New Ports of the Week #28

New ports this week:

• misc: dvtm
  
• games: alephone
  
• net: emesene
  
• www: py-genshi
  
• x11: xcalib and driconf

updated ports:

• audio/sox
  Section rewrite to fix an assumption that long int is always 32 bits.

• devel/py-nose
  - bugfix update to py-nose-0.10.3

• devel/py-silc
  Release 0.5.

• geo/qlandkarte
  qlandkarte-0.7.3, highlights:
  - added ascent/descent delta on tracks
  - fixed antialiasing bug (much better performance)
  - fixed coordinates miscalculation bug
  

• graphics/ffmpeg
  update to subversion snapshot from 2008-06-20.
  added since last update:
  - AVM2 (Flash 9) SWF muxer
  - QT variant of IMA ADPCM encoder
  - VFW grabber
  - Ipod/Iphone compatible mp4 muxer
  - Mimic decoder
  - MSN TCP Webcam stream demuxer
  - RL2 demuxer / decoder
  - IFF demuxer
  - 8SVX audio decoder
  - BFI demuxer
  - MAXIS EA XA (.xa) demuxer / decoder
  - BFI video decoder
  - OMA demuxer
  - libswscale is now enabled in the build.

• mail/evolution
  Update evolution to 2.22.3, which includes fixes for CVE-2008-1108 and CVE-2008-1109.

• mail/evolution-plugin-rss
  - update evolution-rss to 0.1.0 (includes loads of fixes and features)

• mail/p5-GetLive
  Update to 0.57. This allows GetLive to work again.

• multimedia/avidemux
  - bugfix update to avidemux-2.4.2

• net/nmap
  Update to 4.68.

• net/nsd
  Update to NSD 3.1.0; bug fix release.

• net/samba
  Update to Samba 3.0.30; bug fixes and a security issue fixed, CVE-2008-1105.
  Specifically crafted SMB responses can result in a heap overflow in the Samba client code. Because the server process, smbd, can itself act as a client during operations such as printer notification and domain authentication, this issue affects both Samba client and server installations.

• net/transmission
  Overdue update to 1.22.

• net/bitlbee
  bugfix update to bitlbee-1.2.1

• net/silc-client and net/irssi-silc
  sync with silc-client-1.1.4p0 patchset:
  - do not enable DIV_SMALL by default, on all archs
  - for now, don't use 128-bit arithmetics on amd64, as a work-around for the gcc bug. gcc3.3 mangles arguments for __divti3, and amd64 hangs on non-DIV_SMALL, when passing correct arguments. this is what silc-toolkit and silc-server use, too
  unbreaks amd64

• print/poppler
  Fix memory management bug (CVE-2008-295).

• security/clamav
  update clamav to 0.93.3. possible SECURITY. since 0.93:
  - fixes DoS with MailFollowURLs (CVE-2008-2713)
  - improves handling of PDF, CAB, RTF, OLE2 and HTML files
  and includes various bugfixes for 0.93 issues.

• www/minimo
  - start normal versioning; stick with branches of firefox 2 releases, so that we don't end up with non-stable versions
  - security update to minimo-1.8.1.15v0

• www/py-turbogears
  - bugfix update to py-turbogears-1.0.5

• www/drupal5/core
  DRUPAL-SA-2008-044 prevents some risks that can occur if you install some third party modules, or have very malicious users with high privileges.
  - deletion of translated terms under cross site requests.
  - session fixation attacks after installing 3rd party modules like workgroup NG.

• www/drupal5/nodeprofile
  rich user profiles

• www/gtkhtml3
  Update gtkhtml3 to 3.18.3. Includes a fix to make evolution not crap out on specially formatted html.

• x11/vlc
  SECURITY: patch to fix integer overflow in wav handling (CVE-2008-2430)

• x11/xfce4/xfce4-wavelan
  Update to xfce4-wavelan 0.5.4, not BROKEN anymore.

removed ports:

• x11/xfce4/xfce4-bglist-editor and x11/xfce4/xfce4-lua-graph
  Remove xfce4-bglist-editor, it is superseded by xfdesktop since xfce 4.4. Also remove xfce4-lua-graph, it is abandoned upstream since 2005 and no release is planned to make it work with newer xfce.

• security/advchk it does not work, it is not maintained