summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2017-10-25Updated www/apache-tomcat85 to 8.5.23ryoon1-1/+2
2017-10-25Update to 8.5.23ryoon2-7/+7
Changelog: A fix for CVE-2017-12617. Stricter validation of the HTTP Host header. Add ExtractingRoot, a new WebResourceRoot implementation that extracts JARs to the work directory for improved performance when deploying packed WAR files. Added support for the OpenSSL SSL_CONF API. To support this the minimum required Tomcat Native version is 1.2.14.
2017-10-25doc: Updated lang/nodejs4 to 4.8.5fhajny1-1/+2
2017-10-25Update lang/nodejs4 to 4.8.5.fhajny2-8/+7
zlib: - CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector.
2017-10-25doc: Updated lang/nodejs6 to 6.11.5fhajny1-1/+2
2017-10-25Update lang/nodejs6 to 6.11.5.fhajny4-13/+40
zlib: - CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector.
2017-10-25doc: Updated lang/nodejs to 8.8.0fhajny1-1/+2
2017-10-25Update lang/nodejs to 8.8.0.fhajny2-7/+7
crypto: - expose ECDH class http2: - http2 is now exposed by default without the need for a flag - a new environment variable NODE_NO_HTTP2 has been added to allow userland http2 to be required - support has been added for generic Duplex streams module: - resolve and instantiate loader pipeline hooks have been added to the ESM lifecycle zlib: - CVE-2017-14919 - In zlib v1.2.9, a change was made that causes an error to be raised when a raw deflate stream is initialized with windowBits set to 8. On some versions this crashes Node and you cannot recover from it, while on some versions it throws an exception. Node.js will now gracefully set windowBits to 9 replicating the legacy behavior to avoid a DOS vector.
2017-10-25doc: Updated devel/ocaml-migrate-parsetree to 1.0.6jaapb1-1/+2
2017-10-25Updated devel/ocaml-migrate-parsetree to version 1.0.6.jaapb4-13/+16
This version has support for ocaml 4.06, and includes several other minor bugfixes and improvements.
2017-10-25doc: Updated print/mupdf to 1.11nb5leot1-1/+2
2017-10-25mupdf: backport patches to fix several possible security issuesleot7-3/+205
Backport patches from upstream to address CVE-2017-14685, CVE-2017-14686, CVE-2017-14687, CVE-2017-15369 and CVE-2017-15587. These will not be needed for the next mupdf stable release. Bump PKGREVISION.
2017-10-25fzf: spoon feed information about how to setup key bindingsmaya1-0/+31
zsh might have a better mechanism, but this works!
2017-10-25doc: Updated shells/fish to 2.6.0nb2maya1-1/+2
2017-10-25fish: use variadic tparm on netbsd curses.maya4-21/+27
don't mess with the declaration of tparm_solaris_kludge unnecessarily. uwe thinks the non-variadic tparm is wrong (so might be broken for solaris curses), but I'm not sure how to correct it. PR pkg/52649 bump PKGREVISION
2017-10-25Updated devel/py-flake8-import-orderadam1-1/+2
2017-10-25py-flake8-import-order: updated to 0.14adam2-8/+9
0.14: * Fixed I201 error raising for cryptography style. * Added I202 error when there is an additional newline in a section of imports. * Added ``ntpath`` and ``os2emxpath`` to stdlib list.
2017-10-25Updated HOMEPAGEadam1-2/+2
2017-10-25Updated textproc/py-html2textadam1-1/+2
2017-10-25py-html2text: updated to 2017.10.4adam2-15/+15
2017.10.4 * Fix 157: Fix images link with div wrap * Fix 55: Fix error when empty title tags * Fix 160: The html2text tests are failing on Windows and on Cygwin due to differences in eol handling between windows/*nix * Feature 164: Housekeeping: Add flake8 to the travis build, cleanup existing flake8 violations, add py3.6 and pypy3 to the travis build * Fix 109: Fix for unexpanded < > & * Fix 143: Fix line wrapping for the lines starting with bold * Adds support for numeric bold text indication in `font-weight`, as used by Google (and presumably others.) * Fix 173 and 142: Stripping whitespace in crucial markdown and adding whitespace as necessary * Don't drop any cell data on tables uneven row lengths (e.g. colspan in use)
2017-10-25Updated security/py-cryptography_vectors, security/py-cryptography, ↵adam1-1/+4
devel/py-pep8
2017-10-25py-pep8: updated to 1.7.1adam2-7/+7
Changes 1.7.1: Prominently note via warning message that the tool is no longer released as pep8 and will only be fixed in the pycodestyle package
2017-10-25py-cryptography[_vectors]: updated to 2.1.2adam4-14/+14
2.1.2: Corrected a bug with the manylinux1 wheels where OpenSSL's stack was marked executable.
2017-10-24doc: Updated ham/hamlib to 3.1gdt1-1/+2
2017-10-24hamlib: update to 3.1gdt3-11/+10
Version 3.1 2016-12-31 * Fix kenwood_set_mode for ts590s and mode CW, RTTY or AM. Tks Tom, DL1JBE * Proper IPV6 and dual stack networking. Bill, G4WJS * Add a new command line option '--no-restore-ai' ('-n') to rigctl. Bill, G4WJS * Fix missing PKTUSB mode setting code for FT-817 & FT-897. Bill, G4WJS * New Prosistel rotor backend from IZ7CRX * Install daemon man files to man1. Nate, N0NB * Migrate from libusb-0.1 to libusb-1.0. Stephane, F8CFE * Added support for Icom IC-2730. robinolejnik * Added support for the Icom IC-7300. Mike, W9MDB * Add send_morse to icom rigs. Mike, W9MDB * added instructions how to compile on OSX. DH1TW * New Perseus model. Stephane, F8CFE * Added Lua binding and demo script. Ervin, HA2OS * Added test to support Flex 6300. Bill, KB4AAA * Many bug fixes and feature enhancements to the code base. See the Git commit log for complete details.
2017-10-24Updated databases/py-psycopg2, audio/mpg123, multimedia/mkvtoolnixadam1-1/+4
2017-10-24mkvtoolnix: updated to 17.0.0adam2-7/+7
Version 17.0.0 "Be Ur Friend": Important notes * The word "timecode" has been changed to "timestamp" everywhere it was used in MKVToolNix. This affects program output (including mkvinfo's), GUI controls, command line parameters (e.g. `mkvmerge --timestamp-scale …`) and file formats. All programs remain backwards compatible insofar as they still accept "timecode" in all those places (e.g. `mkvmerge --timecode-scale …`). The reason for the change is wrong usage. What both the Matroska specification and MKVToolNix used "timecode" for is normally called a "timestamp" in audio & video domains. A "timecode" on the other hand has a specific meaning. As the Matroska specification is moving towards implementing real timecodes, it will also move towards correcting the verbiage. MKVToolNix is following this change. * mkvextract's command line interface has been changed to allow extraction of multiple items at the same time. The first argument must now be the source file's name. All following arguments either set the mode (e.g. `tracks`) or specify what to extract in the currently active mode. Those items that were written to the standard output (chapters, tags and cue sheets) are now always written to files instead. Therefore the respective modes require an output file name. For example, extracting two tracks, the chapters and the tags can be done with the following command: `mkvextract input.mkv tracks 0:video.h265 1:audio.aac chapters chapters.xml tags tags.xml` The old interface (specifying the mode first and the source file name second) remains working and supported. However, it is now deprecated and will be removed at the end of 2018. New features and enhancements * mkvmerge: AC-3: during identification regular AC-3 and E-AC-3 tracks will now be identified differently for most container formats (exception: AVI, Real Media, Ogg/OGM). The codec will be reported as `AC-3` for regular AC-3 and as `E-AC-3` for E-AC-3 tracks instead of the combined `AC-3/E-AC-3`. * mkvextract: the command line interface has been changed to allow extraction of multiple items at the same time. See section "Important notes" for details. Bug fixes * mkvmerge: AAC ADTS parser: mkvmerge will now parse the `program_config_element` if it is located at the start of an AAC frame in order to determine the actual number of channels. This overrides invalid channel configurations in the ADTS headers, for example. * mkvmerge: fixed AC-3 being misdetected as encrypted MPEG program streams under certain conditions. * mkvmerge: Dirac: under certain conditions (e.g. only muxing a single Dirac track without any other tracks) mkvmerge was always setting the pixel width & height to 123. The frame rate was wrong, too. * mkvmerge: E-AC-3 in Matroska: if AC-3 cores and their corresponding E-AC-3 extension are located in two different Matroska blocks, then mkvmerge will now re-assemble them into a single block and only use the first block's timestamp. * mkvmerge: SRT reader: fixed calculating the duration of entries starting with at a negative timestamp. * mkvmerge: VC-1: under certain conditions (e.g. only muxing a single VC-1 track without any other tracks) mkvmerge was always setting the pixel width & height to 123. The frame rate was wrong, too. * mkvmerge: command line options: an error message will be output if the single-value-form of the `--sync` option is used and it isn't a number (e.g. `--sync 0:asd`). * mkvpropedit, GUI's header editor: both programs will now show proper error messages instead of crashing when certain kinds of data corruption is found when reading a file.
2017-10-24mpg123: updated to 1.25.7adam2-8/+8
1.25.7 ------ - mpg123: -- Do not play with cursor and inverse video for progress bar when TERM=dumb. -- Fix parsing of host port for numerical IPv6 addresses (just did not work before, only for textual host names). - libmpg123: -- Proper fix for the xrpnt overflow problems by correctly initialising certain tables for MPEG 2.x layer III. The checks that catch the resulting overflow are still in place, but likely superfluous now. Note that this means certain valid files would have been misdecoded before, if anyone actually produced them. Thanks to Robert Hegemann for the fix! -- Silently handle granules with part2_3_length == 0, but scalefac_compress != 0 (ignore the latter).
2017-10-24py-psycopg2: update to 2.7.3.2adam2-7/+7
What's new in psycopg 2.7.3.2 - Wheel package compiled against PostgreSQL 10.0 libpq and OpenSSL 1.0.2l
2017-10-24pkg_install: Fix OpenSSL 1.1.0 buildmaya1-25/+12
OpenSSL 1.1.0 makes xkusage and ex_flags opaque. Use X509_check_ca rather than a custom and nearly identical implementation. This is available since OpenSSL 0.9.8 (even in RHEL5). This is also done because we cannot implement it identically under OpenSSL 1.1.0 due to missing getters. Test EXFLAG_XKUSAGE rather than zero xkusage test no usage to avoid openssl 1.1.0 getter returning a different code on this case. Use getter for xkusage in the non-zero test case. Provide fallback definitions for getters. PR pkg/52298, PR pkg/52648
2017-10-24Updated pkgtools/rc.subr to 20171024.jlam1-1/+2
2017-10-24rc.subr: Fix SERVERS rc.d script to not REQUIRE mountcritremote.jlam2-4/+3
The distributed rc.d scripts are "barrier" scripts that are used by other rc.d scripts to hook into different points of the startup process by either using REQUIRE or BEFORE. The barrier scripts should not depend on other, non-barrier scripts. This change makes the distributed scripts usable by a simple "rcorder /etc/rc.d/*", whereas it was failing before due to lack of "mountcritremote". Bump the package version to 20171024.
2017-10-24Updated devel/apr-util to 1.6.1ryoon1-1/+2
2017-10-24Update to 1.6.1ryoon2-8/+7
Changelog: Changes with APR-util 1.6.1 *) Win32: Add function exports from new apr_crypto API's missing in 1.6.0. *) Win32: Introduce XML_PARSER build-time variable to select the expat library name to be linked to libaprutil-1.dll. See Makefile.win *) Win32: Removed lingering xml/xml.dsp project forked from the expat Project in the 1.9x era. Use expat's maintained build schema instead, prior to building apr-util. *) apr_crypto: Fix compatibility with LibreSSL. 61596. [Bernard Spil <brnrd freebsd.org>, Yann Ylavic] *) sdbm: better database/page validation to fail cleanly when corrupted. [Yann Ylavic]
2017-10-24Updated devel/apr to 1.6.3ryoon1-1/+2
2017-10-24Update to 1.6.3ryoon2-7/+7
Changelog: Changes for APR 1.6.3 *) apr_file_trunc: Truncating a buffered file could add unexpected data after the truncate position. 51017. [Evgeny Kotkov <evgeny.kotkov visualsvn.com>] *) apr_file_trunc: Fix an issue where reading from a buffered file after truncate could return stale data from the buffer. [Evgeny Kotkov <evgeny.kotkov visualsvn.com>] *) apr_ipsubnet_create() now fails for an empty input string. [Joe Orton]
2017-10-24rasqal: No need to inject a ac_cv_path_GTKDOC_CHECK_PATH, NFCleot1-2/+1
ac_cv_path_GTKDOC_CHECK_PATH isn't used by rasqal so don't inject it via CONFIGURE_ENV. This was a copypasto from a similar devel/orc kludge related to avoid picking up gtkdoc-* tools. NFC.
2017-10-24Updated misc/screen to 4.6.2ryoon1-1/+2
2017-10-24Update to 4.6.2ryoon2-8/+7
Changelog: Version 4.6.2 (23/10/2017): * Fixes: - revert changes to cursor position restore behavour (bug #51832) - set freed pointer to NULL (bug #52133) - documentation fixes - fix windowlist crashes (bug #43054 & #51500)
2017-10-24Note update of vim-share for vimmorr2-3/+3
2017-10-24Update to patchset 1214.morr2-7/+7
Changes: 8.0.1177 in a terminal window the popup menu is not cleared 8.0.1178 using old compiler on MS-Windows 8.0.1179 Test_popup_and_window_resize() does not always pass 8.0.1180 MS-Windows testclean target deletes the color script 8.0.1181 tests using Vim command fail on MS-Windows 8.0.1182 cannot see or change mzscheme dll name 8.0.1183 MS-Windows build instructions are outdated 8.0.1184 the :marks command is not tested 8.0.1185 Ruby library includes minor version number 8.0.1186 still quite a few old style tests 8.0.1187 building with lua fails for OSX on Travis 8.0.1188 autocmd test fails on MS-Windows 8.0.1189 E172 is not actually useful 8.0.1190 unusable after opening new window in BufWritePre event 8.0.1191 MS-Windows: missing 32 and 64 bit files in installer 8.0.1192 MS-Windows: terminal feature not enabled by default 8.0.1193 crash when wiping out a buffer after using getbufinfo() 8.0.1194 actual fg and bg colors of terminal are unknown 8.0.1195 can't build on MS-Windows 8.0.1196 crash when t_RF is not set 8.0.1197 MS-Windows build instructions are not up to date 8.0.1198 older compilers don't know uint8_t 8.0.1199 when 'clipboard' is "autoselectplus" star register is set 8.0.1200 tests switch the bell off twice 8.0.1201 "yL" is affected by 'scrolloff' 8.0.1202 :wall gives an errof for a terminal window 8.0.1203 terminal window mistreats composing characters 8.0.1204 a QuitPre autocommand may get the wrong file name 8.0.1205 it is possible to unload a changed buffer 8.0.1206 no autocmd for entering or leaving the command line 8.0.1207 profiling skips the first and last script line 8.0.1208 'statusline' drops empty group with highlight change 8.0.1209 still too many old style tests 8.0.1210 CTRL-G and CTRL-T are ignored with typeahead 8.0.1211 cannot reorder tab pages with drag & drop 8.0.1212 MS-Windows: tear-off menu does not work on 64 bit 8.0.1213 setting 'mzschemedll' has no effect 8.0.1214 accessing freed memory when EXITFREE is set
2017-10-24rasqual: Fix installation if gtk-doc package is already installedleot1-1/+8
By default rasqual is configured with `--disable-gtk-doc'. However, despite that, it will checks several `gtkdoc-*' tools anyway, ending in a failure during the installation phase because only a couple of them are available. Add a kludge via CONFIGURE_ENV to avoid picking up gtkdoc-* tools. Noticed by <martin>, thanks!
2017-10-24Updated textproc/py-sphinx to 1.6.5adam1-1/+2
2017-10-24py-sphinx: updated to 1.6.5adam2-7/+7
Release 1.6.5: Features added * 4107: Make searchtools.js compatible with pre-Sphinx1.5 templates * 4112: Don't override the smart_quotes setting if it was already set * 4125: Display reference texts of original and translated passages on i18n warning message * 4147: Include the exception when logging PO/MO file read/write Bugs fixed * 4085: Failed PDF build from image in parsed-literal using ``:align:`` option * 4100: Remove debug print from autodoc extension * 3987: Changing theme from alabaster causes HTML build to fail * 4096: C++, don't crash when using the wrong role type. Thanks to mitya57. * 4070, 4111: crashes when the warning message contains format strings (again) * 4108: Search word highlighting breaks SVG images * 3692: Unable to build HTML if writing .buildinfo failed * 4152: HTML writer crashes if a field list is placed on top of the document * 4063: Sphinx crashes when labeling directive ``.. todolist::`` * 4134: [doc] :file:`docutils.conf` is not documented explicitly * 4169: Chinese language doesn't trigger Chinese search automatically * 1020: ext.todo todolist not linking to the page in pdflatex * 3965: New quickstart generates wrong SPHINXBUILD in Makefile * 3739: ``:module:`` option is ignored at content of pyobjects * 4149: Documentation: Help choosing :confval:`latex_engine` * 4090: [doc] :confval:`latex_additional_files` with extra LaTeX macros should not use ``.tex`` extension * Failed to convert reST parser error to warning
2017-10-24Updated www/lighttpd to 1.4.47adam1-1/+2
2017-10-24lighttpd: updated to 1.4.47adam4-35/+12
- 1.4.47 * [mod_authn_gssapi] needs -lcom_err under Darwin * [core] stricter validation of request-URI begin * [core] fix 1.4.46 regression in config match * [core] normalize config addrs for != match * [core] normalize config addrs for eq and ne * [doc] use https:// URLs to .lighttpd.net resources * [core] fix 1.4.46 regression in Last-Modified
2017-10-24fzf, go-isatty, go-shellwords, go-runewidthmaya1-1/+5
2017-10-24Makefile: +go-runewidth, +go-shellwidth, +go-isatty, +fzfmaya2-2/+6
2017-10-24Add fzf version 0.17.1maya4-0/+122
fzf is a general-purpose command-line fuzzy finder. It's an interactive Unix filter for command-line that can be used with any list; files, command history, processes, hostnames, bookmarks, git commits, etc.
2017-10-24Add package go-isatty version 0.0.3maya5-0/+58
Go interface for isatty (is a tty)