games/openbor: update to 7056

Changes:	https://github.com/DCurrent/openbor/compare/68a1c977...6de201a4
Approved by:	ports-secteam (feld, implicit for snapshots)

graphics/netpbm: Update to 10.86.04

Changes:	https://gitlab.com/tobiask/netpbm/raw/v10.86.04/doc/HISTORY

Approved by:	ports-secteam blanket

games/openbor: update to 7045

Changes:	https://github.com/DCurrent/openbor/compare/0afa1f0d...68a1c977
Approved by:	ports-secteam (feld, implicit for snapshots)

Add 11.3-RC1 MANIFEST files.
Remove 11.3-BETA2 MANIFEST files.

Approved by:	portmgr (implicit, re blanket)
Approved by:	bdrewery (maintainer, implicit, re blanket)
Sponsored by:	The FreeBSD Foundation

Security update to 4.9.0.1

Security:	a5681027-8e03-11e9-85f4-6805ca0b3d42

Approved by:	ports-secteam (joneum)

databases/mantis: Update to 2.21.1

Changes:	https://mantisbt.org/bugs/changelog_page.php?project=mantisbt&version=2.21.1

Approved by:	ports-secteam blanket

www/firefox: switch to system aom/dav1d

Obtained from:	upstream (via Gentoo)
Approved by:	ports-secteam blanket

devel/py-apptools: Enable Python 3.x builds

* Support for Python 3 was introduced with 4.4.0
* Pet portlint (reduce the overall usage of lines in the pkg-descr and
  separate the USES block).
* No bump of PORTREVISION due style changes only.

PR:		238435
Submitted by:	vladimir.chukharev@gmail.com (maintainer)
Approved by:	ports-secteam (miwi)

This is a direct commit to 2019Q2. The version in head contains many
other changes that are intentionally being tested there before
showing up in quarterly.

Security:     CVE-2019-12735
Approved by:  portmgr (with hat)

Update neovim to 0.3.6
Update neovim to 0.3.7

Security:    CVE-2019-12735
Approved by: portmgr (with hat)

Update to r52910 from the FreeBSD docset.

Approved by:	doceng (implicit)

Update to r53120 from the FreeBSD docset (a.k.a. 11.3-R version)

Approved by:	doceng (implicit)

Approved by:	portmgr (blanket)

mail/thunderbird: update to 60.7.1 (rc1)

Release Notes (soon):
  https://www.thunderbird.net/en-US/thunderbird/60.7.1/releasenotes/

Approved by:	jbeich (gecko@, implicit)

Approved by:	portmgr (blanket: web browser lookalike)

Mark BROKEN on FreeBSD 12 and 13

Traceback (most recent call last):
  File "scripts/python/make-dist.py", line 294, in <module>
    Setup(InstallRoot_CompilerWithPrevious, InstallRoot_CompilerWithSelf)
  File "scripts/python/make-dist.py", line 268, in Setup
    reload(pylib) or FatalError()
  File "/wrkdirs/usr/ports/lang/modula3/work/cm3-b2ce705/scripts/python/pylib.py", line 655, in <module>
    if Host.endswith("_NT") or Host == "NT386":
AttributeError: 'NoneType' object has no attribute 'endswith'

Reported by:	pkg-fallout

devel/libevent2: update to 2.1.10

Changes:	https://github.com/libevent/libevent/releases/tag/release-2.1.10-stable
ABI:		https://abi-laboratory.pro/tracker/timeline/libevent/
PR:		238127
Reported by:	GitHub (watch releases)
Tested by:	pkubaj (powerpc64)
Approved by:	maintainer timeout (2 weeks)
Approved by:	ports-secteam (miwi)

Update to 1.8.21

Changelog: https://blog.mybb.com/2019/06/10/mybb-1-8-21-released-security-maintenance-release/

Security:	13960f55-8d35-11e9-9ba0-4c72b94353b5
Sponsored by:	Netzkommune GmbH

Approved by:	ports-secteam (joneum)

Update to 32.0.0.207.

https://helpx.adobe.com/security/products/flash-player/apsb19-30.html

Approved by:	ports-secteam (blanket)

Fix named when using plugins and chroot.

BIND9 introduced plugins and migrated the filter-aaaa feature to a
plugin.
As it loads its plugins late in the startup process (read after chroot),
the plugins need to be available in the chroot.

Also, refactor the code now that a second directory need to be handled.

PR:		238011
Reported by:	ryan@timewasted.me

lang/php72: Upgrade from 7.2.18 7.2.19

Changelog:

    EXIF:
        Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16) (CVE-2019-11040).
    FPM:
        Fixed bug #77934 (php-fpm kill -USR2 not working).
        Fixed bug #77921 (static.php.net doesn't work anymore).
    GD:
        Fixed bug #77943 (imageantialias($image, false); does not work).
        Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm) (CVE-2019-11038).
    Iconv:
        Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow) (CVE-2019-11039).
    JSON:
        Fixed bug #77843 (Use after free with json serializer).
    Opcache:
        Fixed possible crashes, because of inconsistent PCRE cache and opcache SHM reset.
    PDO_MySQL:
        Fixed bug #77944 (Wrong meta pdo_type for bigint on LLP64).
    Reflection:
        Fixed bug #75186 (Inconsistent reflection of Closure:::__invoke()).
    Session:
        Fixed bug #77911 (Wrong warning for session.sid_bits_per_character).
    SPL:
        Fixed bug #77024 (SplFileObject::__toString() may return array).
    SQLite:
        Fixed bug #77967 (Bypassing open_basedir restrictions via file uris).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.2.19

MFC after:	2019Q2

Approved by:	ports-secteam (joneum)

emulators/citra: update to s20190610

Changes:	https://github.com/citra-emu/citra/compare/75ebf1fdf...73bf92fb3
Approved by:	ports-secteam (swills, implicit for snapshots)

Bumped seahub version for init script to fix gunicorn binary name
Fix checksum due to retagged version

Change currently unused init var seahub_host so
there is no breakage for current users of seahub.

Change hard coded 0.0.0.0 for gunicorn start to
seahub_host.

PR:		237366 237367
Approved by:	ports-secteam (joneum)

Mark BROKEN: unfetchable

Reported by:	pkg-fallout

Update to 3.2.7

Changelogs
 https://www.phpbb.com/community/viewtopic.php?f=14&t=2509941
 https://www.phpbb.com/community/viewtopic.php?f=14&t=2510666

Sponsored by:	Netzkommune GmbH

Approved by:	ports-secteam (joneum)

www/firefox: force rebuild after r503861

Approved by:	ports-secteam blanket

www/firefox: switch to rc2

Changes:	https://hg.mozilla.org/releases/mozilla-release/pushloghtml?startdate=2019-06-07&enddate=2019-06-09
PR:		236651
Approved by:	ports-secteam blanket

Update to upstream release 1.2.0

Approved by:	ports-secteam (riggs)

emulators/citra: update to s20190608

Changes:	https://github.com/citra-emu/citra/compare/46b015bef...75ebf1fdf
Approved by:	ports-secteam (swills, implicit for snapshots)

Update to 7.67

Changelog:
 https://www.drupal.org/SA-CORE-2019-007
 https://www.drupal.org/project/drupal/releases/7.67

Security:	9b8a52fc-89c1-11e9-9ba0-4c72b94353b5
Sponsored by:	Netzkommune GmbH

Approved by:	ports-secteam (joneum)

Add the 11.3-BETA3 MANIFEST files.
Remove the 11.3-BETA2 MANIFEST files.

Approved by:	portmgr (implicit, re blanket)
Approved by:	bdrewery (maintainer, implicit, re blanket)
Sponsored by:	The FreeBSD Foundation

Update to upstream release 0.21.10

Details:
- Bugfix / regression fix release, see
  https://raw.githubusercontent.com/MusicPlayerDaemon/MPD/v0.21.10/NEWS

Approved by:	ports-secteam (riggs)

lang/php73: Update from 7.3.5 to 7.3.6

Changelog:

    cURL:
        Implemented FR #72189 (Add missing CURL_VERSION_* constants).
    EXIF:
        Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16) (CVE-2019-11040).
    FPM:
        Fixed bug #77934 (php-fpm kill -USR2 not working).
        Fixed bug #77921 (static.php.net doesn't work anymore).
    GD:
        Fixed bug #77943 (imageantialias($image, false); does not work).
        Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm) (CVE-2019-11038).
    Iconv:
        Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow) (CVE-2019-11039).
    JSON:
        Fixed bug #77843 (Use after free with json serializer).
    Opcache:
        Fixed possible crashes, because of inconsistent PCRE cache and opcache SHM reset.
    PDO_MySQL:
        Fixed bug #77944 (Wrong meta pdo_type for bigint on LLP64).
    Reflection:
        Fixed bug #75186 (Inconsistent reflection of Closure:::__invoke()).
    Session:
        Fixed bug #77911 (Wrong warning for session.sid_bits_per_character).
    SOAP:
        Fixed bug #77945 (Segmentation fault when constructing SoapClient with WSDL_CACHE_BOTH).
    SPL:
        Fixed bug #77024 (SplFileObject::__toString() may return array).
    SQLite:
        Fixed bug #77967 (Bypassing open_basedir restrictions via file uris).
    Standard:
        Fixed bug #77931 (Warning for array_map mentions wrong type).
        Fixed bug #78003 (strip_tags output change since PHP 7.3).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.3.6

Approved by:	ports-secteam (miwi)

lang/php71: Update from 7.1.29 to 7.1.30

Changelog:

    EXIF:
        Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16) (CVE-2019-11040).
    GD:
        Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm) (CVE-2019-11038).
    Iconv:
        Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow) (CVE-2019-11039).
    SQLite:
        Fixed bug #77967 (Bypassing open_basedir restrictions via file uris).

Changelog taken from: https://www.php.net/ChangeLog-7.php#7.1.30

Approved by:	ports-secteam (miwi)

Import upstreamed patch to fix the Inhibit lock functionality.

Also add some required dependencies.

PR:		238348
Submitted by:	Olivier Duchateau <duchateau.olivier@gmail.com>

Approved by:	ports-secteam (joneum)

update firefox to 67.0.2 (rc1)

Changes: https://www.mozilla.org/en-US/firefox/67.0.2/releasenotes/

PR:		236651
Approved by:	jbeich (gecko, implicit)

Approved by:	portmgr (web browser blanket)

databases/pointcloud: Backport upstream PR for PostgreSQL 11 support.

PR:		238302
Approved by:	lbartoletti@tuxfamily.org (maintainer)
Obtained from:	https://github.com/pgpointcloud/pointcloud/commit/3e64c68dd4e0b9b9fdf0a74492ab49023161f6f1

Approved by:	ports-secteam(miwi)

Fix a possible race between udp dispatch and socket code.

PR:		237640
Obtained from:	https://gitlab.isc.org/isc-projects/bind9/merge_requests/1992

multimedia/svt-hevc: chase HTTP redirect

Approved by:	ports-secteam blanket

www/gitea: Update to 1.8.2

Changelog:

* Fix possbile mysql invalid connnection error
* Handle invalid administrator username on install page
* Disable arm7 builds
* Fix default for allowing new organization creation for new users
* SearchRepositoryByName improvements and unification
* Fix u2f registrationlist ToRegistrations() method
* Allow collaborators to view repo owned by private org
* Use AppURL for Oauth user link
* Escape the commit message on issues update
* Fix regression for API users search
* Handle early git version's lack of get-url
* Fix wrong init dependency on markup extensions

https://github.com/go-gitea/gitea/releases/tag/v1.8.2

PR:		238239
Submitted by:	stb@lassitu.de (maintainer)
Approved by:	ports-secteam (miwi)

security/bro: Update to 2.6.2 and address several denial of service
vulnerabilities:

   https://raw.githubusercontent.com/zeek/zeek/bb979702cf9a2fa67b8d1a1c7f88d0b56c6af104/NEWS

 - Integer type mismatches in BinPAC-generated parser code and Bro
   analyzer code may allow for crafted packet data to cause
   unintentional code paths in the analysis logic to be taken due
   to unsafe integer conversions causing the parser and analysis
   logic to each expect different fields to have been parsed.  One
   such example, reported by Maksim Shudrak, causes the Kerberos
   analyzer to dereference a null pointer.  CVE-2019-12175 was
   assigned for this issue.

 - The Kerberos parser allows for several fields to be left
   uninitialized, but they were not marked with an &optional attribute
   and several usages lacked existence checks.  Crafted packet data
   could potentially cause an attempt to access such uninitialized
   fields, generate a runtime error/exception, and leak memory.
   Existence checks and &optional attributes have been added to the
   relevent Kerberos fields.

 - BinPAC-generated protocol parsers commonly contain fields whose
   length is derived from other packet input, and for those that
   allow for incremental parsing, BinPAC did not impose a limit on
   how large such a field could grow, allowing for remotely-controlled
   packet data to cause growth of BinPAC's flowbuffer bounded only
   by the numeric limit of an unsigned 64-bit integer, leading to
   memory exhaustion.  There is now a generalized limit for how
   large flowbuffers are allowed to grow, tunable by setting
   "BinPAC::flowbuffer_capacity_max".

Approved by:	ler (mentor, implicit)
Security:	177fa455-48fc-4ded-ba1b-9975caa7f62a

Approved by:	ports-secteam (miwi)

Update e2fsprogs to new upstream release 1.45.2

Various bugfixes, and added Portuguese locale.
Update the Czech, Malay, Polish, Spanish, Swedish, and Ukarainian translations.

Release notes:
<http://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.45.2>

Approved by:	ports-secteam (miwi)

games/openbor: update to 7032

Changes:	https://github.com/DCurrent/openbor/compare/c5cfb660...0afa1f0d
Approved by:	ports-secteam (feld, implicit for snapshots)