Note update of mail/postfix package to 2.9.8.
- postfix-2.9.7.
+ php-sugarcrm-6.5.15, postfix-2.10.2.
Update typo3-60 package to 6.0.9.

This release contains a security fix, please refer TYPO3 Security Bulletin
TYPO3-CORE-SA-2013-003: TYPO3-CORE-SA-2013-003: Incomplete Access Management
and Remote Code Execution Vulnerability in TYPO3 Core.

http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-003/

2013-09-04  8506ff6                  [RELEASE] Release of TYPO3 6.0.9 (TYPO3 Release Team)
2013-09-04  952974b  #50886          [SECURITY] Prohibit accessing storage 0 from backend UI (Steffen Ritter)
2013-09-04  1e710fb  #50883          [SECURITY] Identifiers may refer to resources outside the storage (Steffen Ritter)
2013-09-04  6073618  #51495          [SECURITY] Deny arbitrary code execution possibility for editors (Helmut Hummel)
2013-09-04  b3e53a0  #51327          [SECURITY] Refactor and fix FAL user permission handling (Helmut Hummel)
2013-09-04  31d5b88  #51326          [SECURITY] Add possibility to en-/disable file permission checks (Helmut Hummel)
2013-09-04  02aa25d  #51079          [SECURITY] Check permissions in all actions of ResourceStorage (Steffen Ritter)
2013-09-03  77701ad                  [TASK] CGL Cleanup of ResourceStorage (Helmut Hummel)
2013-09-03  ec0a99c  #49842          [BUGFIX] Storage is offline but is still used (Frans Saris)
2013-09-03  1cf9d3c  #51672          [BUGFIX] Fix fatal error in ExtendedFileUtility (Helmut Hummel)
2013-09-01  55724fb  #31998          [BUGFIX] Faulty check for missing SMTP port (Tomita Militaru)
2013-08-31  c73e4fe  #50424          [BUGFIX] Backend Layout Grid Wizard not fully visible in Mac Firefox 22 (Roland Schenke)
2013-08-30  0547211  #51585          [BUGIFX] Missing argument in EM List view VH (Francois Suter)
2013-08-29  2b86070  #51328          [BUGFIX] Only log file/directory actions which were done (Helmut Hummel)
2013-08-29  dc01b69  #51544          [BUGFIX] Sprite manager cache improvement (Christian Kuhn)
2013-08-29  01acc60  #50707          [BUGFIX] TCA 'group' selectedListStyle with 'width' breaking layout (Ernesto Baschny)
2013-08-29  2727a6a  #51460          [BUGFIX] Database integrity check fatal error (Stefan Fürst)
2013-08-29  1a04377  #51474          [BUGFIX] Cast autoload and classAliasMap to Array (Michel Georgy)
2013-08-29  f1ab499  #51509          [BUGFIX] Add missing API method FileInterface::getNameWithoutExtension (Ernesto Baschny)
2013-08-28  2c8a999  #36244          [BUGFIX] Exclude empty passwords from password hashing check (Nicole Cordes)
2013-08-27  05fccd0  #50234          [TASK] Make the extension titles link to the configuration (Nicole Cordes)
2013-08-27  774a1e0  #51304          [BUGFIX] Hide translations in categories selector (Francois Suter)
2013-08-27  ed32255  #50870          [BUGFIX] Tests in Localization\Parser\LocallangXmlParserTest fail (Nicole Cordes)
2013-08-27  f7e4a7e  #50760          [BUGFIX] Escape title tag of image links (Alexander Stehlik)
2013-08-27  7bd1009  #25327,#37026   [BUGFIX] Page tree filtering broken in IE7 & IE8 (Aske Ertmann)
2013-08-25  a735101  #51209          [BUGFIX] Ignore permission checks for processed files (Helmut Hummel)
2013-08-20  910d820  #37892          [BUGFIX] No version overlay should be done for sys_language (Lienhart Woitok)
2013-08-20  19a811d  #46989          [BUGFIX] Files with unclean path indexed multiple times (Stefan Neufeind)
2013-08-18  fb7b686  #50614          [TASK] FilesContentObject::stdWrapValue(): only execute stdWrap once (Stefan Neufeind)
2013-08-18  d368497  #43428          [BUGFIX] Language-module icons need to display in correct size (Stefan Neufeind)
2013-08-17  fbbad86  #30636          [BUGFIX] TCA: subtypes_addlist not processed (Benjamin Mack)
2013-08-17  f39a79d  #47844          [BUGFIX] Query parameters of external link may get altered (Stanislas Rolland)
2013-08-16  a09dc5f  #51115          [TASK] Disable scheduler-tests if EXT:scheduler not loaded (Anja Leichsenring)
2013-08-16  8dfaf9c  #51004          [BUGFIX] Fix file permission methods in BackendUserAuthentication (Helmut Hummel)
2013-08-16  db51023  #51007          [BUGFIX] Fix inconsistencies in getTSConfig in BackenuserAuth (Helmut Hummel)
2013-08-16  221a435                  Revert "[BUGFIX] Fix inconsistencies in getTSConfig in BackenuserAuth" (Helmut Hummel)
2013-08-16  8b33a0d                  Revert "[BUGFIX] Fix file permission methods in BackendUserAuthentication" (Helmut Hummel)
2013-08-15  d3b7851  #51007          [BUGFIX] Fix inconsistencies in getTSConfig in BackenuserAuth (Helmut Hummel)
2013-08-15  329645c  #51004          [BUGFIX] Fix file permission methods in BackendUserAuthentication (Helmut Hummel)
2013-08-14  61506bb  #46094          [BUGFIX] Avoid usage of subheader in mailform (Francois Suter)
2013-08-12  d7ef5a9  #47806          [BUGFIX] Typing after abbr or acronym tag is difficult (Stanislas Rolland)
2013-08-12  c8a83e7  #50193          [BUGFIX] FAL: Image Processing doesn't respect GFX "thumbnails_png" (Benjamin Mack)
2013-08-12  7b16232  #51010          [BUGFIX] Allow reading files if storage is not browsable (Helmut Hummel)
2013-08-11  f92dbbd  #51005          [BUGFIX] Take into account all file and folder permissions (Helmut Hummel)
2013-08-11  4943a8f  #50844          [BUGFIX] Failing tests in Resource\Driver\LocalDriverTest on Windows (Nicole Cordes)
2013-08-11  ac39140  #51012          [BUGFIX] Missing \TYPO3\CMS\Core\Utility\ in ResourceFactory (Wouter Wolters)
2013-08-11  55446c5  #51011          [TASK] Add signal in ResourceFactory for storage creation (Helmut Hummel)
2013-08-11  271e801  #44910          [BUGFIX] LocalDriver: Recursive file listing is broken (Andreas Wolf)
2013-08-11  4978ea7  #50502          [BUGFIX] rtehtmlarea acronym error with static_info_tables 6.0+ (Stanislas Rolland)
2013-08-08  150e458  #48523          [BUGFIX] Reports module tries to load not-installed extension (Wouter Wolters)
2013-08-08  8ed8066  #50868          [BUGFIX] number_format() expects parameter 1 to be double (Wouter Wolters)
2013-08-07  98bc16b  #50568          [BUGFIX] Ignore case in file extension filter (Alexander Stehlik)
2013-08-07  20df928  #50872          [BUGFIX] Correctly set user storage permissions (Helmut Hummel)
2013-08-07  c941199  #50867          [TASK] Introduce AbstractHierarchicalFilesystemDriver (Steffen Ritter)
2013-08-07  f3f221d  #50843          [BUGFIX] Failing Resource\FactoryTest on Windows systems (Nicole Cordes)
2013-08-07  c75eefb  #47106          [BUGFIX] Indexing of external files does not work in indexed_search (Wouter Wolters)
2013-08-07  80aeb3a  #50562          [BUGFIX] Callback in CrawlerHook of indexed_search sysext buggy (Marius Büscher)
2013-08-07  647d075  #50812          [BUGFIX] Backup singletons in unit tests prior to other setUp operations (Nicole Cordes)
2013-08-06  5250c54  #50628          [BUGFIX] Fix EmConfUtility::fixEmConf conflicts generation (Sascha Egerer)
2013-08-06  e3d9d7b  #50125          [BUGFIX] Incorrect check for empty folder (Philipp Gampe)
2013-08-06  0f2a29d  #50615          [TASK] Use magic __CLASS__ in getInstance()-methods (Stefan Neufeind)
2013-08-06  ad9328c  #50751          [BUGFIX] Fix empty href parameter (Anja Leichsenring)
2013-08-06  9e407f0  #50809          [BUGFIX] Fix failing test in StorageRepositoryTest (Anja Leichsenring)
2013-08-06  449dc72  #50803          [BUGFIX] Fatal error: "enableFields on non-object" in extension manager (Ernesto Baschny)
2013-08-04  3cd1045  #50466          [BUGFIX] MySQL: Use ENGINE (not TYPE) for storage-engine (Stefan Neufeind)
2013-08-01  db1c38b  #43893          [BUGFIX] selected = 1 doesn't work in FormContentObject (Wouter Wolters)
2013-08-01  f827fc9  #47123          [BUGFIX] Suppress double page entry in temporary mounted pagetree (Frank Frewer)
2013-07-31  2feccc5  #36031          [TASK] Provide information about import action in TCEmain to hooks (Stefan Galinski)
2013-07-31  07f3578  #43631          [BUGFIX] RTE wizard can't "save document and view page" (Stanislas Rolland)
Note update of www/typo3_60 package to 6.0.9.
Update to 1.3.1:

Serf 1.3.1 [2013-08-15, from /tags/1.3.1, r????]
  Fix issue 77: Endless loop if server doesn't accept Negotiate authentication.
  Fix issue 114: ssl/tls renegotiation fails
  Fix issue 120: error with ssl tunnel over proxy with KeepAlive off and
                 Basic authentication.
  Fixed bugs with authentication (r2057,2115,2118)
  SCons-related fixes:
   Fix issue 111: add flag to set custom library path
   Fix issue 112: add soname
   Fix issue 113: add gssapi libs in the serf pc file
   Fix issue 115: Setting RPATH on Solaris broken in SConstruct
   Fix issue 116: scons check should return non-zero exit staths
   Fix issue 121: make CFLAGS, LIBS, LINKFLAGS and CPPFLAGS take a space-
                   separated list of flags.
   Fix issue 122: make scons PREFIX create the folder if it doesn't exist
   Mac OS X: Fix scons --install-sandbox
   Solaris: Fix build with cc, don't use unsupported compiler flags
  Require SCons version 2.3.0 or higher now (for the soname support).

Serf 1.3.0 [2013-07-23, from /tags/1.3.0, r2074]
  Fix issue 83: use PATH rather than URI within an ssltunnel (r1952)
  Fix issue 108: improved error reporting from the underlying socket (r1951)
  NEW: Switch to the SCons build system; retire serfmake, serf.mak, autotools
  Improved Basic and Digest authentication:
    - remember credentials on a per-server basis
    - properly manage authentication realms
    - continue functioning when a server sets KeepAlive: off
  Windows: add support for NTLM authentication
  Improved 2617 compliance: always use strongest authentication (r1968,1971)
  Fixed bugs with proxy authentication and SSL tunneling through a proxy
  Fixed bugs the response parser (r2032,r2036)
  SSL connection performance improvements
  Huge expansion of the test suite
Updated www/serf to 1.3.1
Update to 2.32.0:

New features (July 2013)

Graphviz now supports the star node shape and a variation of linear
gradient fill with no gradient (thus, two solid colors) where the
user can specify the proportion using a colorList type for fillcolor.


New Release 2.30 (January-February 2013)

The 2.30 Release marks the switch over from the original Graphviz
graph library to the new cgraph library. If this works as planned,
the user should see no differences. The advantage of the library
is that it is much more flexible for the programmer, with a cleaner
API and support for dynamic data structures. This latter, in addition
to allowing easier mixing of algorithms, has the potential to
greatly reduce memory use in Graphviz.

One side-effect of the new library is a new level ranking algorithm
for dot. This algorithm has fewer constraints, so it is now possible
for a node to be in a cluster and be involved in a rank=same
constraint.

New features (November 2012)

We have provided Graphviz with some additional graphics, which can
be used to provide more semantic information in a graph or enhance
its aesthetics. These include gradient fill for nodes and graphs;
striped and wedged fills, so the amount of each color can be used
to represent some percentage; new node shapes pertinent to the
synthetic biology community (Thanks to Jenny Cheng); and curved
edge routing.

New features (September 2011)

We added lightweight edge labels (xlabel) and tapered edges (as a
style). There was a recent paper by Holten et al about a study of
the readability of various edge styles. We're working on some
examples and documentation. Here are some examples. (We need a
better example for xlabels, because they can float, and aren't
stuck to the upper left of the node.)

New Release 2.28 (Summer 2011)

The 2.28 release of Graphviz incorporates GvMap (formerly GMap, or
"graphs as maps"), an invention by Emden Gansner, Yifan Hu, and
Stephen Kobourov. Try the cool interactive demos showing maps of
music, TV, books, and more.

For people (like us) that care about such matters, we worked pretty
hard to tweak the font rendering code, to eliminate glitches causing
off-center labels or the ransom-note effect.

John Ellson finished porting Graphviz to Solaris OpenCSW.

We changed our license to the EPL (Eclipse Public License). (A
wikipedia article attempts to explain the differences, which we
believe to be fairly limited but the change may help some commercial
licensees.)
Updated graphics/graphviz to 2.32.0
Update to 1.0.8:

This release moves twm slightly into the 1990's, with ANSI C89 function
declarations, removal of ancient casts left over from the era before
function prototypes, C89 standard signal handlers, and the loss of
support for running on Apple's A/UX Unix for the 680x0 Macs.

It also includes some bug fixes and man page formatting improvements,
amongst all the code cleanups.

Alan Coopersmith (16):
      Terminate execl() arguments with NULL instead of 0
      Constification cleanup - fix dozens of gcc warnings
      Use (void) to declare functions that take no arguments, instead of ()
      Convert remaining K&R function declarations to C89 style
      Make various helper & callback functions private to session.c
      unifdef macII - drop support for A/UX 2.0
      Remove unused global variable gotFirstSave
      Make some more previously global variables into file-scoped statics
      Assume C89 signal handlers, returning void
      Make more functions static that aren't called from other files
      Delete trailing whitespace in non *.[ch] source files
      Stop casting pointers to (char *) when freeing them
      Stop casting return values from malloc & calloc
      AddWindow: Use NULL instead of 0 for null pointer check
      Replace malloc(strlen()+1); strcpy(); pairs with strdup()
      twm 1.0.8

Colin Harrison (1):
      Syntax error in recent twm commit

Egbert Eich (1):
      Fix SEGV if CreateColormapWindow() returns NULL.

Eric S. Raymond (1):
      Don't rely on the ability to set tab stops.
Updated wm/twm to 1.0.8
Update to 1.17.1:

This release of the common autoconf macros for X.Org software fixes some
bugs introduced in XORG_TESTSET_CFLAG in version 1.17.0 of the macros,
including one that caused detection of incorrect compiler flags to fail
in some cases.

Most end-users will not need to install this software - it's only needed
to generate or regenerate the autoconf files in X.Org packages, such as
when building from a git checkout or from a tarball after patching files
such as configure.ac.

Adam Jackson (1):
      configure: Remove AM_MAINTAINER_MODE

Alan Coopersmith (2):
      Strip trailing whitespace
      Version bump: 1.17.1

Chris Wilson (1):
      Use the right variable names for the compiler flags in XORG_TESTSET_CFLAG

Colin Walters (1):
      autogen.sh: Implement GNOME Build API

Yaakov Selkowitz (1):
      Fix spacing in XORG_TESTSET_CFLAG
Updated devel/xorg-util-macros to 1.17.1
Update to 1.1.3:

This minor maintenance release consists mainly of small bug fixes, various
cleanups to the code, including dropping support for a number of platforms
last seen decades ago, and build configuration fixes and improvements.

Alan Coopersmith (29):
      unifdef -U__UNIXOS2__
      Use <dirent.h> everywhere instead of checking for X_NOT_POSIX/SYSV/USG/etc.
      Fix numerous typos & spelling errors in comments and message strings
      Convert to X.Org standard code style
      unifdef -UCRAY
      unifdef -UUTEK -Uapollo -ULynx
      unifdef -Uultrix
      unifdef -UmacII
      unifdef -Uhcx
      unifdef SYSV386 (really defined(SYSV) && defined(i386))
      Remove XConsortium/XFree86/XdotOrg RCS/CVS id tags
      Replace StrAlloc with XtNewString
      constify char *'s to clear compiler complaints
      Remove unused NULLSTR macro
      Mark PrintError as noreturn
      Use remove() instead of unlink()
      Use strchr() & strrchr() instead of index() & rindex()
      Stop checking for OSMINORVERSION in list of Solaris man page sections
      Increase default text window sizes from 600 to 780 pixels
      Fix scroll wheel when CapsLock, NumLock or other modifiers are on
      Provide a fallback mkstemp so we don't need to maintain 2 API versions
      configure: check for groff and enable groff extensions if found
      Fix file leak in ConstructCommand()
      Close file pointer before setting it to NULL in Format()
      Check for InitPsuedoGlobals() returning NULL
      Check for CreateManpage returning NULL
      Resync Solaris man page section list with current Solaris xman
      COPYING: Remove notice for Xprint code removed in 5722ca728763e7
      xman 1.1.3

Christos Zoulas (1):
      Rename PIC to ROFF_PIC to avoid problems with "-DPIC" compilations.

Eric S. Raymond (1):
      Eliminate use of tab stops.  Use real TBL markup where indicated.
Updated x11/xman to 1.1.3
Adjust example config file for Apache 2.4
Bump PKGREVISION.

* Attempt to fix the missing JDK native libraries to make jmap work.
  Based on patches from dsainty@.
  Tested on NetBSD/i386 and amd64.
Updated lang/sun-jdk6 to 6.0.45nb1
Updated lang/sun-jdk7 to 7.0.25nb1
Remove -Dmacosx (on OSX only, obviously).

Reported by J. Lewis Muir on pkgsrc-users@ to fix build on 10.8.
Does not change behavior on 10.7; build fails much later at same place
either way.
Recursive PKGREVISION bump for serf-1.3.x (major shlib change).
Noted by tron.
Update to 1.21.2

Upstream changes:
Changes since 1.21.1[edit | edit source]
SECURITY: Fix extension detection with 2 .'s
SECURITY: Support for the 'gettoken' parameter to action=block and action=unblock, deprecated since 1.20, has been removed.
SECURITY: Sanitize ResourceLoader exception messages
Purge upstream caches when deleting file assets.
Unit test suite now runs the AutoLoader tests. Also fixed the autoloading entry for the PageORMTableForTesting class though it had no impact.