Update to 4.1.1

Changelog:
Changes from 4.1.0 to 4.1.1
---------------------------

1. The "stat" extension now includes a "devbsize" element which indicates
   the units for the "nblocks" element.

2. The extension facility now works on MinGW. Many of the extensions can be
   built and used directly.

3. A number of bugs in the pretty-printing / profiling code have been fixed.

4. Sockets and two-way pipes now work under MinGW.

5. The debugger now lists source code correctly under Cygwin.

6. Configuration and building with the Mac OS X libreadline should work now.

7. The -O option now works again.

8. The --include option, documented since 4.0, now actually works.

9. Infrastructure updated to automake 1.13.4, bison 3.0.2, and
   libtool 2.4.2.418.

10. The configure script now accepts a --disable-extensions option,
    which disables checking for and building the extensions.

11. The VMS port has been considerably improved. In particular config.h
    is now generated by a DCL script. Also, the extension facility works
    and several of the extensions can be built and used. Currently, the
    extension facility only works on Alpha and Itanium.

12. The API now provides functions pointers for malloc(), calloc(),
    realloc() and free(), to insure that the same memory allocation
    functions are always used. This bumps the minor version by one.

13. The printf quote flag now works correctly in locales with a different
    decimal point character but without a thousands separator character.
    If the thousands separator is a string, it will be correctly added
    to decimal numbers.

14. The readfile extension now has an input parser that will read whole
    files as a single record.

15. A number of bugs have been fixed. See the ChangeLog.
Updated lang/gawk to 4.1.1
Add portals option
Update to 0.463

Status:
Unadjusted glyph: Unicode 7b27-9398
Updated fonts/umefont-ttf to 0.463
Update to 7.0.54

* Fix CVE-2014-0119

Changelog:
Tomcat 7.0.54 (violetagg)

    Catalina

        fix	Fix custom UTF-8 decoder so that a byte of value 0xC1 is always rejected immediately as it is never valid in a UTF-8 byte sequence. Update UTF-8 decoder tests to account for UTF-8 decoding improvements in Java 8. The custom UTF-8 decoder is still required due to bugs in the UTF-8 decoder provided by Java. Java 8's decoder is better than Java 7's but it is still buggy. (markt)
        fix	56027: Add more options for managing FIPS mode in the AprLifecycleListener. (schultz/kkolinko)
        fix	56321: When a WAR is modified, undeploy the web application before deleting any expanded directory as the undeploy process may refer to classes that need to be loaded from the expanded directory. If the expanded directory is deleted first, any attempt to load a new class during undeploy will fail. (markt)
        fix	56339: Avoid an infinite loop if an application calls session.invalidate() from the session destroyed event for that session. (markt)
        update	56365: Simplify file name pattern matching code in StandardJarScanner. Ignore leading and trailing whitespace and empty strings when configuring patterns. Improve documentation. (kkolinko)
        fix	56369: Ensure that removing an MBean notification listener reverts all the operations performed when adding an MBean notification listener. (markt)
        add	56382: Information about finished deployment and its execution time is added to the log files. Patch is provided by Danila Galimov. (violetagg)
        add	56383: Properties for disabling server information and error report are added to the org.apache.catalina.valves.ErrorReportValve. Based on the patch provided by Nick Bunn. (violetagg/kkolinko)
        fix	Only create XML parsing objects if required and fix associated potential memory leak in the default Servlet. (markt)
        fix	Modify generic exception handling so that StackOverflowError is not treated as a fatal error and can handled and/or logged as required. (markt)
        fix	56409: Avoid StackOverflowError on non-Windows systems if a file named \ is encountered when scanning for TLDs. (markt)
        add	56430: Extend checks for suspicious URL patterns to include patterns of the form *.a.b which are not valid patterns for extension mappings. (markt)
        add	Extend XML factory, parser etc. memory leak protection to cover some additional locations where, theoretically, a memory leak could occur. (markt)
        fix	Ensure that a TLD parser obtained from the cache has the correct value of blockExternal. (markt)
        fix	56441: Raise the visibility of exceptions thrown when a problem is encountered calling a getter or setter on a component attribute. The logging level is raised from debug to warning. (markt)
        fix	56451: Make resources accessed via a context alias accessible via JNDI in the same way standard resources are available. (markt)
        add	56463: Property for disabling server information is added to the DefaultServlet. Server information is presented in the response sent to the client when directory listings is enabled. (violetagg)
        add	Add the org.apache.naming package to the packages requiring code to have the defineClassInPackage permission when running under a security manager. (markt)
        add	Add the org.apache.naming.resources package to the packages requiring code to have the accessClassInPackage permission when running under a security manager. (markt)
        fix	Make the naming context tokens for containers more robust. Require RuntimePermission when introducing a new token. (markt/kkolinko)
        fix	56472: Allow NamingContextListener to clean up on stop if its start failed. (kkolinko)
        add	56492: Avoid eclipse debugger pausing on uncaught exceptions when tomcat renews its threads. (slaurent)
        fix	Minor fixes to ThreadLocalLeakPreventionListener. Do not trigger threads renewal for failed contexts. Do not ignore threadRenewalDelay setting. Improve documentation. (kkolinko)
        fix	Correct regression introduced in r797162 that broke authentication of users when using the JAASMemoryLoginModule. (markt)
        fix	56501: HttpServletRequest.getContextPath() should return the undecoded context path used by the user agent. (markt)
        fix	56523: When using SPNEGO authentication, log the exceptions associated with failed user logins at debug level rather than error level. (markt)
        fix	56536: Ensure that HttpSessionBindingListener.valueUnbound() uses the correct class loader when the SingleSignOn valve is used. (markt)

    Coyote

        add	56399: Assert that both Coyote and Catalina request objects have been properly recycled. (kkolinko)
        fix	56416: Correct documentation for default value of socket linger for the AJP and HTTP connectors. (markt)

    Jasper

        fix	56334: Fix a regression in the handling of back-slash escaping introduced by the fix for 55735. (markt/kkolinko)
        fix	56425: Improve method matching for EL expressions. When looking for matching methods, an exact match between parameter types is preferred followed by an assignable match followed by a coercible match. (markt)
        fix	Correct the handling of back-slash escaping in the EL parser and no longer require that \$ or \# must be followed by { in order for the back-slash escaping to take effect. (markt)
        fix	56529: Avoid NoSuchElementException while handling attributes with empty string value in custom tags. Patch provided by Hariprasad Manchi. (violetagg)

    Cluster

        fix	Remove cluster and replicationValve from cluster manager template. These instance are not necessary to template. (kfujino)
        fix	Add support for cross context session replication to org.apache.catalina.ha.session.BackupManager. (kfujino)
        fix	Remove the unnecessary cross context check. It does not matter whether the context that is referenced by other context is set to crossContext=true. The context that refers to the different context must be set to crossContext=true. (kfujino)
        code	Move to org.apache.catalina.ha.session.ClusterManagerBase common logics of org.apache.catalina.ha.session.BackupManager and org.apache.catalina.ha.session.DeltaManager. (kfujino)
        code	Simplify the code of o.a.c.ha.tcp.SimpleTcpCluster. In order to add or remove cluster valve to Container, use pipeline instead of IntrospectionUtils. (kfujino)
        fix	There is no need to set cluster instance when SimpleTcpCluster.unregisterClusterValve is called. Set null than cluster instance for cleanup. (kfujino)
        code	Backport refactoring of AbstractReplicatedMap to implement Map rather than extend ConcurrentHashMap to enable Tomcat 7 to be built with Java 8. (markt)

    WebSocket

        fix	56343: Avoid a NPE if Tomcat's Java WebSocket 1.0 implementation is used with the Java WebSocket 1.0 API JAR from the reference implementation. (markt)
        fix	Increase the default maximum size of the executor used by the WebSocket implementation for call backs associated with asynchronous writes from 10 to 200. (markt)
        add	Add a warning if the thread group created for WebSocket asynchronous write call backs can not be destroyed when the web application is stopped. (markt)
        fix	Ensure that threads created to support WebSocket clients are stopped when no longer required. This will happen automatically for WebSocket client connections initiated by web applications but stand alone clients must call WsWebSocketContainer.destroy(). (markt)
        fix	56449: When creating a new session, add the message handlers to the session before calling Endpoint.onOpen() so the message handlers are in place should the onOpen() method trigger the sending of any messages. (markt)
        fix	56458: Report WebSocket sessions that are created over secure connections as secure rather than as not secure. (markt)
        fix	Stop threads used for secure WebSocket client connections when they are no longer required and give them better names for easier debugging while they are running. (markt)

    Web applications

        fix	Add Support for copyXML attribute of Host to Host Manager. (kfujino)
        fix	Ensure that "name" request parameter is used as a application base of host if "webapps" request parameter is not set when adding host in HostManager Application. (kfujino)
        fix	Correct documentation on Windows service options, aligning it with Apache Commons Daemon documentation. (kkolinko)
        update	55215: Improve log4j configuration example. Clarify access logging documentation. Based on patches provided by Brian Burch. (kkolinko)
        update	55383: Backport improved HTML markup for tables and code fragments from Tomcat 8 documentation. (kkolinko)
        fix	56418: Ensure that the Manager web application does not report success for a web application deployment that fails. (slaurent)
        fix	Fix target and rel attributes on links in documentation. They were lost during XSLT transformation. (kkolinko)
        update	Improve valves documentation. Split valves into groups. (kkolinko)

    Other

        fix	Align DisplayName of Tomcat installed by service.bat with one installed by the *.exe installer. Print a warning in case if neither server nor client jvm is found by service.bat. (kkolinko)
        update	56363: Update to version 1.1.30 of Tomcat Native library. (schultz)
        update	Update package renamed Apache Commons BCEL to r1593495 to pick up some additional changes for Java 7 support and some code clean up. (markt)
        add	In tests: allow to configure directory where JUnit reports and access log are written to. (kkolinko)
Updated www/apache-tomcat7 to 7.0.54
Update to 3.10

Changelog:
3.10: 2014-04-19
     Finer control over filtering with caC flags.
     New setfield command for tweaking object attributes from lift scripts.

3.9: 2014-04-12
     The attribution-parsing code handles odd characters in names better now.
     The filter command can operate on email addresses as well as names.
     New 'stamp' command to report action stamps of commits.
     New 'count' comment reports selection-set counts.
     New branchify_mapping option for renaming Subversion branches on analysis.
Update to 1.0.9:

This release fixes a number of issues found by static analysis and
compiler warnings, and other minor code cleanups.  On systems with
arc4random() in either libc or libbsd, it will now use that function
for generating authentication cookies.
Updated x11/libICE to 1.0.9
Update to 1.4.1:

This version corrects several bugs which caused xscope to incorrectly
decode some protocol replies or events, and fixes a build issue on Solaris.
Updated x11/xscope to 1.4.1
Re-add JCE
Noted by David Sainty, thank you.
+ Mesa-10.1.5, MesaLib-10.1.5, cvs-fast-export-1.11, diffstat-1.59,
  glu-10.1.5, kpcli-2.6, mined-2014.24.
Update to 1.59:

2014/06/05 (diffstat 1.59)
	+ add -E option to filter escape-sequences, e.g., from colordiff
	  (Ubuntu #1304262).

	+ merge/adapt improvments to makefile and configure script from
	  openembedded.org (forwarded by Ross Burton).
	  + remove unused $(libdir) from makefile "installdirs" target
	  + amend definition in CF_POPEN_TEST to permit use of autoheader.
	  + workaround for gratuitous renaming of AC_ACVERSION in 2.69

	+ added "docs" rule to makefile

	+ improvements to configure macros:
	  + added check for -Wlogical-op to gcc warnings
	  + suppress check for defining _XOPEN_SOURCE on Solaris
	  + trim an unwanted -no-gcc option for Intel compiler

	+ update config.guess, config.sub

2013/10/28 (diffstat 1.58)
	+ add COPYING file (request by Dagobert Michelsen).

	+ improved portability for cross-compiling, by supplying missing
	  getopt function as well as improving checks for popen/pclose
	  prototypes.

	+ updated configure macros, e.g., for MingW and MSYS fixes.

	+ update config.guess, config.sub
Updated textproc/diffstat to 1.59
Update to 1.7.3 based on patch by Leonardo Taccari on pkgsrc-users.
Additionally, remove patch-au since it is now superfluous.

CHANGES IN CUPS V1.7.3

	- Added Brazilian Portuguese translation (STR #4409)
	- Fixed mapping of OutputBin values such as "Tray1"
	  (<rdar://problem/16685606>)
	- Several ippGet* functions incorrectly returned -1 instead of 0 on
	  error.
	- The cupsGetResponse function did not work properly with
	  CUPS_HTTP_DEFAULT (<rdar://problem/16762593>)
	- The IPP backend did not abort a job when the printer did not validate
	  the supplied options (<rdar://problem/16836752>)
	- Fixed an authentication race condition in cupsSendRequest (STR #4403)
	- The scheduler did not add the "job-hold-until-specified" reason when
	  holding a job using the lp command (STR #4405)
	- The CUPS headers incorrectly needed libdispatch for blocks support
	  (STR #4397)
	- The configure script incorrectly added libgcrypt as a GNU TLS
	  dependency (STR #4399)
	- CUPS did not compile when Avahi or mDNSResponder was not present
	  (STR #4402)
	- cupsGetDestMediaCount did not work for CUPS_MEDIA_FLAGS DEFAULT
	  (STR #4414)
	- Auto-typing of PWG Raster files did not work (STR #4417)
	- IPP queues using hardcoded credentials would ask for credentials
	  (STR #4371)
	- Dates in non-UTF-8 locales did not display correctly (STR #4388)
	- The RPM spec file now looks for libusb-devel 1.0 or later.
	- Fixed the "create-printer-subscription.test" file for IPPTOOL
	  (STR #4420)


CHANGES IN CUPS V1.7.2

	- Security: The scheduler now blocks URLs containing embedded HTML
	  (STR #4356)
	- Documentation fixes (STR #3259, STR #4346, STR #4355)
	- Fixed the Japanese localization (STR #4385)
	- Added a German localization (STR #4363)
	- The cupsfilter command incorrectly read the cupsd.conf file; it now
	  reads the cups-files.conf file instead.
	- Fixed OS X builds with Xcode 5.x (<rdar://problem/15914959>)
	- Fixed SSL support on Windows (STR #4358)
	- Fixed documentation and naming of Create-Job/Printer-Subscriptions
	  operations (STR #4389)
	- Phone numbers in fax jobs were not properly filtered for IPP FaxOut
	  (<rdar://problem/16351701>)
	- Fixed a memory leak in the label printer driver (STR #4393)
	- Updated Linux "relro" support (STR #4349)
	- cupsEnumDests did not set the "is_default" field (STR #4332)
	- cupsDoIORequest could miss the server status, causing failed lpadmin
	  and other administrative commands (STR #4386)
	- cupsEnumDests didn't always call the callback function (STR #4380)
	- "lp -i job-id -H hold" did not work (STR #4401)
	- CUPS didn't compile on older platforms (STR #4338)
	- Several libcups files did not have the Apple license exception
	  notice (STR #4361)
	- Fixed a D-BUS threading issue that caused the scheduler to crash
	  (STR #4347)
	- The scheduler now automatically reconnects to Avahi as needed
	  (STR #4370, STR #4373)
	- The scheduler did not handle GET requests for the log files properly
	  (STR #3265)
	- The dnssd backend did not always report all discovered printers using
	  Avahi (STR #4365)
	- The Zebra printer driver did not properly handle negative "label top"
	  values (STR #4354)
	- The scheduler did not always update the MakeModel value in
	  printers.conf after updating the driver (STR #4264)
	- The LPD mini daemon did not support print jobs larger than 2GB
	  (STR #4351)
	- Fixed a bug in the status reading code when sending a compressed data
	  stream to an IPP printer/server (<rdar://problem/16019623>)
	- The IPP backend might not include all job attributes in Validate-Job
	  operations (<rdar://problem/16025435>)
	- Fixed some clang-reported issues (<rdar://problem/15936066>)


CHANGES IN CUPS V1.7.1

	- Security: the lppasswd program incorrectly used settings from
	  ~/.cups/client.conf (STR #4319)
	- Auto debug logging was broken in 1.7.0 (<rdar://problem/15331639>)
	- Some gzip'd PPD files could not be used (<rdar://problem/15386424>)
	- Cleaned up some job logging in the scheduler
	  (<rdar://problem/15332672>)
	- ATTR messages could cause string pool memory corruption in the
	  scheduler (<rdar://problem/15382819>)
	- The RPM spec file did not list the build requirements; this was on
	  purpose, but now we are listing the Red Hat package names
	  (<rdar://problem/15375760>, STR #4322)
	- Printing to a raw queue could result in corrupt output due to
	  opportunistic compression (<rdar://problem/15008524>)
	- The GNU TLS support code triggered many compiler warnings due to the
	  use of old GNU TLS compatibility type names
	  (<rdar://problem/15392966>)
	- The "make check" test suite did not work on Linux without the
	  cups-filters package installed (<rdar://problem/14292998>)
	- Japanese PPDs using with the Shift-JIS encoding did not work
	  (<rdar://problem/15427759>)
	- "tel:" URIs incorrectly had slashes (<rdar://problem/15418463>)
	- The libusb-based USB backend incorrectly used write timeouts
	  (<rdar://problem/15564888>)
	- Shared printers could become inaccessible after a few days on OS X
	  (<rdar://problem/15426838>)
	- The IPP backend did not wait for a busy printer to become available
	  before attempting to print (<rdar://problem/15465667>)
	- CUPS did not support "auto-monochrome" or "process-monochrome" for the
	  "print-color-mode" option (<rdar://problem/15482520>)
	- Using "@IF(name)" in an Allow or Deny rule did not work (STR #4328)
	- lpq and lpstat did not list jobs in the correct order when priorities
	  were specified (STR #4326)
	- The D-BUS notifier did not remove its lockfile (STR #4314)
	- CUPS incorrectly used the USER environment variable when the name did
	  not match the user ID (STR #4327)


CHANGES IN CUPS V1.7.0

	- Updated Japanese localization.
	- The lpadmin command did not send the PPD name from the "-m" option
	  (<rdar://problem/15264697>)
	- Network backends now use the prtMarkerSuppliesClass property to
	  determine the direction of supply level values
	  (<rdar://problem/14302628>)
	- The scheduler did not remove backup PPD files when a printer was
	  deleted (<rdar://problem/15065555>)
	- The scheduler incorrectly responded to HEAD requests when the web
	  interface was disabled (<rdar://problem/15090332>)
	- The scheduler did not respond using the hostname specified by the
	  client (<rdar://problem/14583574>)
	- Fax queues did not work when shared via Bonjour
	  (<rdar://problem/14498310>)
	- Error messages from the scheduler were not localized using the
	  language specified in the client's IPP request
	  (<rdar://problem/14128011>)
	- Added an Italian localization (<rdar://problem/14481578>)
	- Fixed a couple memory leaks in ippfind that were reported by Clang.
	- Fixed a compile issue on 64-bit Linux with Clang - need to use the
	  -pie option instead of -Wl,-pie now (<rdar://problem/14480938>)
	- The ippfind utility reported the wrong port numbers when compiled
	  against Avahi (<rdar://problem/14508324>)
	- httpGetFd, httpGetFile, httpPutFd, and httpPutFile did not
	  automatically reconnect if the server closed the connecion after the
	  previous response.
	- Fixed a compile error in libcups (<rdar://problem/14467141>)
	- The scheduler incorrectly did not pass a FINAL_CONTENT_TYPE
	  environment variable to the filters or backend
	  (<rdar://problem/14355011>)
	- The cups-exec helper program could fail randomly on OS X due to
	  sandbox violations when closing excess file descriptors
	  (<rdar://problem/14421943>)
	- The scheduler incorrectly did not use the kqueue interface on OS X.


CHANGES IN CUPS V1.7rc1

	- Printer xxx-default values were not reported by Get-Printer-Attributes
	  or lpoptions (<rdar://problem/14401795>)
	- Fixed deprecation warnings for many functions on OS X so they are tied
	  to the deployment version when building (<rdar://problem/14210079>)
	- Fixed a build issue on ARM-based Linux systems - unable to validate
	  va_list arguments.
	- Added a new ippfind tool for finding IPP printers and other Bonjour
	  services (<rdar://problem/13876199>)
	- Fixed some issues with conversion of PWG media size names to
	  hundredths of millimeters (<rdar://problem/14065748>)
	- The IPP backend could crash on OS X when printing to a Kerberized
	  printer (<rdar://problem/14040186>)
	- The ipptool program now automatically extends timeouts when the
	  output buffer is filled (<rdar://problem/14016099>)
	- The ipptool program now supports the --help and --version options.
	- The ipptool program did not continue past include file errors by
	  default (<rdar://problem/13875803>)
	- The ipptool program now supports FILE-ID and TEST-ID directives and
	  includes their values in its XML output (<rdar://problem/13876038>)
	- The ipptool program now supports WITH-HOSTNAME, WITH-RESOURCE, and
	  WITH-SCHEME expect predicates to compare the corresponding URI
	  components (<rdar://problem/13876091>)


CHANGES IN CUPS V1.7b1

	- The configure script now supports a --with-rundir option to change
	  the transient run-time state directory from the default to other
	  locations like /run/cups (STR #4306)
	- The scheduler now supports PPD lookups for classes (STR #4296)
	- The cupsfilter program did not set the FINAL_CONTENT_TYPE
	  environment variable for filters.
	- Added a new "-x" option to the cancel command (STR #4103)
	- Made the PWG media handling APIs public (STR #4267)
	- Implemented ready media support for the cupsGetDestMediaXxx APIs
	  (STR #4289)
	- Added new cupsFindDestDefault, cupsFindDestReady, and
	  cupsFindDestSupported APIs (STR #4289)
	- Added new cupsGetDestMediaByIndex, cupsGetDestMediaCount, and
	  cupsGetDestMediaDefault APIs (STR #4289)
	- Added new ippGet/SetOctetString APIs for getting and setting an
	  octetString value (STR #4289)
	- Added new ippCreateRequestedArray API for generating a array of
	  attributes from the requested-attributes attribute.
	- The ipptool utility now supports compression, conditional tests based
	  on the presence of files, and new DEFINE predicates for STATUS.
	- Added new IPP APIs for checking values (STR #4167)
	- Added new IPP APis for adding and setting formatted strings.
	- Added new HTTP APIs to support basic server functionality via libcups.
	- The dnssd backend now generates a 1284 device ID as needed (STR #3702)
	- CUPS now supports compressing and decompressing streamed data
	  (STR #4168)
	- CUPS now supports higher-level PIN printing, external accounting
	  systems, and "print here" printing environments (STR #4169)
	- IRIX is no longer a supported operating system (STR #4092)
	- The PPD compiler now supports JCL options properly (STR #4115)
	- The web interface now checks whether the web browser has cookies
	  enabled and displays a suitable error message (STR #4141)

CHANGES IN CUPS V1.6.4

	- Removed some duplicate size definitions for some ISO sizes that were
	  causing problems (<rdar://problem/14722721>)
	- The IPP backend did not add the "last-document" attribute
	  (<rdar://problem/114660379>)
	- Added a SyncOnClose directive to cups-files.conf to force cupsd to
	  call fsync before closing any configuration/state files it writes
	  (<rdar://problem/14523043>)
	- Added USB quirk rule for Lexmark E238 (<rdar://problem/14493054>)
	- Closed server connections were still not always detected
	  (<rdar://problem/14484313>)
	- The libusb-based USB backend now loads its list of quirks from files
	  in /usr/share/cups/usb instead of using a hardcoded table
	  (<rdar://problem/14442769>)
	- The scheduler did not properly register ICC color profiles with
	  colord (<rdar://problem/14455625>)


CHANGES IN CUPS V1.6.3

	- The configure script now prefers Clang over GCC.
	- Fixed a compile problem on AIX (STR #4307)
	- The default IPP version did not always get set before creating a new
	  IPP request message (<rdar://problem/14401718>)
	- The lp, lpq, lpr, and lpstat now display an error message advising the
	  use of the /version=1.1 ServerName option (<rdar://problem/14290628>)
	- Added documentation about the /version=1.1 option to ServerName in
	  client.conf (<rdar://problem/14216262>)
	- httpStatus(HTTP_ERROR) did not return a useful error message
	  (<rdar://problem/14217326>)
	- The lp, lpq, lpr, and lpstat commands incorrectly ignored the default
	  printer set in the lpoptions file (<rdar://problem/14216472>)
	- Fixed a URI encoding issue for hostnames containing the ` (backquote)
	  character (<rdar://problem/14243133>)
	- Added support for RFC 6874's IPv6 link local address format in URIs
	  (<rdar://problem/13979453>)
	- The USB backend could crash on libusb-based systems if USB was
	  disabled in the BIOS (<rdar://problem/13875729>)
	- Fixed a rounding error in the PWG media size mapping code
	  (<rdar://problem/13493241>)
	- Fixed several ipptool test files that used old STATUS names.
	- Kerberos credentials could get truncated when printing to a shared
	  printer.
	- Printing using "ipps" URIs was not encrypted.
	- Insecure ICC profiles prevented installation of user profiles for a
	  printer on OS X.
	- Added more USB quirks for the libusb-based backend (STR #4311,
	  <rdar://problem/13736470>)
	- The Russian web interface templates were broken (STR #4310)
	- The scheduler no longer tries to do Kerberos authentication over the
	  loopback interface.
	- The IPP backend could fail to pause a job for authentication
	  (STR #4298)
	- Fixed a regression on the handling of auth keys on OS X if the
	  cups-files.conf was not present or did not contain a SystemAuthKey
	  value.
	- The scheduler incorrectly did a reverse lookup of the server address
	  when HostNameLookups was turned off (STR #4302)
	- The scheduler incorrectly computed the final content type value when
	  null filters were present.


CHANGES IN CUPS V1.6.2

	- Documentation fixes (STR #4229, STR #4239, STR #4234, STR #4248,
	  STR #4259)
	- Security: All file, directory, user, and group settings are now stored
	  in a separate cups-files.conf configuration file that cannot be set
	  through the CUPS web interface or APIs (STR #4223)
	- Added a Czech localization (STR #4201)
	- Added a French localization (STR #4247)
	- Added a Russian localization (STR #4228, STR #4285)
	- Updated the Catalan localization (STR #4202)
	- Local certificate authentication did not guard against an empty
	  certification file (STR #4293)
	- The scheduler did not reject device URIs with spaces.
	- Added USB quirk rule for Epson Stylus Photo 750 (STR #4286)
	- The IPP backend could crash if the printer disconnects early
	  (STR #4284)
	- cupsGetPPD did not work with statically-configured CUPS shared
	  queues (STR #4178)
	- The scheduler did not support long MIME media types (STR #4270)
	- The cupsfilter command did not set the CHARSET environment variable
	  for the text filters (STR #4273)
	- The lp command did not show errors for unknown "--foo" (STR #4261)
	- Bad IPP responses could crash ipptool (STR #4262)
	- Updated USB quirk rules for Canon and Xerox printers (STR #4217,
	  STR #4263)
	- Added USB blacklisting for printers that require a custom backend
	  (STR #4218)
	- The PPD compiler did not correctly JCL options (STR #4115, STR #4203)
	- The ipptool program now supports DEFINE-MATCH and DEFINE-NO-MATCH
	  predicates for STATUS directives.
	- Fixed a problem with local Kerberos authentication (STR #4140)
	- Coverity scan: fixed some minor issues (STR #4242)
	- The scheduler did not remove color profiles after deleting a printer
	  (STR #4232, STR #4276)
	- The CUPS library did not always detect a timed out connection to the
	  server which could cause temporary loss of printing from applications
	  (STR #4187)
	- The ipptool program now supports variable substitution in OPERATION
	  and DELAY directives (STR #4175)
	- The IPP backend now stops queues when the server configuration
	  prevents successful job submission (STR #4125)
	- The XML output of ipptool contained empty dictionaries (STR #4136)
	- The scheduler did not delete job control backup files (STR #4244)
	- cupsGetPPD3 could return a local PPD instead of the correct remote
	  PPD.
	- The scheduler incorrectly advertised auth-info-required for local
	  queues needing local authentication (STR #4205)
	- CUPS 1.6 clients using the ServerName directive in client.conf did not
	  work with CUPS 1.3.x or older servers (STR #4231, STR #4291)
	- The SNMP backend now tries to work around broken printers that use a
	  newline to separate key/value pairs.
	- The IPP backend did not send a cancel request to printers when a job
	  was canceled and the printer did not support Create-Job.
	- Fixed EPM packaging files (STR #4199)
	- OpenBSD build fix (STR #4195, STR #4196, STR #4197)
	- The scheduler could crash when using Avahi (STR #4183, STR #4192,
	  STR #4200, STR #4213)
	- The IPP backend could get stuck in an endless loop on certain network
	  errors (STR #4194)
	- 32-bit builds failed on Debian (STR #4133)
	- The scheduler no longer accepts or sends job description attributes.
	- The IPP backend now works around some conformance issues for broken
	  printers (STR #4190)
	- cupsBackendReport() now filters out all control characters from the
	  reported 1284 device IDs (STR #4124)
	- The scheduler no longer allows job-name values that are not valid
	  network Unicode strings (STR #4072)
	- The web interface did not preserve the order of classes, jobs, or
	  printers (STR #4170)
	- The network backends now support disabling of SNMP supply level
	  queries via the "snmp" URI option (STR #4106)
	- The IPP backend did not specify the compression used (STR #4181)
	- ipptool did not support octetString values.
	- The scheduler did not recognize dnssd: or ipps: URIs as Bonjour shared
	  queues (STR #4158)
	- Applications could not get the PPD file for statically-configured
	  Bonjour-shared print queues (STR #4159)
	- The cupsd.conf file included obsolete browsing directives (STR #4157)
	- Fixed a USB backend compatibility issue on systems using libusb
	  (STR #4155, STR #4191)
	- Some Bonjour features were not available on systems with Avahi
	  (STR #4156)
	- CUPS now includes the port number in the Host: header for HTTP
	  requests.
	- Fixed REPEAT-MATCH for STATUS and EXPECT - was incorrectly erroring
	  out.


CHANGES IN CUPS V1.6.1

	- Documentation fix (STR #4149)
	- RPM packaging fixes (STR #4129, #4145)
	- The Japanese and English web interface headers were swapped
	  (STR #4148)


CHANGES IN CUPS V1.6.0

	- Document changes (STR #4131)
	- Added new Catalan (STR #4107) and Spanish (STR #4137) localizations.


CHANGES IN CUPS V1.6rc1

	- Added a new Japanese localization (STR #4122)
	- The SNMP backend no longer exits if it is unable to obtain an IPv6
	  socket (STR #4109)
	- The LPD backend incorrectly used "localhost" in the control file
	  instead of the current hostname.


CHANGES IN CUPS V1.6b1

	- Documentation updates (STR #3927, STR #3980, STR #4010, STR #4068)
	- The scheduler now consolidates all PPD updates from filters at the
	  end of the job (STR #4075)
	- CUPS now supports color management using colord (STR #3808)
	- CUPS now supports Bonjour using Avahi (STR #3066)
	- The PreserveJobFiles and PreserveJobHistory directives now support
	  specification of a time interval (STR #3143)
	- PPD files can now be archived in (gzip'd) tar files to further reduce
	  the disk space used by PPD files (STR #3772)
	- The network backends now deal with printers that report their levels
	  in percent but do not specify a maximum capacity of 100 (STR #3551)
	- The network backends now report full/almost-full waste bins in
	  printers along with end-of-life for cleaning pads (STR #4017)
	- Added a configure option to set the permissions of the installed
	  cupsd (STR #3459)
	- Added a new WITH-ALL-VALUES directive to ipptool EXPECT predicates
	  (STR #3949)
	- CUPS now supports a User directive in client.conf and the CUPS_USER
	  environment variable for overriding the default username (STR #3114)
	- Now set the PJL USERNAME variable as needed (STR #3100)
	- Added support for usernames and passwords longer than 32 characters
	  (STR #2856)
	- Added a new MaxHoldTime directive to automatically cancel jobs that
	  have been held indefinitely after a specific number of seconds
	  (STR #2291)
	- The LPD backend now uses the originating host name when it is not the
	  local system (STR #2053)
	- CUPS now prefers the suffix "dpcm" when reporting resolution in dots-
	  per-centimeter (STR #4006)
	- The configure script and build system no longer support building of
	  separate 32-bit and 64-bit libraries.
	- The "brightness", "columns", "fitplot", "gamma", "hue",
	  "natural-scaling", "penwidth", "position", "ppi", "saturation", and
	  "scaling" options are not longer supported (STR #4010)
	- The "page-bottom", "page-left", "page-right", "page-top",
	  "prettyprint", and "wrap" options have been deprecated (STR #4010)
	- The scheduler now reports the standard "number-of-documents" attribute
	  instead of the CUPS-specific "document-count" attribute in
	  job objects.
	- Added new destination connection and enumeration functions (STR #3924)
	- Added new option, localization, and job submission functions that do
	  not depend on PPD files (STR #3925)
	- Added a new MaxJobTime directive for cupsd that specifies the maximum
	  amount of time allowed for a job to complete before it is canceled.
	- The default password callback now supports passwords up to 127
	  characters.
	- The scheduler now supports a DefaultAuthType of "auto" to
	  automatically choose between Basic (username/password) and Negotiate
	  (Kerberos) authentication.
	- cupsSideChannelSNMPGet/Walk now support OIDs and values up to 64k in
	  length.
	- CUPS no longer supports automatic remote printers or implicit classes
	  via the CUPS, LDAP, or SLP protocols (STR #3922, STR #3923)
	- The PPD APIs are now deprecated and will be removed in a future
	  version of CUPS (STR #3927)
	- The default IPP version for requests is now 2.0 (STR #3929)
	- The IPP APIs no longer expose the ipp_t or ipp_attribute_t structures
	  and instead provide accessor functions (STR #3928)
	- The scheduler will no longer run programs with group write permission.
	- The PHP module has been removed (STR #3932)
	- The bannertops, commandtoescpx, commandtopclx, imagetops,
	  imagetoraster, pdftops, rastertoescpx, rastertopclx, and texttops
	  filters have been removed (STR #3930)
	- The serial and parallel backends have been removed (STR 3935)
Updated print/cups to 1.7.3
Update to 3.5:

Security Issues

    Local privilege escalation when using daemon mode. (CVE-2014-0240)

The issue is believed to affect Linux systems running kernel versions
>= 2.6.0 and < 3.1.0.

The issue affects all versions of mod_wsgi up to and including
version 3.4.

The source of the issue derives from mod_wsgi not correctly handling
Linux specific error codes from setuid(), which differ to what
would be expected to be returned by UNIX systems conforming to the
Open Group UNIX specification for setuid().

	http://man7.org/linux/man-pages/man2/setuid.2.html
	http://pubs.opengroup.org/onlinepubs/009695399/functions/setuid.html

This difference in behaviour between Linux and the UNIX specification
was believed to have been removed in version 3.1.0 of the Linux
kernel.

	https://groups.google.com/forum/?fromgroups=#!topic/linux.kernel/u6cKf4D1D-k

The issue would allow a user, where Apache is initially being
started as the root user and where running code under mod_wsgi
daemon mode as an unprivileged user, to manipulate the number of
processes run by that user to affect the outcome of setuid() when
daemon mode processes are forked and so gain escalated privileges
for the users code.

Due to the nature of the issue, if you provide a service or allow
untrusted users to run Python web applications you do not control
the code for, and do so using daemon mode of mod_wsgi, you should
update mod_wsgi as soon as possible.

Bugs Fixed

1. Python 3 installations can add a suffix to the Python library.
So instead of libpythonX.Y.so it can be libpythonX.Ym.so.

2. When using daemon mode, if an uncaught exception occurred when
handling a request, when response was proxied back via the Apache
child process, an internal value for the HTTP status line was not
cleared correctly. This was resulting in a HTTP status in response
to client of â200 Errorâ rather than â500 Internal Server Errorâ.

Note that this only affected the status line and not the actual
HTTP status. The status would still be 500 and the client would
still interpret it as a failed request.

3. Null out Apache scoreboard handle in daemon processes for Apache
2.4 to avoid process crash when lingering close cleanup occurs.

4. Workaround broken MacOS X XCode Toolchain references in Apache
apxs build configuration tool and operating system libtool script.
This means it is no longer necessary to manually go into:

Applications/Xcode.app/Contents/Developer/Toolchains

and manually add symlinks to define the true location of the compiler
tools.

    Restore ability to compile mod_wsgi source code under Apache
    1.3.

6. Fix checks for whether the ITK MPM is used and whether ITK MPM
specific actions should be taken around the ownership of the mod_wsgi
daemon process listener socket.

7. Fix issue where when using Python 3.4, mod_wsgi daemon processes
would actually crash when the processes were being shutdown.

8. Made traditional library linking the default on MacOS X. If
needing framework style linking for the Python framework, then use
the --enable-framework option. The existing --disable-framework
has now been removed given that the default action has been swapped
around.

New Features

1. For Linux 2.4 and later, enable ability of daemon processes to
dump core files when Apache CoreDumpDirectory directive used.

2. Attempt to log whether daemon process exited normally or was
killed off by an unexpected signal.
Updated www/ap2-wsgi to 3.5