Version 6.3 - June 9 2014

[CHANGES]
New facilities:
o htags-server: A private HTTP/CGI web server for a hyper-text
  generated by htags(1).
o gtags.conf: New project based configuration mechanism.
  You can make a configuration file for each project.
  This is Leo Liu's idea.
o gtags, htags: New environment variables which have default
  options for each command: GTAGS_OPTIONS, HTAGS_OPTIONS
o global: Added support of GREP_COLORS environment variable.
o global: Added new options:
  -F (--first-match), -M (--match-case), -E (--extended-regexp)

[DEPRECATED FEATURES]
The following features of htags(1) are now deprecated.
They will be removed in the future.
o The -c (--compact) option.
o The --system-cgi option.
o The --overwrite-key option.
o The -x (--xhtml[=version]) option.
  All files will be 1.0.
o The following configuration variables:
  colorize-warned-line (substitute: --colorize-warned-line)
  gzipped_suffix
  htags_options (substitute: HTAGS_OPTIONS)
  ncol (substitute: -n, --line-number [n])
  normal_suffix (will be always '.html')
  no_order_list (substitute: --no-order-list)
  script_alias
  tabs (substitute: --tabs n)
  xhtml_version (will be always 1.0)

[FIXED BUGS]
o global: The highlight of symbols in library paths does not
  work. Now it works.
o htags: Htags with the --suggest option didn't find GTAGS
  in the obj directories. Now it works.

* 2014-06-11: version 1.35
   - use just 'postgrey' as process name, instead of '/usr/sbin/postgrey',
     because Linux tools are limited to 15 characters (#5)
   - Make postgrey work with Perl 5.18 (Yasuhiro KIMURA, #4)
   - updated whitelist

Reverted libpng to version 1.6.10 due to a misplaced statement in png.c
Fixed "-zmem" option (only "-zm" would work since version 1.7.62).

… name).

See http://www.scala-lang.org/news/2014/04/21/release-notes-2.11.0.html
and http://www.scala-lang.org/news/2.11.1 for changes from 2.10.3.

20140524:
* Support for vertical writing in the Windows environment.

OpenAFS 1.6.9

  All server platforms

    * Fix for OPENAFS-SA-2014-002

OpenAFS 1.6.8

  All platforms

    * Documentation improvements (10751 10875 10931 10897 10883 10954 10955)

    * Improved diagnostics and error messages (10756 10814 10949)

    * Fixed a bug in RX that could make errors during packet reception go
      unnoticed. (10733)

    * Fixed a bug that made "vos size -dump" display the wrong size for
      large volumes. (10933)  (RT #131819)

  All server platforms

    * Change the default fileserver sync behavior from "delayed" to "onclose".
      This means that explicit syncing only happens when a volume is detached.
      (10809)

    * Added the -offline-timeout and -offline-shutdown-timeout options to the
      fileserver, to implement interrupting clients accessing volumes we are
      trying to take offline. (6266 10799)

Proxies incoming HTTP and TLS connections based on the hostname
contained in the initial request. This enables HTTPS name-based virtual
hosting to separate backend servers without installing the private key
on the proxy machine.

(pkgsrc)
- Add following line to find -lperl
  LDFLAGS+=              -L${PREFIX}/${PERL5_SUB_INSTALLARCHLIB}/CORE
- Drop NetBSD-5, net/agr/if_agrioctl.h is missing
- Add options.mk and support json, snmp, xml selection,
  those were missing in configured list
- Now includes readline.buildlink3.mk

(upstream)
lldpd (0.7.9)
  * Changes:
    + Default location for chroot, socket and PID are now configurable
      in `./configure`. The default location is based on the value of
      `runstatedir` which in turn may be based on the value of
      `localstatedir` which defaults to `/usr/local/var`. Therefore,
      to get the previous locations, lldpd should be configured with
      `./configure --localstatedir=/var`.
  * Fixes:
    + Fix `configure system bond-slave-src-mac-type local`. Also use
      it as default.
  * Features:
    + Add support for shutdown LLDPU.
    + Ability to configure IP management pattern from lldpcli.
    + Ability to choose what port ID should be (MAC or interface name).

lldpd (0.7.8)
  * Fixes:
    + Don't hard-code default values for system name, system
      description and port description. When the field is not present,
      just don't display it.
    + Fix lldpcli behaviour when suid.
    + On OSX, don't use p2p0 interfaces: it would break WLAN.
    + Fix SNMP support on RHEL.
  * Features:
    + Android support
    + Add the possibility to disable privilege separation (lower
      memory consumption, lower security, don't do it).
    + Interfaces can now be whitelisted. For example, *,!eth*,!!eth1
      is a valid pattern for all interfaces except eth ones, except
      eth1. Moreover, on exact match, an matching interface
      circumvents most sanity checks (like VLAN handling).
    + Ability to override the hostname.

lldpd (0.7.7)
  * Features:
    + Use a locally administered MAC address or an arbitrary one
      instead of null MAC address for bond devices on Linux. This is
      configurable through `lldpcli`.
    + Add support for "team" driver (alternative to bond devices).
    + Preliminary support for DTrace/systemtap.
    + Preliminary support for seccomp (for monitor process).
    + Setup chroot inside lldpd instead of relying on init script.
  * Fixes:
    + Various bugs related to fixed point number handling (for
      coordinates in LLDP-MED)
    + Fix a regression in how MAC address of an enslaved device is
      retrieved.

… the

PDF, there's no point in building it, so disable TeX auto-detection.

Alan Coopersmith (1):
      Mark DEPTH_MASK as Unsigned int

Arnaud Fontaine (3):
      Add autogen.sh to EXTRA_DIST.
      Follow changes in m4 submodule.
      Release 0.3.9

Gaetan Nadon (9):
      config: add bug URL to AC_INIT
      config: replace deprecated use of AC_OUTPUT with AC_CONFIG_FILES
      config: use AC_CONFIG_HEADERS to create a config.h file
      config: remove old dead code for documentation
      config: add missing COPYING file
      make: use AM_CPPFLAGS rather than per-target libxcb_render_util_la_CPPFLAGS
      make: using EXTRA_DIST for xcb-renderutil.pc.in is redundant
      make: there should be no attempt to remove any Makefile.in file
      make: compile the library with standard xorg warning flags

Jochen Keil (1):
      Fix compilation and linking issues with C++

Niclas Zeising (1):
      Check submodules before running autoconf.

  - DEPENDS+= mozilla-rootcerts are removed, cert included now.
  - Deleted SUBST_CLASSES+= macro_S to avoid name (_S) conflicts on NetBSD-5.*
    (The probelm no longer exists)
  - Correct MESSAGE (but this is to be committed separately)

(Upstream): Bump version 2.0 to 2.0.2RC4
---------------
This commit log compiled from that of wip/trustedQSL/Makefile by mef@
Sorry if typo or too compact.

2.0.2RC4 2014/06/07
 - No pop up when prompting user for password when batch mode
 - If QSO database is corrupted and can not be repaired, delete it
2.0.2RC3 2014/05/09
 - Ensure station locations added (sign a log -> list of stn loc.)
 - Restore from .tbk to restore multiple pending callsign
   certificates for a given callsign
 - Correct message when callsign cert. is uploaded
 - Delete any older version, when renewed callsign is installed
 - Correct the behaviour for non ascii directory name on Windows
 - Correct the number of QSO in some case when signing
   (ignoring might have shown negative number)
2.0.2RC2 2014/04/22
 - Windows only
2.0.2RC1 2014/04/16
 - OpenSSL update (Heartbleed). no practical attack anyway
   (Windows only)
2.0.1RC9 2014/03/01
 - Avoid application crash when database conversion for Open/Close
 - Faster conversion of database
2.0.1RC8 2014/02/27
 - Limit the number of copies of application running
   (multiple run might have database corrution)
2.0.1RC7 2014/02/13
 - When a callsign cert is about to expire (within 60 days), TQSL
   warns. But even after user submitted renewal, it continued
 - Correct the automatic backup directory (by from preference pane)
 - Search Log files with .ADI, .ADIF also
2.0.1RC6 2014/02/05
 - Copyright notice / date (only)
2.0.1RC5 2014/01/29
 - Avoid crash at starting if certifiacate status file is empty
 - Corrected for checking for new release even with -RC change
2.0.1RC4 2014/01/22
 - Canadian province PQ/QC issue
 - Correct start-up threads management
 - (OpenSuSE Linux) for pending callsign requests
 - Accept valid callsign only based on location
 - Correct hang if command line argument is wrong
 - Update message during callsign certificate creation

2.0.1RC3, 2014/01/13 (but hangs when reading cert_status.xml)
Two additional changes in TQSL 2.0 RC3:
  -------------
  A. Because new modes may not yet be specified in ADIF, and because
  LoTW may not accept all modes specified in ADIF, TQSL enables you to
  "map" a new mode to a mode or mode group recognized by LoTW; this
  most often takes the form of mapping a new digital mode to the DATA
  mode group. Versions of TQSL prior to 2.0 would allow you to map
  modes accepted by LoTW. This version of TQSL will refuse to map a
  mode that is accepted by LoTW. Any existing mappings of modes
  accepted by LoTW will be automatically removed on startup; you will
  be notified if this happens.

  B. When submitting log files in Cabrillo format, previous versions of
  TQSL submitted FM and PH modes as PHONE. TQSL 2.0 RC2 submits FM mode
  as FM, and PH mode as SSB.
  ----------------------------
2.0.1RC2 2013/09/01
  Contest name recognition is corrected (Re: JIDX)

  - DEPENDS+= mozilla-rootcerts are removed, cert included now.

…uces

the number of dependencies required significantly on systems with no builtin
groff.

…tch_workers_output=yes.

See https://bugs.php.net/bug.php?id=65800.

Bump PKGREVISION for this and the previous commit.

…eed to build against and link the mysql-client package.

Fixes the problem where thread safety was not consistent in
the php, ap-php and php-* extension packages, and makes ap-php
adhere to the maintainer-zts option. Bump PKGREVISION.

Version 0.9.6
-------------

(bugfix release, released on June 7th 2014)

- Added a safe conversion for IRI to URI conversion and use that
  internally to work around issues with spec violations for
  protocols such as ``itms-service``.

Version 0.9.5
-------------

(bugfix release, released on June 7th 2014)

- Forward charset argument from request objects to the environ
  builder.
- Fixed error handling for missing boundaries in multipart data.
- Fixed session creation on systems without ``os.urandom()``.
- Fixed pluses in dictionary keys not being properly URL encoded.
- Fixed a problem with deepcopy not working for multi dicts.
- Fixed a double quoting issue on redirects.
- Fixed a problem with unicode keys appearing in headers on 2.x.
- Fixed a bug with unicode strings in the test builder.
- Fixed a unicode bug on Python 3 in the WSGI profiler.
- Fixed an issue with the safe string compare function on
  Python 2.7.7 and Python 3.4.

Version 1.7.3
-------------

Released June 10th 2014

- Fixed a bug where redirection to `SECURITY_POST_LOGIN_VIEW` was not
  respected
- Fixed string encoding in various places to be friendly to unicode
- Now using `werkzeug.security.safe_str_cmp` to check tokens
- Removed user information from JSON output on `/reset` responses
- Added Python 3.4 support

Updated www/py-werkzeug-docs to 0.9.6.
Updated www/py-flask-security to 1.7.3.

- Fix mimeinfo not adhering to the priorization of globs -
   kudos Stefan Seifert.
- Fixed URL in POD. Only run POD 404 tests with extended testing.

      - Change rancid script exec(); move cmd-line options to rancid.types.*
        files.  This allows older scripts to function without change, ie:
        needing to support -t.
      - clogin: missing variable initialization
      - ios.pm: filter fan speed setting on 2900, etc.
      - fnrancid: fix filter match for encrypted pwd
      - ios.pm: filter vlan traffic counters on gsr, 6400 & switches
      - srancid: fix up time filter for dell 3448
      - ios.pm: some ASAs do not support show vlan
      - ios.pm: bgp password filtering removing neighbor address
      - rancid.types.base: dell definition missing inloop configuration
      - rancid: display useful error if inloop is not configured
      - dell.pm: missing variable declarations
      - nxrancid: filter INTAKE temps and cycling file BufferMonitor-1HourData

* only_committed_changes could fail in a git repository merged
  with git merge -s ours.
* Remove google from openid selector, per http://xkcd.com/1361/

heads-up.

…t access

into the ipp_attribute_t structure. Ultimately, it should be updated to
use the new (with CUPS 1.7?) accessors, however, this gets it building
before the 2014Q2 branch.

Changelog:
Fixed in Thunderbird 24.6
MFSA 2014-52 Use-after-free with SMIL Animation Controller
MFSA 2014-49 Use-after-free and out of bounds issues found using Address Sanitizer
MFSA 2014-48 Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)

* Sync with thunderbird-24.6.0

 2014-Jun-11 v2.7 - Bug fix release. Broke the open command in 2.6.

- version: 1.40.0
  date: 2014-06-12

  new features:
    - title: "Edit Book: Add a new tool to manage fonts. Allows
    easily changing/removing/embedding fonts in the entire book.
    To use it go to Tools->Manage Fonts"

    - title: "Edit Book: Allow the color of the links in the Live
    CSS panel to be themed."
      tickets: [1326897]

    - title: "E-book viewer: Add a keyboard shortcut to bookmark
    current location."
      tickets: [1326198]

  bug fixes:
    - title: "Edit Book: Check book: When auto-changing font name
    to match actual name in font file, also change the font name
    in shorthand font declarations"

    - title: "Edit Book/Book polishing: Fix embedding all referenced
    fonts not catching fonts that are only specified via style
    attributes and not in any stylesheets."

    - title: "Conversion: Fix normalization of CSS shorthand font
    property not working when multiple font families are specified
    in the same shorthand property"

    - title: "Edit Book: Live CSS: Fix clicking on link to go to
    style definition not working if the stylesheet contains CSS 3
    @media queries or @font-face rules"

    - title: "Edit Book: When importing DOCX files, set the media
    type for html files correctly"

    - title: "Edit Book: Fix import of DOCX files that contain no
    Table of Contents not working."
      tickets: [1327522]

    - title: "Portable installer: Fix a crash if the user selects
    a destination for the portable install that does not have enough
    disk space."
      tickets: [1324575]

    - title: "Fix date column not showing date added when adding
    zip/rar files that contain an OPF with a calibre timestamp in
    its metadata"

    - title: "Sony driver: Fix SONY annotation app not working with
    files sent to the device by calibre"

    - title: "Linux build: Fix regression that caused opening PDF
    files (or any externally viewed files) preventing calibre from
    being restarted as long as the external viewer is not shutdown."
      tickets: [1326453]

    - title: "Edit book: Fix changing underline style to none when
    creating a custom color scheme causes error."

    - title: "Check Book: Fix empty (zero byte) XML files causing
    check book to fail."
      tickets: [1326073]

    - title: "Check Book: Fix combination of mismatching font family
    names and a font-family declaration with an invalid value (such
    as a dimension) causing auto fixing of errors to fail."
      tickets: [1325070]

  improved recipes:
    - Respekt
    - Newsweek
    - Jerusalem Post
    - Outlook India
    - PC Magazine
    - Instapaper

- The following vulnerabilities have been fixed.
    * wnpa-sec-2014-07
      The frame metadissector could crash. (Bug 9999, Bug 10030)
      Versions affected: 1.10.0 to 1.10.7
      CVE-2014-4020
= The following bugs have been fixed:
    * VoIP flow graph crash upon opening. (Bug 9179)
    * Tshark with "-F pcap" still generates a pcapng file. (Bug 9991)
    * IPv6 Next Header 0x3d recognized as SHIM6. (Bug 9995)
    * Failed to export pdml on large pcap. (Bug 10081)
    * TCAP: set a fence on info column after calling sub
      dissector (Bug 10091)
    * Dissector bug in JSON protocol. (Bug 10115)
    * GSM RLC MAC: do not skip too many lines of the CSN_DESCR
      when the field is missing (Bug 10120)
    * Wireshark PEEKREMOTE incorrectly decoding QoS data packets
      from Cisco Sniffer APs. (Bug 10139)
    * IEEE 802.11: fix dissection of HT Capabilities (Bug 10166)
- Updated Protocol Support
  CIP, EtherNet/IP, GSM RLC MAC, IEEE 802.11, IPv6, and TCAP
- New and Updated Capture File Support
  pcap-ng, and PEEKREMOTE

Changelog
---------

2.1.18-1 (06-May-2014)

  Bug fixes and other patches

    - A critical incompatibility between the DMARC Wrap Message action and
      Python versions older than 2.6.x for some x <= 5 existed and caused
      Wrapped message to be shunted.  This is fixed.  (LP: #1316682)

    - Sender: headers are no longer removed in from_is_list Munge From
      actions.  (LP: #1315970)

2.1.18 (03-May-2014)

  Acknowledgements

    - Thanks to Jim Popovitch and Phil Pennock for the branch that formed the
      basis of the dmarc_moderation_action feature.

    - Thanks to Franck Martin et al for the branch that formed the basis of
      the from_is_list feature.

  Dependencies

    - There is a new dependency associated with the new Privacy options ->
      Sender filters -> dmarc_moderation_action feature discussed below.
      This requires that the dnspython <http://www.dnspython.org/> package
      be available in Python.  This package can be downloaded from the above
      site or from the CheeseShop <https://pypi.python.org/pypi/dnspython/>
      or installed with pip.

  New Features

    - The from_is_list feature introduced in 2.1.16 is now unconditionally
      available to list owners.  There is also, a new Privacy options ->
      Sender filters -> dmarc_moderation_action feature which applies to list
      messages where the From: address is in a domain which publishes a DMARC
      policy of reject or possibly quarantine.  This is a list setting with
      values of Accept, Wrap Message, Munge From, Reject or Discard. There is
      a new DEFAULT_DMARC_MODERATION_ACTION configuration setting to set the
      default for this, and the list admin UI is not able to set an action
      which is 'less' than the default.  The prior ALLOW_FROM_IS_LIST setting
      has been removed and is effectively always Yes. There is a new
      dmarc_quarantine_moderation_action list setting with default set by a
      new DEFAULT_DMARC_QUARANTINE_MODERATION_ACTION configuration setting
      which in turn defaults to Yes.  The list setting can be set to No to
      exclude domains with DMARC policy of quarantine from
      dmarc_moderation_action.

      dmarc_moderation_action and from_is_list interact in the following way.
      If the message is From: a domain to which dmarc_moderation_action applies
      and if dmarc_moderation_action is other than Accept,
      dmarc_moderation_action applies to that message.  Otherwise the
      from_is_list action applies.

      Also associated with dmarc_moderation_action are configuration settings
      DMARC_RESOLVER_TIMEOUT and DMARC_RESOLVER_LIFETIME. These are described
      in more detail in Defaults.py.  There are also new vette log entries
      written when dmarc_moderation_action is found to apply to a post.

  i18n

    - Added missing <mm-digest-question-start> tag to French listinfo template.
      (LP: #1275964)

  Bug Fixes and other patches

    - Removed HTML tags from the title of a couple of rmlist.py pages because
      browsers don't render tags in the title.  (LP: #265848)

    - Most Mailman generated notices to list owners and moderators are now
      sent as Precedence: list instead of bulk.  (LP: #1313146)

    - The Reply-To: munging options weren't honored if there was no
      from_is_list action.  (LP: #1313010)

    - Changed from_is_list actions to insert the list address in Cc: if the
      list is fully personalized.  Otherwise, the list address is only in
      From: and Reply-To: overrides it.  (LP: #1312970)

    - Fixed the Munge From action to only Munge the From: and/or Reply-To: in
      the outgoing message and not in archives, digests and messages sent via
      the usenet gateway.  (LP: #1311431)

    - Fixed a long standing issue in which a notice sent to a user whose
      language is other than that of the list can cause subsequent things
      which should be in the list's language to be in the user's language
      instead.  (LP: #1308655)

    - Fixed the admin Membership List so a search string if any is not lost
      when visiting subsequent fragments of a chunked list.  (LP: #1307454)

    - For from_is_list feature, use email address from original From: if
      original From: has no display name and strip domain part from resultant
      names that look like email addresses.  (LP: #1304511)

    - Added the list name to the vette log "held message approved" entry.
      (LP: 1295875)

    - Added the CGI module name to various "No such list" error log entries.
      (LP: 1295875)

    - Modified contrib/mmdsr to report module name if present in "No such list
      error log entries.

    - Fixed a NameError exception in cron/nightly_gzip when it tries to print
      the usage message.  (LP: #1291038)

    - Fixed a bug in ListAdmin._handlepost that would crash when trying to
      preserve a held message for the site admin if HOLD_MESSAGES_AS_PICKLES
      is False.  (LP: #1282365)

    - The from_is_list header munging feature introduced in Mailman 2.1.16 is
      no longer erroneously applied to Mailman generated notices.
      (LP: #1279667)

    - Changed the message from the confirm CGI to not indicate approval is
      required for an acceptance of an invitation.  (LP: #1277744)

    - Fixed POSTFIX_STYLE_VIRTUAL_DOMAINS to be case-insensitiive.
      (LP: #1267003)

    - Added recognition for another simple warning to bounce processing.
      (LP: #1263247)

    - Fixed a few failing tests in tests/test_handlers.py.  (LP: #1262950)

    - Fixed bin/arch to not create scrubbed attachments for messages skipped
      when processing the --start= option.  (LP: #1260883)

    - Fixed email address validation to do a bit better in obscure cases.
      (LP: #1258703)

    - Fixed a bug which caused some authentication cookies to expire too soon
      if AUTHENTICATION_COOKIE_LIFETIME is non-zero.  (LP: #1257112)

    - Fixed a possible TypeError in bin/sync_members introduced in 2.1.17.
      (LP: #1243343)

  Miscellaneous

    - Added to the contrib directory, a script from Alain Williams to count
      posts in a list's archive.

2.1.17 (23-Nov-2013)

  New Features

    - Handling of posts gated from usenet to a list via the Mail <-> News
      gateway is changed.  Formerly, no list membership, moderation or
      *_these_nonmembers checks were done.  Now, if the sender of the usenet
      post is a moderated member or a nonmember matching a *_these_nonmembers
      filter, those checks will be done and actions applied.  Nonmember posts
      from senders not matching a *_these_nonmembers filter are still accepted
      as before.  (LP: #1252575)

    - There is a new mm_cfg.py setting ANONYMOUS_LIST_KEEP_HEADERS.  Since it
      is not possible to know which non-standard headers in a message might
      reveal sender information, we now remove all headers from incoming posts
      to anonymous lists except those which match regular expressions in this
      list. The default setting keeps non X- headers except those known to
      reveal sender information, Mailman added X- headers and x-Spam- headers.
      See the description in Defaults.py for more information.  (LP: #1246039)

  i18n

    - The Japanese message catalog has been updated by SATOH Fumiyasu.
      (LP: #1248855)

  Bug Fixes and other patches

    - Added a reopen command to the sample init.d script in misc/mailman.in.
      (LP: #1251917)

    - Fixed a misspelling in Tagger.py causing an "unexpected keyword argument
      'Delete'" exception.  (LP: #1251495)

    - Fixed contrib/qmail-to-mailman.py to work with a user other than
      'mailman' and to recognize more listname-* addresses.  (LP: #412293)

    - Fixed a possible UnicodeDecodeError in bin/sync_members.  (LP: #1243343)

    - Fixed Makefile to not include $DESTDIR in paths compiled into .pyc
      files for traceback purposes.  (LP: #1241770)

2.1.16 (16-Oct-2013)

  New Features

    - There is a new list attribute from_is_list to either rewrite the From:
      header of posts replacing the posters address with that of the list or
      wrap the message in an outer message From: the list for compatability
      with DMARC and or ADSP.  There is a new mm_cfg.py setting
      DEFAULT_FROM_IS_LIST to control the default for new lists, and the
      existing REMOVE_DKIM_HEADERS setting has been extended to allow removing
      those headers only for certain from_is_list lists.  This feature must
      be enabled by setting ALLOW_FROM_IS_LIST to Yes in mm_cfg.py.  See the
      description of these settings in Defaults.py for more detail.  This
      feature is experimental in 2.1.16, and it is subject to change or to
      become just one of the two methods in a subsequent release. People
      interested in this feature are encouraged to try it and report their
      experiences to the mailman-users@python.org list.

    - There is a new DISPLAY_HELD_SUMMARY_SORT_BUTTONS setting which if set
      in mm_cfg.py will display a set of radio buttons in the admindb held
      message summary to select how the held messages are sorted and grouped
      for display. The exact setting determines the default grouping and
      sorting.  See the description in Defaults.py for details.

    - Setting digest_size_threshhold to zero now means no digests will be
      sent based on size instead of a digest being sent with every post.
      (LP: #558274)

    - There is a new mm_cfg.py setting SUBSCRIBE_FORM_SECRET which will put
      a dynamically generated, hidden hash in the listinfo subscribe form and
      check it upon submission.  Setting this will prevent automated processes
      (bots) from successfully POSTing web subscribes without first retrieving
      and parsing the form from the listinfo page.  The form must also be
      submitted no later than FORM_LIFETIME nor no earlier than
      SUBSCRIBE_FORM_MIN_TIME after retrieval.  Note that enabling this will
      break any static subscribe forms on your site.  See the description in
      Defaults.py for more info.  (LP: #1082746)

    - add_members now has an option to add members with mail delivery disabled
      by admin.  (LP: #1070574)

    - IncomingRunner now logs rejected messages to the vette log.
      (LP: #1068837)

    - The name of the mailmanctl master lock file is now congigurable via the
      mm_cfg.py setting MASTER_LOCK_FILE.  (LP: #1082308)

    - list_lists now has an option to list only lists with public archives.
      (LP: #1082711)

  Contributed programs

    - A new import_majordomo_into_mailman.pl script has been contributed by
      Geoff Mayes.  (LP: #1129742)

    - A new "sitemap" bash script has been contributed by Tomasz Chmielewski
      <mangoo@wpkg.org> to generate a sitemap.xml file of an installation's
      public archives for submission to search engines.

  i18n

    - The Danish translation has been updated thanks to Tom Christensen.

    - Fixed a string in the Czech message catalog.  (LP: #1234567)

    - A Farsi (Persian) translation has been added thanks to Javad Hoseini and
      Mahyar Moghimi.

    - Fixed several misspelled or garbled string replacements in the Spanish
      message catalog.  (LP: #1160138)

    - pt_BR message catalog has two new and an updated message per Hugo Koji
      Kobayashi.  (LP: #1138578)

    - German message catalog has been updated per Ralf Hildebrandt.

    - Corrected typo in templates/it/private.html.

  Bug Fixes and other patches

    - Fixed a crash in SpamDetect.py which caused messages with unparseable
      RFC 2047 encoded headers to be shunted.  (LP: #1235101)

    - Fixed cron/disabled to send a fresh cookie when notifying disabled
      members.  (LP: #1203200)

    - Added "message_id" to the interpolation dictionary for the Article.html
      template.  (LP: #725498)

    - Changed the admin GUI to report only the bad entries in a list of email
      addresses if any are bad.  (LP: #558253)

    - Added logging for template errors in HyperArch.py.  (LP: #558254)

    - Added more explanation to the bad owner address message from
      bin/newlist.  (LP: #1200763)

    - Fixed a bug causing the admin web interface to fail CSRF checking if
      the list name contains a '+' character.  (LP: #1190802)

    - Fixed bin/mailmanctl -s to not remove the master lock if it can't be
      determined to be truly stale.  (LP: #1189558)

    - It is no longer possible to add 'invalid' addresses to the ban_list
      and the *_these_nonmembers filters from the check boxes on the admindb
      interface.  (LP: #1187201)

    - Backported recognition for mail.ru DSNs and minor bug fixes from
      lp:flufl.bounce.  (LP: #1074592, LP: #1079249 and #1079254)

    - Defended against buggy web servers that don't include an empty
      QUERY_STRING in the CGI environment.  (LP: #1160647)

    - The Switchboard.finish() method now logs the text of the exception when
      it fails to unlink/preserve a .bak file.  (LP: #1165589)

    - The pending (un)subscriptions waiting approval are now sorted by email
      address in the admindb interface as intended.  (LP: #1164160)

    - The subscribe log entry for a bin/add_members subscribe now identifies
      bin/add_members as the source.  (LP: #1161642)

    - Fixed a bug where the Subject: of the user notification of a
      bin/remove_members unsubscribe was not in the user's language.
      (LP: #1161445)

    - Fixed a bug where BounceRunner could create and leave behind zero length
      bounce-events files.  (LP: #1161610)

    - Added recognition for another Yahoo bounce format.  (LP: #1157961)

    - Changed configure's method for getting Python's include directory from
      distutils.sysconfig.get_config_var('CONFINCLUDEPY') to
      distutils.sysconfig.get_python_inc().  (LP: #1098162)

    - Added an Auto-Generated: header to password reminders.  (LP: #558240)

    - Fixed a bug where non-ascii characters in the real name in a subscription
      request could throw a UnicodeEncodeError upon subscription approval and
      perhaps in other situations too.  (LP: #1047100)

    - The query fragments send_unsub_notifications_to_list_owner and
      send_unsub_ack_to_this_batch will now assume default values if not set
      in mass unsubscribe URLs.  (LP: #1032378)

    - Replaced utf-8 encoded characters in newly added German templates with
      HTML entities. (LP: #1018208)

2.1.15 (13-Jun-2012)

  Security

    - Strengthened the validation of email addresses.

    - An XSS vulnerability, CVE-2011-0707, has been fixed.

    - The web admin interface has been hardened against CSRF attacks by adding
      a hidden, encrypted token with a time stamp to form submissions and not
      accepting authentication by cookie if the token is missing, invalid or
      older than the new mm_cfg.py setting FORM_LIFETIME which defaults to one
      hour.  Posthumous thanks go to Tokio Kikuchi for this implementation
      which is only one of his many contributions to Mailman prior to his
      death from cancer on 14 January 2012.

  New Features

    - Added a password reminder button to the private archive login page.
      Backported from the 2.2 branch.

    - There is a new list attribute regular_exclude_ignore set from mm_cfg.py
      DEFAULT_REGULAR_EXCLUDE_IGNORE.  This defaults to True even though the
      prior behavior is equivalent to False.  A True setting will ignore an
      exclude list if the poster is not a member of that list.  The False
      setting can result in list members not receiving posts if the nonmember
      post is not accepted by the exclude list.  Backported from 2.2 branch.

    - Eliminated the list cache from the qrunners.  Indirect self-references
      caused lists to never be dropped from the cache which in turn caused
      the qrunners to grow very large in installations with many lists or
      multiple large lists.  Bug #862683.

    - The user options 'list my other subscriptions' page now indicates for
      each list if the subscription is 'nomail' or 'digest'.  Bug #793669.

    - A new list poster password has been implemented.  This password may only
      be used in Approved: or X-Approved: headers for pre-approving posts.
      Using this password for that purpose precludes compromise of a more
      valuable password sent in plain text email.  Bug #770581.

    - A new mm_cfg.py setting AUTHENTICATION_COOKIE_LIFETIME has been added.
      If this is set to a non-zero value, web authentication cookies will
      expire that many seconds following their last use.  Its default value is
      zero to preserve current behavior.

    - A new mm_cfg.py setting RESPONSE_INCLUDE_LEVEL has been added to control
      how much of the original message is included in automatic responses to
      email commands.  The default is 2 to preserve the prior behavior of
      including the full message.  Setting this to 1 in mm_cfg.py will include
      only the original headers, and 0 will include none of the original.  It
      is recommended to set this to 0 in mm_cfg.py to minimize the effects of
      backscatter.  Bug #265835.

    - A new mm_cfg.py setting DEFAULT_RESPOND_TO_POST_REQUESTS has been added
      to control the default for respond_to_post_requests for new lists.  It is
      set to Yes for backwards compatibility, but it is recommended that
      serious consideration be given to setting it to No.  Bug #266051.

    - A new mm_cfg.py setting DISCARD_MESSAGE_WITH_NO_COMMAND has been added to
      control whether a message to the -request address without any commands or
      a message to -confirm whose To: address doesn't match VERP_CONFIRM_REGEXP
      is responded to or just logged.  It defaults to Yes which is different
      from prior behavior.  Bug #410236.

    - Two new mm_cfg.py settings, BROKEN_BROWSER_WORKAROUND and
      BROKEN_BROWSER_REPLACEMENTS, have been added to control escaping of
      additional characters beyond the standard <, >, &, and " in the web UI.
      See the documentation of these settings in Defaults.py.  The default
      values for these settings result in no change from the prior release.
      Bug #774588.

  i18n

    - Added some missing German templates from Egon Frerich.

    - Added Greek translation from Antonis Limperis.

    - A few errors in the Basque translation are fixed.  Bug #836861.

    - Fixed a misspelling in the German invite.txt template.  Bug #815444.

    - Fixed a missing format character in the Spanish translation.
      Bug #670988.

    - Thanks go to the following for updating translations for the changes in
      this release.
        Thijs Kinkhorst
        Stefan Foerster
        Fabian Wenk

  Bug Fixes and other patches

    - Fixed a bug that could send an admin notice of a held subscription with
      the subject in the user's preferred language instead of the list's
      preferred language and possibly not properly RFC 2047 encoded.
      (LP: #998949)

    - Fixed a possible CPU bound loop in OutgoingRunner if the attempt to
      Connect to the SMTP server throws a socket.error.  (LP: #966531)

    - Fixed a potential crash in the web UI if a language is removed from the
      LC_DESCRIPTIONS dictionary.  (LP: #966565)

    - Added an Auto-Submitted: header to invitations and (un)subscription
      confirmation requests to reduce the possibility of an autoresponder
      confirming the request.  (LP: #265831)

    - Added javascript to the private.html and admlogin.html templates to
      focus the cursor on the entry field.  (LP: #266054)

    - Added CPPFLAGS and LDFLAGS to src/Makefile to support their use.
      (LP: #637652)

    - Stopped removing the trailing slash from the List-Archive: header URL.
      (LP: #964190)

    - A configured version of contrib/courier-to-mailman.py is now created in
      build/contrib/courier-to-mailman.py.  (LP: #999250)

    - Subscription disabled warnings are now sent without a Precedence:
      header.  Bug #808821.

    - Backported 2.2 branch fix for a problem in SpamDetect.py that could
      cause header_filter_rules to fail to match RFC 2047 encoded headers.

    - Fix for bug #629738 could cause a crash in the admindb details display
      if the decoded message body contained characters not in the character
      set of the list's preferred language.  Fixed.  Bug #910440.

    - Added recognition for another Qmail bounce format.

    - Fixed an erroneous seek in the Mailman.Mailbox.Mailbox.AppendMessage
      method that could cause a corrupt mailbox for files opened 'w+'.
      Bug #901957.

    - A held message with a null sender caused a crash in the admindb
      interface.  This is fixed by changing the sender to <missing>.
      Bug #897103.

    - Changed subject prefixing to allow for possible whitespace between an
      'Re' and the following colon when determining how to add the prefix.
      Bug #893290.

    - Fixed a problem where topics regexps would not match RFC 2047 encoded
      Keywords: and/or Subject: headers.  Bug #891676.

    - Fixed misleading response to an email approval of a held message.
      Bug #889968.

    - Added masthead.txt to the list of templates that can be edited via the
      web admin interface.  Bug #266805.

    - Changed the way digest_footer is added to the RFC 1153 (plain) format
      digest for RFC compliance.  Bug #887610.

    - Fixed cron/checkdbs to report unsubscriptions waiting approval.
      Bug #873821.

    - The fix for BUG #266220 (sf1181161) has been enhanced so that if there
      is a pathological HTML part such that the Approved: password text isn't
      found, but it is found after stripping out HTML tags, the post is
      rejected with an informative message.

    - A bug that would cause reset of any new_member_options bits other than
      the four displayed as checkboxes on the list admin General Options page
      whenever the page was updated or bin/config_list attempted to update
      new_member_options has been fixed.  Bug #865825.

    - A problem with the logic avoiding unnecessarily reloading a current list
      object from the config.pck arises if the list is updated by another
      process within the same second that it was last read/written.  That can
      cause the reading of latest version of the list to be skipped.  This has
      been fixed.  Bug #862675.

    - Fixed bin/export.py to accept case insensitive password schemes.
      Bug #833134.

    - Added Tokio Kikuchi's icons to the misc/ and installed icons/
      directories.  Bug #782474.

    - Fixed a problem which could result in raw, undecoded message bodies
      appearing in plain digests and archives.  Bug #787790.

    - Fixed a problem in admindb.py where the character set for the display of
      the message body excerpt was not correctly determined.  Bug #779751.

    - Prevented setting user passwords with leading/trailing whitespace.
      Bug #778088.

    - Mailman now sets the 'secure' flag in cookies set via https URLs.
      Bug #770377.

    - Added a logout link to the admindb interface and made both admin and
      admindb logout effective for a site admin cookie if allowed.
      Bug #769318.

    - Replaced the old Mailman logos and icon that install to Mailman's icons
      directory with the new ones.  If you copy these elsewhere on your
      server, please copy these new ones.

    - Changed bin/genaliases to only call the POSTFIX_*_CMD commands once when
      MTA = 'Postfix'.  Bug #266408.

    - Added a report of the affected members to the warnings issued when
      setting a list with digest members digestable=No and when setting a list
      with non-digest members nondigestable=no.  Bug #761232.

    - Fixed a problem where content filtering could remove the headers from
      an attached message/rfc822 part if the message in that part is
      multipart/alternative and collapse_alternatives is Yes.  Bug #757062.

    - Changed the subscribe CGI to strip leading and trailing whitespace from
      the supplied email address.  Bug #745432.

    - Changed the maximum number of arguments for the who command to be
      considered administrivia from 2 to 1 to help avoid false positives.
      Bug #739524.

    - Added the list name as 'display-name' in added Sender: headers to help
      mitigate Outlook et al 'on behalf of' displays.  Bug #736849.

    - Fixed a typo in the usage() definition cron/gate_news.  Bug #721015.

    - Fixed an uncaught KeyError when poster tries to cancel a post which was
      already handled.  Bug #266224.

    - Held message user notifications now come From: list-owner instead of
      list-bounces.  Bug #714424.

    - Issue an HTTP 404 status for private archive file not found.

    - @listname entries in *_these_nonmembers are no longer case sensitive.
      Bug #705715.

    - Changed bin/rmlist to also remove heldmsg files for the removed list and
      fixed a problem with removal of stale locks for the list.  Bug #700528.

    - Fixed a bug where content filtering could leave a multipart message or
      part with just one sub-part. These should be recast to just the sub-part.
      Bug #701558.

    - Fixed a bug that could erroneously handle posts from addresses in
      *_these_nonmembers and send held/rejected notices to bogus addresses when
      The From or other sender header is RFC 2047 encoded.  Bug #702516.

    - Updated contrib/mm-handler-2.1.10 to better handle lists with names that
      look like admin addresses.  Bug #697161.

    - Added bounce recognition for a bogus Dovecot MDN.  Bug #693134.

    - Fixed a problem where an emailed command in the Subject: header with a
      non-ascii l10n of an 'Re:' prefix is ignored.  Bug #685261.

    - Fixed a problem with approving a post by email when the body of the
      approval mail is base64 encoded.  Bug #677115.

    - Fixed the host name in the From: address of the owner notification from
      bin/add_members.  Bug #666181.

Changes to GoAccess 0.8 - Tuesday, May 20, 2014

  * Added APT-HTTP to the list of browsers.
  * Added data persistence and ability to load data from disk.
  * Added IE11 to the list of browsers.
  * Added IEMobile to the list of browsers.
  * Added multiple command line options.
  * Added Nagios check_http to the list of browsers.
  * Added parsing progress metrics - total requests / requests per second.
  * Added the ability to parse a GeoLiteCity.dat to get the city given an IPv4.
  * Change the way the configuration file is parsed. This will parse all
    configuration options under ~/.goaccessrc or the specified config file and will
    feed getopt_long with the extracted key/value pairs. This also allows the
    ability to have comments on the config file which won't be overwritten.
  * Ensure autoconf determines the location of ncurses headers.
  * Fixed issue where geo_location_data was NULL.
  * Fixed issue where GoAccess did not run without a tty allocated to it.
  * Fixed potential memory leak on --log-file realpath().
  * Fixed Solaris build errors.
  * Implemented an on-memory hash database using Tokyo Cabinet. This implementation
    allows GoAccess not to rely on GLib's hash table if one is needed.
  * Implemented large file support using an on-disk B+ Tree database. This
    implementation allows GoAccess not to hold everything in memory but instead it
    uses an on-disk B+ Tree database.
  * Trimmed leading and trailing whitespaces from keyphrases module.

- fixed bug that prevents running the game on Mac OS X "Mavericks"
- improved behaviour on restart after failing on a broken level set
- improved general error handling with reference to error message file

Changelog:
Fixed in Firefox ESR 24.6
MFSA 2014-52 Use-after-free with SMIL Animation Controller
MFSA 2014-49 Use-after-free and out of bounds issues found using Address Sanitizer
MFSA 2014-48 Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)

Updated www/firefox24 to 24.6.0

* Sync with firefox24

plugin patch to stop breaking on NetBSD 6.1.

Color is a (very) small module for Python 3.2 and later. It allows printing
colors to the console. It works on any ANSI terminal, and the Windows command
line. To use it, simply use the print function as you always have, however you
now have the option of passing color to it as well.

Converts and manipulates common colour representations (RGB, HSV, web, ...)

Features:

 * Damn simple and pythonic way to manipulate colour representations
 * Full conversion between RGB, HSV, 6-digit hex, 3-digit hex, human colour
 * One object (Color) or bunch of single purpose function (rgb2hex, hsl2rgb ...)
 * Web format that uses the smallest representation between 6-digit, 3-digit,
   fully-spelled colour, that is following W3C color naming for CSS or HTML
   colour specifications.
 * Smooth intuitive colour scale generation choosing N colour gradients.
 * Can pick colours for you to identify objects of your application.

Python version of Google's common library for parsing, formatting, storing and
validating international phone numbers.

flexmock is a testing library for Python that makes it easy to create mocks,
stubs and fakes.

The API is inspired by a Ruby library of the same name, but Python flexmock is
not a clone of the Ruby version. It omits a number of redundancies in the Ruby
flexmock API, alters some defaults, and introduces a number of Python-only
features.

flexmock's design focuses on simplicity and intuitiveness. This means that the
API is as lean as possible, though a few convenient short-hand methods are
provided to aid brevity and readability.

flexmock declarations are structured to read more like English sentences than
API calls, and it is possible to chain them together in any order to achieve
high degree of expressiveness in a single line of code.

In addition, flexmock integrates seamlessly with all major test runners to
reduce even more mock-related boilerplate code.

All-in-one infinity value for Python. Can be compared to any object.

This package contains a pure-Python MySQL client library. The goal of PyMySQL is
to be a drop-in replacement for MySQLdb and work on CPython, PyPy, IronPython
and Jython.

Arrow is a Python library that offers a sensible, human-friendly approach to
creating, manipulating, formatting and converting dates, times, and timestamps
It implements and updates the datetime type, plugging gaps in functionality, and
provides an intelligent module API that supports many common creation scenarios
Simply put, it helps you work with dates and times with fewer imports and
a lot less code.

…rs and

implemented a signature-preserving contexmanager decorator. Fixed a bug
with the signature f(**kw) in Python 3 and fixed a couple of doctests
broken by Python 3.3.

3.3.3 Fixed a bug with kwonlyargs for Python 3

Python has all kinds of data validation tools, but every one of them seems to
require defining a schema / form. This is a simple validation library where
validating a simple value does not require defining a form or a schema.

Various unit test helpers for WTForms forms.