined calls from byte-compiled code
  to BUILTIN functions.

* Various functions in stats and elsewhere that use non-standard
  evaluation are now more careful to follow the namespace scoping
  rules.  E.g. stats::lm() can now find stats::model.frame() even
  if stats is not on the search path or if some package defines a
  function of that name.

* If an invalid/corrupt .Random.seed object is encountered in the
  workspace it is ignored with a warning rather than giving an
  error.  (This allows R itself to rely on a working RNG, e.g. to
  choose a random port.)

* seq() and seq.int() give more explicit error messages if called
  with invalid (e.g. NaN) inputs.

* When parse() finds a syntax error, it now makes partial parse
  information available up to the location of the error.  (Request
  of Reijo Sund.)

* Methods invoked by NextMethod() had a different dynamic parent to
  the generic. This was causing trouble where S3 methods invoked
  via lazy evaluation could lose track of their generic.
  (PR#15267)

* Code for the negative binomial distribution now treats the case
  size == 0 as a one-point distribution at zero.
* abbreviate() handles without warning non-ASCII input strings
  which require no abbreviation.

* read.dcf() no longer has a limit of 8191 bytes per line. (Wish of
  PR#15250.)

* formatC(x) no longer copies the class of x to the result, to
  avoid misuse creating invalid objects as in PR#15303.  A warning
  is given if a class is discarded.

* Dataset npk has been copied from MASS to allow more tests to be
  run without recommended packages being installed.

* The initialization of the regression coefficients for
  non-degenerate differenced models in arima() has been changed and
  in some examples avoids a local maximum.  (PR#15396)

* termplot() now has an argument transform.x to control the display
  of individual terms in the plot.  (PR#15329)

* format() now supports digits = 0, to display nsmall decimal
  places.

* There is a new read-only par() parameter called "page", which
  returns a logical value indicating whether the next plot.new()
  call will start a new page.

* Processing Sweave and Rd documents to PDF now renders backticks

* utils::modifyList() gets a new argument keep.null allowing NULL
  components in the replacement to be retained, instead of causing
  corresponding components to be deleted.

* tools::pkgVignettes() gains argument check; if set to TRUE, it
  will warn when it appears a vignette requests a non-existent
  vignette engine.

(markd)

2014-02-06 10:48:22 UTC MAIN commitmail json YAML

Updated databases/p5-Catalyst-Model-DBIC-Schema to 0.62

0.62  2014-01-06 12:32:27
        - Don't ship MYMETA.* files (RT#91808)
        - Stop using deprecated Class::MOP::load_module

(abs)

2014-02-06 10:42:40 UTC MAIN commitmail json YAML

Updated www/p5-Catalyst-Plugin-Session to 0.39

Revision history for Perl extension Catalyst::Plugin::Session

0.39 2013-10-16
      - Fixed a bug when "expiry_threshold" is non-zero, where changes to the
      session were not saved.

0.38 2013-09-18
      - New feature: "expiry_threshold" which allows you more control over when
      this plugin checks and updates the expiration date for the session.
      This is useful when you have high traffic and need to reduce the number
      of session expiration hits (like if you are using a database for sessions
      and your db is getting pounded).

(abs)

2014-02-06 10:40:46 UTC MAIN commitmail json YAML

2014-02-06 10:40:19 UTC MAIN commitmail json YAML

2014-02-06 10:40:10 UTC MAIN commitmail json YAML

Updated www/p5-Catalyst-Plugin-StackTrace to 0.12

Revision history for Perl extension Catalyst::Plugin::StackTrace

0.12    2012-07-12 15:13:00 BST
        - Convert from Class::Accessor::Fast to Moose (dakkar)

(abs)

2014-02-06 10:38:19 UTC MAIN commitmail json YAML

Updated www/p5-CatalystX-Component-Traits to 0.19

Revision history for CatalystX::Component::Traits

0.19 2014-01-13 10:03:31
    - remove newline from ABSTRACT

0.18 2014-01-11 15:54:11
    - convert to dzil

0.17 2014-01-02 13:32:00
    - Fix RT#91014

(abs)

2014-02-06 09:49:15 UTC MAIN commitmail json YAML

2014-02-06 09:41:08 UTC MAIN commitmail json YAML

no "--with-freetype-config" configure option now.

(obache)

2014-02-06 09:12:39 UTC pkgsrc-2013Q4 commitmail json YAML

2014-02-06 09:12:30 UTC pkgsrc-2013Q4 commitmail json YAML

Pullup ticket #4316 - requested by obache
multimedia/adobe-flash-plugin11: security update

Revisions pulled up:
- multimedia/adobe-flash-plugin11/Makefile                      1.24
- multimedia/adobe-flash-plugin11/distinfo                      1.22

---
  Module Name: pkgsrc
  Committed By: obache
  Date: Thu Feb  6 08:32:01 UTC 2014

  Modified Files:
  pkgsrc/multimedia/adobe-flash-plugin11: Makefile distinfo

  Log Message:
  Update adobe-flash-plugin11 to 11.2.202.336 for APSB14-04.

(tron)

2014-02-06 09:10:38 UTC MAIN commitmail json YAML

Updated sysutils/monit to 5.6

(obache)

2014-02-06 09:09:17 UTC MAIN commitmail json YAML

Update monit to 5.6.
PR pkg/48465 by ISIHARA Takanori.

Version 5.6

IMPROVEMENTS:

* SMTP AUTH LOGIN support added (MS Exchange SMTP authentication
  should now work).

* favicon.ico added to the HTTP interface.

BUGFIXES:

* If an undefined checksum test was used and the file did not exist
  on Monit start, Monit would return an error.

* If the configuration file ended with a comment but with no trailing LF
  character, Monit would return syntax error.

* If a service timed out after too many restarts and alert was used as
  the action, then the Timeout flag remained set even if the service
  recovered.

* SmartOS zone system memory usage report fix.

* Escape mail messages properly for sending via SMTP.

* Escape XML messages properly.

* Compilation: fix the configure script to support default compiler
  paths when searching for OpenSSL (fixes library search on multi-
  architecture  platforms like Debian and Ubuntu).

Version 5.5.1

IMPROVEMENTS:

* Info and debug messages are no longer sent to stderr, only to stdout.
  Thanks to Sergey Kirpitchev for initial patch.

* Improved output from 'check program', If the program returns an error
  message, include only that message in alert $DESCRIPTION so users can
  compose their own alert format. If program provided no output on
  error, use a default message.

* Improved "check system", $HOST can now be used as a service name.
  $HOST will expand to the system hostname. Example: check system $HOST

BUGFIXES:

* Fixed "Unable to read magic" which was reported on first Monit start.

Version 5.5

IMPROVEMENTS:

* check program:
        - Multiple exit values can be tested within single program check
        - Exit value test supports multiple cycles option ("for X cycles")
        - If exit value test matches and the stderr has no data, try stdout

  Example syntax:
    check program mytest with path "/usr/bin/mytest.sh" with timeout 1000 seconds
      if status == 2 then exec "/usr/local/bin/fix_script.sh"
      if status == 2 for 6 cycles then unmonitor
      if status == 10 then alert

* Renamed mail header (message-id and mime-version) to prevent
  triggering spam check of capitalization. Thanks to Ryan Lee
  for tips.

* The 'check system <name>' statement sets the system hostname in mail
  alerts and initial hostname in M/Monit.

* Increase the default mailserver timeout to 30 seconds.

* Add support for OpenBSD 5.x

BUGFIXES:

* Fix the rare hung on linux which may occur during program execution.
  Thanks to Nick Upson for report.

* In the case that the process start/restart execution failed,
  monit kept "Execution failed" flag even if the process was
  recovered later (for example it was starting slowly or manually
  recovered).

* Fix the mail alert (strict SMTP implementation) to pass
  MTA-side sanity checks like postscreen. Thanks to Len Conrad
  for report.

* The -t option tests the configuration file syntax even if the
  file permissions are wrong. Thanks to Adam Nielsen for report.

* Do not display the default non-existence test for the check
  program (not applicable in the check program context).

Version 5.4

IMPROVEMENTS:

* New process uptime test added. Allows to do some action in
  the case that the process uptime matches the given limit.
  For example to restart the process once per 3 days:
    if uptime > 3 days then restart

* Linux uCLibc support: use internal getloadavg implementation
  in the case that the system libc doesn't implement it.

BUGFIXES:

* The monit hostname will fallback to plain machine's hostname if the
  lookup for FQDN hostname didn't found matching entry. The problem
  was, that based on the order in the /etc/hosts the FQDN lookup
  returned sometimes 'localhost' instead of the FQDN hostname.

* The CPU usage for multi-threaded processes on multi-core machine was
  reported incorrectly in the case that the process used more CPU
  resources then equivalent to one core. Thanks to Tom Pepper for patch.

* The content match test now sends one event per cycle and pattern.
  Even if there are multiple lines matching the same pattern, only
  one event will be generated. Also the event rate is fixed now, so
  it is possible to require match for X cycles before generating the
  event.

* The /proc/ files content match test was skipped, as the file size on
  the procfs is 0, so monit supposed that there is no content to read.

* FreeBSD: If the monitored process had children with multiple threads,
  the total memory usage was reported incorrectly. Thanks to Phil Kulin
  for reporting the problem.

* Allow reading status and perform Monit actions when using client SSL
  certificate. Previously, if Monit http server was setup to use ssl
  and a client cert, status and action failed. Thanks to Markus Linnala
  for initial patch.

* When the process is starting/stopping, do the process state check more
  effectively to not stress the low power devices with aggresive polling.
  Thanks to Thomas Petazzoni for initial patch.

* Make the process start/stop wait resistant to large time changes.

* Compilation: If PAM is enabled but the PAM headers or library are not
  found by the configure script, it will report error.

* Cross-compilation: the configure checks the setjmp and vsnprintf with
  test program which usually cannot be executed when cross-compiling
  for other architecture. The configure script now takes the following
  arguments which allow to specify whether the setjmp works on this
  platform and whether the vsnprintf is C99 compliant. Thanks to
  Thomas Petazzoni for patch.
        ./configure \
                libmonit_cv_setjmp_available=[yes|no] \
                libmonit_cv_vsnprintf_c99_conformant=[yes|no]

* Manual page language fixes. Thanks to Jonathan Boulle for patch.

Version 5.3.2

BUGFIXES:

* Fix bug #34801: The file content match test did reset of the
  read position in the case that the unmonitor or stop action
  was done. When the file monitoring was enabled again, the
  content match test was applied to the content which was
  tested already.

* Log error details in the case that the name resolving failed.

* Fix the system cpu usage statistics when pattern based process
  check is used and the service is restarted. Thanks to Wayne
  Lawrence for report.

* AIX 6.1 compile fix. Thanks to Benedikt Wegmann for patch.

* Debian Bug#652715: "include files not found" warning. Do not
  display the warning if the include directory is empty.

Version 5.3.1

IMPROVEMENTS:

* Log the particular connection attempt failure in debug mode
  when the retry is enabled.

* Monit can deliver events and status to independent M/Monit
  instances if multiple mmonit URLs are set:
      set mmonit https://user1:pass1@mmonit1/collector
                https://user2:pass2@mmonit2/collector

BUGFIXES:

* The ICMP echo (ping) test may report false positive error
  if the machine where Monit is running has heavy ICMP
  traffic generated by other applications.

* The file content match test will be performed even on the
  existing content when Monit starts. The last position is
  saved to the statefile, so monit won't generate alert
  after restart. Note that when you start the monit 5.3.1
  the first time, it can do actions for content match which
  was handled by previous monit version already as the
  previous monit versions didn't saved the position.

* Make the monitoring state persistent for manual mode services.

* Display the memory usage total % in the status overview.
  The memory usage in kB displayed the total already, so the
  percentage didn't match.

* Fix the HTML overview page alignment in the Internet Explorer.
  Thanks to Darhl Thomason for patch.

* Extend the SSL library search path for Debian Sid.

* Fix Solaris 10 compilation and Sun Studio support.

* Fix sporadic SSL routines:func(169):reason(161) errors

* If MySQL protocol test failed, report the correct MySQL
  error code. Thanks to Vitaly Lipatov for patch.

Version 5.3

* New 'check program' statement added. Allows to check the exit
  status of an external program or script from Monit.

* Added crontab style support for individual services. You can
  now specify when an individual service should run its checks
  (or not run). You can now, for instance, specify that apache
  should be checked continuously, except between 1AM-5AM on
  Sunday.

* Connection retry option added. Allows to retry a network
  connection in the same testing cycle before reporting an error.

* Detailed protocol connection errors are now included in alerts.

* The HTML overview page displays the CPU and memory total now
  (including children), so real service related usage is displayed
  also for services which spawn worker processes, such as Apache
  or Spamassassin.

* HTML view improvements

* Fix MySQL protocol test: MySQL 5.5.12 returns new error code in
  the case of authentication failure.

* Fix Debian bug #621047: monit fails to build after SSLv2 removal

* Fix crash on Solaris which may occur if the system load is zero.
  Thanks to Paul Sun for report.

* The stacktrace logging on error is disabled in -v (verbose) mode
  as it was too verbose for common service debugging tasks, it can
  be enabled using -vv option.

* Improve how fast Monit check if a program was started or stopped.
  Thanks to Michael Renner for patch.

* Fix the monitoring state presentation during service restart which
  temporarily displayed "Not monitored", whereas the monitoring was
  enabled.

* The "data collected" is updated only if the check was not skipped.

Version 5.2.5

* Fix process match check - when the monitored process failed and
  was restarted by Monit, Monit didn't recognized  it is  running
  after the restart and reported  start failure (similar on stop).
  Thanks to  Kenichi Futatsumori for report and  helping to root
  cause the problem.

* Fix Debian #617259: symbolic links in the filesystem check doesn't
  work.  Thanks to Sergey B Kirpichev for report.

* Fix Debian bug #614984: smtp protocol test issues both EHLO and
  HELO.  Thanks to Sergey B Kirpichev for report.

* Fix bug #32583: Multiple SIP OPTIONS messages use the same header
  data.  Thanks to Hugh Waite for patch.

* Try harder to get FQDN hostname for the host where monit is running.
  The hostname in the $HOST variable which is used in the mail sender
  may thus change. Thanks to Sergey B Kirpichev for patch.

* AIX: Fix the time display which was off by GMT difference. Thanks
  to Helen Chen for report.

* AIX: Fix the M/Monit heartbeat. Thanks to Helen Chen for report.

* Support symbolic link to monit configuration file.

* Fix crash when monit daemon start delay option was used and monit
  was signalized to stop before the start delay passed. Thanks to
  John Schult for report.

Version 5.2.4

NEW FEATURES AND FUNCTIONS:

* Added the "procmatch" CLI command which allows for easy testing
  of pattern for process match check. The command takes regular
  expression as an argument and displays all running processes
  matching the pattern. Example usage:
      $ monit procmatch "iChatAgent"

* Set the default log file mask to 0640 (originally it was 0664).
  Thanks to Sergey B Kirpichev.

* Reduced monit memory footprint by ca. 10%.

BUGFIXES:

* FreeBSD, NetBSD, OpenBSD, MacOSX, Solaris filesystem check fix:
  If block/character device was used in the filesystem path instead
  of mountpoint, monit reported usage of wrong filesystem.

* NetBSD filesystem check: Fix space usage report.

* Fix memory usage monitoring in OpenVZ VPS 2.6.32 virtual hosts.
  Thanks to Kelly for report.

* If the protocol test failed, show the request in the event. Thanks
  to Marco for report.

* Randomize the mail message id to prevent duplicates in the case, that
  the same hostname is used on multiple hosts running monit and messages
  are generated in the same second in parallel. Thanks to Sergey B
  Kirpichev.

* Spelling fixes. Thanks to Sergey B Kirpichev.

Version 5.2.3

BUGFIXES:

* Mysql protocol test supports mysql 5.5.x and newer now.

Version 5.2.2

BUGFIXES:

* Fix crash on MacOSX

* ICMP echo test (ping):
    - bug #31128: do not log error if different response type is received
    - bug #31129: do not require root to use ping test. Privilege to create
      raw socket is still required, but on some platforms such as Solaris it
      can be granted to non-root users too. If the user has no permission to
      perform ping, monit will skip the icmp test and log message (in debug
      mode only).

* rsync protocol test:
    - wait for full server response and verify exit was received
    - bug #31249: send full version to rsync server. Thanks to John Hall
      for report

Version 5.2.1

BUGFIXES:

* HTTP and URL protocol tests: Fixed a problem where HTTP protocol
  tests using a specific request always failed. This bug may also
  affect URL tests. The problem was caused by faulty URL encoding. In
  the process of fixing this bug the new feature that allowed slash in
  service names has been reverted and instead will be added in a later
  release.

Version 5.2

NEW FEATURES AND FUNCTIONS:

* Added support for monitoring processes without pidfile using pattern
  matching. You can use POSIX regular expressions or string matching
  process name with arguments as provided by the 'ps' utility. If the
  pattern matches multiple processes, the first match is used.
  Example:
      check process debian
            matching "/usr/lib/vmware/bin/vmware-vmx .*deb.vmx"

* Added support for swap monitoring. Example:
      check system myserver
          if swap usage > 25% then alert

* Allow to override the default action when service doesn't exist. The
  default action is restart, it can be customized with following
  statement:
    if [does] not exist [[<x> times within] <y> cycles] then <action1>

* Monit automatically registers credentials with M/Monit now, so it's
  not necessary to set it manually in M/Monit anymore. To disable
  credentials registration:
    set mmonit https://monit:monit@10.0.0.1:8443/collector
        and register without credentials

* Added memcache protocol test. Thanks to S辿bastien Debrard for the
  patch.

* Added openssl FIPS to Monit httpd. Thanks to Lior Okman for the
  patch.

* The 'check system' can now use start/stop program statements too.

* Added the option to set the "Reply-To" mail header in mail-format.

* Display backtrace on error if debug mode is enabled (requires
  backtrace support in libc)

BUGFIXES:

* Show real process uptime - formerly the presented uptime was based
  on create and modify timestamp of process' pidfile which provides
  invalid uptime if the pidfile is replaced and process keeps running
  with original PID. Thanks to Nima Chavooshi for report.

* When user triggered action for some service (such as stop) and
  before that action completed user triggered another action for the
  same service (such as start), the second action has been ignored.
  Monit will not accept new action and return temporary error until
  the previous action completed.

* If process resource usage gathering failed, retry next cycle as the
  error can be temporary.

* Fixed sporadic failures when SSL was used.

* ICMP echo test (ping):
    - fixed sporadic false positive/negative
    - removed limit of 20 pings per cycle

* DNS test:
    - accept NS root request refusal as correct response because
      server reacts on request
    - accept authority answer as alternative to record. Thanks to
      Nick Osborn for patch

* RADIUS test fix. Thanks to Alan DeKok for patch.

* M/Monit heartbeat is fully independent of testing cycle now to
  prevent false positive when service test blocks.

* Fixed SMTP STARTTLS protocol, required for servers that adhere
  strictly to RFC 3207 4.2. Thanks to Lorenzo A. Sedano Cadinanos for
  patch.

* Service name:
    - allow the service name to start with "/"
    - fixed handling of the service names which contain "/" in the
      name in Monit web interface. Thanks to Artyom Khafizov for
      patch.

* When 'check system' is not defined, monit adds it automatically
  using hostname for service name. If existing service was defined
  with the same service name (matching hostname), monit didn't added
  the entry and reported confusing error message pointing to the end
  of configuration file. Thanks to Thorsten Kampe for report and help.

* Remove extra NL characters from message when resource succeeded
  event is sent. The extra NL character may break the mail headers.
  Thanks to Hanno Boeck for patch.

* Fixed display of cpu user/system/wait usage which temporarily
  displayed -1.0% between two monitoring cycles while cpu monitoring
  was initializing. Thanks to Marcus Muelbuesch for report.

* Fixed display of port response time as -1 if 'monit status' was
  called in the middle of service test.

* Fixed display of service initializing state after monit start or
  reload.

* Fixed MONIT_DESCRIPTION environment variable. Thanks to Marco
  Roeland for patch

* AIX:
    - fixed compilation
    - fixed system load average monitoring
    - fixed ICMP echo test

* Mac OS X:
    - allow monitoring of system-wide load average, cpu and memory
      usage even if
      Monit is running as non-root user

* NetBSD:
    - fixed ICMP echo test

Version 5.1.1

BUGFIXES:

* Fix FTP protocol test. Thanks to Axel Reinhold for report.

* Fix the HTTP protocol test's hostheader option which was added in 5.1.
  Thanks to Naoya Nakazawa for report.

* Removed warning about missing system service check. Missing system service
  check is not error and it shouldn't be reported as such.

* Fix manual page formating. Thanks to Stefan Alfredsson for report.

Version 5.1

NEW FEATURES AND FUNCTIONS:

* It is now possible to define any action for the restart timeout rule.
  Multiple restart timeout rules can also be defined. Example:
      if 3 restarts within 5 cycles then exec "/foo/bar"
      if 8 restarts within 10 cycles then unmonitor

* Service can be added to multiple groups. Thanks to Brad Gessler
  for suggestion. Syntax:
    check filesystem wwwdata with path /www
      group www
      group filesystem

* Added GPS protocol test. Thanks to Sebastien Debrard for patch.

* Added RADIUS protocol test. Thanks to Alan DeKok for patch. Example syntax:
    check process radiusd with pidfile /var/run/radiusd.pid
      start program = "/etc/init.d/freeradius start"
      stop program = "/etc/init.d/freeradius stop"
      if failed
          host 127.0.0.1 port 2000 type udp protocol radius secret testing1234
      then alert
      if 5 restarts within 5 cycles then timeout

* The HTTP protocol test now supports a hostheader option which allows to
  override Host header in HTTP request. It can be used for example
  to test a farm of HTTP servers by IP addresses and to set specific
  Host header. Thanks to Brady Catherman for patch. Example:
    if failed host 192.168.1.100 protocol http hostheader "example.com" then alert

* If an error occur during Monit command-line execution, report the error
  and exit with 1, so it is possible to react if Monit is used from a script.
  On success, 0 is returned as usual. Previously, Monit always exited with
  0 even if an error occurred.

* Do not require SSL version type when specifying SSL communication with M/Monit
  (SSL version is set to auto).

* If the Monit http interface failed to start, provide more details about
  the reason.

BUGFIXES:

* Support resource monitoring (cpu usage, etc.) when Monit is running
  inside virtual environment. Tested on:
      - FreeBSD jail
      - Solaris zone
      - Linux Vserver

* Fix #26752: inside Solaris Zone, Monit failed to detect children
  and computed host memory wrong

* On Solaris, FreeBSD, NetBSD and OpenBSD, Monit no longer needs to run as root user
  in order to be able to watch process resource usage (cpu and memory).

* Send heartbeat to M/Monit even if Monit is busy in a long testing cycle to prevent
  false alerts about non-responsive Monit agent.

* Fixed SMTP protocol test which may sometimes incorrectly
  report ESMTP protocol failure. Thanks to Axel Reinhold for
  report.

* Fixed content match check which reported only first
  match during the same cycle. Thanks to Pavel Shevaev for
  report.

* Allow for the use of complete SSL certificate chains.
  Thanks to Lawrence Tan for patch.

* Added support for multiline greetings to FTP protocol test.
  Thanks to Giovanni D'Cristina for report.

* Fix Debian Bug #541139: uses gethostbyname() and thus does
  not work with "options inet6" in /etc/resolv.conf. Thanks to
  Michael Stapelberg for patch.

* If Monit configuration allowed http interface access for a read-only
  user and it was specified as the first allow entry, Monit command line
  commands failed because it used the read-only account so commands
  like start, stop, etc. were rejected. Monit will now use full access
  regardless of allow option order. Thanks to Thorsten Kampe for report.

* Passive monitoring mode fixed. Thanks to Nelson Vale for report.

* Fixed #27784: wait_start/wait_stop can advance too quickly.
  Thanks to Randy Puro for report.

* Solaris resource usage fixed when Monit was compiled with optimizations enabled.

* Fixed #28369: escape XML properly

* Check service name uniqueness when 'check system' is missing in monitrc and virtual
  system service with name set to local hostname is added. Thanks to Marcus Muelbuesch
  for report.

* Fix crash when queued event delivery was retried for service which was no longer
  configured in Monit.

Version 5.0.3

BUGFIXES:

* Fixed #26664: crash on service timeout or unmonitor action
  (introduced in 5.0.2). Thanks to Bretislav Kubesa and
  Michael Shigorin for report.

* Removed the configure --without-resource option. If the user
  who is running Monit doesn't have permissions to check the
  processes state, the related checks are disabled dynamically.

Version 5.0.2

BUGFIXES:

* 35 improvements based on code scan with Klocwork
  (http://www.klocwork.com/) which we were evaluating.
  Huge thanks to Klocwork for their great product.

* Fixed #26382: if start or stop script for some service didn't
  exist, monit logged error during configuration file parsing and
  refused to start. Monit now just logs warning and continues.

Version 5.0.1

BUGFIXES:

* Fixed a bug where Monit did not stop logging succeeded events.
  This bug occurred if PID, PPID, timestamp or size change tests
  were used and failed and then succeeded again.

Version 5.0

NEW FEATURES AND FUNCTIONS:

* M/Monit support added. If you run Monit on more than one
  server, you can use M/Monit to manage and control all your
  Monit enabled servers from one simple Web Interface. See
  http://mmonit.com/ for details.

* Support use of symbolic links in filesystem check. Thanks to
  Aleksander Kamenik for suggestion. Example:
    check filesystem rootfs path
        /dev/disk/by-uuid/4ef973f7-67d1-4bb0-8223-cb1c692b72e4
      if space usage > 95% then alert
      if inode usage > 95% then alert

* If no 'set mailserver' was defined in monitrc, Monit tried to
  fallback to localhost:25 SMTP server. This fallback was removed
  since it may be confusing. If you want to deliver mail alerts
  from Monit, the 'set mailserver' option is necessary. In case
  it is missing, Monit will log appropriate error and hint to add
  it.

* The generic send/expect protocol test limited the expect input
  to 256 bytes. It's possible to set the input buffer for expect
  globally - for example: set expectbuffer 20 kb Thanks to Asil
  Carlin for suggestion.

* The following event types were added CONTENT, FSFLAGS, PID and
  PPID and the following generic event types CHANGED and MATCH were
  removed and replaced by the above types and with the existing SIZE,
  CHECKSUM, TIMESTAMP events so the information is more specific
  The event types are internal to Monit and unless you have used
  either CHANGED or MATCH event in your alert filters, no change
  is necessary (alerts are delivered as usual, the tests just use
  different types internally).

* Monit now generates a unique id on first start and store the id
  in a permanent file. This id is used in protocol communication
  between Monit and M/Monit to pair a Monit instance with it's
  host entry in M/Monit. By default the id file is placed in
  $HOME/.monit.id. The location can be changed by using the set
  idfile statement, for example:
    set idfile /var/monit.id

* Monit now keep its service monitoring state even on Monit
  restart. Previously Monit dropped the state when it was stopped
  correctly. Services in manual monitoring mode will remember the
  monitoring state across Monit restarts. If Monit is used in a
  cluster, it is recommended to place the state file in a
  temporary filesystem incase the primary machine will crash and
  the the spare machine takeover, the state will be dropped on
  reboot for the crashed machine and the services in manual
  monitoring mode won't be started on reboot. For example the
  "set statefile /tmp/monit.state" can be used to place the state
  file in the /tmp/ filesystem.

* Added a protocol test for testing the LMTP protocol. Thanks
  to Fco. Javier Felix for patch.

* Added the start delay option for daemon statement which allows
  to pause Monit on its startup for a while. If monitored
  services are started by init scripts in parallel on system
  boot, Monit may be too fast and detect that the service is not
  running (yet) and restart the service. Note that it's still
  recommended Monit is setup to be responsible for service
  startup (that is, don't use init to start Monit controlled
  services, instead use Monit). This will ensure correct startup
  without need for a start delay since Monit will have full
  control of service startup. Many users start services from init
  on boot anyway, so in such cases this option will solve their
  problems. Default start delay is 0 which corresponds to the
  current behavior. Example syntax which will make Monit wait one
  minute before starting its first monitoring cycle:
  --8<--
    set daemon 5 with start delay 60
  --8<--
  Thanks to Fco. Javier Felix for patch.

* Added PAM support for Monit http interface authentication. Note
  that PAM is not supported on all platforms - currently works on
  Linux, Mac OS X, FreeBSD, NetBSD. Monit uses the PAM service "monit".
  Here is a Monit PAM service example for Mac OS X which is able
  to authenticate system users for Monit access -
  /etc/pam.d/monit:
  --8<--
    # monit: auth account password session
    auth      sufficient    pam_securityserver.so
    auth      sufficient    pam_unix.so
    auth      required      pam_deny.so
    account    required      pam_permit.so
  --8<--
  And configuration for monitrc which allows only group admins
  to access the http interface:
  --8<--
    set httpd port 2812 allow @admin
  --8<--
  See the PAM manual page for details on how to configure the PAM
  service on your system and the available PAM plugins. Thanks to
  Wilhelm Meier for patch.

* Added more detailed reports for Monit resource tests on service
  recovery. Thanks to Lars Kotthoff for patch.

* Set locale to C.

* Added a protocol test for testing the SIP protocol which is
  used by popular communication servers such as Asterisk and
  FreeSWITCH. We received two patches for this protocol and have
  taken code from both and merged them. Many thanks to Bret
  McDanel and to Pierrick Grasland for supplying the patches.

* Added MONIT_DESCRIPTION to the list of environment variables
  available to programs started by monit. Thanks to Morten
  Bressendorff Schmidt for patch.

* If a service group is specified for Monit CLI action,
  Monit no longer requires the "all" verb, so the following
  command is possible:
    monit -g web stop
  If group is not specified (i.e. the -g option is omitted), the
  service name or "all" is still required as a safeguard.

* Added an option to the 'set mailserver' statement so it is
  possible to override the hostname used in SMTP EHLO/HELO and in
  the Message-ID header when sending mail. Monit defaults to use
  the localhost name. I.e. what you get when executing this
  command 'uname -n'. Overriding the host name can be useful if
  the host does not have a DNS entry and if the receiving
  mailserver uses DNS verification as spam protection. The new
  override option is:
  set mailserver foo.bar.baz using hostname "my.monit.host"

* A new Event_Action type was added which reports actions
  performed on Monit's administrator request (either via web
  interface or CLI). If you don't want to received these events,
  you can set the mail-filter for "action" event type.

* NOTA BENE: Monit start action is synchronous now. This improves
  the startup sequence for dependent services, since Monit will
  wait for parent service to start before trying to start the
  child.

* It is now possible to define execution timeout for start and
  stop commands. That is, how long Monit will wait after
  executing a command before it assume execution failed. If the
  timeout option is omitted, Monit defaults to 30 seconds. You
  can override the timeout for example for services which are
  starting slower.
  Example syntax:
    start program = "/bin/foo start" with timeout 60 seconds

* The event passed state is renamed to succeeded as this name
  more reflects the state of things.

* The device service test is renamed to filesystem.

BUGFIXES:

* Some linux virtualization platforms report CPU count as 0.
  Monit then dynamically disabled CPU usage monitoring. In such
  case we now override the CPU count from 0 to 1 so resource
  usage monitoring can continue. Thanks to Jenny Hopkins for
  report.

* Increased the server socket backlog queue which will make Monit
  able to handle more services. Thanks to Jochen Kramer.

* Fixed #24866: Email messages such as: cpu wait usage check
  succeeded [current cpu wait usage=17.4%] were displayed as
  "...usage<SOMEGARBAGE>.4%". The problem was incorrect transfer
  encoding header in the email (the body itself was OK). Thanks
  to Dave Cheney for report.

* When a Monit shutdown requested was issued while Monit were
  working and testing services, Monit did not shutdown until all
  work were done, i.e. until all services were tested. Monit will
  now shutdown faster - as soon as it finish testing the current
  service.

* Monit blocked/unblocked SIGTERM, SIGINT SIGHUP and SIGUSR1
  signals during operation to protect certain code sections. When
  a signal was sent during such a time, for example to stop
  Monit, it was dropped and had to be retried in order to stop
  Monit. This limitation is now removed and signals will be
  processed at any time. Thanks to Nicola Tiling for report.

* If the Monit httpd allow option did not include a
  user:password, Monit CLI logged the following error (even if
  the action was performed anyway):
    Cleartext credentials needed for basic authorization!
  This error was false - even access restriction based on
  host/net is sufficient - user and password is just one of
  possible options (not requirement). Thanks to Gilad Benjamini
  for report.

* Allow localhost as a value for the host header in the http
  protocol test instead of setting an empty host header and let
  the http server decide

* The 'if changed checksum ...' test can now be used even if a
  monitored file doesn't exist at Monit startup. Thanks to Joe
  Shang for report.

* If both event handlers (M/Monit and mail alerts) temporarily
  failed at once and event queue was enabled, events will be
  stored in the queue and delivered in the next cycle. However, a
  bug caused delivery to be retried for every cycle for both
  handlers if just one of them was recovered. Monit could then
  deliver the same message multiple times until both handlers
  recovered. The problem is now fixed and only one copy of the
  event is sent even if only one handler did recover.

* Make unit in size test optional and default to byte unless
  specified. So it is possible to write, if size > 1000 then ..

* Fixed handling of invalid input files in event queue handler.
  Thanks to Fco.Javier Felix for patch.

* Set the content type to text/html for Monit web interface POST
  responses. Thanks to Rich Drummond for patch.

* Fixed #23530: configure script will return error if bison,
  byacc or yacc are not found at Monit compile time.

* Fix CPU and memory monitoring on Solaris (it was disabled on
  Monit start)

* AIX fixes and extensions, Monit should run on AIX without
  problems, including cpu, memory and filesystem monitoring
  (tested with AIX 5.3). Thanks to Brian Downey for support
  and help.

* HP-UX fixes and extensions, Monit should run on HP-UX without
  problems, including cpu, memory and filesystem monitoring.
  Thanks to Brian Downey for support and help.

* Fixed #23467: Don't exit, only issue a warning if the "include"
  statement did not find any files to include.

* Fixed #23530: Event queue did not work with the default
  unlimited slots.

* Fixed #23617: The process cpu usage is initializing in the
  first cycle so the value is set to 0% - if the 'cpu usage <
  xyz%' test was used to check that the process usage is higher
  then given level, it was always true. Monit now skips the
  process cpu usage check in the first cycle.

* Make sure Monit alerts has a unique message id. Thanks to Steve
  Purcell for report

* Fixed possible crash when Monit is watching VPS environment on
  Linux which reports number of CPUs as 0. Thanks to Marius
  Schmidt for report.

* Cleanup event states during a service stop/unmonitor so old
  events are not sent when the service is started/monitored again.

* Fixed #21989: Monit could start two instances of the process
  when service restart is performed and the process is starting
  slowly. Thanks to Nick Upson, Aaron Scamehorn and David Greaves
  for report.

* Fixed #21550: Fix crash when Monit event queue contained an
  empty file. Thanks to Douglas J Hunley for report.

* Fixed possible crash when the 'if changed checksum' test was
  used along with restart action. Thanks to Brian Candler for
  report.

* Fixed #22075: Allow using a mail address as username when using
  SMTP authentication.

* Fixed #22191 and #19823: If the file content test does not match
  anymore, reset the service error state. (Previous versions did
  not clear the error state and kept showing a match in the status
  listing and in the http interface).

* The 'if changed size ...' test can now be used even if the
  monitored file does not exist on monit's start.

* If a htpasswd file is used to control Monit http interface
  access and the hash type is set to MD5 but the file contains
  wrong format (non-MD5), report the error and keep running.
  Formerly Monit exited with an assert exception. Thanks to
  Adrian Bridgett for report.

BACKWARD INCOMPATIBLE CHANGES:

* The current CPU usage test which checked the cpu usage of the
  process itself plus the cpu usage of child processes was
  renamed to TOTALCPU (otherwise it works the same). The new CPU
  usage test checks the CPU usage of the process itself only.
  This change was introduced to align the syntax with MEMORY and
  TOTALMEMORY tests and to allow to test the CPU usage of
  processes which fork child processes but the user don't want to
  include children (such as Mythtv). Users who are using the CPU
  check for services like Apache webserver to watch total cpu
  utilization (including children) should rename the CPU
  statement in their configuration to TOTALCPU.

(obache)

2014-02-06 09:02:48 UTC pkgsrc-2013Q4 commitmail json YAML

Bump package revision. Requested by OBATA Akio in ticket #4314.

(tron)

2014-02-06 08:32:11 UTC MAIN commitmail json YAML

Updated multimedia/adobe-flash-plugin11 to 11.2.202.336

(obache)

2014-02-06 08:32:01 UTC MAIN commitmail json YAML

2014-02-06 08:17:57 UTC MAIN commitmail json YAML

Updated security/ap-modsecurity2 to 2.7.7

(obache)

2014-02-06 08:17:42 UTC MAIN commitmail json YAML

Update ap-modsecurity2 to 2.7.7.

17 Dec 2013 - 2.7.7
-------------------
Fixes:

- Changed release version to 2.7.7
- Got the configure scripts inside the release tarball

16 Dec 2013 - 2.7.6
-------------------
Improvements:

- Organizes all Makefile.am - 1cde4d2dd9d96747536c1c25d06ba0677069477f
  Now using one file per line (sorted). This is the better way to handle it, since it reduces the possibility of merge conflicts.

- nginx: generates config file using configure input. - 351b9cc357d439e30ebd61d89a9e38ecf55c6827
  The nginx config file was looking for depedencies by its own, by doing that it was ignoring the options that were passed to configure script. This commit deletes this config file and adds a meta-config which is populated by configure whenever the standalone-module is enabled.

- nginx: adds lua support - da16d9e5d51d4ef8734687514a4e1368e7fb4284

- iis: Cosmetics fixies on sqli. - 5046c8327ea21c69b4c0d0c0057c692b05b09fef
  This is needed to get it compiled with VS2011 on Windows8

- Regression tests: makes configuration compatible with 2.2 and 2.4 (try 2) - ae252ee8767069363906e5a611dff487b799b839

- nginx: Trying apxs and apxs2 while compiling nginx module - 65d9272fdc353e1263567b60604542d377d19672

- nginx: Trying apxs and apxs2 while compiling nginx module - 35fd75d859e4a8873b8843da1db13e04a1b08140

- macos: Using glibtoolize instead of libtoolize - 751a9f4e45213cd69f00c62c71edc9d7ad99b82d

- regression-tests: makes configuration compatible with 2.2 and 2.4 - 6fc4cac37ab1be8d1232140042b58fe4bd93ee17

- Regression test: get it working with apache 2.4 - e9813cd0d9bfc5b0c9aa5832634ec1b39b805108
  Changes in httpd.conf.in to get it working with apache 2.4

- Code cosmetics. - 7366f35c1d80772d739b35da8faa972f92a72b97
  Changed to reduce the number of possible fails during Build Bot compilation.

- iis: Waiting for 5 seconds before move curl directory - 9bf2959c919587ebc63f5a1b8c0785da8927bff5
  Testing buildbot.

- Redefines unixd_set_global_mutex_perms on tests - f70f6f4281b806627e0cf0dbb9c84ae5864bdb16
  Avoding conflicts with the standalone implementation

- Adds verbose quality check - 388943440cc9b8c6fdea09f5e365a2e5a3e792e2
  Vera++ and ccpcheck are not outputing to the stderr instead stdout allowing the buildbot to extract some numbers about it.

- Adds support for coding style and quality check - b77e90152d119609ac78a7028383c3b79898b2cf
  Initial effort to get the code on shape. This will be executed by the buildbots as soon as they get ready for it.

- iis: New improvements on the Wix installer - 2ea5a74a7bfb00f21312e51e48aa6dac03d84600
  * Now the installation is divided in modules: ModSecurity and CRS.
  * Added default configuration
  * Configuration was moved to "Program Files" folder
  * Build_msi script now using candle available in %PATH%

- iis: Removes the installer helper dependency - 1a12648c9f6028f251af0f03c889397c7954b74c
  Now using appcmd directly with WiX instead of calling the installer helper.

- iis: Remove readme.html - 550d5aae21cba696cac1ce75ab8113e5255d5a59
  This HTML is about "Creating a Native Module for IIS7" not straight related to ModSecurity itself.

- iis: Adds batch script to compile Wix - a2c5fc831baf0b324ebb66b0f878dacf1ec2f808
  This batch script can be used to generate our msi installer.

- iis: Adds Wix installer resources - 3604763e15a665eb7a6ecae1f7e7c65cebbb1d17
  This is all about cosmetic changes.

- iss: Removes Post-Build event. - 28bbde1bb218b004654cb865fc8563d69b848dc2
  There was a copy on Post-Build event using a hard coded path. This patch removes this Post-Build event.

- iis: Relative paths on the VS project file - 368617ddb2443f9b6036f80a648d467d07c9a054
  There are a ModSecurityIIS solution and project files, those were using hard coded paths to meet the dependencies. As consequence of the last update in our build scripts, now we are able to built the dependencies and load it to our Visual Studio project using relative paths.

- iis: Adds release script - 9477118903861ce80c4c27cb581bf3462315e98e

- iis: fixies the Installer.cpp coding style - 79875b1af8e8571098345b91557bab9c06eb7c88

- iis: Removes AppWizard remade file - 91738f93bcc82b6ab756c550a66b6cf6af2fa9f8
  Apparently the AppWizard was used to generate part of this Installer, the ReadMe.txt created by the AppWizard was removed by this commit

- iss: Removes pre-compiled headers - adfbeb85dcfa9466b72eebb8d1bd8eb7728bab79
  No need to use the pre-compiled headers in InstallerHelper, removing it, in order to keep the project lean.

- iis: Moves installer to InstallerHelper - 6adf25667dd4bfa33010bd6d8ae3d35046a69967
  To organize the folder the Installer application was renamed to installer helper. It is not the real installer, it is just an helper which is executed during the installation phase.

- iss: Removes fart dependencies - 8c3b8d81b613aaa38f28472af1eb26c90c7fc9da
  This commit removes the dependency of the fart.exe utility. The utility was responsible to rename contents inside some dependencies build files. Those modifications are not longer needed.

- iss: Better err handling in build scripts. - 192599bf63b6ae5aa08e4536a90d5d0a17f969f7
  Now checking for errors in every step of the build phase

- iis: Moves build_module.bat to build_modsecurity.bat - e25c6b2e85ced7beba4d41867dbdf30e9c1286d3
  The build_modsecurity.bat is now on the iis sub-directory, not in the dependencies anymore. Its content was also changed fixing all the paths.

- iis: Identifies arch before unzip apache - cf5de78dfb9fffd21edf17af9e1db8f2fd83c804
  Currently we need the Apache binary which could be used in 32 or 64 bits. This patch makes usage of 'cl' to identify which architecture is set.

- iis: Renamves winbuild to dependencies - 1447766e816a896e88c9c8f053fcc3f62797bac1
  Since the directory becomes all about dependencies there is no need to call it winbuild anymore.

- iis: Removes unnecessary files from winbuild dir - 9f8cbf6ed8034ba42aa4967699308df09864fd18
  Those .mak files seems to be part of an old build system. Since the script are now working fine, this commit removes all those .mac files and also a CMakeList.txt and the Makefile.win.

- iis: Improves the iis build system - b277e538f28c87c81c1b50925dd8b82996b88294
  Now checking for common errors while building. Refactoring on the build scripts, now there is this build_dependencies.bat script on the iis sub-folder. By calling this script all the dependencies should be build under the winbuild/. This commit also removes build scripts that were not needed anymore.

- iis: Fixes the vcxproj file - a946a163f0ad822c760af80ca32dda61f0e6b2a9
  Versions of the dependencies were changed, as long as the version of the Visual Studio, now 12.

- iis: Removes unecessary files from the build system - 26738d2e34bcc7620047bd23180e0e26a64c71ee
  The following files were removed:
  * VCVarsQueryRegistry.bat
  * vcvars64.bat
  * vsvars32.bat
The visual studio files can be called direcltly, not necessary to distribute those files, at least in VS12.

- iss: Changes httpd version 2.4.6 - 0a772cb0748aa51a01800e0473309b9de792b456
  Apache version was changed to 2.4.6 to sync with the current apache lounge version.

- iis: Changes the version of the dependencies - 3e6fb41d36b7a5e98a55d8f52b88b29d1bd50b64
  * pcre from 8.30 to 8.33
  * zlib from 1.2.7 to 1.2.8
  * libxml2 from 2.7.7 to 2.9.1
  * curl from 7.24 to 7.33.0

- Removes standalone/Makefile.in - e3c19d53d23c48fea337aae76a87b2a85c36a1f1
  Makefile.in is recommended to be in the repository whenever it is edit manually, in our case the automatically generated Makefile.in is ok.

Bug Fixes:

- test: Avoids conflict of fuctions definition - cef72855e4106ce29e1d39103ebf9eb9ab28f17e

- test: Makes the unit tests to work again - cc982ae42ec86c79a67be1a01c6ee35fb06c272c
  The unit tests was not working due to lack update. This patch adds the necessary stuff to have it work again.

- iis: Avoids directory link while building - ad330a44bfa39430cf6340cb52971568cccdf1d6
  Build scripts was creating links allowing the project to be loaded into Visual Studio without care about the dependencies versions. Sometimes windows refuse to delete those links leading the script to fail. This patch moves the sources directories instead of create links to it.

- QA: Avoids the utilization of 3rd filedescriptor - 69c5ccac662f4e11a6eefd54a3e912583c067b9d
  No need to use a 3rd description on the quality check scripts. Stderr is now redirected to stdout and filtered as needed.

- Supports WarningCountingShellCommand in cppcheck and vera - baaf502363e68c3240b60adb7f7c91f5b4f0ba03
  WarningCountingShellCommand allow us to have some measurements on the buildbot waterfall.

- iis: Using base_rules instead of activated_rules - 7b1537058fa451e0df7098cd907ef19f04102f9d

- iis: Fix inet_pton build problem - a4202146b8d26b6615bbab986383fe0afae60d77
  There is a function named inet_pton on windows API, with different signature. This patch just override the windows function and point the inet_pton to our implementation.

- iis: Adds Wix installer xml file.c - b32cb7d9ab397160f0154aa4bd4e9638658b41e6
  This commit adds the Wix template to our git repository.

- iis: build_modsecurity.bat fixies - 7e03e3f840375ed682c35a5bb67932461cc77013
  This commit enable a cleanup on the mod_security build directory avoiding symbols with different architectures.

- iis: Fix mlogc build on windows - 9b7663fa79377a0685130a019916d810f31e7478
  The libcurl path was not pointing to the correct directory

- Fix #154, Uses addn instead of apr_table_setn - 1734221d9d3a78f9aafd68e35717da9ee1a4fe51
  The headers are represented in the format of an apr_table, which is able to handle elements with the same key, however the function apr_table_setn checks if the key exists before add the element, if so it replaces the old value with the new one. This was making our implementation to just keep the last added Cookie. The apr_table_addn function, which is now used, just add a new item without check for olders one.

- Merge pull request #579 from zimmerle/revert_139 - 61e54f2067ae760808359926ff91d57275df1aac
  Revert merge request #139

- Revert "Merge pull request #139 from chaizhenhua/remotes/trunk" - 7f7d00fa2c364716691df1b45779304b24a0debb
  This reverts commit 10fd40fb0d06f6c577d870b6f15d2f6e2a3a5b1b, reversing changes made to 414033aafa94cd50c9b310afd3f164740caccc94.

- Merge pull request #578 from client9/remotes/trunk - b0c3977845f60747b15ae10531b7d20355a22627
  libinjection sync to v3.8.0

- libinjection sync - a5f175d79fac1e69124da4e1e227b622e7e233d7

- Merge pull request #152 from client9/remotes/trunk - 88ebf8a0bdbc4db1be76f3a2e70df77cc52a5925
  Sync to libinjection v3.7.1

- libinjection sync - fcb6dc13ed6efb066fb9b70405eecab8b83a2d96

- libinjection sync - f52242a013f301ca5c17e59b662124833cb7cc6d

- Merge pull request #148 from zimmerle/bugfix_charset_missing_string_terminator - b76e26d81ddafc2b99bffad53d1426f8fd33080a
  Bugfix: missing string terminator while mounting the charset (nginx)

- Bugfix: missing string terminator while mounting the charset (nginx) - ff19dcd5c53d4af61d0a9397d4616f47f80ee207
  The charset in headers is mounted using ngx_snprintf which does not place the string terminator. This patch adds the terminator at the end of the string. The size was correctly allocated, just missing the terminator.

- Merge pull request #141 from client9/remotes/trunk - 9a630eea23a7ead4e77617c86dc937fd7a421a57
  libinjection sync to v3.6.0

- libinjection sync - 11217207e8f2e0cf15742273836399866971071a

- Fix Chunked string case sensitive issue - CVE-2013-5705 - f8d441cd25172fdfe5b613442fedfc0da3cc333d

- Revert "Fix Chuncked string case sensitive issue" - 3901128f17e0763ac1a260106b79859d2aad6d90
  This reverts commit 16a815a3c2735f62238ef99af26090a2b8430d3d.

- Fix Chuncked string case sensitive issue - 16a815a3c2735f62238ef99af26090a2b8430d3d

- Merge pull request #139 from chaizhenhua/remotes/trunk - 10fd40fb0d06f6c577d870b6f15d2f6e2a3a5b1b
  Fixed fd leackage after reload

- Merge pull request #138 from client9/remotes/trunk - 414033aafa94cd50c9b310afd3f164740caccc94
  libinjection sync

- Fixed fd leackage after reload - e0993fcd7a166ce9e1a279a47d050af1311d9001

- libinjection sync - 2268626c20260e88cab9b7830f8a06101fa7172a

- Fix logical disjunction and conjunction issues - 7e0a9ecf7d492e85650671a0cfcfd53e5f15df2c

23 Jul 2013 - 2.7.5
-------------------
Improvements:

    * SecUnicodeCodePage is deprecated. SecUnicodeMapFile now accepts the code page as a second parameter.

    * Updated Libinjection to version 3.4.1. Many improvements were made.

    * Severity action now supports strings (emergency, alert, critical, error, warning, notice, info, debug).

Bug Fixes:

    * Fixed utf8toUnicode tfn null byte conversion.

    * Fixed NGINX crash when issue reload command.

    * Fixed flush output buffer before inject modified hashed response body.

    * Fixed url normalization for Hash Engine.

    * Fixed NGINX ap_unixd_set_global_perms_mutex compilation error with apache 2.4 devel files.

Security Issues:

10 May 2013 - 2.7.4
-------------------
Improvements:

    * Added Libinjection project http://www.client9.com/projects/libinjection/ as a new operator @detectSQLi. (Thanks Nick Galbreath).

    * Added new variable SDBM_DELETE_ERROR that will be set to 1 when sdbm engine fails to delete entries.

    * NGINX is now set to STABLE. Thanks chaizhenhua and all the people in community who help the project testing, sending feedback and patches.

Bug Fixes:

    * Fixed SecRulePerfTime storing unnecessary rules performance times.

    * Fixed Possible SDBM deadlock condition.

    * Fixed Possible @rsub memory leak.

    * Fixed REMOTE_ADDR content will receive the client ip address when mod_remoteip.c is present.

    * Fixed NGINX Audit engine in Concurrent mode was overwriting existing alert files because a issue with UNIQUE_ID.

    * Fixed CPU 100% issue in NGINX port. This is also related to an memory leak when loading response body.

Security Issues:

    * Fixed Remote Null Pointer DeReference (CVE-2013-2765). When forceRequestBodyVariable action is triggered and a unknown Content-Type is used,
      mod_security will crash trying to manipulate msr->msc_reqbody_chunks->elts however msr->msc_reqbody_chunks is NULL. (Thanks Younes JAAIDI).

28 Mar 2013 - 2.7.3
-------------------

  * Fixed IIS version race condition when module is initialized.

  * Fixed IIS version failing config commands in libapr.

  * Nginx version is now RC quality. The rule engine should works for all phases.
    We fixed many issues and missing features (for more information please check jira).
    Code is running well with latest Nginx 1.2.7 stable.
    Thanks chaizhenhua for your help.

  * Added MULTIPART_NAME and MULTIPART_FILENAME. Should be used soon by CRS
    and will help prevent attacks using multipart data.

  * Added --enable-htaccess-config configure option. It will allow the follow directives
    to be used into .htaccess files when AllowOverride Options is set:

        - SecAction
        - SecRule

        - SecRuleRemoveByMsg
        - SecRuleRemoveByTag
        - SecRuleRemoveById

        - SecRuleUpdateActionById
        - SecRuleUpdateTargetById
        - SecRuleUpdateTargetByTag
        - SecRuleUpdateTargetByMsg

  * Improvements in the ID duplicate code checking. Should be faster now.

  * SECURITY: Added SecXmlExternalEntity (On|Off - default it Off) that will disable
    by default the external entity load task executed by LibXml2. This is a security issue
    [CVE-2013-1915] reported by Timur Yunusov, Alexey Osipov (Positive Technologies).

21 Jan 2013 - 2.7.2
-------------------

  * IIS version is now stable.

  * Fixed IIS version does not pass through POST data to ASP.NET when SecRequestBodyAccess
    is set to On (MODSEC-372).

  * Fixed IIS version HTTP Request Smuggling protection does not work (MODSEC-344).

  * Fixed IIS version PHP Injection Attack (958976) protection does not work (MODSEC-346).

  * Fixed IIS version Request limit protections are not working (MODSEC-349).

  * Fixed IIS version Outbound protections are not working (MODSEC-350).

  * Added IIS version better installer.

  * NGINX version removed ModSecurityPassCommand (Thanks chaizhenhua).

  * Fixed NGINX version ngx_http_read_client_request_body returned unexpected buffer type (Thanks chaizhenhua).

  * Fixed NGINX version INCS config directories on fedora (Thanks chaizhenhua).

  * Added NGINX version Added drop action for nginx (Thanks chaizhenhua).

  * Fixed bug in cpf_verify operator (Thanks Hideaki Hayashi).

  * Fixed build modsecurity under Arch Linux.

  * Fixed make test crashing when JIT pcre is enabled.

  * Fixed better cookie separator detection code.

  * Fixed mod_security displaying wrong ip address in error.log using apache 2.4 and mod_remoteip.

  * Fixed mod_security was not compiling when use apr without ipv6 support.

  * Fixed mod_security was not compiling when use lua 5.2.

  * Fixed issue when execute make install under Solaris.

  * Fixed ipmatchf operator was not working as expected.

01 Nov 2012 - 2.7.1
-------------------

  * Changed "Encryption" name of directives and options related to hmac feature to "Hash".

    SecEncryptionEngine      to SecHashEngine
    SecEncryptionKey          to SecHashKey
    SecEncryptionParam        to SecHashParam
    SecEncryptionMethodRx    to SecHashMethodRx
    SecEncryptionMethodPm    to SecHashMethodPm
    @validateEncryption      to @validateHash
    ctl:EncryptionEnforcement to ctl:HashEnforcement
    ctl:EncryptionEngine      to ctl:HashEngine

  * Added a better random bytes generator using apr_generate_random_bytes() to create
    the HMAC key.

  * Fixed byte conversion issue during logging under Linux s390x platform.

  * Fixed compilation bug with LibXML2 2.9.0 (Thanks Athmane Madjoudj).

  * Fixed parsing error with modsecurity-recommended.conf and Apache 2.4.

  * Fixed DROP action was disabled for Apache 2 module by mistake.

  * Fixed bug when use ctl:ruleRemoveTargetByTag.

  * Fixed IIS and NGINX modules bugs.

  * Fixed bug when @strmatch patterns use invalid escape sequence (Thanks Hideaki Hayashi).

  * Fixed bugs in @verifySSN (Thanks Hideaki Hayashi).

  * The doc/ directory now contains the instructions to access online documentation.

15 Oct 2012 - 2.7.0
-------------------

  * Fixed Pause action should work as a disruptive action (MODSEC-297).

  * Fixed Problem loading mod_env variables in phase 2 (MODSEC-226).

  * Fixed Detect cookie v0 separator and use it for parsing (MODSEC-261).

  * Fixed Variable REMOTE_ADDR with wrong IP address in NGINX version (MODSEC-337).

  * Fixed Errors compiling NGINX version.

  * Added Include directive into standalone module. IIS and NGINX module should
    support Include directive like Apache2.

  * Added MULTIPART_INVALID_PART flag. Also used in rule id 200002 for multipart strict
    validation. https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20121017-0_mod_security_ruleset_bypass.txt).

  * Updated Reference Manual.

25 Sep 2012 - 2.6.8
-------------------

  * Fixed ctl:ruleRemoveTargetByID order issue (MODSEC-333). Thanks to Armadillo Dasypodidae.

  * Fixed variable HIGHEST_SEVERITY incorrectly gets reset in a chain rule (MODSEC-315). Thanks to Valery Reznic.

10 Sep 2012 - 2.7.0-rc3
-------------------

* Fixed requests bigger than SecRequestBodyNoFilesLimit were truncated even engine mode was detection only.

* Fixed double close() for multipart temporary files (Thanks Seema Deepak).

* Fixed many small issues reported by Coverity Scanner (Thanks Peter Vrabek).

* Fixed format string issue in ngnix experimental code. (Thanks Eldar Zaitov).

* Added ctl:ruleRemoveTargetByTag/Msg and removed ctl:ruleUpdateTargetByTag/Msg.

* Added IIS and Ngnix platform code.

* Added new transformation utf8toUnicode.

23 Jul 2012 - 2.6.7
-------------------

* Fixed explicit target replacement using SecUpdateTargetById was broken.

* The ctl:ruleUpdateTargetById is deprecated and will be removed for future versions since
  there is no safe way to use it per-request.

* Added ctl:ruleRemoveTargetById that can be used to exclude targets to be processed per-request.

22 Jun 2012 - 2.7.0-rc2
-------------------

* Fixed compilation errors and warnings under Windows platform.

* Fixed SecEncryptionKey was not working as expected.

08 Jun 2012 - 2.7.0-rc1
-------------------

* Added SecEncryptionEngine. Initial crypt engine support, at the momment it will sign some Html
  and Response Header options.

* Added SecEncryptionKey to define the a rand or static key for crypt engine.

* Added SecEncryptionParam to define the new parameter name.

* Added SecEncryptionMethodRx used with a regular expression to inspect the html in response
  body/header and decide what to protect.

* Added SecEncryptionMethodPm used with multiple or single strings to inspect the html in response
  body/header and decide what to protect.

* Added ctl encryptionEngine as a per transaction version of SecEncryptionEgine diretive.

* Added ctl encryptionEnforcement that will allow the engine to sign the data but the enforcement is
  disabled.

* Added validateEncryption operator to enforce the signed elements.

* Added rsub operator supports the syntax |hex| allowing users to use special chars like \n \r.

* Added SecRuleUpdateTargetById now supports id range.

* Added SecRuleUpdateTargetByMsg and its ctl version (Thanks Scott Gifford).

* Added SecRuleUpdateTargetByTag and its ctl version (Thanks Scott Gifford).

* Added SecRulePerfTime when greater than zero it will fill rule id's execution time into PERF_RULE
  and log id=usec information in the new Perf-rule-info: line in part H.

* Added PERF_RULES variable that contains rule execution time.

* Added Engine-mode: section in part H.

* Added ruleRemoveByMsg ctl version.

* Added removeCommentsChar and removeComments now can work with <!-- --> style.

* Added SecArgumentSeparator and SecCookieFormat can be used in different scope locations.

* Added Rules must have ID action and must be numeric.

* Added The use of tfns are deprecated in SecDefaultAction. Should be forbid in the future.

* Added Macro expansion support to the action pause.

* Added IpmatchFromFile/IpmatchF operator.

* Added New setrsc action, the RESOURCE collection used SecWebAppId Name Space

* Added Configure option --enable-cache-lua that allows reuse of Lua VM per transaction.
  It will only take any effect when ModSecurity has multiple scripts to run per transaction.

* Added Configure option --enable-pcre-jit that allows ModSecurity regex engine to use PCRE Jit support.

* Added Configure option --enable-request-early that allows ModSecurity run phase 1 in post_read_request hook.

* Added RBL operator now support the httpBl api (http://www.projecthoneypot.org/httpbl_api.php).

* Added SecHttpBlKey to be used with httpBl api.

* Added SecSensorId will specify the modsecurity sensor name into audit log part H.

* Added aliases to phase:2 (phase:request), phase:4 (phase:response) and phase:5 (phase:logging).

* Added USERAGENT_IP variable. Created when Apache24 is used with mod_remoteip to know the real
  client ip address.

^ Added new rule metadata actions ver, maturity and accuracy. Also included into RULE collection.

* Updated Reference manual into doc/ directory.

* Fixed Variable DURATION contains the elapsed time in microseconds for compatible reasons with apache and
  other variables.

* Fixed Preserve names/identity of the variables going into MATCHED_VARS.

* Fixed Redirect macro expansion does not work in SecDefaultAction when SecRule uses block action.

* Fixed rsub operator does not work as expect if regex contains parentheses (Thanks Jerome Freilinger).

* Current Google Safe Browsing implementation is deprecated. Google changed the API and does not allow
  anymore the malware database for download.

08 Jun 2012 - 2.6.6
-------------------

* Added build system support for KfreeBSD and HURD.

* Fixed a multipart bypass issue related to quote parsing
  Credits to  Qualys Vulnerability & Malware Research Labs (VMRL).

20 Mar 2012 - 2.6.5
-------------------

* Fixed increased a specific message debug level in SBDM code (MODSEC-293).

* Cleanup build system.

09 Mar 2012 - 2.6.4
-------------------

* Fixed Mlogc 100% CPU consume (Thanks Klaubert Herr and Ebrahim Khalilzadeh).

* Fixed ModSecurity cannot load session and user sdbm data.

* Fixed updateTargetById was creating rule unparsed content making apache memory grow.

* Code cleanup.

23 Feb 2012 - 2.6.4-rc1
-------------------

* Fixed @rsub adding garbage data into stream variables.

* Fixed regex for section A into mlogc-batch-load.pl (Thanks Ebrahim Khalilzadeh).

* Fixed logdata cuts message without closing it with final chars.

* Added sanitizeMatchedBytes support to verifyCPF, verifyCC and verifySSN.

06 Dec 2011 - 2.6.3-rc1
-------------------

* Fixed MATCHED_VARS does not correctly handle multiple VARS with the same name.

* Fixed SDBM garbage collection was not working as expected, increasing the size of files.

* Fixed wrong timestamp calculation for some time zones in log files.

* Fixed SecUpdateTargetById failed to load multiple VARS (MODSEC-270).

* Fixed Reverted hexDecode for hexEncode compatibility reason.

* Added SecCollectionTimeout to set collection timeout, default is 3600.

* Added sqlHexDecode transformation to decode sql hex data. Thanks Marc Stern.

30 Sep 2011 - 2.6.2
-------------------

* Fixed hexDecode test during make.

* Updated the reference manual into doc/ directory.

5 Sep 2011 - 2.6.2-rc1
-------------------

* Added support to macro expansion for rx operator.

* Added new transformations removeComments and removeCommentsChars

* Fixed colletion names are not case-sensitive anymore.

* Fixed compilation errors with apache 2.0.

* Fixed build system was not using some libraries CFLAGS.

* Fixed check for valid hex values into hexDecode transformation.

* Fixed ctl:ruleUpdateTargetById appending multiple targets.

18 Jun 2011 - 2.6.1
-------------------

* Updated the reference manual into doc/ directory.

11 Jul 2011 - trunk
-------------------

* Add HttpBl support to rbl operator.

30 Jun 2011 - 2.6.1-rc1
-------------------

* Fixed SecUploadFileMode doesn't work with the new build system.

* Fixed building with Lua library (Thanks Diego Elio).

* Fixed some ./configure --enable* features not being enabled in compilation time.

* Improvements on GSB database add/search operations.

* Log part K was removed from modsecurity.conf-recommended.

* Added SecUnicodeMapFile directive. Must be use to load the unicode.mapping file.

* Added SecUnicodeCodePage directive. Used to define the unicode code page. There are a few already available:

    1250  (ANSI - Central Europe)
    1251  (ANSI - Cyrillic)
    1252  (ANSI - Latin I)
    1253  (ANSI - Greek)
    1254  (ANSI - Turkish)
    1255  (ANSI - Hebrew)
    1256  (ANSI - Arabic)
    1257  (ANSI - Baltic)
    1258  (ANSI/OEM - Viet Nam)
    20127 (US-ASCII)
    20261 (T.61)
    20866 (Russian - KOI8)
    28591 (ISO 8859-1 Latin I)
    28592 (ISO 8859-2 Central Europe)
    28605 (ISO 8859-15 Latin 9)
    37    (IBM EBCDIC - U.S./Canada)
    437  (OEM - United States)
    500  (IBM EBCDIC - International)
    850  (OEM - Multilingual Latin I)
    860  (OEM - Portuguese)
    861  (OEM - Icelandic)
    863  (OEM - Canadian French)
    865  (OEM - Nordic)
    874  (ANSI/OEM - Thai)
    932  (ANSI/OEM - Japanese Shift-JIS)
    936  (ANSI/OEM - Simplified Chinese GBK)
    949  (ANSI/OEM - Korean)
    950  (ANSI/OEM - Traditional Chinese Big5)

    Also mapping some extra unicode chars defined at http://tools.ietf.org/html/rfc3490#section-3.1

* Fixed SecRequestBodyLimit was truncating the real request body.

18 May 2011 - 2.6.0
-------------------

* Added SecWriteStateLimit for Slow Post DoS mitigation.

* Fix problem when buffering in input filter.

* Fix memory leak when use MATCHED_VAR_NAMES.

2 May 2011 - 2.6.0-rc2
-------------------

* Added code optimizations - thanks Diego Elio.

* Added support to AIX and HPUX in the build system (untested).

* Renamed decodeBase64Ext to base64DecodeExt.

* Build system improvements - thanks Diego Elio.

* Improvements on gsblookup parser.

* Fixed input filter bug when upload files and SecStreamInBodyInspect is enabled.

* Logging improvements and bug fix.

* Remove extra useless files when make clean and maintainer-clean

18 Apr 2011 - 2.6.0-rc1
-------------------

* Replaced previous GPLv2 License to Apachev2.

* Added Google Safe Browsing lookups operator and directive. It should be
  used to extract and lookup urls from http packets.

* Added Data Modification operator. It must be used with STREAM_* variables
  to replace/add/edit any data from http bodies.

* Added STREAM_OUPUT_BODY and STREAM_INPUT_BODY variables to work with data
  modification operators.

* Added fast ip address operator. It supports partial ip address, cidr for
  IPv4 and IPv6. Thanks Tom Donovan.

* Added new sensitive data tracking verifyCPF and verifySSN.

* Added MATCHED_VARS and MATCHED_VARS_NAMES. It is similiar to MATCHED_VAR,
  but now we should see all matched variables.

* Added UNIQUE_ID variable. It holds the data created my mod_unique_id.

* Added new tranformation cmdline. Thanks Marc Stern.

* Added new exception handling operators and directives. It should help users
  reduce FN and FPs. The directives SecRuleUpdateTargetById, SecRuleRemoveByTag
  and its ctl actions were included.

* Added SecStreamOutBodyInspection and SecStreamInBodyInspection to enable STREAM_*
  variables.

* Added SecGsbLookupDB used to load Google Safe Browsing malware databse into
  memory.

* Added the directive SecInterceptOnError to control what to do if a rule returns
  values less than zero.

* Improvements in DetectionOnly engine mode. Also added SecRequestBodyLimitAction
  to control what to do if the engine receive a http request over a hard limit.
  Note that there is now many combinations with SecRuleEngine and the limit action
  directives for response and request data. Please see the reference manual.

* Improvements under RBL operator. It now will parse return code values for some
  RBL lists.

* Added new Log Part J. It should log some informations about uploaded files.

* Added new sanitizeMatchedBytes action. It will give more flexibilty for user to sanitize
  logged data, also improving peformance when sanitize big amount of data.

* Improvements on Logging phase. It is possible now see full chains, distinguish between
  simple rules, chain starters and chain nodes.

* Improvements on AutoTools usage.

* Improvements on pattern matching operators, pmf, pm and strmatch now supports more flexible
  input data allowing any kind of special char.

* Improvements on SecRuleUpdateActionById to update chain nodes.

* Many bugs were fixed. Please see the ModSecurity Jira for more details

19 Mar 2010 - trunk
-------------------

* Added SecDisableBackendCompression, which disabled backend compression
  while keeping the frontend compression enabled (assuming mod_deflate
  in installed and configured in the proxy). [Ivan Ristic]

* Added REQUEST_BODY_LENGTH, which contains the number of request body
  bytes read. [Ivan Ristic]

* Integrate with mod_log_config using the %{VARNAME}M format string.
  (MODSEC-108) [Ivan Ristic]

* Replaced the previous time-measuring mechanism with a new one, which
  provides the following information: request time, request duration,
  phase duration (for all 5 phases), time spent dealing with persistent
  storage, and time spent on audit logging. The new information is now
  available in the Stopwatch2 audit log header. The Stopwatch header
  remains for backward compatiblity, although it now only includes
  the request time and request duration values. Added the following
  variables: PERF_COMBINED, PERF_PHASE1, PERF_PHASE2, PERF_PHASE3,
  PERF_PHASE4, PERF_PHASE5, PERF_SREAD, PERF_SWRITE, PERF_LOGGING,
  PERF_GC. [Ivan Ristic]

* Added DURATION, which contains the time ellapsed since the beginning
  of the current transaction, in milliseconds. [Ivan Ristic]

* Adjusted phase 5 to execute just prior to mod_log_config. This should
  allow phase 5 rules to to implement conditional logging, as well as
  pave support for allowing access to all ModSecurity variables from
  mog_log_config. [Ivan Ristic]

* Added the URLENCODED_ERROR flag, which is raised whenever invalid URL
  encoding is encountered in the query string or in the request body
  (but only if URLENCODED request body processor is used). (MODSEC-111)
  [Ivan Ristic]

* Removed the obsolete PDF UXSS functionality. (MODSEC-96) [Ivan Ristic]

* Renamed normalisePath to normalizePath and normalisePathWin to
  normalizePathWin. Kept the previous names for backward compatibility.
  (MODSEC-103) [Ivan Ristic]

* Moved phase 1 to be run in the same Apache hook as phase 2. This means
  that you can now have phase 1 rules in <Location> tags and, more
  importantly, override server configuration in <Location> and others.
  (MODSEC-98) [Ivan Ristic]

* Renamed the sanitise family of actions to sanitize. Kept the old variants
  for backward compatibility. (MODSEC-95) [Ivan Ristic]

* Improve the logging of the ctl action. (MODSEC-99) [Ivan Ristic]

* Cleanup build files that were from the Apache source.

(obache)

2014-02-06 05:51:55 UTC MAIN commitmail json YAML

Use pkg-config to detect builtin pkg, pre-pc builtin version is redirected to
Xrender in buildlink3.mk.

(obache)

2014-02-06 05:34:48 UTC MAIN commitmail json YAML

Use pkg-config to detect builtin pkg, pre-pc builtin version is redirected to
liboldXrandr in buildlink3.mk.

lest part of PR pkg/48532, missing builtin version detection.

(obache)

2014-02-06 04:29:12 UTC MAIN commitmail json YAML

2014-02-06 01:58:32 UTC MAIN commitmail json YAML

Updated devel/py-pyparsing to 2.0.1nb1

(obache)

2014-02-06 01:58:20 UTC MAIN commitmail json YAML

Convert to use python/distutils.mk.

Bump PKGREVISION.

(obache)

2014-02-06 01:53:43 UTC MAIN commitmail json YAML

Updated graphics/py-matplotlib to 1.3.1nb1

(obache)

2014-02-06 01:53:16 UTC MAIN commitmail json YAML

Add missning dependency on py-pyparsing.
Noticed by Kamel Derouiche via PR 48577.

Bump PKGREVISION.

(obache)

2014-02-05 22:04:17 UTC MAIN commitmail json YAML

p5-Module-Pluggable is due to be removed from perl core, so explicitly add dependency on pkgsrc package. Bump PKGREVISION

(abs)

2014-02-05 21:51:36 UTC MAIN commitmail json YAML

Added converters/p5-JSON-MaybeXS version 1.001000
Added www/p5-CGI-Struct version 1.21
Added www/p5-Catalyst-DispatchType-Regex version 5.90033
Updated www/p5-Catalyst-Runtime to 5.90053

(abs)

2014-02-05 21:50:50 UTC MAIN commitmail json YAML

Updated www/p5-Catalyst-Runtime to 5.90053

Key pkgsrc change - move p5-Class-Data-Inheritable from BUILD_DEPENDS to
DEPENDS, as is needed at runtime (previous p5-Catalyst-Runtime package would
fail to run on non build machine due to this)

5.90053 - 2013-12-21
  - Reverted a change in the previous release that moved the setup_log phase
    to after setup_config.  This change was made to allow people to use
    configuration that is late loaded (such as via the ConfigLoader Plugin)
    to setup the plugin.  However it also broke the ability to use the log
    during plugin setup (ie, it breaks lots of plugins).  Reverting the
    change.  See Catalyst::Delta for workarounds.

5.90052 - 2013-12-18

  - Fixed first block of startup debug messages missing when using a custom
    logger that gets set at runtime, for example by overriding finalize_config
  - Give a more descriptive error message when trying to load middleware that
    does not exist.
  - Change the way we initialize plugins to fix a bug where when using the
    populare ConfigLoader plugin, configs merged are not available for setting
    up middleware and data handlers (and probably other things as well).

    NOTE: This change might cause issues if you had code that was relying on the
    broken behavior.  For example external configuration that was being loaded to
    late to have effect might now take effect.  Please test you code carefully and
    be aware of this possible issue </NOTE>.

  - You may now also call 'setup_middleware' as a package method if you think
    that loading middleware via configuration is a weird or broken idea.
  - Various POD formating fixed.
  - Improved some documentation about what type of filehandles that ->body can
    accept and issues that might arise.

5.90051 - 2013-11-06
  - Be more skeptical of the existance of $request->env to fix a regression
    introduced in Catalyst::Action::REST by the previous release

5.90050 - 2013-11-05
  - Previously public predicates on the following attributes are now considered
    private and their method names have been changed to follow Perl convention
    for internal methods:

      -- Catalyst::Request->has_io_fh ==> _has_io_fh
      -- Catalyst::Request->has_env ==> _has_env
      -- Catalyst::Response->has_write_fh ==> _has_write_fh

    These are breaking changes but these methods were never documented and serve
    no use for external code.  If you are using thing, you need to make the noted
    change (but please consider finding another way to do what you are trying to
    do).  t0m++ for code review of Hamburg branch.

5.90049_006 - 2013-11-04
  - Fixed case where test could fail when Starman was partly installed (n0body++)
  - Fixed missing date information in previous release

5.90049_005 - 2013-10-31
  - NEW FEATURE:  New Controller action attribute 'Consumes', which allows you
    to specify the content type of the incoming request.  This makes it easier
    to create actions that only handle certain content type POST or PUT, such
    as actions that only handle JSON or actions that only understand classic
    HTML forms.
  - NEW FEATURE: Request->body_data is now also populated from classic HTML
    Forms using CGI::Struct to support nested data.  For non nested data you
    should use the classic ->body_parameters method.
  - Removed PSGI $env keys that are added on the 'plack.request.*' namespace
    since after discussion it was clear those keys are not part of the public
    API.  Keys removed: 'plack.request.query', 'plack.request.body',
    'plack.request.merged' and 'plack.request.http.body'. Altered some test
    cases to reflect this change.

5.90049_004 - 2013-10-18
  - JSON Data handler looks for both JSON::MaybeXS and JSON, and uses
    whichever is first (prefering to find JSON::MaybeXS).  This should
    improve compatibility as you likely already have one installed.
  - Fixed a warning in the server script (bokutin++)
  - We now populate various Plack $env keys in order to play nice with
    downstream middleware or plack apps (and to reduce processing if
    those keys already exist).  Keys added:
      - plack.request.query
      - plack.request.body
      - plack.request.merged
      - plack.request.http.body
    (NOTE: REMOVED IN 5.90049_005)
  - If incoming input (from a POST or PUT) is not buffered, create the
    buffer and set the correct psgi env keys to note this for downstream
    psgi apps / middleware.  This should solve some issues where Catalyst
    sucks up the body input but its not buffered so downstream apps can't
    read it (for example FCGI does not buffer).  We now also try to make
    sure the body content input is reset to the start of the filehandle
    so that we are polite to downstream middleware /apps.
  - NEW FEATURE: Catalyst::Response can now pull response from a PSGI
    specification response.  This makes it easier to host external Plack
    applications under Catalyst.  See Catalyst::Response->from_psgi_response
  - NEW FEATURE: New configuration option 'use_hash_multivalue_in_request'
    will populate $request methods 'parameters', 'body_parameters' and
    'query_parameters' with an instance of Hash::MultiValue instead of a
    HashRef.  This is used by Plack and is intended to reduce the need to
    write defensive logic since you are never sure if an incoming parameter
    is a scalar or arrayref.
  - NEW FEATURE: We now experimentally support Net::Async::HTTP::Server
    and IO-Async based event loops.  Examples will follow.

5.90049_003 - 2013-09-20
  - Documented the new body_data method added in the previous release
  - Merged from master many important bugfixes and forward compatiblity
    updates, including:
    - Use modern preferred method for Moose metaclass access and many other
      small changes to how we use Moose for better forward compat (ether++)
    - Killed some evil use of $@ (ether++)
    - spelling fixes and documentation updates (ether++), (gerda++)
    - use Test::Fatal over Test::Exception (ether++)
    - Misc. test case fixes to modernize code (ether++)
    - Added a first pass cpanfile, to try and make it easier to bootstrap
      a development setup (ether++)

5.90049_002 - 2013-08-20
  - Fixed loading middleware from project directory
  - Fixed some pointless warnings when middleware class lacked VERSION
  - NEW FEATURE: Declare global 'data_handlers' for parsing HTTP POST/PUT
    alternative content, and created default JSON handler.  Yes, now Catalyst
    handles JSON request content out of the box!  More docs eventually but
    for now see the DATA HANDLERS section in Catalyst.pm (or review the test
    case t/data_handler.t

5.90049_001 - 2013-07-26
  - Declare PSGI compliant Middleware as part of your Catalyst Application via
    a new configuration key, "psgi_middleware".
  - Increased lowest allowed module version for Module::Pluggable to be 4.7 (up
    from 3.4) to solve the fact this is no longer bundled with Perl in v5.18.

(abs)

2014-02-05 21:48:17 UTC MAIN commitmail json YAML

+p5-CGI-Struct +p5-Catalyst-DispatchType-Regex

(abs)

2014-02-05 21:43:39 UTC MAIN commitmail json YAML

+p5-JSON-MaybeXS

(abs)

2014-02-05 21:14:13 UTC MAIN commitmail json YAML

Updated devel/lmdbg to 1.2.1

(cheusov)

2014-02-05 21:14:00 UTC MAIN commitmail json YAML

Update to 1.2.1
  lmdbg-leaks: fix incorrect memory leak detection with calloc(3).

(cheusov)

2014-02-05 21:12:46 UTC MAIN commitmail json YAML

readd patch checksum lost in previous

(wiz)

2014-02-05 20:25:19 UTC MAIN commitmail json YAML

Updated lang/gawk to 4.1.0nb2

(wiz)

2014-02-05 20:25:09 UTC MAIN commitmail json YAML

Install extension man pages with the extension "3am" into "man3am"
instead of "man3".

Otherwise, time.3am shadows time.3.

Bump PKGREVISION.

(wiz)

2014-02-05 19:45:59 UTC pkgsrc-2013Q4 commitmail json YAML

2014-02-05 19:45:10 UTC pkgsrc-2013Q4 commitmail json YAML

Pullup ticket #4315 - requested by obache
emulators/dosbox: build fix

Revisions pulled up:
- emulators/dosbox/Makefile                                    1.38

---
  Module Name: pkgsrc
  Committed By: obache
  Date: Wed Feb  5 08:40:11 UTC 2014

  Modified Files:
  pkgsrc/emulators/dosbox: Makefile

  Log Message:
  Restrict CPPFLAGS=-fPIC to clang only, as changed reason.

  At least, It break build on NetBSD-i386 with buitin gcc, PR pkg/48538.
  No build failure on NetBSD-amd64 with builtin gcc.

(tron)

2014-02-05 18:04:05 UTC MAIN commitmail json YAML

Update comment, from Kai-Uwe Eckhardt.

(wiz)

2014-02-05 17:39:19 UTC MAIN commitmail json YAML

2014-02-05 17:38:32 UTC MAIN commitmail json YAML

update to 0.2.9
changes:
-bugfixes and minor improvements
-translation updates

(drochner)

2014-02-05 17:36:38 UTC MAIN commitmail json YAML

update to 0.2.7
changes:
-Re-factored Grilo Net library and fixed several bugs
-Show 'slow' keys in grl-inspect
-Updates in documentation
-Added new core function: grl_operation_set_data_full()
-fixes

(drochner)

2014-02-05 17:33:13 UTC MAIN commitmail json YAML

2014-02-05 17:31:34 UTC MAIN commitmail json YAML

2014-02-05 17:30:20 UTC MAIN commitmail json YAML

2014-02-05 17:23:22 UTC MAIN commitmail json YAML

update to 0.14.7
change: Add mising function declaration

(drochner)

2014-02-05 17:20:31 UTC MAIN commitmail json YAML

2014-02-05 15:22:19 UTC MAIN commitmail json YAML

Updated www/mediawiki to 1.21.5

(wen)

2014-02-05 15:21:28 UTC MAIN commitmail json YAML

Update to 1.21.5

Upstream changes:
Changes since 1.21.4
(bug 60339) SECURITY: Sanitize shell arguments to DjVu files, and other media formats

(wen)

2014-02-05 14:48:13 UTC MAIN commitmail json YAML

Updated databases/p5-DBIx-Class-Fixtures to 1.001021

(wen)

2014-02-05 14:46:48 UTC MAIN commitmail json YAML

Update to 1.001021

Upstream changes:
1.001021
- Applied patch to solve issue when trying to copy fixtures across volumes

(wen)

2014-02-05 14:25:55 UTC pkgsrc-2013Q4 commitmail json YAML

2014-02-05 14:25:40 UTC pkgsrc-2013Q4 commitmail json YAML

Pullup ticket #4314 - requested by obache
graphics/cogl: bug fix patch

Revisions pulled up:
- graphics/cogl/options.mk                                      1.3

---
  Module Name: pkgsrc
  Committed By: obache
  Date: Sun Jan 26 08:43:29 UTC 2014

  Modified Files:
  pkgsrc/graphics/cogl: options.mk

  Log Message:
  specify gl-libname without extension and shlib major version.
  default ligGL.so.1 match to pkgsrc one with ELF, but not for builtin one.

(tron)

2014-02-05 12:59:05 UTC MAIN commitmail json YAML

Updated textproc/raptor2 to 2.0.13

(wiz)

2014-02-05 12:58:56 UTC MAIN commitmail json YAML

Update to 2.0.13:

2013-01-29 Raptor2 Version 2.0.13 Released

  Fix configure not finding curl when curl-config --cflags is empty
  Fixed reported issue: 0000562.

(wiz)

2014-02-05 12:56:29 UTC MAIN commitmail json YAML

Updated x11/tk to 8.6.1nb1

(obache)

2014-02-05 12:56:19 UTC MAIN commitmail json YAML

Add missing PKGCONFIG_OVERRIDE for new tk.pc.

Bump PKGREVISION.

(obache)

2014-02-05 12:50:51 UTC MAIN commitmail json YAML