FreeBSD Monitor
2015-08-02 21:22:13
devel/ros: set expiration date to 2015-01-11, this version expired probably in
2013. See
audio/abraca audio/ario audio/beast audio/deadbeef audio/denemo audio/gbemol audio/gmpc audio/gvolwheel audio/jamin audio/libgpod audio/lingot audio/lxmusic audio/osd-lyrics audio/paprefs audio/soundconverter audio/vagalume audio/volumeicon cad/pcb cad/repsnapper chinese/reciteword comms/gpredict comms/grig comms/tilp2 comms/xnec2c deskutils/clipit deskutils/conduit deskutils/drivel deskutils/genius deskutils/gourmet deskutils/gtodo deskutils/gxmessage deskutils/parcellite deskutils/rubrica deskutils/superswitcher deskutils/vboxgtk devel/geany devel/giggle devel/glade3 devel/gnome-vfs-monikers editors/gwrite emulators/desmume emulators/pcsxr finance/gnucash finance/grisbi finance/homebank ftp/bareftp ftp/pureadmin games/gbrainy games/gnono games/gtetrinet games/lordsawar games/pioneers graphics/aeskulap graphics/agave graphics/amide graphics/darktable graphics/entangle graphics/gcolor2 graphics/geeqie graphics/gimp-focusblur-plugin graphics/gimp-lqr-plugin graphics/gpicview graphics/gthumb graphics/gtkam graphics/ocrfeeder graphics/synfigstudio irc/hexchat japanese/gjiten japanese/ibus-anthy japanese/uim-tomoe-gtk mail/gnome-gmail-notifier math/qalculate multimedia/banshee multimedia/freetuxtv multimedia/gaupol multimedia/gmtk multimedia/gnome-subtitles multimedia/handbrake multimedia/lives multimedia/pitivi multimedia/quodlibet multimedia/subtitleeditor net/g2ipmsg net/gq net/grsync net/liferea net/tsclient net/twitux palm/jpilot print/gnomephotoprinter science/ghemical science/gramps science/v_sim security/fpm2 security/gnomint security/gtkpasman security/hotssh security/openvpn-admin security/parano security/revelation sysutils/gnome-schedule sysutils/libgksu sysutils/xvidcap textproc/meld textproc/stardict3 www/bluefish www/gnome-web-photo www/libepc x11/brightside x11/gsynaptics x11/guake x11/libfm x11/lxpanel x11/lxrandr x11/terminator x11/yad
2015-08-02 20:23:55
M /head/x11-fm/librfm/Makefile
M /head/x11-themes/lxappearance/Makefile
M /head/x11-themes/nimbus/Makefile
M /head/x11-toolkits/vte290/Makefile
M /head/x11-wm/compiz/Makefile
M /head/x11-wm/devilspie/Makefile

Part 1 of adding USE_GNOME=intltool to ports that require it.

The reason for this is that in the GNOME 3.16 update, USE_GNOME gtk20 and
gtk30 don't pull intltool in anymore.

PR: 201980
Exp-run by: antoine@
2015-08-02 20:17:29
- update to 3.0-20150719 (3.0.2)

Support for Linux 4.*, and some simplification for future
makedefs files. Files: makedefs, util/sys_defs.h.

Security: opportunistic TLS by default uses "medium" or
stronger ciphers instead of "export" or stronger. See the
RELEASE_NOTES file for how to get the old settings back.
Files: global/mail_params.h, proto/TLS_README.html,
proto/postconf.proto, and files derived from those.

Security: Postfix TLS support by default no longer uses
SSLv2 or SSLv3. See the RELEASE_NOTES file for how to get
the old settings back. Files: global/mail_params.h,
proto/postconf.proto, and files derived from those.

Incompatible change with Postfix 2.11.6 / 3.0.2
2015-08-02 20:16:26
- update to 2.11.6

Support for Linux 4.*, and some simplification for future
makedefs files. Files: makedefs, util/sys_defs.h.

Security: opportunistic TLS by default uses "medium" or
stronger ciphers instead of "export" or stronger. See the
RELEASE_NOTES file for how to get the old settings back.
Files: global/mail_params.h, proto/TLS_README.html,
proto/postconf.proto, and files derived from those.

Security: Postfix TLS support by default no longer uses
SSLv2 or SSLv3. See the RELEASE_NOTES file for how to get
the old settings back. Files: global/mail_params.h,
proto/postconf.proto, and files derived from those.

Incompatible change with Postfix 2.11.6 / 3.0.2
2015-08-02 19:39:09
- update to 2.2.31
- remove backports
- minor cleanups
- always rebuild configure script
- add patch for acinclude.m4 [1]

Changes with Apache 2.2.31 [2]

*) Correct win32 build issues for mod_proxy exports, OpenSSL 1.0.x headers.
[Yann Ylavic, Gregg Smith]

Changes with Apache 2.2.30 (not released)

*) SECURITY: CVE-2015-3183 (
core: Fix chunk header parsing defect.
Remove apr_brigade_flatten(), buffering and duplicated code from
the HTTP_IN filter, parse chunks in a single pass with zero copy.
Limit accepted chunk-size to 2^63-1 and be strict about chunk-ext
authorized characters. [Graham Leggett, Yann Ylavic]

*) http: Fix LimitRequestBody checks when there is no more bytes to read.
[Michael Kaufmann <mail>]

*) core: Allow spaces after chunk-size for compatibility with implementations
using a pre-filled buffer. [Yann Ylavic, Jeff Trawick]

*) mod_ssl: bring SNI behavior into better conformance with RFC 6066:
no longer send warning-level unrecognized_name(112) alerts. PR 56241.
[Kaspar Brand]

*) http: Make ap_die() robust against any HTTP error code and not modify
response status (finally logged) when nothing is to be done. PR 56035.
[Yann Ylavic]

*) core, modules: Avoid error response/document handling by the core if some
handler or input filter already did it while reading the request (causing
a double response body). [Yann Ylavic]

*) FreeBSD: Disable IPv4-mapped listening sockets by default for versions
5+ instead of just for FreeBSD 5. PR 53824. [Jeff Trawick,
Olli Hauer <ohauer gmx de>]

*) mod_proxy: use the original (non absolute) form of the request-line's URI
for requests embedded in CONNECT payloads used to connect SSL backends via
a ProxyRemote forward-proxy. PR 55892. [Hendrik Harms <hendrik.harms
gmail com>, William Rowe, Yann Ylavic]

*) mpm_winnt: Accept utf-8 (Unicode) service names and descriptions for
internationalization. [William Rowe]

*) mod_log_config: Implement logging for sub second timestamps and
request end time. [Rainer Jung]

*) mod_log_config: Ensure that time data is consistent if multiple
duration patterns are used in combination, e.g. %D and %{ms}T.
[Rainer Jung]

*) mod_log_config: Add "%{UNIT}T" format to output request duration in
seconds, milliseconds or microseconds depending on UNIT ("s", "ms", "us").
[Ben Reser, Rainer Jung]

*) In alignment with RFC 7525, the default recommended SSLCipherSuite
and SSLProxyCipherSuite now exclude RC4 as well as MD5. Also, the
default recommended SSLProtocol and SSLProxyProtocol directives now
exclude SSLv3. Existing configurations must be adjusted by the
administrator. [William Rowe]

*) core: Avoid potential use of uninitialized (NULL) request data in
request line error path. [Yann Ylavic]

*) mod_proxy_http: Use the "Connection: close" header for requests to
backends not recycling connections (disablereuse), including the default
reverse and forward proxies. [Yann Ylavic]

*) mod_proxy: Add ap_connection_reusable() for checking if a connection
is reusable as of this point in processing. [Jeff Trawick]

*) mod_proxy: Reuse proxy/balancer workers' parameters and scores across
graceful restarts, even if new workers are added, old ones removed, or
the order changes. [Jan Kaluza, Yann Ylavic]

*) mod_ssl: 'SSLProtocol ALL' was being ignored in virtual host context.
PR 57100. [Michael Kaufmann <apache-bugzilla>,
Yann Ylavic]

*) mod_ssl: Improve handling of ephemeral DH and ECDH keys by
allowing custom parameters to be configured via SSLCertificateFile,
and by adding standardized DH parameters for 1024/2048/3072/4096 bits.
Unless custom parameters are configured, the standardized parameters
are applied based on the certificate's RSA/DSA key size. [Kaspar Brand]

*) mod_ssl: drop support for export-grade ciphers with ephemeral RSA
keys, and unconditionally disable aNULL, eNULL and EXP ciphers
(not overridable via SSLCipherSuite). [Kaspar Brand]

*) mod_ssl: Add support for configuring persistent TLS session ticket
encryption/decryption keys (useful for clustered environments).
[Paul Querna, Kaspar Brand]

*) SSLProtocol and SSLCipherSuite recommendations in the example/default
conf/extra/httpd-ssl.conf file are now global in scope, affecting all
VirtualHosts (matching 2.4 default configuration). [William Rowe]

*) mod_authn_dbd: Fix lifetime of DB lookup entries independently of the
selected DB engine. PR 46421. [Jan Kaluza].

*) Turn static function get_server_name_for_url() into public
ap_get_server_name_for_url() and use it where appropriate. This
fixes mod_rewrite generating invalid URLs for redirects to IPv6
literal addresses. PR 52831 [Stefan Fritsch]

*) dav_validate_request: avoid validating locks and ETags when there are
no If headers providing them on a resource we aren't modifying.
[Ben Reser]

*) mod_ssl: New directive SSLSessionTickets (On|Off).
The directive controls the use of TLS session tickets (RFC 5077),
default value is "On" (unchanged behavior).
Session ticket creation uses a random key created during web
server startup and recreated during restarts. No other key
recreation mechanism is available currently. Therefore using session
tickets without restarting the web server with an appropriate frequency
(e.g. daily) compromises perfect forward secrecy. [Rainer Jung]

*) mod_deflate: Define APR_INT32_MAX when it is missing so to be able to
compile against APR-1.2.x (minimum required version). [Yann Ylavic]

*) mod_reqtimeout: Don't let pipelining checks interfere with the timeouts
computed for subsequent requests. PR 56729. [Eric Covener]


With Head apache@

MFH: 2015Q3 ( in case no new issues are reported during the next 7 days )
2015-08-02 18:59:01
net/librdkafka: fix build on 9.3-i386

- Adding -march=pentium to CFLAGS on this arch

PR: 201521
Submitted by: Victor Yagofarov <[email protected]> (maintainer)
2015-08-02 18:31:15
Update to 0.4.1

2015-08-02 18:15:51
Update to 0.8.15
- cleanup NLS
- cleanup OPTIONS

Differential Revision:
Reviewed by: kwm
2015-08-02 18:13:16
Add some more X11 / NOX11 checks around USES=ghostscript usage.

While here apply the same checks to IM7.

PR: 201993
Submitted by: [email protected]
2015-08-02 16:39:13
emulators/dynamips-community: 0.2.12 -> 0.2.15

- Add optional argument 'format' to hypervisor commands
- 'send_con_msg' and 'send_aux_msg'.
- Report "X byte(s) written" on succeess.
- String formats:
* plain - plain string (default, old behavior)
* base64 - base64 encoded string
- Use an auxiliary variable to record configured ram size for npe-400
- Fixed issue #49 - IOS crashes after router restart
- Fixed issue #50 - vm send_con_msg

PR: 194066
Submitted by: Pavel Volkov <[email protected]> (maintainer)
2015-08-02 16:08:39
Update pdf2djvu to 0.7.21.

This version builds with poppler 0.34.0.

Update WWW to new homepage.

PR: 201660
Submitted by: myself
Approved by: maintainer timeout (16 days)
2015-08-02 16:06:16
M /head/x11-fm/gnome-commander2/Makefile
M /head/x11-toolkits/rubygem-poppler/Makefile

Update poppler to 0.34.0. [1]

Chase all users of shlib version change of

PR: 201477 [1]
Submitted by: olivierd@ [1]
2015-08-02 15:37:19
Update zeitgeist to 0.9.14 [1]

This version of zeitgeist now bundles libzeitgeist in the port. The
new libzeitgeist was bumped to ->

* deskutils/cairo-dock-plugins: supports both zeitgeist versions.
* net-im/folks: Only supports the new 2.0 libzeitgeist library version. And
this went unnoticed, woops.
* sysutils/libzeitgeist: Remove since it is now bundled in zeitgeist.
* sysutils/qzeitgeist: Update the port for the new zeitgeist API.
* www/midori: Mark the zeitgeist option (non-default) broken until midori
can be updated to a version that supports the new libzeitgeist 2.0

PR: 190729 [1]
Submitted by: olivierd@ [1]
Mk/Uses accessibility/at-spi audio/audacity audio/calf audio/deadbeef audio/gstreamer-plugins-fluendo-mp3 audio/gstreamer-plugins-moodbar audio/libaacplus audio/libaudiofile audio/mpg123 audio/portaudio audio/shairplay audio/wavpack audio/xfce4-mixer audio/xfce4-mpc-plugin chinese/scim-array chinese/scim-pinyin converters/fribidi databases/courier-authlib-mysql databases/courier-authlib-pgsql databases/courier-authlib-userdb databases/courier-authlib-usergdbm databases/glom databases/ipa_sdb databases/libgda4 databases/libgda5 databases/libiodbc databases/mdbtools databases/mysql-workbench51 databases/oracle_odbc_driver databases/rrdtool databases/unixODBC databases/virtuoso deskutils/orage deskutils/spice-gtk devel/alf devel/appstream-glib devel/cutter devel/fam devel/gconf2 devel/gitg devel/gnome-vfs devel/google-perftools devel/gvfs devel/jansson devel/libcheck devel/libdatrie devel/libdbusmenu devel/libglade2 devel/libgtop devel/liblcfg devel/libmaa devel/liboil devel/libpeas devel/librcc devel/librevisa devel/libthai devel/libzookeeper devel/orc devel/privman devel/pthsem devel/py-dbus devel/py-gobject devel/py-notify devel/py-orbit devel/py3-dbus devel/pydbus-common devel/streamhtmlparser devel/upnp dns/getdns dns/knot dns/ldns dns/unbound ftp/wzdftpd graphics/GraphicsMagick graphics/ImageMagick graphics/ImageMagick7 graphics/atril graphics/atril-lite graphics/bugle graphics/cogl graphics/colord graphics/diacanvas2 graphics/evince graphics/evince-lite graphics/goom graphics/gstreamer-plugins-gl graphics/gstreamer1-plugins-gl graphics/libchamplain graphics/libchamplain08 graphics/libexif graphics/libgphoto2 graphics/libgxps graphics/libpotrace graphics/potrace graphics/py-goocanvas graphics/py-poppler graphics/swfdec graphics/zbar irc/charybdis irc/ircd-ratbox irc/ircd-ratbox-devel japanese/libskk japanese/libtomoe-gtk japanese/scim-anthy japanese/scim-canna japanese/scim-honoka japanese/scim-honoka-plugin-romkan japanese/scim-honoka-plugin-wnn japanese/scim-skk japanese/scim-tomoe japanese/scim-uim japanese/tomoe korean/scim-hangul lang/gcc5 lang/gcc5-devel lang/gcc6-devel lang/smalltalk mail/courier-authlib-vchkpw mail/opendkim math/glpk misc/ipa_conv misc/xfce4-weather-plugin multimedia/cheese multimedia/dirac multimedia/gavl multimedia/gmerlin multimedia/gmerlin-avdecoder multimedia/gstreamer multimedia/gstreamer-plugins multimedia/gstreamer-plugins-bad multimedia/gstreamer-plugins-buzztard multimedia/gstreamer-plugins-fluendo-mpegdemux multimedia/gstreamer-plugins-vdpau multimedia/gstreamer1 multimedia/gstreamer1-plugins multimedia/gstreamer1-plugins-bad multimedia/gstreamer1-vaapi multimedia/libdc1394 multimedia/libmtp multimedia/schroedinger multimedia/vlc multimedia/xmms net/avahi-app net/courier-authlib-ldap net/libgnetwork net/libnss-mysql net/liboauth net/librouteros net/mpich2 net/ndpi security/courier-authlib-base security/duo security/engine_pkcs11 security/fwknop security/gcr security/libmcrypt security/libntlm security/libp11 security/libprelude security/libpreludedb security/libssh2 security/munge security/opensc security/openvpn security/openvpn-devel security/pam_krb5 security/pam_krb5-rh security/pkcs11-helper sysutils/cinnamon-control-center sysutils/garcon sysutils/libieee1284 sysutils/policykit sysutils/polkit sysutils/tracker sysutils/xfce4-battery-plugin sysutils/xfce4-cpugraph-plugin sysutils/xfce4-diskperf-plugin sysutils/xfce4-fsguard-plugin sysutils/xfce4-genmon-plugin sysutils/xfce4-mount-plugin sysutils/xfce4-systemload-plugin sysutils/xfce4-wavelan-plugin textproc/libextractor textproc/link-grammar textproc/rarian textproc/scim-input-pad textproc/scim-m17n textproc/scim-openvanilla textproc/scim-table-imengine www/apache22 www/apache24 www/htdigest www/mod_musicindex www/mod_spdy www/py-webkitgtk www/shellinabox www/swfdec-plugin www/trafficserver www/xfce4-smartbookmark-plugin x11/keybinder x11/libfm x11/libxfce4menu x11/mate-menus x11/xfce4-verve-plugin
2015-08-02 15:03:19
M /head/x11-clocks/xfce4-datetime-plugin/Makefile
M /head/x11-clocks/xfce4-timer-out-plugin/Makefile
M /head/x11-fm/thunar/Makefile
M /head/x11-toolkits/gtk20/Makefile
M /head/x11-toolkits/gtkglext/Makefile
M /head/x11-toolkits/pango/Makefile
M /head/x11-toolkits/py-gnome2/Makefile
M /head/x11-toolkits/py-gtk2/Makefile
M /head/x11-toolkits/py-gtkglext/Makefile
M /head/x11-toolkits/py-gtksourceview/Makefile
M /head/x11-toolkits/py-sexy/Makefile
M /head/x11-wm/compizconfig-python/Makefile
M /head/x11-wm/xfce4-panel/Makefile

By default libtool replaces -export-symbols <file> with -retain-symbols-file
<file> on ELF systems, but this doesn't really do what -export-symbols is
meant to do. On GNU ELF systems it converts <file> to a simple version
script first and then uses -version-script instead of -retain-symbols-file.
Let USES=libtool patch libtool scripts to do this on all systems with GNU

Bump PORTREVISION on all ports where the build log contains -export-symbols.

audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions. Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to. Fix a number of other issues in the same and clean up the port Makefile.

japanese/scim-honoka: Tries to hide all symbols that start with an
underscore, but because this library is written in C++ all symbols start
with _Z so it ends up hiding everything. Just don't hide anything at all
like the textproc/scim configure script does.

multimedia/schroedinger: Apply an upstream patch.

textproc/scim-input-pad: Same as japanese/scim-honoka.

PR: 201922
Approved by: portmgr (antoine)
Exp-run by: antoine
2015-08-02 14:24:20
sysutils/automount: update 1.5.3 -> 1.5.7

PR: 201943
Submitted by: [email protected] (maintainer)
Approved by: feld (mentor)
2015-08-02 14:03:56
Fix shuffle playback
(random number generator is not initialised properly)

While on it:
Pet portlint

PR: 201645
Submitted by: [email protected] (maintainer)
MFH: 2015Q3
2015-08-02 13:47:42
Add debug output in an attempt to figure out why certain tests fail on
package builders.

PR: 201743
Approved by: mentors (implicit)
2015-08-02 08:45:55
New port: deskutils/ladon

Process many files in parallel. It is meant for people comfortable
with using a terminal but strives to be as easy to use as humanly

Ladon is named after the multiheaded serpent dragon from Greek mythology,
slain by Heracles and thrust into the sky as the constellation Draco. His
many heads allow you to efficiently work on many files at once.


PR: 201906
Submitted by: Carlos Jacobo Puga Medina <[email protected]>