Update zoem to 11.166
   *  zoem-11-166 released.

   *  The default search path was changed. The obsolete PREFIX/zoem/mac
      component was dropped, and PREFIX/aephea was added.  Now, if zoem and
      aephea are both configured with the same prefix for installation (e.g.
      --prefix=/usr/local or --prefix=$HOME/local), then aephea include
      -- files
      will be found automatically by zoem.

   *  set#3 can now splice into a variable (that is, the string
      refered to by a macro). This is achieved by pairing the respective
      keys {start} and {width} with appropriate values in the first
      argument to set#3. The start position is relative to an offst
      of zero, so

      \set{foo}{kaboom}
      \set{{start}{2}{width}{3}}{foo}{za}
      '\foo'

      yields 'kazam'.

   *  The example zoem solution 8q2.azm to the N queens problem
      has been updated. It now pretty-prints asciific chess boards using the
      new splice mode to set#3.

   *  Small documentation fixes.
Updated textproc/zoem to 11.166
Update "wireshark" package to version 1.8.4. Changes since version 1.8.3:
- The following vulnerabilities have been fixed.
  o wnpa-sec-2012-30
    Wireshark could leak potentially sensitive host name
    resolution information when working with multiple pcap-ng
    files. Discovered by Laura Chappell.
    Versions affected: 1.8.0 to 1.8.3.
  o wnpa-sec-2012-31
    The USB dissector could go into an infinite loop. (Bug 7787)
    Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11.
  o wnpa-sec-2012-32
    The sFlow dissector could go into an infinite loop. (Bug 7789)
    Versions affected: 1.8.0 to 1.8.3.
  o wnpa-sec-2012-33
    The SCTP dissector could go into an infinite loop. (Bug 7802)
    Versions affected: 1.8.0 to 1.8.3.
  o wnpa-sec-2012-34
    The EIGRP dissector could go into an infinite loop. (Bug 7800)
    Versions affected: 1.8.0 to 1.8.3.
  o wnpa-sec-2012-35
    The ISAKMP dissector could crash. (Bug 7855)
    Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11.
  o wnpa-sec-2012-36
    The iSCSI dissector could go into an infinite loop. (Bug 7858)
    Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11.
  o wnpa-sec-2012-37
    The WTP dissector could go into an infinite loop. (Bug 7869)
    Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11.
  o wnpa-sec-2012-38
    The RTCP dissector could go into an infinite loop. (Bug 7879)
    Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11.
  o wnpa-sec-2012-39
    The 3GPP2 A11 dissector could go into an infinite loop. (Bug
    7801)
    Versions affected: 1.8.0 to 1.8.3.
  o wnpa-sec-2012-40
    The ICMPv6 dissector could go into an infinite loop. (Bug
    7844)
    Versions affected: 1.8.0 to 1.8.3, 1.6.0 to 1.6.11.
- The following bugs have been fixed:
  o Menu and Title bars inaccessible using GTK2 (non-legacy) with
    two monitors. (Bug 553)
  o 802.11 Probe Response fails to parse. (Bug 1284)
  o Tshark - decimal symbol. (Bug 2880)
  o Malformed tpncp.dat file can crash Wireshark. (Bug 6665)
  o SSL decryption not work even with example capture file and
    key. (Bug 6869)
  o Info line is incorrect on SIP message containing another SIP
    message in body. (Bug 7780)
  o OOPS: dissector table "sctp.ppi" doesn't exist Protocol being
    registered is "Datagram Transport Layer Security". (Bug 7784)
  o Dissection of IEEE 802.11 Channel Switch Announcement element
    fails. (Bug 7797)
  o Invalid memory accesses when loading RADIUS captures. (Bug
    7803)
  o ISUP CIC should have format BASE_DEC, not BASE_HEX. (Bug 7848)
  o We don't handle pcap-ng files with IDBs that come after packet
    blocks. (Bug 7851)
  o '*' wildcard in the 'Src IP' or 'Dest IP' field of the ESP SA
    dialog does not work. (Bug 7866)
  o nas_eps dissector does not decode some esm message. (Bug 7912)
  o WLAN decryption status not updated after updating WEP/WPA
    keys. (Bug 7921)
  o IPv6 Option Pad1 Incorrect dissection. (Bug 7938)
  o Print GNUTLS error message if PEM import fails. (Bug 7948)
  o GSM classmark3 8-PSK decode error. (Bug 7964)
  o Parsing the Server Name Indication extension in SSL/TLS
    traffic reads some fields incorrectly. (Bug 7967)
  o Lua code crashes wireshark after update to 1.8.3. (Bug 7976)
  o 2 bugs in Ran-Information-Error Rim Container. (Bug 8000)
  o Misspelling (typo) in IPv6 display filter field name. (Bug
    8006)
  o Two BSSGP dissector bugs. (Bug 8008)
  o Core dump during SCTP association analysis. (Bug 8011)
- Updated Protocol Support
  3GPP2 A11, BSSGP, EIGRP, FMP/NOTIFY, GSM A, ICMP, ICMPv6, IEEE
  802.11, IPsec, IPv6, ISAKMP, iSCSI, LTE RRC, NAS EPS, NDPS, Prism,
  RADIUS, RRC, RTCP, SCTP, sFlow, SIP, SMB2, SSL/TLS, TPNCP, USB
- New and Updated Capture File Support
  CommView NCF, iSeries, pcap-ng.
Note update of the "wireshark" package to version 1.8.4.

Update mawk to 1.3.4-20121129. For details see share/doc/mawk/CHANGES
Updated lang/mawk to 1.3.4.20121129

Update to parallel-20121122
Updated parallel/parallel to 20121122
Fix MACHINE_ARCH comparison (amd64 vs. x86_64)
update to apache-tomcat 6.0.36. Upstream changelog:
   Tomcat 6.0.36 (jfclere)

   Catalina
   ++++++++
   update  48692: Provide option to parse
           application/x-www-form-urlencoded PUT requests. (schultz)
   add     50306: New StuckThreadDetectionValve to detect requests
           that take a long time to process, which might indicate that
           their processing threads are stuck. Based on a patch
           provided by TomLu. (kkolinko)
   fix     50570: Enable FIPS mode to be set in AprLifecycleListener.
           Based upon a patch from Chris Beckey. Note that this mode
           requires tomcat-native 1.1.23 or later linked to a
           FIPS-capable OpenSSL library, which one has to build by
           themselves. (schultz/kkolinko)
   fix     Improve synchronization and error handling in
           AprLifecycleListener. Do not allow to change SSL options
           if SSL has already been initialized. (schultz/kkolinko)
   fix     52225: Fix ClassCastException when adding an alias for an
           existing host via JMX. (kkolinko)
   fix     52293: Correctly handle the case when antiResourceLocking
           is enabled at the Context level when unpackWARs is disabled
           at the Host level. Correctly handle multi-level contexts
           when antiResourceLocking is enabled. Patch by Justin Miller.
           (kkolinko)
   fix     Do not throw IllegalArgumentException from parseParameters()
           call when chunked POST request is too large, but treat it
           like an IO error. The FailedRequestFilter filter can be
           used to detect this condition. (kkolinko)
   fix     52384: Do not fail with parameter parsing when debug
           logging is enabled. (kkolinko)
   fix     Do not flag extra '&' characters in parameters as
           parse errors. (kkolinko)
   fix     52488: Correct typos: exipre -> expire. Based on a patch
           by prockter. (markt)
   fix     Reduce log level for the message about hitting
           maxParameterCount limit from WARN to INFO. Fix limit
           comparison to allow exactly maxParameterCount parameters,
           as documentation says, instead of (maxParameterCount-1).
           (kkolinko)
   fix     Slightly improve performance of UDecoder.convert(). Align
           %2f handling between implementations. (kkolinko)
   add     Add denyStatus attribute to RequestFilterValve
           (RemoteAddrValve, RemoteHostValve valves). It allows to
           use different HTTP response code when rejecting denied
           request. E.g. 404 instead of 403. (kkolinko)
   add     Add SetCharacterEncodingFilter (similar to the one
           contained in the examples web application) to the
           org.apache.catalina.filters package so that it is
           available for all web applications. (kkolinko)
   add     52500: Added configurable mechanism to retrieve user
           names from X509 client certificates. Based on a patch
           provided by Michael Furman. (schultz/kkolinko)
   fix     52719: Fix a theoretical resource leak in the JAR
           validation that checks for non-permitted classes in
           web application JARs. (markt)
   fix     52830: Correct JNDI lookups when using javax.naming.Name
           to identify the resource rather than a java.lang.String.
           (markt)
   add     52850: Extend memory leak prevention and detection
           code to work with IBM as well as Oracle JVMs. Based on
           a patch provided by Rohit Kelapure. (kkolinko)
   add     52996: In StandardThreadExecutor: Add the ability to
           configure a job queue size (maxQueueSize attribute).
           Add a variant of execute method that allows to specify
           a timeout for how long we want to try to add something
           to the queue. Based on a patch by Rüdiger Plüm. (kkolinko)
   fix     53047: If a JDBCRealm or DataSourceRealm is configured
           for an all roles mode that only requires authorization
           (and no roles) and no role table or column is defined,
           don't populate the Principal's roles. (markt/kkolinko)
   fix     53050: Fix handling of entropy value when initializing
           session id generator in session manager. Based on proposal
           by Andras Rozsa. (kkolinko)
   fix     53056: Add APR version number to tcnative version INFO
           log message. (schultz)
   fix     53057: Add OpenSSL version number INFO log message
           when initializing. (schultz)
   fix     53071: Use the message from the Throwable for the error
           report generated by the ErrorReportValve if none was
           specified via sendError(). Use the standard text for
           HTTP error codes. (markt/rjung)
   update  53230: Change session managers to throw
           TooManyActiveSessionsException instead of
           IllegalStateException when the maximum number of sessions
           has been exceeded and a new session will not be created.
           (schultz/kkolinko)
   fix     53267: Ensure that using the GC Daemon Protection feature
           of the JreMemoryLeakPreventionListener does not trigger
           a full GC every hour. (markt/kkolinko)
   fix     53531: Fix ExpandWar.expand to check the return value
           of File.mkdir and File.mkdirs. (schultz)
   fix     Make the CSRF nonce cache in CsrfPreventionFilter
           serializable so that it can be replicated across a cluster
           and/or persisted across Tomcat restarts. (markt)
   fix     53584: Ignore path parameters when comparing URIs for
           FORM authentication. This prevents users being prompted
           twice for passwords when logging in when session IDs
           are being encoded as path parameters. (markt)
   fix     Various improvements to the DIGEST authenticator
           including 52954, the disabling caching of an authenticated
           user in the session by default, tracking server rather
           than client nonces and better handling of stale nonce
           values. (markt)
   fix     Remove unneeded handling of FORM authentication in
           RealmBase. (kkolinko)
   fix     53800: FileDirContext.list() did not provide correct paths
           for subdirectories. Patch provided by Kevin Wooten.
           (kkolinko)
   fix     53830: Better handling of Manager.randomFile default
           value on Windows. (kkolinko)
   fix     Improve session management in CsrfPreventionFilter.
           (kkolinko)

   Coyote
   ++++++
   fix     42181: Better handling of edge conditions in chunk
           header processing. (kkolinko)
   update  51477: Support all SSL protocol combinations in the
           APR/native connector. This only works when using the
           native library version 1.1.21 or later. (rjung)
   fix     52055 (comment 14): Correctly reset
           ChunkedInputFilter.needCRLFParse flag when the filter
           is recycled. (kkolinko)
   fix     52606: Ensure replayed POST bodies are available when
           using AJP. (markt)
   fix     52858: Fix high CPU load with SSL, NIO and sendfile
           when client breaks the connection before reading all
           the requested data. (fhanik/kkolinko)
   fix     53119: Prevent buffer overflow errors being reported
           when a client disconnects before the response has been
           fully written from an AJP connection using the APR/native
           connector. (kkolinko)
   fix     Improve InternalNioInputBuffer.parseHeaders(). (kkolinko)
   add     Implement maxHeaderCount attribute on Connector.
           It is equivalent of LimitRequestFields directive of
           Apache HTTPD. Default value is 100. (kkolinko)
   fix     In JkCoyoteHandler connector for AJP/1.3 protocol
           (in JkMain.setProperty()): Fix setting of properties
           when connector has already started for properties that
           have aliases. E.g. it now allows to change maxHeaderCount
           attribute on Connector MBean via JMX. (kkolinko)
   fix     53725: Fix possible corruption of GZIP'd output. (kkolinko)

   Jasper
   ++++++
   fix     48097 (comment 7), 53366 (comment 1): If JSP page
           unexpectedly fails to initialize PageContext instance,
           write exception to the logs instead of silent swallowing.
           (kkolinko)
   fix     52335: Only handle <\% and not \% as escaped in
           template text. (markt)
   fix     52666: Correct coercion order in EL when processing the
           equality and inequality operators. (markt)
   fix     53001: Revert the fix for 46915 since the use case
           described in the bug is invalid since it breaks the EL
           specification. (markt)
   fix     53032: Modify JspC so it extends org.apache.tools.ant.Task
           enabling it to work with features such as namespaces
           within build.xml files. (markt)

   Cluster
   +++++++
   fix     Replicate principal in ClusterSingleSignOn. (kfujino)
   fix     53513: Fix race condition between the processing of
           session sync message and transfer complete message. (kfujino)
   fix     53606: Fix potential NPE in TcpPingInterceptor. Based
           on a patch by F. Arnoud. (markt)
   fix     53607: To avoid NPE, set TCP PING data to ChannelMessage.
           Patch provided by F.Arnoud (kfujino)
   fix     Fix a behavior of TcpPingInterceptor#useThread. Do not
           start a ping thread when useThread is set to false. (kfujino)

   Web applications
   ++++++++++++++++
   fix     52243: Improve windows service documentation to clarify
           how to include # and/or ; in the value of an environment
           variable that is passed to the service. (markt)
   fix     52515: Make it clear in the Realm how-to in the
           documentation web application that digested password
           storage when using DIGEST authentication requires that
           MD5 digests are used. (markt)
   fix     52641: Remove mentioning of ldap.jar from docs. Patch
           provided by Felix Schumacher. (rjung)
   fix     Remove obsolete bug warning from windows service
           documentation page. (rjung)
   fix     52983: Remove unnecessary code that makes switching to
           other authentication methods difficult. (markt)
   fix     53158: Fix documented defaults for DBCP. Patch provided
           by ph.dezanneau at gmail.com. (rjung)
   update  Update JavaSE documentation links to point to the current
           docs.oracle.com site, instead of obsolete ones
           (download.oracle.com, java.sun.com). (kkolinko)
   update  53289: Clarify ResourceLink example that uses
           DataSource.getConnection(username, password) method.
           Not all data source implementations support it. (kkolinko)
   fix     Prevent the custom error pages for the Manager and
           Host Manager applications from being accessed directly.
           Configure custom pages for error codes 401 and 403
           in Host Manager application. (markt/kkolinko)
   fix     Correct documentation for enableLookups attribute of
           a Connector. By default DNS lookups are disabled. (kkolinko)
   fix     Fix several HTML markup errors in servlets of examples
           web application. (kkolinko)
   update  Change the index page of ROOT webapp to mention
           "manager-gui" role instead of "manager" one. (kkolinko)
   fix     53473: Correct the allowed values for the SSI option
           isVirtualWebappRelative which are true or false. (markt)
   fix     53664: Minor JNDI Howto document enhancement concerning
           mail properties. Patch provided by Mark Eggers. (schultz)
   fix     53601: Clarify that to build Apache Tomcat 6 from sources
           a Java 5 JDK is recommended. (kkolinko)
   fix     53793: Change links on the list of applications in the
           Manager to point to /appname/ instead of /appname. (kkolinko)

   Other
   +++++
   fix     49402, 52124: Fix Maven publishing script: make sure it
           finds tomcat-juli.jar and use later version of wagon-ssh.
           (jfclere)
   fix     Update Apache Commons Daemon to 1.0.10. It resolves
           52548 which meant that services created with service.bat
           did not set the catalina.home and catalina.base system
           properties. (markt, kkolinko)
   update  Update Apache Commons Pool to 1.5.7. (kkolinko)
   update  52579: Add a note about Sun's Charset.decode() bug to
           the RELEASE-NOTES file. (kkolinko)
   update  52805: Update to Eclipse JDT Compiler 3.7.2. (kkolinko)
   update  Update the native component of the APR/native connectors
           to 1.1.23 and take advantage of the simplified distribution.
           (kkolinko)
   fix     When building a Windows installer do not copy whole
           "res" folder to output/dist, but only the files that
           we need. Apply fixcrlf filter only after the files are
           copied, so that INSTALLLICENSE file had correct line
           ends. (kkolinko)
   update  Remove res/License.rtf. The file that is actually shown
           by the Windows installer is res/INSTALLLICENSE. (kkolinko)
   update  Improve RUNNING.txt. (kkolinko)
   update  Align the script that deploys Maven jars for Tomcat
           (res/maven/mvn-pub.xml) with the Tomcat 7 version, making
           full use of Nexus. (markt)
   add     53034: Add project.url and project.licenses sections to
           the POMs for the Maven artifacts. (kkolinko)
   fix     53454: Return correct content-length header for HEAD
           requests when content length is greater than 2GB. (markt)
PKG_OPTIONize kerberos as 'kerberos'. From: Matthias Kretschmer via PR#45823
with a minor edit.
N.B.: a minority of packages uses 'gssapi' as the option name. We should
decide on one option name and fix all packages to use the same, with
notification of the users and a transition mechanism. (Do we support, or
intend to support, any GSSAPI mechanisms other than Kerberos? In parallel?)
Release 8.32 30-November-2012
-----------------------------
This release fixes a number of bugs, but also has some new features. These are
the highlights:
.  There is now support for 32-bit character strings and UTF-32. Like the
   16-bit support, this is done by compiling a separate 32-bit library.

.  \X now matches a Unicode extended grapheme cluster.

.  Case-independent matching of Unicode characters that have more than one
   "other case" now makes all three (or more) characters equivalent. This
   applies, for example, to Greek Sigma, which has two lowercase versions.

.  Unicode character properties are updated to Unicode 6.2.0.

.  The EBCDIC support, which had decayed, has had a spring clean.

.  A number of JIT optimizations have been added, which give faster JIT
   execution speed. In addition, a new direct interface to JIT execution is
   available. This bypasses some of the sanity checks of pcre_exec() to give a
   noticeable speed-up.

.  A number of issues in pcregrep have been fixed, making it more compatible
   with GNU grep. In particular, --exclude and --include (and variants) apply
   to all files now, not just those obtained from scanning a directory
   recursively. In Windows environments, the default action for directories is
   now "skip" instead of "read" (which provokes an error).

.  If the --only-matching (-o) option in pcregrep is specified multiple
   times, each one causes appropriate output. For example, -o1 -o2 outputs the
   substrings matched by the 1st and 2nd capturing parentheses. A separating
   string can be specified by --om-separator (default empty).

.  When PCRE is built via Autotools using a version of gcc that has the
   "visibility" feature, it is used to hide internal library functions that are
   not part of the public API.
Updated devel/pcre to 8.32