This release introduces the atomic and blob APIs, adds support
for new devices (AMD Bonaire) and a new flag for coherent BOs
in nouveau.


Alex Deucher (1):
      radeon: add new bonaire pci id

Alexandre Courbot (1):
      nouveau: add coherent BO attribute

Boris BREZILLON (2):
      modetest: add atmel-hlcdc driver support
      tests/kmstest: support atmel-hlcdc

Damien Lespiau (1):
      intel: Add the Broxton PCI IDs

Daniel Stone (1):
      Add blob property create/destroy ioctl wrappers

Emil Velikov (7):
      modetest: explicitly zero the newly allocated memory
      modetest: replace malloc + memset with calloc
      xf86drm: simplify drmMalloc/drmFree
      Revert "Add device enumeration interface (v4)"
      xf86drmMode: remove unused valgrind(VG) macros
      xf86drmMode: include config.h before anything else
      configure.ac: bump version to 2.4.62 for release

Guillaume Desmottes (1):
      drmPrime*: initialize output args to 0

Ilia Mirkin (1):
      nouveau: add asserts to make sure krefs are there

Jammy Zhou (1):
      Fix one warning (v2)

Matt Turner (1):
      configure: Add flag to disable valgrind support.

Tobias Jakobi (11):
      modetest: make middle SMPTE colors transparent
      modetest: only select plane with matching format
      exynos: fimg2d: fix return codes
      tests/exynos: replace return by break
      exynos/fimg2d: simplify g2d_fini()
      tests/exynos: clean struct connector
      tests/exynos: remove unused define
      tests/exynos: remove struct fimg2d_test_case
      tests/exynos: simplify drm_set_crtc
      tests/exynos: remove connector_find_plane
      tests/exynos: handle G2D_IMGBUF_COLOR in switch statements

Ville Syrjälä (1):
      Support atomic modesetting ioctl

frank (1):
      Add device enumeration interface (v4)

Changelog:
2015-04-03 v1.4.0 "Indian Runner Duck"
  This release includes significant improvements to the VP9 codec.

  - Upgrading:
    This release is ABI incompatible with 1.3.0. It drops the compatibility
    layer, requiring VPX_IMG_FMT_* instead of IMG_FMT_*, and adds several codec
    controls for VP9.

  - Enhancements:
    Faster VP9 encoding and decoding
    Multithreaded VP9 decoding (tile and frame-based)
    Multithreaded VP9 encoding - on by default
    YUV 4:2:2 and 4:4:4 support in VP9
    10 and 12bit support in VP9
    64bit ARM support by replacing ARM assembly with intrinsics

  - Bug Fixes:
    Fixes a VP9 bitstream issue in Profile 1. This only affected non-YUV 4:2:0
    files.

  - Known Issues:
    Frame Parallel decoding fails for segmented and non-420 files.

Changelog:
GD team proudly announces that the 2.1.1 version of GD Graphics Library
has been released. We have fixed some reported bugs and improved the build
scripts (cmake and configure). See the Changelog files for a full list
with details or CVEs.

This is a recommended update.

Changelog:
Changes from version 3.1.2 to version 3.1.3:
- Better support for Automake 1.13+ (now used to generate the tarball).
- Improved MPFR manual.
- Bug fixes (see <http://www.mpfr.org/mpfr-3.1.2/#fixed> and ChangeLog file).

Changelog:
Overview of changes leading to 0.9.41
Thursday, June 18, 2015
=====================================

- Fix hb-coretext with trailing whitespace in right-to-left.
- New API: hb_buffer_reverse_range().
- Allow implementing atomic ops in config.h.
- Fix hb_language_t in language bindings.
- Misc fixes.

Changelog:
Overview of changes between 1.37.0 and 1.37.1
=============================================
- Add attributes for OpenType font features (#738505)
- CoreText: locale handling improvements (#750017)
- Fix ellipsization with line space (#750383)
- Fix issues with hex boxes (#750463)

Changelog:
2015-06-21  Bob Friesenhahn  <bfriesen@simple.dallas.tx.us>

	* libtiff 4.0.4 released.

	* configure.ac: Add a HAVE_FOO Automake conditional for each
	add-on library.

	* test/Makefile.am (JPEG_DEPENDENT_CHECK_PROG): raw_decode
	requires JPEG support to compile.  Use Automake conditional to
	only include it when JPEG support is available.

	* html/build.html: Try to improve the nmake-based VC++ build
	description.

	* libtiff/tiffconf.vc.h: Build fixes based on testing.

	* libtiff/tif_config.vc.h: Build fixes based on testing.

	* libtiff/libtiff.def: TIFFRasterScanline does not exist so remove
	export for it.

2015-06-20  Bob Friesenhahn  <bfriesen@simple.dallas.tx.us>

	* libtiff/tif_config.vc.h: Make adjustments to match the new
	definitions that configure produces, including for WIN64.  Still
	needs to be tested.

	* configure.ac: For 64-bit MinGW, fix SSIZE_FORMAT formatting
	specifier.  64-bit MinGW supports 'long long' but support for
	'lld' is not assured by the run-time DLLs and so GCC warns.
	Add TIFF_SIZE_T and TIFF_SIZE_FORMAT to provide a type definition
	and printf format specifier to deal with printing values of
	'size_t' type.  In particular, this was necessary for WIN64.
	Added a configure test for if the system headers provide 'optarg'
	(normal case) and block out the many explicit 'extern' statements
	in the utilities.  This was found to be necessary under Windows
	when getopt is in a DLL and the symbols are already imported with
	dllimport via standard header files.

	* test/raw_decode.c (XMD_H): Avoid conflicting typedefs for INT32
	and boolean in MinGW build due to including jpeglib.h.

	* test/rewrite_tag.c (main): Fix problem with location of variable
	declaration.

	* libtiff/libtiff.def: Added exports for TIFFGetConfiguredCODECs,
	TIFFReadRGBAImageOriented, TIFFSetCompressionScheme,
	TIFFSwabArrayOfTriples, TIFFVGetFieldDefaulted, _TIFFCheckRealloc,
	TIFFRasterScanline, TIFFSetErrorHandlerExt,
	TIFFSetWarningHandlerExt, TIFFNumberOfDirectories,
	TIFFCreateCustomDirectory, TIFFCreateEXIFDirectory,
	TIFFWriteCustomDirectory, _TIFFRewriteField as recommended by
	Roger Leigh and justified by use in libtiff tests, documentation,
	and changelog notes.  Also sorted symbol list and removed
	duplicate entries.

2015-06-16  Bob Friesenhahn  <bfriesen@simple.dallas.tx.us>

	* libtiff/tif_getimage.c: Fix four Coverity issues related to
	unintended sign extension.

2015-06-16  Even Rouault <even.rouault at spatialys.com>

	* libtiff/tif_unix.c: fix compilation with MSVC (fix by Jeff McKenna)

2015-06-14  Lee Howard  <faxguy@howardsilvan.com>

	* libtiff/tif_unix.c: contribution from Vadim Zeitlin on
	Bugzilla Bug #2510 fixes several harmless but still annoying
	warnings

	* configure: contribution from Ludolf Holzheid on Bugzilla
	Bug #2498.  Adds an option to select the file I/O style on
	Windows hosts.

	* libtiff/tif_getimage.c: contribution from Gary Cramblitt
	on Bugzilla Bug #2409.  Correct reading of certain tiled TIFFs.

	* configure, configure.ac: contribution from Marcos H. Woehrmann
	on Bugzilla Bug #2405.  Correct shell equality operator.

	* tools/tiffgt.c (raster_draw): contribution from Jay Berkenbilt
	on Bugzilla Bug #2401.  Appropriately call glFlush().

	* tools/tiff2pdf.c: change ColorTransform from "0" to "1"
	following Bugzilla Bug #2150.

2015-06-13  Lee Howard  <faxguy@howardsilvan.com>

	* libtiff/tif_lzw.c: contribution from Andy Cave - decode
	files that contain consecutive CODE_CLEAR codes.

	* tools/tiff2pdf.c: contribution from Antti S. Lankila on
	Bugzilla Bug #2078. Suppress initial output of the header.

	* tools/tiff2pdf.c: contribution from Yuriy M. Kaminskiy -
	Take care in using the return value from snprintf().

	* tools/tiffcrop.c: contribution from Eduardo Robles Elvira -
	correctly copy the compression tag from the source TIFF.

	* tools/tiff2ps.c: contribution from Eduardo Robles Elvira -
	correct sizing and scaling problems with output document.

2015-06-10  Bob Friesenhahn  <bfriesen@simple.dallas.tx.us>

	* libtiff/tif_jpeg.c (JPEGDecode): Split JPEGDecode() into two
	clean implementations in order to avoid pre-processor hell.  Only
	one of the implementations is used in a given build.

2015-06-08  Even Rouault <even.rouault at spatialys.com>

	* libtiff/tif_jpeg.c: Fix compilation in BITS_IN_JSAMPLE == 12
	case

2015-06-07  Bob Friesenhahn  <bfriesen@simple.dallas.tx.us>

	* libtiff/tif_write.c (TIFFWriteEncodedStrip): Fix Coverity 715975
	"Division or modulo by zero".
	(TIFFWriteEncodedTile): Fix Coverity 715976 and 715977 "Division
	or modulo by zero".
	(TIFFWriteRawStrip): Fix Coverity 715978 "Division or modulo by
	zero".
	(TIFFWriteScanline): Fix Coverity 715979 "Division or modulo by
	zero".

	* libtiff/tif_read.c (TIFFStartTile): Fix Coverity 715973 and
	715974 "Division or modulo by zero".

2015-05-31  Bob Friesenhahn  <bfriesen@simple.dallas.tx.us>

	* libtiff/tif_dir.c (TIFFNumberOfDirectories): Quiet Coverity
	1134470 "Logically dead code" by making the roll-over check
	explicit.

	* libtiff/tif_luv.c (LogLuvDecodeTile): Fix Coverity 991227
	"Division or modulo by zero".
	(LogLuvDecodeStrip): Fix Coverity 991239 "Division or modulo by
	zero".
	(LogLuvEncodeStrip): Fix Coverity 991240 "Division or modulo by
	zero".
	(LogLuvEncodeTile): Fix Coverity 991241 "Division or modulo by
	zero".

	* libtiff/tif_dirread.c (TIFFReadDirEntryDoubleArray): Fix
	Coverity 298626 "Logically dead code".
	(TIFFReadDirEntryFloatArray): Fix Coverity 298627 "Logically dead
	code".
	(TIFFReadDirEntryIfd8Array): Fix Coverity 298628 "Logically dead
	code".
	(TIFFReadDirEntrySlong8Array): Fix Coverity 298629 "Logically dead
	code"

	* libtiff/tif_dir.c (TIFFNumberOfDirectories): Don't depend on ++
	operator precedenc in evaluation.  Might quench Coverity 1134470
	"Logically dead code".

	* libtiff/tif_jpeg.c (JPEGDecode): Fix Coverity 602597 "Operands
	don't affect result".  This change uses ifdefs to include
	applicable code based on properties of libjpeg.  Still needs to be
	re-tested with 12-bit "6b" and "MK1".

2015-05-30  Bob Friesenhahn  <bfriesen@simple.dallas.tx.us>

	* libtiff/tif_dirwrite.c (_TIFFRewriteField): Fix Coverity 1024310
	"Resource leak".

	* libtiff/tif_ojpeg.c (OJPEGReadHeaderInfoSecStreamDht): Fix
	Coverity 601720 "Resource leak".

	* libtiff/tif_jpeg.c (JPEGCleanup): Fix Coverity 298624
	"Dereference before null check".

	* libtiff/tif_ojpeg.c (OJPEGReadBufferFill): Fix Coverity 603400
	"Missing break in switch".

	* contrib/addtiffo/tif_overview.c (TIFF_DownSample): Check buffer
	size calculation for overflow.

	* contrib/addtiffo/addtiffo.c (main): Possibly address Coverity
	1024226 "Untrusted value as argument".

	* tools/gif2tiff.c (readgifimage): Fix Coverity 1024222 "Untrusted
	value as argument".
	(checksignature): Fix Coverity 1024894 "Ignoring number of bytes
	read".
	(readextension): Fix Coverity 1024893 "Ignoring number of bytes
	read".
	(readgifimage): Fix Coverity 1024890 "Ignoring number of bytes
	read".
	(readraster): Fix Coverity 1024891 "Ignoring number of bytes
	read".
	(readgifimage): Fix Coverity 1024892 "Ignoring number of bytes
	read".

	* tools/tiff2pdf.c (t2p_readwrite_pdf_image): Fix Coverity 1024181
	"Structurally dead code".

	* tools/raw2tiff.c (main): Fix Coverity 1024887 "Unchecked return
	value from library".
	(guessSize): Fix Coverity 1024888 "Unchecked return value from
	library".
	(guessSize): Fix Coverity 1214162 "Ignoring number of bytes read".
	(guessSize): Fix Coverity 1024889 "Unchecked return value from
	library".

	* tools/tiff2pdf.c (t2p_readwrite_pdf_image): Fix Coverity 298621
	"Resource leak".
	(t2p_readwrite_pdf_image): Fix Coverity 1024181 "Structurally dead
	code".
	(t2p_write_pdf): Fix Coverity 1227690 "Unused value".

2015-05-29  Bob Friesenhahn  <bfriesen@simple.dallas.tx.us>

	* contrib/iptcutil/iptcutil.c (formatIPTC): Fix Coverity 1024468
	"Infinite loop".
	(formatIPTC): Fix Coverity 1024727 "Truncated stdio return value".
	(formatIPTC): Fix Coverity 1214240 "Untrusted loop bound".

2015-05-28  Bob Friesenhahn  <bfriesen@simple.dallas.tx.us>

	* contrib/addtiffo/tif_ovrcache.c (TIFFCreateOvrCache): Fix
	Coverity 298615 "Resource leak".
	(TIFFGetOvrBlock): Fix Coverity 1024649 "Unintended sign
	extension".

	* tools/bmp2tiff.c (main): Fix Coverity 1024225 "Untrusted value
	as argument".
	(main): Fix Coverity 1024678 "Unchecked return value from
	library".
	(main): Fix Coverity 1024679 "Unchecked return value from
	library".
	(main): Fix Coverity 1214160 "Ignoring number of bytes read".

	* contrib/addtiffo/tif_ovrcache.c (TIFFCreateOvrCache): Fix
	Coverity 298615 "Resource leak".

	* tools/tiffcp.c: Fix Coverity 1024306, 1024307, 1024308, 1024309
	"Resource leak".

	* tools/tiffsplit.c (cpTiles): Fix Coverity 1024304 "Resource
	leak".
	(cpStrips): Fix Coverity 1024305 "Resource leak".

2015-05-27  Bob Friesenhahn  <bfriesen@simple.dallas.tx.us>

	* tools/ras2tiff.c: Fix Sun Raster header definition to be safe
	for 64-bit systems.  Add some header validations.  Should fix many
	Coverity issues.
	(main): Fix Coverity 1301206: "Integer handling issues  (BAD_SHIFT)".
	(main): Quiet Coverity 1024223 "Untrusted value as argument".

	* tools/tiffmedian.c (GetInputLine): Fix Coverity 1024795 "Nesting
	level does not match indentation".
	(get_histogram): Quiet Coverity 1024386 "Out-of-bounds read".
	This was a benign mis-diagnosis but added code to enforce against
	buffer overflow.

	* tools/tiffcrop.c (ROTATE_ANY): Fix Coverity 1294542 "Logical
	vs. bitwise operator".
	(readContigStripsIntoBuffer): Fix Coverity 1024545 "Division or
	modulo by zero".
	(readContigTilesIntoBuffer): Fix Coverity 1024586 "Logically dead
	code".
	(writeSingleSection): Fix Coverity 1024796 "Nesting level does not
	match indentation".
	(writeCroppedImage): Fix Coverity 1024797 "Nesting level does not
	match indentation".
	(loadImage): Fix Coverity 1299741 "Dereference before null check".
	(loadImage): Fix Coverity 1299740 "Out-of-bounds write".

2015-03-02  Even Rouault  <even.rouault@spatialys.com>

	* tools/tiffdither.c: check memory allocations to avoid writing to
	NULL pointer. Also check multiplication overflow. Fixes #2501,
	CVE-2014-8128. Derived from patch by Petr Gajdos.

Changelog:
2.30.8
======

* Add missing nullability annotations

* Documentation improvements

* Translation updates

2.30.7
======

* Documentation fixes

2.30.6
======

* Add annotations to gdk_pixbuf_save_to_buffer

* Win32 build fixes

* Translation updates

2.30.5
======

* Convert documentation to markdown

* Translation updates

2.30.4
======

* Make test suite robust against disabled formats

* Fix test failure when using libpng without iTXt support

* Translation updates

Changelog:
help2man (1.47.1) unstable; urgency=medium

  * Set document language for localised info pages.
  * Update German translations (thanks to Mario Blättermann).
  * Update Ukranian translations (thanks to Yuri Chornoivan).
  * Update French translations (thanks to David Prévot).
  * Update Vietnamese translation (thanks to Trần Ngọc Quân).
  * Update Norwegian Bokmaal translation (thanks to Johnny A. Solbu).
  * Update Russian translation (thanks to Yuri Kozlov).
  * Update Danish translation (thanks to Joe Hansen).
  * Update Polish translations (thanks to Jakub Bogusz).
  * Update Spanish translation and add translation of the info page
    (thanks to Antonio Ceballos).
  * Add support for reproducible builds by using $SOURCE_DATE_EPOCH as the
    date for the generated pages (closes: #787444).

 -- Brendan O'Dea <bod@debian.org>  Mon, 15 Jun 2015 23:06:35 +1000

Changelog:
6.0 (26 June 2015)
* Language:
  . new commands @sub and @sup, for textual subscripts and superscripts.
  . new command @U to insert a Unicode character by code point.

* texinfo.tex:
  . @url/@uref output in PDF now the same as in DVI, showing the url
    even if the second argument is given, not just as a link target.
    TeX option \urefurlonlylinktrue gives previous behavior, of invisible urls.
    PDF-only \linkcolor and \urlcolor specify colors (default black).

* texi2any:
  . customization variable TOP_NODE_UP_URL now replaces all (dir) references;
    recommended setting for GNU packages is /manual/.
  . new customization variable INDEX_SPECIAL_CHARS_WARNING to complain
    when index entries contain a colon.
  . Docbook output no longer uses <lineannotation> for @r.
  . -D'var val' on the command line works as intended again.
  . --plaintext output can be split.
  . a bit faster.

* info:
  . invoking as `info foo bar' looks for bar as an index entry in manual
    foo, if not found as a top-level menu item.
  . invoking info with an absolute or explicitly relative file name
    (./foo.info, /tmp/foo.info, etc.) just visits that file.
  . separate `infokey' program has been removed - the .infokey file is
    now read directly by Info.
  . new option --init-file allows overriding ~/.infokey.
  . new variable `highlight-searches' allows highlighting results from a
    search
  . support for mouse scrollwheel, controlled by `mouse' variable.
  . new variable `key_time' to control how long to wait for byte
    sequences sent by special keys.
  . new variable `hide-note-references' alters appearance of displayed nodes
  . new variable `infopath-no-defaults' allows omitting the compile-time
    Info directory from the Info search path.
  . support input of multibyte characters for searches in a UTF-8 locale.
  . if reading an Info file that is known to be in a different character
    encoding to that of the user's environment, convert its contents
    when displayed and substitute missing characters
  . new command M-x info-version.
  . the M-x kill-node command has been removed.
  . test suite at build time.

* texindex:
  . completely new implementation as a literate program using Texinfo
    and (portable) awk (called TexiWeb Jr.), thanks to Arnold Robbins.
    (Requires gawk 4.0+ if .twjr source is modified.)
  . the -o (--output) is not supported, unless we hear of someone using it.
  . duplicated sort keys with different display texts result in one
    merged index entry, using the first display text.
  . better sorting and parsing in unusual cases; most notably, { and }
    characters can appear as initials.

* install-info:
  . handle compressed input file names containing spaces.
  . exit successfully if --remove is given and the dir file does not exist.
  . new option --defsection, to be used instead of "Miscellaneous" when
    a section is not present in the Info file.

* texi2dvi:
  . look for the environment variable THUMBPDF_CMD instead of THUMBPDF,
    since thumbpdf itself has used THUMBPDF for options since 2000.
  . remove --recode and --recode-from options, since they haven't
    worked as intended for years, so evidently no one needs them.

* Distribution:
  . new translation ca (catalan).
  . automake-1.15, gettext-0.19.4.

0.29 - 2015-06-26
    - Add more Num tests (meAmdios)
    - Improve POD (meAmidos)
    - Add DISTNAME to MakeMaker args

1.70 2015-06-26
     Patch from Alexander Bluhm: The new OpenSSL 1.0.2 X509_check_* functions are not available in
     current LibreSSL.  So disable them in SSLeay.xs.
     Fixed a problem with building against OSX homebrew's openssl. Patch from
     Shoichi Kaji.
     Removed a test in t/local/33_x509_create_cert.t which fails due to
     changes in 1.0.1n and later

2015-06-25   Karen Etheridge <ether@cpan.org>

  Release 1.68

  Kent Fredric:
    - Sort hash keys to make generated query predictable

  Slaven Rezic:
    - Add new tests for path segments

  Brendan Byrd:
    - Add sftp scheme

include:
- #6583: add a new class of binary operators with the same syntactic
  precedence as method calls; these operators start with # followed
  by a non-empty sequence of operator symbols (for instance #+, #!?).
  It is also possible to use '#' as part of these extra symbols
  (for instance ##, or #+#); this is rejected by the type-checker,
  but can be used e.g. by ppx rewriters.
* #6016: add a "nonrec" keyword for type declarations
- #6600: make -short-paths faster by building the printing map
  incrementally
- #6642: replace $CAMLORIGIN in -ccopt with the path to cma or cmxa
  to output an object file with included runtime and autolink libraries
- #6845: -no-check-prims to tell ocamlc not to check primitives in runtime
- G#149: Attach documentation comments to parse tree
- G#159: Better locations for structure/signature items
- #5958: generalized polymorphic #install_printer
- #6237: explicit "infer" tag to control or disable menhir --infer
- #6625: pass -linkpkg to files built with -output-obj.
- #6712: Ignore common VCS directories
- #6720: pass -g to C compilers when tag 'debug' is set
- #6733: add .byte.so and .native.so targets to pass
  -output-obj -cclib -shared.
- #6733: "runtime_variant(X)" to pass -runtime-variant X option.
- #6774: new menhir-specific flags "only_tokens" and "external_tokens(Foo)"
- #6285: Add support for nanosecond precision in Unix.stat()
- #6781: Add higher baud rates to Unix termios
- #6834: Add Obj.{first,last}_non_constant_constructor_tag
- #6078: Release the runtime system when calling caml_dlopen
- #6675: GC hooks
- #5418 (comments) : generate dependencies with $(CC) instead of gcc
- #6266: Cross compilation for iOs, Android etc
- Update instructions for x86-64 PIC mode and POWER architecture builds
- #6452, G#140: add internal suport for custom printing formats
- #6641: add -g, -ocamlcflags, -ocamloptflags options to ocamlmklib
- #6693: also build libasmrun_shared.so and lib{asm,caml}run_pic.a
- #6842: export Typemod.modtype_of_package
- G#139: more versatile specification of locations of .annot
- G#157: store the path of cmos inside debug section at link time
- G#191: Making gc.h and some part of memory.h public

There is one other change:
* [20 Apr 15] Accept 'fun/try' case list like the change of 22nd Apr 13
  on 'match' in revised syntax, allowing them to write "|" .. "end" or
  "[" .. "]", both being accepted.

ocamlcore forge, the file downloaded doesn't depend on the filename, but
on the number at the end of the URL. I forgot to update that last time
around, so it was still downloading (and hence installing) 2.18.2 at that
point. I have corrected this now - the version being installed is
definitely 2.18.3. Have bumped the PKGREVISION to make sure things get
reinstalled.

There's a new option to disable the system tray.
As mentioned above, we now have a plugin for Pump.io microblogs.
We have a new plugin for expansion of short URLs, and dropped old UnTiny
plugin.
A preview for photos posted to Twitter.com is now available.
Issues in updating friends list of Twitter is fixed and sending direct
message is working again.
There's a new option in User menu for Reporting a User to Twitter.
A long wanted request on StatusNet(Gnu social) plugin was ability to take
into account the server's custom set, char limit. now we have it.
IMStatus plugin now supports KDE Telepathy.
Yourls and Goo.gl shortening plugins are fixed and now they are working
again.
Broken shortening plugins are dropped.

built with Glade support or not. As discussed on tech-pkg@ recently.
Also ensure the tools get linked.

Please refer NEWS and ChangeLog for full changes.

NTP 4.2.8p3 (Harlan Stenn <stenn@ntp.org>, 2015/06/29)

Focus: 1 Security fix.  Bug fixes and enhancements.  Leap-second improvements.

Severity: MEDIUM

Security Fix:

* [Sec 2853] Crafted remote config packet can crash some versions of
  ntpd.  Aleksis Kauppinen, Juergen Perlinger, Harlan Stenn.

Under specific circumstances an attacker can send a crafted packet to
cause a vulnerable ntpd instance to crash. This requires each of the
following to be true:

1) ntpd set up to allow remote configuration (not allowed by default), and
2) knowledge of the configuration password, and
3) access to a computer entrusted to perform remote configuration.

This vulnerability is considered low-risk.

New features in this release:

Optional (disabled by default) support to have ntpd provide smeared
leap second time.  A specially built and configured ntpd will only
offer smeared time in response to client packets.  These response
packets will also contain a "refid" of 254.a.b.c, where the 24 bits
of a, b, and c encode the amount of smear in a 2:22 integer:fraction
format.  See README.leapsmear and http://bugs.ntp.org/2855 for more
information.

   *IF YOU CHOOSE TO CONFIGURE NTPD TO PROVIDE LEAP SMEAR TIME*
   *BE SURE YOU DO NOT OFFER THAT TIME ON PUBLIC TIMESERVERS.*

We've imported the Unity test framework, and have begun converting
the existing google-test items to this new framework.  If you want
to write new tests or change old ones, you'll need to have ruby
installed.  You don't need ruby to run the test suite.

…mpatible

with pkgsrc MACHINE_ARCH (i386).  Fixes 32-bit build, no change for 64-bit.

a patch to gnulib/stdio.in.h to avoid warnings with g++.
Revision bump.

Release date: June 11, 2015
Compatibility Notes

    Team Foundation Server support does not yet work with Visual Studio 2013
    Update 4 or higher.

    In Visual Studio 2013 Update 4, the command line tool we used, tf.cmd,
    has been rewritten, and many of the features we depended on were dropped.

    For the moment, you will need to stick with Update 3 or lower in order to
    continue using Power Pack‘s TFS support. Alternatively, if you’re running
    Update 4, you can try installing Team Explorer Everywhere.

Bug Fixes
General

    Fixed a Python 2.6 compatibility problem. (Bug #3753)

    When there are communication errors with a Review Board server, the error
    message will now contain more details on what went wrong. (Bug #3840)

    Fixed additional Unicode issues when running in a non-UTF-8 environment.

    Patch by Bartosz Gołek.

rbt post

    The --diff-filename and --update flags are now mutually-exclusive.
    (Bug #3755)

    The --update option didn’t make sense when using a diff filename, since
    the review request could not be guessed. There’s now an error shown when
    trying to use both.

Mercurial

    The --tracking-branch option wasn’t overriding the built-in default
    tracking branch.

    Patch by Andrew Bettison.

Team Foundation Server

    Modifications to directories or other non-files no longer break diff
    generation.
    Fixed issues with file encodings and newlines.

is now downloaded.

-----

* Strip markers from test requirements

1.1.1
-----

* Revert "Remove sphinx_config.init_values(

1.1.0
-----

* Fix test case to be runnable with gnupg 2.1
* More explicit data_files install location docs
* Move CapturedSubprocess fixture to base
* Remove sphinx_config.init_values() manual call
* Updated from global requirements
* builddoc: allow to use fnmatch-style exclusion for autodoc
* doc: add some basic doc about pbr doc options
* Add home-page into sample setup.cfg
* Make setup.py --help-commands work without testrepository

1.0.1
-----

* Remove self.pre_run calls in packaging.py
* Add kerberos deps to build the kerberos wheel
* Update hacking to 0.10.x series

1.0.0
-----

* Teach pbr to read extras and env markers
* Bump integration test timeouts
* Finish removing invocations of pip
* Advertise support for Python3.4
* Issue #1451976: handle commits with non-utf8 text
* Parallelise integration tests

0.11.0
------

* Issue #1450210: Preversioning rc tag handling
* Stop testing setup.py easy_install behaviour
* Test pip install -e of projects
* Build all the wheels in one pass rather than many
* Improve integration.sh
* Stop re-invoking pip
* Honour new test variable PIPVERSION
* Be safe, don't let friends use RawConfigParser
* Revert "Support platform-specific requirements files"
* Reinstate pure-git-hashes-are-illegal test
* Ignore non-release related tags
* Test that MANIFEST.in excludes work
* Fixup semver
* Better diagnostics on test failure
* Don't avoid egg-info quite so often
* Add truncated lincense text
* Allow overwriting sphinx builder from command line
* "packages" might list multiple directories
* Support script text override for newer develop
* Fixes Windows generated scripts headers
* Update README format to match release notes tool
* Be more aggressive about building wheels
* Use a wheelhouse in the integration test
* Build a wheel when integration testing PBR changes
* Use unsafe OpenPGP keys for testing

================
* Added check method for all storage classes
* Use lock timeout with redis

1.0.7 2015-06-07
================
* No functional change

1.0.6 2015-05-13
================
* Bug fixes for .test() logic

1.0.5 2015-05-12
================
* Add support for testing a rate limit before hitting it.

------

* Issue #25: Complex python files could cause an "maximum recursion depth
  exceeded" exception due to using stack-based recursion to walk the module
  AST.

…a on

Windows now.

http://mail-index.netbsd.org/tech-pkg/2015/06/29/msg015105.html

This entire file needs:
	1) collation;
	2) the EOL escapes removed and turned into proper lists;

Otherwise, it's a bit painful to read.

Reverting to convention.

This is commented for now in bsd.fetch.mk pending 48 hours of feedback on
tech-pkg@.

Routine for estimating syllable count in words.

Measure readability of English text.

Publican is a DocBook publication system, not just a DocBook processing tool. As
well as ensuring your DocBook XML is valid, publican works to ensure your XML is
up to publishable standard.

20150701:
* M+ OUTLINE FONTS has been updated to TESTFLIGHT 060.

3.74 Mon Jun 29 14:39:26 CEST 2015
	- the generated README file was empty.

2.56	* Fix Makefile.PL so that it works again.
2.55	* Great simplification of regression framework ought to fix make test problems.
	* Replace ExtUtils::MakeMaker script with Module::Build system
	  (just in time for Module::Build to be deprecated).
	* Remove archaic qd.pl (for creating QuickDraw picts) from distribution.
2.54	Patch from yurly@unet.net to fix image corruption in rotate180 when image height is odd.

NEW IN WAF 1.8.11
-----------------
* Fortran fixes https://github.com/waf-project/waf/issues/1580
* Enabled installation of generated .py files
* Fixed the '--threading' option for valac https://github.com/waf-project/waf/issues/1577
* Shared library compatibility version handling on OSX

this time from using gettimeofday() to using cloc_gettime(CLOCK_MONOTONIC),
to avoid the effects of UTC leap second insertion which IIUC steps
the system clock back one second, and will cause the single assert()
in dbeacon.cpp to fire.  Unfortunately, my core dump was incomplete
due to a full root file system...
PKGREVISION bumped.

ver 0.19.10 (2015/06/21)
* input
  - curl: fix deadlock on small responses
  - smbclient: fix DFF playback
* decoder
  - ffmpeg: improve seeking accuracy
  - fix stuck stream tags
* encoder
  - opus: fix bogus granulepos
* output
  - fix failure to open device right after booting
* neighbor
  - nfs: fix deadlock when connecting
* fix "single" mode breakage due to queue edits

Changes between version 1.0.13 and 1.0.14

Big improvements to side-by-side diff detection, thanks Peter Wu.  Additional
colordiffrc example colour scheme file to match 'git diff'.  Misc fixes thanks
to John Szakmeister, Matthew Wang.

Changes between 1.0.14 and 1.0.15

Missed gitdiff file from tarball, bumping version number for clarity.

Version 0.5.2
=============

*released on 15 June 2015*

- Vdirsyncer now checks and corrects the permissions of status files.
- Vdirsyncer is now more robust towards changing UIDs inside items.
- Vdirsyncer is now handling unicode hrefs and UIDs correctly. Software that
  produces non-ASCII UIDs is broken, but apparently it exists.

0.5.6 -> 0.5.7
=================
Akira TAGOH (3):
      add missing sys/types.h in lt-string.h
      missing docs
      Update gtk-doc to be modernized

David Tardon (1):
      avoid accidental (and surprising) memory leaks

Changes in 2.7
* Rewrite of the mungefilename function.
* Support added for downloading album art.
* Support added for ripping with libcdio (cd-paranoia).
* Some error checking and a small help file added to abcde-musicbrainz-tool.
* Substantial renovations of m4a encoding with a choice now between encoding
  with faac, NeroAacEnc and fdkaac.
* Fixes to USEPIPES with the addition of several new encoders and rippers.
  Details on USEPIPES now available in the abcde FAQ doc.
* Support added for encoding with Monkey's Audio (ape), tagging is with
  Robert Muth's apetag.
* Support added for encoding with WavPack.
* mp3 tagging renovated with version sniffing differentiating between eyeD3
  versions. Tagging formalised with options now for id3, id3v2 and eyeD3.
* Many, many bug fixes. See the changelog for more details.

------
18.0.1
------

* Issue #401: Fix failure in test suite.

----
18.0
----

* Dropped support for builds with Pyrex. Only Cython is supported.
* Issue #288: Detect Cython later in the build process, after
  ``setup_requires`` dependencies are resolved.
  Projects backed by Cython can now be readily built
  with a ``setup_requires`` dependency. For example::

    ext = setuptools.Extension('mylib', ['src/CythonStuff.pyx', 'src/CStuff.c'])
    setuptools.setup(
        ...
        ext_modules=[ext],
        setup_requires=['cython'],
    )

  For compatibility with older versions of setuptools, packagers should
  still include ``src/CythonMod.c`` in the source distributions or
  require that Cython be present before building source distributions.
  However, for systems with this build of setuptools, Cython will be
  downloaded on demand.
* Issue #396: Fixed test failure on OS X.
* Pull Request #136: Remove excessive quoting from shebang headers
  for Jython.

    Release JSON-GLib 1.0.4

    build: Enable subdir-objects

    We need to remove the path specification inside the sources listing, and
    modify the enumeration type and marshallers generation rules to cope
    with it (by adding the $(srcdir) when needed). This is similar to the
    changes there were made to Clutter.



    Added Bosnian translation



    build: Enable gtkdoc-check

    We can verify that the documentation is correct and up to date every
    time we distcheck by turning on the gtk-doc check tool.



    build: Clean up gtk-doc stanzas

    We need to ensure that gtk-doc looks into both the srcdir and the
    builddir in order to find all annotations.

    We also don't need to have the .types file under revision control:
    gtk-doc is perfectly capable of rebuilding it by itself.



    docs: Add missing symbol indices



    docs: Add missing annotations



    configure: test(1) uses = to test for string equality

    https://bugzilla.gnome.org/show_bug.cgi?id=711600
    https://bugzilla.gnome.org/show_bug.cgi?id=746143



    Updated Slovak translation



    MSVC Builds: Rename "Install" Projects

    Rename the install projects as json-glib-install, so that it would be
    easier for one to integrate the project set in a grand solution that can be
    used to build the entire stack, such as for Clutter.



    MSVC Builds: "Install" the .pdb Files

    "Install" the .pdb files for the json-glib DLL and the tools to ease
    debugging people developing or using json-glib, as the .pdb files are
    already generated for all builds.



    MSVC 2010 Projects: Clean Up "Installation"

    The empty lines in the property sheets are not really needed, so remove
    them.



    MSVC Builds: Speed Up Release Builds

    Use the multiprocessor compilation (/MP) option, which can cut down release
    build times by quite a bit.  This will emit a brief warning on debug
    builds, but otherwise the build will proceed as normal.

    Also use the /d2Zi+ option for MSVC 2010 (and later) builds so that more
    useful information can be logged to the .pdb files for the release builds.



    json-gvariant: Parse json doubles that are whole numbers

    The json gvariant serializer encodes whole number doubles without
    a dot. The deserializer needs to be able to parse these as well.

    Fix problem, and add test cases.

    https://bugzilla.gnome.org/show_bug.cgi?id=724319



    builder: Add missing (transfer) annotation to json_builder_add_value()

    Document and annotate the fact that json_builder_add_value() takes
    ownership of the JsonNode passed in to it.

    https://bugzilla.gnome.org/show_bug.cgi?id=743475



    reader: Maintain a stack of member names

    This fixes the case where, with nested objects, we call:
        json_reader_read_member (reader, "outer");
        // json_reader_get_member_name (reader) == "outer"

        json_reader_read_member (reader, "inner");
        // json_reader_get_member_name (reader) == "inner"
        // do something useful
        json_reader_end_member (reader);
    but at the end, the following assertion no longer holds:
        // json_reader_get_member_name (reader) == "outer"
    even though the JsonReader state should have been reset after ending the
    inner node.

    Fix it by maintaining a stack of member names. This works with both
    json_reader_read_member() and json_reader_read_element(). Updates to the
    unit tests are included.

    https://bugzilla.gnome.org/show_bug.cgi?id=741824



    Handle serialization/deserialization of glong gulong and guint64

    Long and unsigned long was properly serialized but not deserialized, guint64
    handling is not ideal as the type is cast into a gint64, however this is
    better than not handling the fundamental type at all.

    https://bugzilla.gnome.org/show_bug.cgi?id=725972



    Drop unnecessary '_' prefix from json_marshal

    It's not public API anyway, and we use annotations instead of the '_'
    prefix.



    Updated Turkish translation



    Updated Swedish translation



    Updated Assamese translation



    Updated German translation



    doap category core



    Clean up the enumeration type template



    Include "config.h" in the enum types template

    Expands the symbol annotation correctly.



    Updated Greek translation



    MSVC 2010+ Projects: Update "Installation" Process

    Currently, due to the way that Visual Studio 2010+ projects are handled,
    the "install" project does not re-build upon changes to the sources, as it
    does not believe that its dependencies have changed, although the changed
    sources are automatically recompiled.  This means that if a part or more
    of the solution does not build, or if the sources need some other fixes
    or enhancements, the up-to-date build is not copied automatically, which
    can be misleading.

    Improve on the situation by forcing the "install" project to trigger its
    rebuild, so that the updated binaries can be copied.  This does trigger an
    MSBuild warning, but having that warning is way better than not having an
    up-to-date build, especially during testing and development.



    [l10n] Update Catalan translation



    Post-release version bump to 1.0.3

1.4.30
==================================================

- fix issue68 an assert with a  multiline list comprehension
  was not reported correctly. Thanks Henrik Heibuerger.


1.4.29
==================================================

- fix issue55: revert a change to the statement finding algorithm
  which is used by pytest for generating tracebacks.
  Thanks Daniel Hahler for initial analysis.

- fix pytest issue254 for when traceback rendering can't
  find valid source code.  Thanks Ionel Cristian Maries.


1.4.28
==================================================

- fix issue64 -- dirpath regression when "abs=True" is passed.
  Thanks Gilles Dartiguelongue.

1.4.27
==================================================

- fix issue59: point to new repo site

- allow a new ensuresyspath="append" mode for py.path.local.pyimport()
  so that a neccessary import path is appended instead of prepended to
  sys.path

- strike undocumented, untested argument to py.path.local.pypkgpath

- speed up py.path.local.dirpath by a factor of 10

2.7.2 (compared to 2.7.1)
-----------------------------

- fix issue767: pytest.raises value attribute does not contain the exception
  instance on Python 2.6. Thanks Eric Siegerman for providing the test
  case and Bruno Oliveira for PR.

- Automatically create directory for junitxml and results log.
  Thanks Aron Curzon.

- fix issue713: JUnit XML reports for doctest failures.
  Thanks Punyashloka Biswal.

- fix issue735: assertion failures on debug versions of Python 3.4+
  Thanks Benjamin Peterson.

- fix issue114: skipif marker reports to internal skipping plugin;
  Thanks Floris Bruynooghe for reporting and Bruno Oliveira for the PR.

- fix issue748: unittest.SkipTest reports to internal pytest unittest plugin.
  Thanks Thomas De Schampheleire for reporting and Bruno Oliveira for the PR.

- fix issue718: failed to create representation of sets containing unsortable
  elements in python 2. Thanks Edison Gustavo Muenz

- fix issue756, fix issue752 (and similar issues): depend on py-1.4.29
  which has a refined algorithm for traceback generation.

Changes from Ant 1.9.4 TO Ant 1.9.5
===================================

Changes that could break older environments:
-------------------------------------------

 * The ReplaceTokens filter can now use token-separators longer than
   one character.  This means it can be used to replace mustache-style
   {{patterns}} and similar templates.  This is going to break code
   that invokes the setters on ReplaceTokens via the Java API as their
   parameters have been changed from char to String.  It may also
   break build files that specified multi character tokens and relied
   on Ant silently ignoring all but the first character.
   Bugzilla Report 56584

 * The changes that added <get>'s support for gzip encoding
   automatically uncompressed content that would not have been touched
   before - like when downloading .tar.gz files.  A new flag has been
   added to control the behavior and its default will make <get> work
   as it did in 1.9.3.  I.e. if you want it to work like 1.9.4
   you have to explicitly set tryGzipEncoding to true.
   Bugzilla Report 57048

Fixed bugs:
-----------

 * TarArchiveInputStream failed to read archives with empty gid/uid
   fields.
   Bugzilla Report 56641

 * TarArchiveInputStream could throw IOException when reading PAX
   headers from a "slow" InputStream.

 * XMLJunitResultFormatter could throw NullPointerException if Java
   cannot determine the local hostname.
   Bugzilla Report 56593

 * URLResource#getLastModified tried to access the connection to the
   URL without making sure it was established, potentially leading to
   a NullPointerException when using FTP.
   Bugzilla Report 56873

 * Long-Name and -link or PAX-header entries in TAR archives
   always had the current time as last modfication time, creating
   archives that are different at the byte level each time an
   archive was built.

 * runant.py should now work as well when the path of the Java executable
   contains spaces.
   github pull request #1

 * <junitreport> now supports nested <classpath> and <factory> elements.
   Bugzilla Report 47002

 * complete-ant-cmd.pl now also knows about the -file option.
   Bugzilla Report 57371

 * the br-replace template inside the XSLT stylesheets used by
   <junitreport> could cause stack overflows or out-of-memory errors
   when applied to big outputs.
   Bugzilla Report 57341

 * removed spurious warning about unclosed ZipFiles when reading the
   archive failed.
   Port of https://issues.apache.org/jira/browse/COMPRESS-297

 * FileUtils.rename which is used by several tasks can throw a
   NullPointerException if the "normal" renameTo operation fails and
   an exception occurs while rename falls back to copying and deleting
   the file.
   Bugzilla Report 57533

 * complete-ant-cmd.pl would incorrectly suggest words from the build
   file description.
   Bugzilla Report 51931

 * complete-ant-cmd.pl now also completes tasks without a description.
   Bugzilla Report 57542

 * LocalPropertyStack could run into ConcurrentModificationException
   when tasks spawned new child threads that accessed the properties.
   Bugzilla Report 55074

 * TarEntry's constructor with a File and a String arg didn't
   normalize the name.

 * Between 1.8.4 and 1.9.0 TarInputStream started to parse file
   names using the platform's default encoding rather than as ASCII.
   This has been a breaking change that has never been marked as such
   (in fact it went unnoticed).  In order to allow <untar> and
   <tarfileset> to work on platforms who's encoding doesn't match the
   encoding of file names inside the archive, both now support
   encoding attributes.
   The attribute has also been added to <tar> for symmetry.
   Bugzilla Report 57822

Other changes:
--------------

 * it is now possible to provide proxy configuration to signjar
   when using the timestamped authority.
   Bugzilla Report 56678

 * complete-ant-cmd.pl now also analyzes the ANT_ARGS environment
   variable.
   Bugzilla Report 57371

 * ported some of the write-optimization of Commons Compress 1.10 to
   the ZIP package

 * adapted unit tests to Java9 and added "javac1.9" as valid option
   for javac's compiler attribute.

 * performance improvements for <intersect>
   Bugzilla Report 57588

 * MailLogger can now add CC and BCC addresses.
   Bugzilla Report 57789.

 * <scp>'s buffer size has been increased from 1k to 100k to match
   <ftp> and <get>.
   github pull requests #8 and #9

 * The tar package can now deal with group and user ids bigger than
   0x80000000.
   https://issues.apache.org/jira/browse/COMPRESS-314
   https://issues.apache.org/jira/browse/COMPRESS-315

 * <scp> has new attributes fileMode and dirMode that control the
   permissions on the remote side when sending data via SSH.
   Bugzilla Report 43271.

 * New <allbutlast> and <allbutfirst> resource collections can be used
   to select all but a given subset of a resource collection.
   Bugzilla Report 57834.

--------------
Version 1.83b:
--------------

  - Fixed a problem with xargs -d on non-Linux systems in afl-cmin. Spotted by
    teor2345 and Ben Nagy.

  - Fixed an implicit declaration in LLVM mode on MacOS X. Reported by
    Kai Zhao.

- version: 2.31.0
  date: 2015-06-19

  new features:

    - title: "E-book viewer: Make the search engine used for
    searching for selected text configurable (in the Miscellaneous
    section of the viewer preferences)"

  bug fixes:

    - title: "E-book viewer: Fix dragging to select text with the
    mouse causing the page to slide sideways in paged mode, if the
    mouse leaves the text area."

    - title: "E-book viewer: Fix transitioning between full screen
    mode and normal mode sometimes causing current position to not
    be preserved."

    - title: "AZW3 Input: Ignore incorrect text encoding (incorrectly
    encoded bytes are now replaced by placeholders) instead of
    erroring out."

    - title: "Get Books: Update Legimi and CDP store plugins for
    website changes"

    - title: "Fix Cybook Nolimbook not being detected in linux and
    OS X."

    - title: "DOCX Output: Fix internal hyperlinks being ignored
    when they point to a HTML file whose <body> element has an id."

    - title: "Edit Book: Fix groups in replace template being
    interpreted backwards when search direction is up"

    - title: "Searching: When search as you type is active, do not
    change automatically change focus to the book list when searching,
    unless the user presses Enter."

    - title: "Font subsetting: Fix subsetting removing some needed
    ligatures when subsetting some Arabic fonts"

    - title: "Prevent errors when testing email sending even if
    stderr on the host machine is broken"

  improved recipes:
    - Baltimore Sun
    - El Mercurio Chile
    - Sydney Morning Herald

  new recipes:
    - title: Various Ukranian news sources
      author: rpalyvoda

0.22.1 (2015-06-20)
===================

Bugs fixed
----------

* Crash when returning values on generator termination.

* In some cases, exceptions raised during internal isinstance() checks were
  not propagated.

* Runtime reported file paths of source files (e.g for profiling and tracing)
  are now relative to the build root directory instead of the main source file.

* Tracing exception handling code could enter the trace function with an active
  exception set.

* The internal generator function type was not shared across modules.

* Comparisons of (inferred) ctuples failed to compile.

* Closures inside of cdef functions returning ``void`` failed to compile.

* Using ``const`` C++ references in intermediate parts of longer expressions
  could fail to compile.

* C++ exception declarations with mapping functions could fail to compile when
  pre-declared in .pxd files.

* C++ compilation could fail with an ambiguity error in recent MacOS-X Xcode
  versions.

* C compilation could fail in pypy3.

* Fixed a memory leak in the compiler when compiling multiple modules.

* When compiling multiple modules, external library dependencies could leak
  into later compiler runs.  Fix by Jeroen Demeyer.  This fixes ticket 845.