Commit graph

227695 commits

Author SHA1 Message Date
mef
0e3dc294d6 Update to 0.56
--------------
0.56 2014.04.16
     - Converted to Dist::Zilla
     - Minor fixes (thanks hobbestigrou!)
2015-01-29 05:38:35 +00:00
mef
04973a0d42 Update 2.09 to 2.093
--------------------
2.093 Thu Jun 26 2014
    - fixed the test script to properly deal with sitecustomize and proxies
      in all possible combinations (thanks a lot to Christan Walde (MITHALDU)
      for his help with testing under Windows!)

2.092 Thu Apr  3 2014
    - auto-dereferencing only works since 5.14
    - move the xt/ tests back in t/, guarded by RELEASE_TESTING

2.091 Sat Mar 29 2014
    - documentation fixes (thanks to Ioan Rogers (IOANR))
    - test fixes (related to Module::CoreList)
2015-01-29 05:35:11 +00:00
mef
97426b7215 Update 0.10 to 2.01
-------------------
2.01    2015-01-06
        Improve the synopsis (David Bradford)
            Part of CPAN Pull Request Challenge :)

2.00    2014-11-12
        Devel::StackTrace 2.00 compat (dakkar) [rt.cpan.org #99957] [rt.cpan.org #100278]
2015-01-29 05:32:26 +00:00
mef
2e352eaf1c Update 0.11 to 0.14
-------------------
0.14  Mon Feb 18 11:40:53 PST 2013
        - Fix test for Win32 (RickFord)

0.13  Mon Feb 11 11:52:15 PST 2013
        - Get subroutine arguments from the next frame too

0.12  Mon Feb 11 11:25:50 PST 2013

        - Fixed the use of $frame->subroutine since it returns a
          subroutine that is *invoked* on that call frame, rather than
          what the frame is *in*. Fixed to peek the next frame to get the
          current subroutine. (Caelum)
2015-01-29 05:29:41 +00:00
mef
a671bd39c9 Update 0.54 to 0.60
-------------------
0.60  Sun Oct 20 12:24:09 2013
    - use Lexical::SealRequireHints to fix %^H bugs
    - rename my_hints -> hints (my_hints is still supported, but deprecated)
    - update ppport.h from 3.19 to 3.20
    - code cleanup
2015-01-29 05:24:50 +00:00
mef
042d1ec587 Update 0.15 to 0.17
-------------------
0.17      2013-11-30 20:47:47Z
    - many fixes (thanks, Steven Lee!)
      - attribute list_delim is now being used in list dumps
      - setting attribute max_length to 0 now shortens more, to '...'
      - fixed use of = in array/hash ref objects
      - extra test coverage

0.16      2013-11-24 00:43:48Z
    - Moose dependency removed, resolving circular dependency in Moose's
      recommended prereqs (thanks, David Golden!)
    - converted packaging to Dist::Zilla
2015-01-29 05:20:14 +00:00
mef
2d128c36c2 3.28 - 2015-01-16
* Update MANIFEST for regened base/todo files

3.27 - 2015-01-13

    * Regen base and todo files.
    * Fix isASCII and isCNTRL for <5.6.0
    * Other minor fixups.

    (Thanks to mhx for all of the work on this release)

3.26 - 2015-01-07

    * Silence some warnings on compilation in perl core
      (Thanks to Dave M. for patches)

3.25 - 2014-12-02

    * Add caller_cx (works back to Perl 5.6.0)
      (Thanks to Ben Morrow for patch)
    * Silence compiler and coverity warnings
      (Thanks to jhi for patches)
2015-01-29 05:18:44 +00:00
mef
5a0400d704 Update 0.01 to 0.07
-------------------
0.07    2014-10-19 18:26:32Z
        - skip failing PadWalker tests on < 5.009 (RT#99581)

0.06    2014-10-19 01:49:27Z
        - documentation updates (thanks, mohawk!)

0.05    20142014-10-18 06:51:53Z
        - minor documentation updates
        - converted packaging to Dist::Zilla; declared correct prerequisites
        - updated ppport.h to latest version

0.04    2013-05-14
        - fix pod formatting (Curtis Brandt)

0.03    2013-05-14
        - walk_arena() now sorts by class name when refcounts are equal, for
          easier comparison between successive runs (Karen Etheridge)

0.02    2012-10-24 18:30:24Z
        - fix test failures, and note this caveat in the docs
2015-01-29 05:16:50 +00:00
mef
e92ad9ac6c Update 1.422 to 1.440
---------------------
1.44 Tue Jun  3 20:40:13 CEST 2014
        - port to 5.20 (analyzed by Dave Mitchell).

1.43  Fri May 16 09:43:01 CEST 2014
        - port to 5.18.
        - hopefully better treat anon subs that have been un-anonized
          without adjusting the pad by Sub::Name (I forgot who sent
          the testcase).
        - fix ref2ptr/ptr2ref documentation.
2015-01-29 05:15:19 +00:00
mef
a877297315 0.012 2013-11-20 14:57:15 Europe/Amsterdam
Minor fixes in tests

0.011     2013-11-19 14:50:51 Europe/Amsterdam
          Fix other environmental variables in tainted mode.

0.010     2013-11-13 23:13:15 Europe/Amsterdam
          Add a non-empty PATH, to make *bsd happy
          Compare configuration case-insensitively, to make Windows happy

0.009     2013-11-07 23:00:55 Europe/Amsterdam
          find_perl_interpreter now return an array

0.008     2013-11-01 17:48:53 Europe/Amsterdam
          Always empty $ENV{PATH} before open2
          Append executable extension to expected tainted path

0.007     2013-10-24 14:32:54 Europe/Amsterdam
          Soften dependency on ExtUtils::Config
          Rewrite tests not to depend on Capture::Tiny
          Export perl_is_same
          Handle tainting better
2015-01-29 05:11:55 +00:00
mef
91e4131d80 Update 0.006012 to 0.006017
---------------------------
0.006017 - 2014-09-25
  - fix for changes in 5.21.4 (Avoid creating GVs when subs are declared),
    RT#99102, Father Chrysostomos

0.006016 - 2014-03-31
  - fixed syntax error in a test

0.006015 - 2014-02-02
  - fix use of wrong sprintf formatting codes (Zefram, RT#91983)

0.006014 - 2013-07-21
  - converted dist to Distar

0.006013 - 2013-06-18
  - re-release, because Module::Install is AWESOME!

0.006012 - 2013-06-18
  - Updates for some deprecations in perl 5.17. (Zefram, RT#83968)
2015-01-29 05:10:25 +00:00
mef
68fb019df6 Update to 1.12
--------------
1.12 Fri Nov 14 08:56:23 EST 2014
     - Moved to GitHub at https://github.com/lstein/Devel-Cycle
2015-01-29 05:08:07 +00:00
mef
18368bd51b Release 1.17 - 20 September 2014
- Get cpancover to release quality.
 - Add IRC link to META.
 - Test against 5.20.1, 5.21.1, 5.21.2, 5.21,3 and 5.21.4.
 - Officially support 5.20.1.

Release 1.16 - 17 August 2014
 - Fix segfault in 5.20.0.
 - Improvements to cpancover.
 - Fix vim report to work with recent versions (cono) (github 94).
 - Ignore vim swap files in git (Gabor Szabo) (github 95).
 - Improve help for cover command (Gabor Szabo) (github 96).
2015-01-29 05:06:07 +00:00
mef
2992b7d316 Update to 1.03
--------------
1.03    2015-01-04      Update travis.yml
                        Fix possible crash bug on windows.
2015-01-29 05:02:56 +00:00
mef
859d0b8203 Update to 2.06
--------------
2.06 Wednesday 16th January, 2013
       Corrected some pod syntax RT#56456
       Handle the new padrange op added in 5.17 RT#81704
2015-01-29 04:57:08 +00:00
mef
0cdf14ece0 Update to 0.06
0.06      2014-02-26 19:31:45-05:00 America/New_York
    [CHANGED]
    - Updated distribution metadata, repo and bugtracker
    - Switch to managing with Dist::Zilla
2015-01-29 04:53:21 +00:00
jnemeth
6ed40b6bda sort 2015-01-29 04:50:11 +00:00
mef
91f5b701d5 Updated net/p5-Geo-IP to 1.45 2015-01-29 04:48:14 +00:00
mef
827cd31b26 Update 1.40 to 1.45
-------------------
1.45 2014-09-29

* Fixed typo in 1.44 release notes.
* Replaced `use vars` with `our`.


1.44 2014-09-29

- On installation, this API will now default to the pure Perl version rather
  than failing if libGeoIP is not found. (GitHub #6, #11)
- Add support for GEOIP_SILENCE ( Philip Prindeville )
- Unit tests for different databases were added.


1.43 2013-12-02

- Update FIPS codes ( Boris Zentner )
- Fix test case ( Boris Zentner )
- Update time zones ( Boris Zentner )


1.42 2013-06-06

- Fix testcase any CAPI >= 1.5.0 should work ( Boris Zentner )
- Add new pure perl region code TH 81 Bueng Kan ( Boris Zentner )


1.41 2013-02-20

- Add South Sudan ( Boris Zentner )
- Doc fixes ( Tina Mueller )
- Update FIPS Codes ( Boris Zentner )
- Update PurePerl country list. ( Boris Zentner )
2015-01-29 04:48:03 +00:00
mef
62aa8512a4 Updated net/net6 to 1.3.14 2015-01-29 02:59:35 +00:00
mef
2c6aea0dd4 (pkgsrc)
- Add LICENSE as gnu-gpl-v2
 - delete patch for gnutls, upstream now takes care, although the boundary
   is little bit different as:
   (patch)    #if GNUTLS_VERSION_NUMBER < 0x020c00
   (upstream) #if GNUTLS_VERSION_NUMBER < 0x030003
 - Add comment on patch-src_select.cpp (from cvs log)

(upstream)
 - Update 1.3.10 to 1.3.14
Version 1.3.14:
 * Ensure that overflows on the user ID assigned to each connection
   do not yield one that is already in use.  (Reported by Vasiliy
   Kulikov.)  [CVE-2011-4093]
 * Do not leak information about logged-in users.  (Reported by
   Vasiliy Kulikov.)  [CVE-2011-4091]
 * Fix build failures with GnuTLS 3.0 and above, thanks to
   Vincent Untz.
 * Updated translations

Version 1.3.13:
 * Updated translations

Version 1.3.12:
 * Allow non-blocking sockets on *nix.
 * New translations:
   - Korean
   - English (Great Britain)

Version 1.3.11:
 * Fix possible TLS lockup on Windows.
 * New translation:
   - Ukrainian, thanks to Yuri Chornoivan!
2015-01-29 02:59:27 +00:00
mef
4ef866120a Updated net/mimms to 3.2.1 2015-01-29 02:46:50 +00:00
mef
638cb3daa0 (pkgsrc)
- Add editting on EGG_NAME to drop the third part ( 3.2.1 -> 3.2 etc)
(upstream)
  - Update 3.2 to 3.2.1
-------------------
mimms 3.2.1 released 2008-05-11
-----------
  * Correctly use filename argument; it was ignored because of a bug.
2015-01-29 02:46:25 +00:00
mef
31bace48bc Updated net/httping to 2.3.4 2015-01-29 02:27:46 +00:00
mef
e4a64df622 Update 2.3.3 to 2.3.4
---------------------
Explicit ChangeLog or Release Note not found, but
 - option -6 is added for IPv6 (default is IPv4)
 - sun (__sun) support for termios.h seems added
2015-01-29 02:27:39 +00:00
jmcneill
fa3a517ce9 add wsmouse support to wscons driver 2015-01-29 01:56:02 +00:00
mef
88ac7b66b1 Updated devel/p5-Data-Compare to 1.25
Updated devel/p5-Coro to 6.41
Updated devel/p5-Curses to 1.32
Updated devel/p5-Data-Dumper-Concise to 2.022
Updated devel/p5-Data-Munge to 0.093
Updated devel/p5-Data-Peek to 0.42
Updated devel/p5-Data-Printer to 01
Updated devel/p5-Data-Section to 0.200.006
Updated devel/p5-Data-Serializer to 0.60
Updated devel/p5-Data-UUID to 1.220
Updated devel/p5-Debug-Client to 0.29
2015-01-29 01:27:30 +00:00
mef
f05c085000 Update 0.20 to 0.29
-------------------
0.29 2013-07-29
 - ouch typo, tab v spaces (BOWTIE)

0.28 2013-07-28
 - bump version and release (BOWTIE)

0.27_02 2013-07-10
 - remove BEGIN block and force Win32 Term::ReadLine settings (BOWTIE)

0.27_01 2013-07-10
 - switch to Term::ReadLine::Gnu or nought (BOWTIE)

0.26 2013-06-03
 - bump version and release (BOWTIE)

0.25_10 2013-05-20
 - Change the running order of test (BOWTIE)
 - check testing $ENV{PERL_RL} = ornaments=0
 - as we only want to do this when necessary (BOWTIE)

0.25_09 2013-05-15
 - fix buffer call to $debugger->get_buffer

0.25_08 2013-05-12
 - fix dependency inconsistencies
 - add new test 00-check-deps.t
 - add test to see if we invoke $ENV{PERL_RL} (BOWTIE)

0.25_07 2013-05-12
 - use M::I to load Term::ReadLine::Gnu (BOWTIE)

0.25_06 2013-05-10
 - contradicting module definitions oops (BOWTIE)

0.25_05 2013-05-09
 - Tweak 06-term.t to show more info from cpan testers (BOWTIE)
 - fix missing MANIFEST (BOWTIE)
 - lower some dependency version dod++ (BOWTIE)

0.25_04 2013-05-05
 - Tweak for perl-5.17.11 compatibility (BOWTIE)
 - test tweaks to hack #1494 (BOWTIE)
 - Use a more appropriate Term::ReadLine::... (BOWTIE)

0.25 2013-04-17
 - bump version and release (BOWTIE)

0.24_04 2013-04-16
 - swap out some more localhost for 127.0.0.1 azawawi++ (BOWTIE)

0.24_03 2013-04-16
 - my $host = '127.0.0.1'; # instead of localhost (AZAWAWI)
 - add some 'fudge' to t-lib-debugger for win32 azawawi++ (BOWTIE)

0.24_02 2013-04-16
 - lets remove Time-HiRes completely (BOWTIE)

0.24_01 2013-04-16
 - tweak t-lib-debugger, adjust sleep to 1 sec (BOWTIE)
 - update Makefile requirements (BOWTIE)

0.24 2013-02-19
 - Tweak for production release to co-inside with Padre 0.98 (BOWTIE)

0.23 2013-02-19
 - Add perltidy.LOG to MANIFEST.SKIP (BOWTIE)

0.22 2013-02-08
 - Tweak for production release to co-inside with Padre 0.98 (BOWTIE)

0.21_18 2013-01-28
 - roll-back Makefile to 0.21_14 and test to complement, andk++ (BOWTIE)

0.21_17 2013-01-27
 - POD tweaks, missing # azawawi++ (BOWTIE)
 - Add back a requirement to Makefile after being heavy handed (BOWTIE)

0.21_16 2013-01-22
 - Remove test for a no-longer required module, causing CPAN failures
   (BOWTIE)

0.21_15 2013-01-22
 - add reset to buffer in show help (BOWTIE)
 - fix bug in set breakpoint that was being confused by 'Already in file-x'
   (BOWTIE)

0.21_14 2013-01-04
 - #This all relates to #1469
 - fix Windows hangings (CHORNY)
 - split and sort out hack into each dev release
 - the switch to time hiRes & win32::Precess (BOWTIE)
 - add some tests back-in using Test::Class to see what CPAN::Reporter go
   to say (BOWTIE)

0.21_13 2013-01-04
 - #not released
 - #This all relates to perl 5.017006
 - Crammer tweak rindolf++ (BOWTIE)
 - y=o is now y=1 for >= 5.017006 (BOWTIE)
 - https://github.com/shlomif/perl/commit/7a0fe8d157063a5d4017c60814c1ea577
   f105a72 tweak to t/40-test_1415.t to better check if watches are working
   in 5.017006 (BOWTIE)

0.21_12 2012-11-06
 - Update Changes to CPAN::Changes::Spec
 - Tweak tests to handle perl5db version 1.39_04 (perl - 5.17.5) (BOWTIE)

0.21_11 2012-09-09
 - Removed Test::Pod and Test::Pod::Coverage dependencies (ADAMK)
 - Removed the spookily magic strictures.pm dependency (ADAMK)
 - Switching to #!/usr/bin/perl as the env version is recommended against
   in tests for reasons I forget but I think were related to tainting
   (ADAMK)
 - Devolve v5.10 to 5.010 so older perl can parse far enough to understand
   that they can't parse the file. (ADAMK)
 - Slightly better separation of concerns in the early test scripts (ADAMK)

0.21_10 2012-09-06
 - Debug::Client's dependency on Test::Class is breaking Strawberry
   Test::Class has Windows problems adamk++
 - Remove Test::Class from Debug::Client (BOWTIE)

0.21_09 2012-09-06
 - skipped intentionally

0.21_08 2012-08-20
 - correction to parameters for IO::Socket::IP initialisation (BOWTIE)

0.21_07 2012-08-18
 - bump IO::Socket::IP to 0.17 (BOWTIE)

0.21_06 2012-08-05
 - silly dependency issue, my bad (BOWTIE)
 - Info: perl5db v1.39_02 yes in perl 5.17.2, O what fun (BOWTIE)

0.21_05 2012-07-26
 - remove comments (BOWTIE)
 - remove un-required dependants from Makefile (BOWTIE)
 - tweak version requirements for IO::Socket::IP (BOWTIE)

0.21_04 2012-06-23
 - re-factor initialize plus test (BOWTIE)
 - turn off test in io (BOWTIE)

0.21_03 2012-06-09
 - Fix displaying watches in ANON sub #1415 (BOWTIE)
 - some method re-factoring (BOWTIE)
 - keep test up-to-date (BOWTIE)

0.21_02 2012-05-21
 - remove _logger (BOWTIE)
 - move listener to _init, hence now redundant (BOWTIE)
 - use IO::Socket::IP (BOWTIE)
 - tweak tests and Makefile accordingly (BOWTIE)

0.21_01 2012-05-11
 - Add Test-Pod to appease Kwalitee (BOWTIE)
 - change to use $self->{debug} instead of $ENV{DEBUG_LOGGER} (BOWTIE) due
   to bleeding of env causing tests to fail on win32 against 0.20 (BOWTIE)
 - keep instep with Padre and use perl 5.10 (BOWTIE)
2015-01-29 01:25:53 +00:00
mef
72a4414fd4 Update to 1.220
---------------
1.220     2014-12-15
  - improve chances it'll work on Android (thanks, Brian Fraser)
2015-01-29 01:21:36 +00:00
mef
d26f40503c Upate to 0.60
0.60 Tue Aug 20 2013
    Move some non-critical tests from t/ to xt/ as they are not needed
    for verifying functionality of the module, merely ensuring a clean release.
    No changes to core Data::Serializer functionality with this release.
2015-01-29 01:19:51 +00:00
mef
e2fcfd408c Update to 0.200.006
(pkglint-4.150 warns)
    WARN: Makefile:4: The package is being downgraded from 0.200005 to 0.200.006.
-------------------
0.200006  2014-03-10 10:14:45-04:00 America/New_York
        - skip tests on Win32 pre-5.14 related to line endings; perl munges the
          data before we're able to get at it (thanks, Christian Walde!)
2015-01-29 01:17:20 +00:00
mef
100a2e26be Update to 10.35.01
------------------
10.35_01 2014-12-22
    BACKWARDS-INCOMPATIBLE CHANGE
        - p()'s return value now defaults to 'pass'. Please see
          https://github.com/garu/Data-Printer/issues/16 for the
          full discussion. THIS WILL BREAK CODE RELYING ON p() TO
          RETURN A STRING. To fix your code, please set 'return_value'
          to 'dump' explicitly, or use the experimental np() function.

    NEW HIGHLY EXPERIMENTAL FEATURE:
        - np(), a version of p() that always returns the string instead
          of printing it.

    NEW FEATURES:
        - Add 'escape_chars' to allow \x{...} printing for chars
          (patch by Mark Fowler)
        - Class::Date support in the DateTime filter (Ivan Bessarabov)

    BUG FIXES:
        - fixed crash in esoteric classes (github issue #41, thanks
          Ivan Bessarabov for reporting)
        - removed support for Digest::Haval256, as it can't really be
          observed without damaging the original data. If future versions
          provide a clone() function, it can be added again.
        - Being extra loud when rc files fail to load (RT#89203, thanks
          Caleb Cushing for reporting).
        - Prevents PERL5OPT from interfering with deparse tests (github
          issue #55, thanks David Precious for reporting)

    OTHER:
        - more tests
        - new external filter indexed: PDL
2015-01-29 01:12:17 +00:00
mef
e9c28eb983 Update 0.39 to 0.42
-------------------
0.42    - 2015-01-02, H.Merijn Brand   <h.m.brand@xs4all.nl>
    * Prevent caching of .perltidyrc (RT#99514)
    * Upped copyright to 2015

0.41    - 2014-09-27, H.Merijn Brand   <h.m.brand@xs4all.nl>
    * Add alternative test results for 5.21.5 and up (PADMY)

0.40    - 2014-02-27, H.Merijn Brand   <h.m.brand@xs4all.nl>
    * Upped copyright to 2014
    * Guard Perl::Tidy against stupid user options in .perltidyrc
2015-01-29 01:05:56 +00:00
mef
282a46b441 Update 0.08 to 0.093
--------------------
0.093   2014-12-23
        * Fix typo in synopsis (thanks, Ivan Wills).

0.092   2014-11-25
        * Work around some parser bug in perl 5.6.

0.091   2014-11-19
        * Work around regex bug (#115242) in perls < 5.18 that causes spurious
          test failures.

0.09    2014-11-18
        * Add slurp.
        * Don't leave $VERSION and @EXPORT in scope for eval_string.
2015-01-29 01:04:29 +00:00
mef
4c012446bc Update 2.020 to 2.022
---------------------
2.022 Mar 21 2014
  - Fix repo metadata

2.021 Dec 31 2013
  - Make Dwarn output all arguments even in scalar context
     (retun val is still the same though)
2015-01-29 01:02:40 +00:00
mef
35a7fb99ad (pkgsrc)
- patch-CursesFun.c is deleted, upstream fixed the problem, see 1.31
   part in HISTORY below
(upstream)
  - Update 1.29 to 1.32
-------------------
New in 1.32 (Released August 9, 2014)

  Makefile.PL: if /usr/include/ncurses/ncurses.h exists, use Ncurses regardless
  of what the $guess_cfg table says for the OS at hand.  This fixes the former
  hybrid approach which didn't work for a Solaris 11 system that has both
  Ncurses and BSD curses.

  Typographical error in documentation fixed.

New in 1.31 (Released April 26, 2014)

  Fix compile failure with some Curses libraries, introduced in
  1.29 - undefined KEY_CODE_YES.

  Fix documentation: wide character functions exist back to Perl 5.6,
  not 5.16.

New in 1.30 (Released April 19, 2014)

  Fix build failure: Use older substitutes if Perl is too old to have
  the 'utf8_to_uvchr_buf' function they use; don't include the wide character
  functions if Perl is even too old to have the substitutes.  Broken in 1.29.

  Fix "constant not provided by your vendor" message when you refer to a
  function that does not exist in the Curses module.

  Minor fixes to documentation of new wide character functions.

  Fix warning about extra argument to c_setmevent .

  Fix documentation for "not defined in your Curses library" errors.
  (broken in 1.28).

  Fix demo programs' recognition of "not defined in your Curses library"
  errors (broken in 1.28).
2015-01-29 01:00:26 +00:00
mef
d94244c5b3 Update 6.39 to 6.41
6.41 Sat Sep  6 22:08:46 CEST 2014
        - restore portability to perl 5.8.x.
        - give new Coro's a valid GvHV(PL_hintgv) - this is slow and takes
          up some memory, but fixes "use feature" and similar modules
          when used inside a Coro.
        - allow zero as argument to Coro::Channel to mean the same thing
          as no argument. this works with older versions as well,
          but wasn't legal until now.
        - slightly better c header file detection.
2015-01-29 00:48:51 +00:00
mef
3d2bd409ce Update 1.23 to 1.25
-------------------
1.25    2014-04-15  DCANTRELL  Add Gianni Ceccarelli's tests and patch
                                 to Use refaddr & reftype to "do the right
                                 thing" when comparing objects that overload
                                 numification and stringification

1.24    2014-04-05  DCANTRELL  Bump the required JSON.pm version for
                                 tests - something's a bit broken around
                                 about v 2.53
2015-01-29 00:43:58 +00:00
obache
f04c6430dc Updated emulators/suse131_libpng to 13.1nb4 2015-01-29 00:11:44 +00:00
obache
41d49fe37b Apply following update to suse131_libpng, bump PKGREVISION.
openSUSE Security Update: Security update for libpng16
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2015:0161-1
Rating:             important
References:         #912076 #912929
Cross-References:   CVE-2014-9495 CVE-2015-0973
Affected Products:
                    openSUSE 13.2
                    openSUSE 13.1
______________________________________________________________________________

   An update that fixes two vulnerabilities is now available.

Description:


   libpng was updated to fix some security issues:

   * CVE-2014-9495 [bnc#912076]: Heap-buffer overflow png_combine_row() with
     very wide interlaced images

   * CVE-2015-0973 [bnc#912929]: overflow in png_read_IDAT_data

   libpng is now also build with -DPNG_SAFE_LIMITS_SUPPORTED.


Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE 13.2:

      zypper in -t patch openSUSE-2015-79

   - openSUSE 13.1:

      zypper in -t patch openSUSE-2015-79

   To bring your system up-to-date, use "zypper patch".


Package List:

   - openSUSE 13.2 (i586 x86_64):

      libpng16-16-1.6.13-2.4.1
      libpng16-16-debuginfo-1.6.13-2.4.1
      libpng16-compat-devel-1.6.13-2.4.1
      libpng16-debugsource-1.6.13-2.4.1
      libpng16-devel-1.6.13-2.4.1
      libpng16-tools-1.6.13-2.4.1
      libpng16-tools-debuginfo-1.6.13-2.4.1

   - openSUSE 13.2 (x86_64):

      libpng16-16-32bit-1.6.13-2.4.1
      libpng16-16-debuginfo-32bit-1.6.13-2.4.1
      libpng16-compat-devel-32bit-1.6.13-2.4.1
      libpng16-devel-32bit-1.6.13-2.4.1

   - openSUSE 13.1 (i586 x86_64):

      libpng16-16-1.6.6-16.1
      libpng16-16-debuginfo-1.6.6-16.1
      libpng16-compat-devel-1.6.6-16.1
      libpng16-debugsource-1.6.6-16.1
      libpng16-devel-1.6.6-16.1
      libpng16-tools-1.6.6-16.1
      libpng16-tools-debuginfo-1.6.6-16.1

   - openSUSE 13.1 (x86_64):

      libpng16-16-32bit-1.6.6-16.1
      libpng16-16-debuginfo-32bit-1.6.6-16.1
      libpng16-compat-devel-32bit-1.6.6-16.1
      libpng16-devel-32bit-1.6.6-16.1


References:

   http://support.novell.com/security/cve/CVE-2014-9495.html
   http://support.novell.com/security/cve/CVE-2015-0973.html
   https://bugzilla.suse.com/show_bug.cgi?id=912076
   https://bugzilla.suse.com/show_bug.cgi?id=912929
2015-01-29 00:11:32 +00:00
wiz
c368a7582c Updated devel/p5-List-MoreUtils to 0.403 2015-01-28 22:15:17 +00:00
wiz
f120fb18e7 Update to 0.403:
0.403	2015-01-27
    - remove most recent stable perl recommendation from meta to
      workaround misbehaving CPAN clients blocking update
    - update copyright date
    - ensure AUTHOR is a string on older toolchains
2015-01-28 22:15:09 +00:00
rjs
2354829671 Updated graphics/libjpeg-turbo to 1.4.0. 2015-01-28 21:53:03 +00:00
rjs
a28f7ef254 Update to 1.4.0.
Changes:

1.4.0
=====

[2] The non-SIMD RGB565 color conversion code did not work correctly on big
endian machines.  This has been fixed.

[3] Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
instead of -1 if componentID was > 0 and subsamp was TJSAMP_GRAY.

[3] Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
instead of -1 if width was < 1.

[5] The Huffman encoder now uses clz and bsr instructions for bit counting on
ARM64 platforms (see 1.4 beta1 [5].)

[6] The close() method in the TJCompressor and TJDecompressor Java classes is
now idempotent.  Previously, that method would call the native tjDestroy()
function even if the TurboJPEG instance had already been destroyed.  This
caused an exception to be thrown during finalization, if the close() method had
already been called.  The exception was caught, but it was still an expensive
operation.

[7] The TurboJPEG API previously generated an error ("Could not determine
subsampling type for JPEG image") when attempting to decompress grayscale JPEG
images that were compressed with a sampling factor other than 1 (for instance,
with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
with grayscale JPEGs, and thus the horizontal and vertical sampling factors
for such images are ignored by the decompressor.  However, the TurboJPEG API
was being too rigid and was expecting the sampling factors to be equal to 1
before it treated the image as a grayscale JPEG.

[8] cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
print the library version and exit.

[9] Referring to 1.4 beta1 [15], another extremely rare circumstance was
discovered under which the Huffman encoder's local buffer can be overrun
when a buffered destination manager is being used and an
extremely-high-frequency block (basically junk image data) is being encoded.
Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
to address the previous issue, the new issue caused even the larger buffer to
be overrun.  Further analysis reveals that, in the absolute worst case (such as
setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
order), the Huffman encoder can produce encoded blocks that approach double the
size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
256 bytes, which should prevent any such issue from re-occurring in the future.

1.3.90 (1.4 beta1)
==================

[1] New features in the TurboJPEG API:
-- YUV planar images can now be generated with an arbitrary line padding
(previously only 4-byte padding, which was compatible with X Video, was
supported.)
-- The decompress-to-YUV function has been extended to support image scaling.
-- JPEG images can now be compressed from YUV planar source images.
-- YUV planar images can now be decoded into RGB or grayscale images.
-- 4:1:1 subsampling is now supported.  This is mainly included for
compatibility, since 4:1:1 is not fully accelerated in libjpeg-turbo and has no
significant advantages relative to 4:2:0.
-- CMYK images are now supported.  This feature allows CMYK source images to be
compressed to YCCK JPEGs and YCCK or CMYK JPEGs to be decompressed to CMYK
destination images.  Conversion between CMYK/YCCK and RGB or YUV images is not
supported.  Such conversion requires a color management system and is thus out
of scope for a codec library.
-- The handling of YUV images in the Java API has been significantly refactored
and should now be much more intuitive.
-- The Java API now supports encoding a YUV image from an arbitrary position in
a large image buffer.
-- All of the YUV functions now have a corresponding function that operates on
separate image planes instead of a unified image buffer.  This allows for
compressing/decoding from or decompressing/encoding to a subregion of a larger
YUV image.  It also allows for handling YUV formats that swap the order of the
U and V planes.

[2] Added SIMD acceleration for DSPr2-capable MIPS platforms.  This speeds up
the compression of full-color JPEGs by 70-80% on such platforms and
decompression by 25-35%.

[3] If an application attempts to decompress a Huffman-coded JPEG image whose
header does not contain Huffman tables, libjpeg-turbo will now insert the
default Huffman tables.  In order to save space, many motion JPEG video frames
are encoded without the default Huffman tables, so these frames can now be
successfully decompressed by libjpeg-turbo without additional work on the part
of the application.  An application can still override the Huffman tables, for
instance to re-use tables from a previous frame of the same video.

[5] The Huffman encoder now uses clz and bsr instructions for bit counting on
ARM platforms rather than a lookup table.  This reduces the memory footprint
by 64k, which may be important for some mobile applications.  Out of four
Android devices that were tested, two demonstrated a small overall performance
loss (~3-4% on average) with ARMv6 code and a small gain (also ~3-4%) with
ARMv7 code when enabling this new feature, but the other two devices
demonstrated a significant overall performance gain with both ARMv6 and ARMv7
code (~10-20%) when enabling the feature.  Actual mileage may vary.

[7] Improved the accuracy and performance of the non-SIMD implementation of the
floating point inverse DCT (using code borrowed from libjpeg v8a and later.)
The accuracy of this implementation now matches the accuracy of the SSE/SSE2
implementation.  Note, however, that the floating point DCT/IDCT algorithms are
mainly a legacy feature.  They generally do not produce significantly better
accuracy than the slow integer DCT/IDCT algorithms, and they are quite a bit
slower.

[8] Added a new output colorspace (JCS_RGB565) to the libjpeg API that allows
for decompressing JPEG images into RGB565 (16-bit) pixels.  If dithering is not
used, then this code path is SIMD-accelerated on ARM platforms.

[13] Restored 12-bit-per-component JPEG support.  A 12-bit version of
libjpeg-turbo can now be built by passing an argument of --with-12bit to
configure (Unix) or -DWITH_12BIT=1 to cmake (Windows.)  12-bit JPEG support is
included only for convenience.  Enabling this feature disables all of the
performance features in libjpeg-turbo, as well as arithmetic coding and the
TurboJPEG API.  The resulting library still contains the other libjpeg-turbo
features (such as the colorspace extensions), but in general, it performs no
faster than libjpeg v6b.

[14] Added ARM 64-bit SIMD acceleration for the YCC-to-RGB color conversion
and IDCT algorithms (both are used during JPEG decompression.)  For unknown
reasons (probably related to clang), this code cannot currently be compiled for
iOS.

[15] Fixed an extremely rare bug that could cause the Huffman encoder's local
buffer to overrun when a very high-frequency MCU is compressed using quality
100 and no subsampling, and when the JPEG output buffer is being dynamically
resized by the destination manager.  This issue was so rare that, even with a
test program specifically designed to make the bug occur (by injecting random
high-frequency YUV data into the compressor), it was reproducible only once in
about every 25 million iterations.

[16] Fixed an oversight in the TurboJPEG C wrapper:  if any of the JPEG
compression functions was called repeatedly with the same
automatically-allocated destination buffer, then TurboJPEG would erroneously
assume that the jpegSize parameter was equal to the size of the buffer, when in
fact that parameter was probably equal to the size of the most recently
compressed JPEG image.  If the size of the previous JPEG image was not as large
as the current JPEG image, then TurboJPEG would unnecessarily reallocate the
destination buffer.


1.3.1
=====

[3] Fixed a bug whereby attempting to encode a progressive JPEG with arithmetic
entropy coding (by passing arguments of -progressive -arithmetic to cjpeg or
jpegtran, for instance) would result in an error, "Requested feature was
omitted at compile time".

[4] Fixed a couple of issues whereby malformed JPEG images would cause
libjpeg-turbo to use uninitialized memory during decompression.

[5] Fixed an error ("Buffer passed to JPEG library is too small") that occurred
when calling the TurboJPEG YUV encoding function with a very small (< 5x5)
source image, and added a unit test to check for this error.
2015-01-28 21:51:02 +00:00
ryoon
dd6fbe52d4 Updated devel/nss to 3.17.4 2015-01-28 21:12:47 +00:00
ryoon
34cb8c6360 Update to 3.17.4
Changelog:
Network Security Services (NSS) 3.17.4 is a patch release for NSS 3.17.

No new functionality is introduced in this release.

Notable Changes:
* If an SSL/TLS connection fails, because client and server don't have
  any common protocol version enabled, NSS has been changed to report
  error code SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
  SSL_ERROR_NO_CYPHER_OVERLAP).
* libpkix was fixed to prefer the newest certificate, if multiple
  certificates match.
* fixed a memory corruption issue during failure of keypair generation.
* fixed a failure to reload a PKCS#11 module in FIPS mode.
* fixed interoperability of NSS server code with a LibreSSL client.
2015-01-28 21:12:09 +00:00
wiz
281bd39fb7 Add ldap option, and mark as 2.x only when either option is selected. 2015-01-28 20:39:54 +00:00
gdt
37e640e888 Fix erroneous Updated to Added.
(Some day I will get the CTYPE argument right.)


CVS: ----------------------------------------------------------------------
CVS: CVSROOT  cvs.NetBSD.org:/cvsroot
CVS: please use "PR category/123" to have the commitmsg appended to PR 123
2015-01-28 19:18:42 +00:00
gdt
0c698f21b8 Updated textproc/py-generateDS to 2.14a 2015-01-28 19:16:54 +00:00
gdt
edb813eee4 +py-generateDS
CVS: ----------------------------------------------------------------------
CVS: CVSROOT  cvs.NetBSD.org:/cvsroot
CVS: please use "PR category/123" to have the commitmsg appended to PR 123
2015-01-28 19:16:35 +00:00