update INN to version 2.5.4. Excerpt from the upstream release announcement:

Changes in 2.5.4

  * An up-to-date control.ctl file is provided with this release.  You
    should manually update your control.ctl file with the new information
    recorded about Usenet hierarchies.

  * A test has been improved in innwatch.ctl so that innwatch no longer
    throttles innd when no overview directory exists.  You should manually
    update your innwatch.ctl file to get this improvement.

  * Fixed a long-standing limitation on how controlchan and pgpverify were
    checking the signer of control messages.  They now properly handle the
    case of several UIDs being defined on a single PGP key, as well as the
    presence of spaces into UIDs.  In previous versions of INN, a few
    valid control messages got ignored because of that limitation
    (fido.ger.* and grisbi.* were for instance impacted).

  * As the name of the radius.conf configuration file shipped with INN for
    the nnrpd authenticator against a RADIUS server conflicts with the
    libradius package, this file is renamed to inn-radius.conf (innupgrade
    takes care of the rename during the update).

  * The attributes hash is now accessible to nnrpd Perl posting filter.
    As a result, filter_nnrpd.pl can make use of it.  Only authentication
    and access Perl hooks could previously use the attributes hash.
    Thanks to Steve Crook for this addition.

  * INN now properly builds fine with flex 2.5.36 (this version introduced
    a change of type for a variable used by INN).

  * When using funnel feeds, innfeed log files were open forever, which
    resulted in empty log files, once rotated by scanlogs.  innfeed now
    reopens its log files upon receiving a HUP signal; this signal is in
    particular sent by scanlogs during log rotation.  Thanks to Florian
    Schlichting for the patch.

  * Exploder and process channels are now reopened when "ctlinnd
    flushlogs" is used.  Otherwise, they could hold open an already
    deleted errlog file.  The issue affected in particular controlchan or
    ninpaths, running as such channels.

  * Fixed a buffer overflow when using imapfeed with more than a million
    commands during the same IMAP session.  Thanks to David Binderman for
    the bug report.

  * Fixed a segfault occurring in innd on systems where time_t is a 64-bit
    integer.  Thanks to S.P. Zeidler for the patch.

  * Fixed a segfault occurring in nnrpd when a res block was used in
    readers.conf without the program: key.

  * Fixed an issue where users were denied posting because of an
    overlapping buffer copy in a check nnrpd was doing.  Thanks to Florian
    Schlichting for the patch.

  * Fixed a regression that occurred in INN 2.5.3 regarding the path used
    by default by pullnews for its configuration file.  Instead of looking
    in the running user's home directory, it was looking in the *pathnews*
    directory set in inn.conf.  Thanks to Tony Evans for the bug report.

  * When neither wget nor ncftpget nor ncftp was found at configure time,
    the path to the simpleftp substitution program shipped with INN was
    not properly set in innshellvars, innshellvars.pl, and the
    "INN::Config" Perl module.  Thanks to Christian Garbs for the bug
    report.

  * ckpasswd no longer tries to use the ndbm compatibility layer provided
    by Berkeley DB if Berkeley DB has been built without ndbm support.
    Also add support for gdbm libraries in ckpasswd.

  * Fixed a Perl warning in inncheck; using "defined(@array)" has been
    deprecated since Perl 5.16.

  * Fixed the occurrence of an unexpected "cant select" error generated by
    innd.  Thanks to Paul Tomblin for having caught that long-standing
    issue.

  * When building INN with Berkeley DB support, no longer add -L/usr/lib
    to the linker include flags; unconditionally adding it may break the
    build on systems using lib32 and lib64 directories.

  * On a fresh INN install, motd.innd and motd.nnrpd are no longer
    installed by default.  Instead, samples for these files are provided
    in *pathetc*, named differently so that their default contents are not
    displayed to news clients before they get customised.

  * Other minor bug fixes and documentation improvements (like the
    addition in the readers.conf man page of the log: and program:
    parameters in res blocks, and the include directive).
Update "wireshark" package to version 1.10.9. Changes since 1.10.8:
- The following vulnerabilities have been fixed.
  * wnpa-sec-2014-08
    The Catapult DCT2000 and IrDA dissectors could underrun a
    buffer.
    Versions affected: 1.10.0 to 1.10.8
  * wnpa-sec-2014-09
    The GSM Management dissector could crash. (Bug 10216)
    Versions affected: 1.10.0 to 1.10.8
  * wnpa-sec-2014-10
    The RLC dissector could crash. (Bug 9795)
    Versions affected: 1.10.0 to 1.10.8
  * wnpa-sec-2014-11
    The ASN.1 BER dissector could crash. (Bug 10187)
    Versions affected: 1.10.0 to 1.10.8
- The following bugs have been fixed:
  * GSM MAP: ensure that p2p_dir is always initialized before
    calling GSM SMS dissector (Bug 10234)
  * BFCP: include padding length in calculation of correct
    attribute length (Bug 10240)
  * GTP: allow empty Data Record Packet IE (Bug 10277)
  * WebSocket: increase max unmask payload size to 256K and
    indicate that packet is truncated is going above the new
    limit (Bug 10283)
Note update of the "wireshark" package to version 1.10.9.
Remove ULIMIT_RESOURCES again, it didn't help (enough).
Import xml-1.3.13 as textproc/hs-xml,
packaged for wip by pho.

A simple XML library.
Added textproc/hs-xml version 1.3.13
Import tagsoup-0.13.1 as textproc/hs-tagsoup,
packaged for wip by pho.

TagSoup is a library for parsing HTML/XML. It supports the HTML 5
specification, and can be used to parse either well-formed XML, or
unstructured and malformed HTML from the web. The library also provides
useful functions to extract information from an HTML document, making it
ideal for screen-scraping.

Users should start from the Text.HTML.TagSoup module.
Added textproc/hs-tagsoup version 0.13.1
Import cgrep-6.4.5 as textproc/hs-cgrep,
packaged for wip.

Cgrep: a context-aware grep for source codes
Added textproc/hs-cgrep version 6.4.5
+ hs-cgrep, hs-tagsoup, hs-xml.
Re-import webkit-gtk-1.10.2nb17 as www/webkit1-gtk, in preparation
for v2 of the package.

WebKit is an open source web browser engine. WebKit is also the name of
the Mac OS X system framework version of the engine that's used by
Safari, Dashboard, Mail, and many other OS X applications. WebKit's HTML
and JavaScript code began as a branch of the KHTML and KJS libraries
from KDE.

This is the GTK2+ port of major version 1 of the engine.
Import webkit-gtk3-1.10.2nb12 as www/webkit1-gtk3 to match webkit1-gtk.

WebKit is an open source web browser engine. WebKit is also the name of
the Mac OS X system framework version of the engine that's used by
Safari, Dashboard, Mail, and many other OS X applications. WebKit's HTML
and JavaScript code began as a branch of the KHTML and KJS libraries
from KDE.

This is the GTK3+ port of major version 1 of the engine.
+ webkit1-gtk*
Switch to webkit1-gtk* in preparation for package update to v2.
Packages can switch to that version when they're tested to build with it.
Update to 2.4.4, the latest stable release. Based on work by
Leonardo Taccari in wip.

Changes:

=================
WebKitGTK+  2.4.4
=================

What's new in WebKitGTK+ 2.4.4?

  - Fix annoying popup shown when visiting 8tracks.com.
  - Expose links rendered as blocks to accessibility.
  - Make text inside "span" block in "a" block accessible.
  - Implement windowed plugins visibility.
  - Fix the GObject introspection annotations of webkit_web_resource_get_data_finish().
  - Fix a crash in TSymbolTableLevel::~TSymbolTableLevel when WebKit
    is built with GCC 4.9.
  - Fix a crash when playing a video in facebook.
  - Several user agent changes to fix Google Maps and a few other issues.
  - Allo to include WebKitVersion.h from web extensions API too.
  - Fix web process leak when closing pages with network process enabled.
  - Fix the build with --disable-webgl --disable-accelerated-compositing.

=================
WebKitGTK+  2.4.3
=================

What's new in WebKitGTK+ 2.4.3?

  - Fix video playback rate used when resuming in GStreamer media backend.
  - Use GstMetaVideo as announced by WebKitVideoSink to fix some
    decoders and filters that rely on buffer's meta rather that in the
    caps structures.
  - Do not pass a valid pointer as redirected-response parameter to
    WebKitWebPage::send-request signal when not redirecting.
  - Add missing files to the build required for building in Windows.

=================
WebKitGTK+  2.4.2
=================

What's new in WebKitGTK+ 2.4.2?

  - Correctly handle TLS errors in case of a server redirection.
  - Fix a crash when submitting a form.
  - Fix several JavaScriptCore crashes when browsing facebook.
  - Fix a crash when closing a page with windowed plugins.
  - Fix a crash after getting web view context property with g_object_get.
  - Fix a new[] delete[] mismatch in SocketStreamHandleSoup.

=================
WebKitGTK+  2.4.1
=================

What's new in WebKitGTK+ 2.4.1?

  - Add CORS support for media elements to GStreamer media backend.
  - Fix wrong flags used in fcntl call that failed in FreeBSD.
  - Correctly handle HTTP authentication for cross-origin requests.
  - Correctly handle cookies for cross-origin requests.
  - Fix a crash in the plugin process with some plugins that redefine
    NPN functions.
  - Fix acceletared video when the video format has an alpha component.
  - Fix sites using geolocation after reloading when using Geoclue2.
  - Append Safari version to UserAgent to fix redirections in
    www.globalforestwatch.org.

=================
WebKitGTK+  2.4.0
=================

What's new in WebKitGTK+ 2.4.0?

  - Fix infinite loop in WebProcess due to a race condition that can
    happen when the socket event source is cancelled.
  - Fix more runtime critical warnings about main loop sources not found
    when trying to remove them.
  - Lower the timeout used when waiting for the ShoulTerminate reply
    in the WebProcess to release unused processes earlier.
  - Fix the build for non X11 platforms.

=================
WebKitGTK+ 2.3.92
=================

What's new in WebKitGTK+ 2.3.92?

  - Add support for Geoclue2.
  - Always finalize the soup session object when the networking
    process finishes.
  - Make sure the web process doesn't finish if there's an ongoing
    print operation.
  - Fix runtime critical warnings about main loop sources not found
    when trying to remove them.
  - Fixed several crashes in JavaScriptCore when visiting facebook.
  - Improve CSS properties performance.
  - Fix web process leak when the WebView is leaked by the application.
  - Fix the build when using vala bindings due to UI and web process
    main headers included together.

=================
WebKitGTK+ 2.3.91
=================

What's new in WebKitGTK+ 2.3.91?

  - Use a persistent cache for plugins metadata to avoid blocking the
    UI while scanning plugins during page loads.
  - Make the web inspector always load in multiprocess mode.
  - Add a pkg-config file for WebKit2 web process extensions API.
  - Fix the generation of g_return macros for GObject DOM bindings in
    some cases where non pointer parameters were handled as pointers.
  - Enable DFG_JIT on FreeBSD.
  - Use system default compiler instead of gcc when building DOM
    generated sources.
  - Several build fixes for FreeBSD.
  - Fix the build with wayland support enabled.

=================
WebKitGTK+ 2.3.90
=================

What's new in WebKitGTK+ 2.3.90?

  - Add initial touch support to WebKit2.
  - Add API to create a WebKitWebView related to another one to share
    the same Web Process.
  - Create the inspector view using the same web process as the
    inspected page.
  - Fix wrong mix of fcntl commands and flags in WebKit2.
  - Fix marshaller used in WebKitWebPage::document-loaded signal.
  - Fix a crash in GStreamer media backend when playback rate is too high.
  - Fix the build on FreeBSD.

=================
WebKitGTK+  2.3.5
=================

What's new in WebKitGTK+ 2.3.5?

  - Add API to allow setting a multiple web process model.
  - Add API to pass initialization user data from the UI process to
    the web extensions.
  - Implement languages support with network process.
  - Implement custom URI schemes with network process.
  - Disable MemoryCache when the DOCUMENT_VIEWER cache model is set.
  - Expose aria-describedby with ATK_RELATION_DESCRIBED_BY.
  - Fix a bug that prevented from entering fullscreen again in HTML5
    videos after fullscreen was left with ESC.
  - Set playback rate when pipeline is not ready in GStreamer media backend.
  - Fix a lockup when playing Icecast radio in GStreamer media backend.
  - Fix a web process crash when a download is cancelled.
  - Fix several crashes when printing via JavaScript.

=================
WebKitGTK+  2.3.4
=================

What's new in WebKitGTK+ 2.3.4?

  - Add API to WebKitResponsePolicyDecision to check if the MIME type
    can be shown.
  - Enable fullscreen API by default.
  - Fix handling of HTTP certificates with the network process enabled.
  - Fix downloads with the network process enabled.
  - Fix handling of cookies when network process is enabled.
  - Remove the partial file downloaded when the download operation
    fails or is cancelled.
  - Make WebKitWebPage::send-request signal work after a redirect.
  - Add xdg.origin.url extended attribute to downloads in WebKit2.
  - Fix WebGL with GLES.
  - Translation updates: Dutch, Brazilian Portuguese.

=================
WebKitGTK+  2.3.3
=================

What's new in WebKitGTK+ 2.3.3?

  - Initial Network Process support disabled by default.
  - CSS regions are now enabled by default.
  - Support right-side attachment of the inspector in WebKit2.
  - Add spatial navigation setting to WebKit2 GTK+ API.
  - Add media source setting to both WebKit1 and WebKit2.
  - Support custom types for drag and drop data.
  - Avoid extra copy when drawing images in cairo backend.
  - Fix scrolling in combo boxes when the dropdown menu is larger than
    the screen.
  - Render AC layers also when using GTK+ 2 in WebKit1.
  - Fix return value of webkit_web_view_get_view_source_mode() in
    WebKit1.
  - Emit stream-start, caps and segment events in webkitwebaudiosrc
    element.
  - Fix seeking on media content provided by servers not supporting
    range requests.
  - Fix a crash when using media source in GStreamer media backend.
  - Fix an X11 error when the backing store surface is destroyed.
  - Expose splitter elements with ATK_ROLE_SEPARATOR to accessibility.
  - Expose accessibility objects WAI-ARIA landmark roles.
  - Expose accessibility objects with ATK_ROLE_ARTICLE.
  - Expose accessibility objects with ATK_ROLE_CHECK_MENU_ITEM.
  - Remove support for GStreamer 0.10.
  - Memory leak due to incorrect use of gst_tag_list_merge in
    TextCombinerGStreamer.
  - Translation updates: Brazilian Portuguese.

=================
WebKitGTK+  2.3.2
=================

What's new in WebKitGTK+ 2.3.2?

  - Add enable-media-stream setting to WebKit2 GTK+ API.
  - Fix a crash when load fails due to SSL errors in WebKit2.
  - Fix a crash when printing via JavaScript in WebKit2.
  - Add support audio and video tracks to GStreamer media backend.
  - Properly expose video and audio elements to accessibility.
  - Fix invalid cairo matrix when drawing too small surfaces.
  - Avoid extra copy when drawing images using cairo.
  - Do not omit playback rate when seeking in GStreamer media backend.
  - Several build fixes on non-linux platforms.

=================
WebKitGTK+  2.3.1
=================

What's new in WebKitGTK+ 2.3.1?

  - Add WebKit2 API for TLS errors.
  - Make EventTarget interface introspectable in GObject DOM bindings.
  - Expose WheelEvent in the GObject DOM bindings API.
  - Generate API documentation for GObject DOM bindings.
  - Respect image orientation by default.
  - Enable text edition undo/redo operations support in WebKit2.
  - Add suppport for blob URLs to GStreamer media backend.
  - Add support for subtitles.
  - Allow running the web process with an arbitrary prefix command in
    debug builds.
  - Expose image links properly to accessibility.
  - Expose title and alternative text for links in image maps to
    accessibility.
  - Cancel the current active WebKitAuthenticationRequest on load
    fail.
  - Fix several memory leaks.

=================
WebKitGTK+  2.1.4
=================

What's new in WebKitGTK+ 2.1.4?

  - Add WebKitWebView::authenticate signal to WebKit2 GTK API.
  - Expose KeyboardEvent in GObject DOM bindings.
  - Implement attributesOfChildren() for AccessibilityUIElement.
  - Implement allAttributes() for AccessibilityUIElement.
  - Fix issues with edge cases when getting offsets for a text range
    in AtkText.
  - Remote inspector server now notifies about errors when loading
    resurces.
  - Disable HTTP request "Accept-Encoding:" header field on gstreamer
    source element to avoid receiving the wrong size when retrieving
    data.
  - Fix the final position when receiving several seek calls in a row,
    in GStreamer media backend.
  - When rendering accelerated video, upload onto the texture only the
    buffer to be painted.
  - Fix response property definition of WebKitResponsePolicyDecision.
  - Fix a crash in WebKit1 when the WebView is created and destroyed
    too fast.
  - Fix a crash in UI process when the web process crashes.
  - Fix a crash in WebKit2 when a context menu item is selected after
    the page has been closed.
  - Fix a crash when getting the editor command for a key event
    initiated by the web inspector.
  - Fix the build when building with GTK+ 2.
  - Fix several memory leaks.

=================
WebKitGTK+  2.1.3
=================

What's new in WebKitGTK+ 2.1.3?

  - Add support for preload="metadata" to GStreamer media backend.
  - Do not expose '\n' for wrapped lines with ATK_TEXT_BOUNDARY_CHAR.
  - Fix potential race condition in GStreamer media backend when
    getting the video sink caps.
  - Fix performance issues rendering a page with animations.
  - Several fixes and improvements in GStreamer video accelerated
    compositing support.
  - Adjust internal size on GStreamer HTTP source element when
    receiving data if necessary.
  - Actually disable the memory cache when DOCUMENT_VIEWER cache model
    is used in WebKit1.
  - Fix runtime critical warning in WebKit2 when unloading a module
    that failed to load.
  - Fix several memory leaks.

=================
WebKitGTK+  2.1.2
=================

What's new in WebKitGTK+ 2.1.2?

  - Set the subresources load priority using new libsoup API available
    in 2.43.
  - Do not use X11 WidgetBackingStore implementation in Wayland.
  - Support using GLContext from multiple threads.
  - Make sure gstreamer source element is thread-safe.
  - Prevent race condition when pad caps is set on gstreamer player.
  - Invalidate the ProcessLauncher when the process is terminated
    before it has finished launching
  - Use custom cairo code instead of Pango API for highlighting
    misspelled words.
  - Respect PKG_CONFIG env variable when generating gtk-doc.
  - Fix a crash due to an assert in gstreamer backend when seeking.
  - Fix memory leak when web process is terminated.
  - Translation updates: Telugu, Hindi, Kannada, Odia.

=================
WebKitGTK+  2.1.1
=================

What's new in WebKitGTK+ 2.1.1?

  - Add webkit_uri_scheme_request_finish_error to WebKit2 GTK+ API.
  - Add a setting to control whether or not accelerated 2D canvas is
    enabled in WebKit2.
  - Add a setting to WebKit2 to allow sending console log messages to
    stdout.
  - Always use EGL to create the GL context when running on Wayland.
  - Fix rendering of WebKitWebView child widgets with recent GTK+.
  - Notify the web process in WebKitURISchemeRequest when we fail to read
    from the user InputStream.
  - Fixed race conditions closing the socket descriptor when the web
    process crashes.
  - Add video accelerated compositing support to the GStreamer backend.
  - Add support for audio/speex MIME type to the GStreamer backend.
  - Fix seek after video finished in GStreamer backend.
  - Initialize WebKitWebPlugin path to prevent double-free in WebKit1.
  - Fix several GObject instrospection warnings.
  - Fixed several memory leaks.
Remove webkit-gtk3 until someone packages it for v2 of webkit-gtk.
Updated www/webkit-gtk to 2.4.4
Fix conflict.
Switch to v2 of webkit-gtk. Bump PKGREVISION.