Merge branch 'master' into ivan

CHANGES.txt

 Changes
 =======
+0.102 (2015-05-22)
+------------------
+ * kvm-recipe: vm of kvm-cluster can get ipv4/hostname of all other vm in the same cluster
+ * simplehttpserver-recipe: simple http server to serve files
+
+0.101 (2015-04-29)
+------------------
+ * kvm recipe: new parameters: external-disk-format, numa and cpu-options.
+ * kvm recipe: allow guest VM to connect to host http service via a local predefined ipv4 address (guestfwd).
+
+0.100 (2015-04-20)
+------------------
+ * re6stnet recipe: re6st-registry log can now be reopened with SIGUSR1
+ * re6stnet recipe: re6st certificate generation is improved.
+
+0.99 (2015-04-10)
+-----------------
+ * re6stnet: new recipe to deploy re6st registry (re6st master) with slapos.
+
+0.98 (2015-04-09)
+-----------------
+ * shellinabox: do not run in debug mode, it is much slower !
+
+0.97 (2015-03-26)
+-----------------
+ * switch softwaretype recipe: the recipe is backward compatible with old slapos node packages.
+ * kvm recipe: Avoid getting wrong storage path when creating kvm external disk
+
+0.96 (2015-03-20)
+-----------------
+ * slap configuration: recipe can read from master network information releated to a tap interface
+ * slap configuration: recipe will setup data folder in DATA directory of computer partition if disk is mounted
+ * switch softwaretype recipe: also generate tap network information when they exist
+ * switch softwaretype recipe: generate configuration for DATA directory when disk is mounted
+
+0.95 (2015-02-14)
+-----------------
+
+ * resiliency stack: allow web takeover to work inside of webrunner/erp5testnode.
+ * resiliency takeover script: create lock file stating that takeover has been done.
+
+0.94 (2015-02-06)
+-----------------
+ * kvm: allow to configure tap and nat interface at the same time with use-nat and use-tap [d3d65916]
+ * kvm: use -netdev to configure network interface as -net is now obsolete [27baa9d4]
 
 0.85 (2013-12-03)
 -----------------

component/apache/buildout.cfg

@@ -30,9 +30,9 @@ md5sum = 2202b18f269ad606d70e1864857ed93c
 [apache]
 # inspired on http://old.aclark.net/team/aclark/blog/a-lamp-buildout-for-wordpress-and-other-php-apps/
 recipe = slapos.recipe.cmmi
-version = 2.4.10
+version = 2.4.12
 url = https://archive.apache.org/dist/httpd/httpd-${:version}.tar.bz2
-md5sum = 44543dff14a4ebc1e9e2d86780507156
+md5sum = b8dc8367a57a8d548a9b4ce16d264a13
 configure-command = cp -ar ${apr:location}/apr-${apr:version} srclib/apr/; cp -ar ${apr-util:location}/apr-util-${apr-util:version} srclib/apr-util; ./configure
 configure-options = --prefix=${buildout:parts-directory}/${:_buildout_section_name_}
                     --disable-static

component/automake/buildout.cfg

@@ -8,7 +8,7 @@ parts =
 
 [automake]
 recipe = slapos.recipe.cmmi
-md5sum = 140e084223bf463a24c1a28427c6aec7
-url = http://ftp.gnu.org/gnu/automake/automake-1.12.6.tar.xz
+md5sum = 9a1ddb0e053474d9d1105cfe39b0c48d
+url = http://ftp.gnu.org/gnu/automake/automake-1.15.tar.xz
 environment =
   PATH =${autoconf:location}/bin:${perl:location}/bin:${xz-utils:location}/bin:%(PATH)s

component/babeld/buildout.cfg

+[buildout]
+extends =
+  ../../stack/slapos.cfg 
+
+parts = babeld
+
+[babeld]
+recipe = slapos.recipe.cmmi
+url = https://lab.nexedi.cn/rafael/babeld/repository/archive.tar.gz?ref=v1.6.0-nxd1 
+md5sum = 1f269d01321103873b8d245df19984f0 
+configure-command =
+  echo "No configure.."
+
+make-targets = 
+  install PREFIX=${buildout:parts-directory}/${:_buildout_section_name_} 

component/binutils/buildout.cfg

-[buildout]
-parts =
-  binutils
-
-extends =
-  ../bison/buildout.cfg
-  ../zlib/buildout.cfg
-
-[binutils]
-recipe = slapos.recipe.cmmi
-url = http://ftp.gnu.org/gnu/binutils/binutils-2.21.1.tar.bz2
-md5sum = bde820eac53fa3a8d8696667418557ad
-environment =
-  PATH=${bison:location}/bin:%(PATH)s
-  CPPFLAGS=-I${zlib:location}/include
-  LDFLAGS=-L${zlib:location}/lib -Wl,-rpath=${zlib:location}/lib

component/bison/buildout.cfg

 [buildout]
 extends =
   ../m4/buildout.cfg
+  ../xz-utils/buildout.cfg
 parts =
   bison
 
 [bison]
-patch-options = -p1
-patches =
-  ${:_profile_base_location_}/bison-drop.gets.patch#ac06cbaa298ac686d0b0c04bc03e6ad8
-
 recipe = slapos.recipe.cmmi
-url = http://ftp.gnu.org/gnu/bison/bison-2.5.tar.bz2
-md5sum = 9dba20116b13fc61a0846b0058fbe004
+url = http://ftp.gnu.org/gnu/bison/bison-3.0.2.tar.xz
+md5sum = 146be9ff9fbd27497f0bf2286a5a2082
 environment =
   M4=${m4:location}/bin/m4
+  PATH=${xz-utils:location}/bin:%(PATH)s

component/coreutils/buildout.cfg

 [buildout]
 extends =
+  ../gmp/buildout.cfg
   ../xz-utils/buildout.cfg
 parts =
   coreutils-output
@@ -12,7 +13,7 @@ configure-options =
   --prefix=${buildout:parts-directory}/${:_buildout_section_name_} --enable-install-program=tr,basename,uname,cat,cp,ls
 environment =
   PATH=${xz-utils:location}/bin:%(PATH)s
-  LDFLAGS =-Wl,--as-needed
+  LDFLAGS=-Wl,--as-needed -L${gmp:location}/lib -Wl,-rpath=${gmp:location}/lib
 
 [coreutils-output]
 # Shared binary location to ease migration

component/curl/buildout.cfg

@@ -12,8 +12,8 @@ parts =
 
 [curl]
 recipe = slapos.recipe.cmmi
-url = http://curl.haxx.se/download/curl-7.39.0.tar.bz2
-md5sum = 1efecb5b0e43c17d968f0d228bbbbbbd
+url = http://curl.haxx.se/download/curl-7.42.1.tar.bz2
+md5sum = 296945012ce647b94083ed427c1877a8
 configure-options =
   --disable-static
   --disable-ldap

component/dash/buildout.cfg

@@ -6,8 +6,8 @@ parts = dash-output
 
 [dash]
 recipe = slapos.recipe.cmmi
-url = http://gondor.apana.org.au/~herbert/dash/files/dash-0.5.7.tar.gz
-md5sum = f6cedb10ae7258adb5ab17a10ae80d51
+url = http://gondor.apana.org.au/~herbert/dash/files/dash-0.5.8.tar.gz
+md5sum = 5c152209680dab3c319e8923f6c51378
 configure-options =
   --disable-static
   --disable-fnmatch

component/dbus/buildout.cfg

@@ -10,8 +10,8 @@ parts =
 
 [dbus]
 recipe = slapos.recipe.cmmi
-url = http://dbus.freedesktop.org/releases/dbus/dbus-1.8.8.tar.gz
-md5sum = b9f4a18ee3faa1e07c04aa1d83239c43
+url = http://dbus.freedesktop.org/releases/dbus/dbus-1.8.16.tar.gz
+md5sum = 020824a38850501e7d6ba8307a7c5ac3
 location = ${buildout:parts-directory}/${:_buildout_section_name_}
 configure-options =
   --disable-static
@@ -25,8 +25,8 @@ environment =
 
 [dbus-glib]
 recipe = slapos.recipe.cmmi
-url = http://dbus.freedesktop.org/releases/dbus-glib/dbus-glib-0.102.tar.gz
-md5sum = f76b8558fd575d0106c3a556eaa49184
+url = http://dbus.freedesktop.org/releases/dbus-glib/dbus-glib-0.104.tar.gz
+md5sum = 5497d2070709cf796f1878c75a72a039
 configure-options =
   --disable-static
   --disable-gtk-doc-html

component/dtach/buildout.cfg

+[buildout]
+
+parts = dtach
+
+[dtach-build]
+recipe = slapos.recipe.cmmi
+version = 0.8
+url = http://freefr.dl.sourceforge.net/project/dtach/dtach/0.8/dtach-${:version}.tar.gz
+md5sum = ec5999f3b6bb67da19754fcb2e5221f3
+keep-compile-dir = true
+make-targets = 
+  
+[dtach]
+recipe = plone.recipe.command
+location = ${buildout:parts-directory}/${:_buildout_section_name_}
+dtach-bin = dtach
+command = 
+  mkdir -p ${:location}/bin
+  cp -rp ${dtach-build:compile-directory}/dtach-${dtach-build:version}/${:dtach-bin} ${:location}/bin
\ No newline at end of file

component/file/buildout.cfg

@@ -8,8 +8,8 @@ extends =
 
 [file]
 recipe = slapos.recipe.cmmi
-url = ftp://ftp.astron.com/pub/file/file-5.20.tar.gz
-md5sum = 5d5e13eb3e0e13839da869a31790faf2
+url = ftp://ftp.astron.com/pub/file/file-5.22.tar.gz
+md5sum = 8fb13e5259fe447e02c4a37bc7225add
 configure-options =
   --disable-static
 environment =

component/firefox/buildout.cfg

@@ -26,12 +26,12 @@ depends =
   ${liberation-fonts:location}
   ${ipaex-fonts:location}
 
-version = 33.1
+version = 36.0.4
 
 # MD5SUMs are available at :
 # https://ftp.mozilla.org/pub/mozilla.org/firefox/releases/${:version}/MD5SUMS
-x86 = http://download-installer.cdn.mozilla.net/pub/firefox/releases/${:version}/linux-i686/en-US/firefox-${:version}.tar.bz2 1106b9c56da48a3e5c5ef965fea70078
-x86-64 = http://download-installer.cdn.mozilla.net/pub/firefox/releases/${:version}/linux-x86_64/en-US/firefox-${:version}.tar.bz2 4201d94f32b6b778456e5681cdcacd76
+x86 = http://download-installer.cdn.mozilla.net/pub/firefox/releases/${:version}/linux-i686/en-US/firefox-${:version}.tar.bz2 6f50b82a6c020d0f29a04cfcd9fe8282
+x86-64 = http://download-installer.cdn.mozilla.net/pub/firefox/releases/${:version}/linux-x86_64/en-US/firefox-${:version}.tar.bz2 119d9369a3b1be282936c35bf036414f
 
 script =
   if not self.options.get('url'): self.options['url'], self.options['md5sum'] = self.options[guessPlatform()].split(' ')

component/fluentd/buildout.cfg

+[buildout]
+
+extends =
+  ../../component/git/buildout.cfg
+  ../../component/ruby/buildout.cfg
+  ../../component/icu/buildout.cfg
+
+[fluentd]
+recipe = rubygemsrecipe
+ruby-executable = ${ruby:location}/bin/ruby
+gems =
+  fluentd
+gem-options = --with-icu-lib=${icu:location}/lib/ --with-icu-dir=${icu:location}/
+environment =
+  LDFLAGS = -L${icu:location}/lib -Wl,-rpath=${icu:location}/lib
+  CFLAGS = -I${icu:location}/include

component/fonts/buildout.cfg

@@ -26,12 +26,12 @@ md5sum = 5c781723a0d9ed6188960defba8e91cf
 # http://ipafont.ipa.go.jp/
 [ipaex-fonts]
 <= fonts-base
-url = http://ipafont.ipa.go.jp/ipaexfont/IPAexfont00201.php
+url = http://dl.sourceforge.jp/ipafonts/57330/IPAexfont00201.zip
 md5sum = 7bf84182a04a9632268dbcb03f100d05
 
 [ipa-fonts]
 <= fonts-base
-url = http://ipafont.ipa.go.jp/ipafont/IPAfont00303.php
+url = http://dl.sourceforge.jp/ipafonts/51868/IPAfont00303.zip
 md5sum = 39a828acf27790adbe4944dfb4d94bb1
 
 [ocrb-fonts]
@@ -43,3 +43,36 @@ md5sum = 9f2acd83291a31dbe053912f4115db75
 <= fonts-base
 url = ftp://ftp.free.fr/mirrors/ftp.debian.org/pool/main/f/fonts-android/fonts-android_4.3.orig.tar.xz
 md5sum = 2d41d5342eb5f61591ddeec5b80da74d
+
+# Microsoft's TrueType core fonts
+# non-free so not enabled by default
+[msttcore-fonts]
+location = ${fonts:location}/${:_buildout_section_name_}
+recipe = slapos.recipe.build
+script =
+  from zc.buildout.download import Download
+  d = self.options['location']
+  fonts = []
+  download = lambda x, dl=Download(self.buildout['buildout']): (
+    dl("http://downloads.sf.net/corefonts/%%s32.exe" %% name, md5sum=md5sum)
+    for md5sum, name in (x.split() for x in x.splitlines() if x))
+  extract = lambda x, d=d, p7z="${p7zip:location}/bin/7za": any(
+    subprocess.check_call((p7z, "x", "-ssc-", path, "*.ttf"), cwd=d)
+    for path, is_temp in x)
+  try: fonts += download(self.options['fonts']); os.makedirs(d); extract(fonts)
+  except: shutil.rmtree(d, ignore_errors=True); raise
+  finally: any(os.remove(path) for path, is_temp in fonts if is_temp)
+slapos_promise =
+slapos_update_promise = ${:slapos_promise}
+fonts =
+  cbdc2fdd7d2ed0832795e86a8b9ee19a  andale
+  9637df0e91703179f0723ec095a36cb5  arial
+  c9089ae0c3b3d0d8c4b0a95979bb9ff0  arialb
+  2b30de40bb5e803a0452c7715fc835d1  comic
+  4e412c772294403ab62fb2d247d85c60  courie
+  4d90016026e2da447593b41a8d8fa8bd  georgi
+  7907c7dd6684e9bade91cff82683d9d7  impact
+  ed39c8ef91b9fb80f76f702568291bd5  times
+  0d7ea16cac6261f8513a061fbfcdb2b5  trebuc
+  12d2a75f8156e10607be1eaa8e8ef120  verdan
+  230a1d13a365b22815f502eb24d9149b  webdin

component/freetype/buildout.cfg

@@ -13,8 +13,8 @@ parts =
 
 [freetype]
 recipe = slapos.recipe.cmmi
-url = http://download.savannah.gnu.org/releases/freetype/freetype-2.5.3.tar.bz2
-md5sum = d6b60f06bfc046e43ab2a6cbfd171d65
+url = http://download.savannah.gnu.org/releases/freetype/freetype-2.5.5.tar.bz2
+md5sum = 2a7a314927011d5030903179cf183be0
 pkg_config_depends = ${zlib:location}/lib/pkgconfig:${libpng:location}/lib/pkgconfig
 location = ${buildout:parts-directory}/${:_buildout_section_name_}
 configure-options =

component/gateone/buildout.cfg

+[buildout]
+extends =
+  ../../stack/slapos.cfg
+  ../python-kerberos/buildout.cfg
+  ../git/buildout.cfg
+
+develop = 
+  gateone-repository
+
+parts = 
+  gateone-develop
+  gateone
+
+[gateone-repository]
+recipe = slapos.recipe.build:gitclone
+repository = https://github.com/liftoff/GateOne.git
+branch = master
+git-executable = ${git:location}/bin/git
+
+[gateone-develop]
+recipe = zc.recipe.egg:develop
+setup = ${gateone-repository:location}
+
+[gateone]
+recipe = zc.recipe.egg
+eggs =
+  ${lxml-python:egg}
+  ${python-kerberos:egg}
+  tornado
+  setuptools
+  pyOpenSSL
+  futures
+  PIL
+  gateone
+

component/gcc/buildout.cfg

@@ -2,10 +2,8 @@
 # Mostly required to support languages different than C or C++
 [buildout]
 extends =
-  ../m4/buildout.cfg
   ../gmp/buildout.cfg
   ../xz-utils/buildout.cfg
-  ../zip/buildout.cfg
 
 parts =
   gcc
@@ -23,8 +21,8 @@ environment =
 
 [mpc]
 recipe = slapos.recipe.cmmi
-url = http://ftp.gnu.org/gnu/mpc/mpc-1.0.2.tar.gz
-md5sum = 68fadff3358fb3e7976c7a398a0af4c3
+url = http://ftp.gnu.org/gnu/mpc/mpc-1.0.3.tar.gz
+md5sum = d6a1d5f8ddea3abd2cc3e98f58352d26
 configure-options =
   --with-gmp=${gmp:location}
   --with-mpfr=${mpfr:location}
@@ -34,29 +32,18 @@ environment =
 
 [isl]
 recipe = slapos.recipe.cmmi
-url = ftp://gcc.gnu.org/pub/gcc/infrastructure/isl-0.12.2.tar.bz2
-md5sum = e039bfcfb6c2ab039b8ee69bf883e824
+url = ftp://gcc.gnu.org/pub/gcc/infrastructure/isl-0.14.tar.bz2
+md5sum = acd347243fca5609e3df37dba47fd0bb
 configure-options =
   --with-gmp-prefix=${gmp:location}
   --disable-static
 environment =
   LDFLAGS=-Wl,-rpath=${gmp:location}/lib
 
-[cloog]
-recipe = slapos.recipe.cmmi
-url = ftp://gcc.gnu.org/pub/gcc/infrastructure/cloog-0.18.1.tar.gz
-md5sum = e34fca0540d840e5d0f6427e98c92252
-configure-options =
-  --with-gmp-prefix=${gmp:location}
-  --with-isl-prefix=${isl:location}
-  --disable-static
-environment =
-  LDFLAGS=-Wl,-rpath=${gmp:location}/lib -Wl,-rpath=${isl:location}/lib
-
 [gcc-common]
 recipe = slapos.recipe.cmmi
-url = http://ftp.gnu.org/gnu/gcc/gcc-4.9.2/gcc-4.9.2.tar.bz2
-md5sum = 4df8ee253b7f3863ad0b86359cd39c43
+url = http://ftp.gnu.org/gnu/gcc/gcc-5.1.0/gcc-5.1.0.tar.bz2
+md5sum = d5525b1127d07d215960e6051c5da35e
 # make install does not work when several core are used
 make-targets = install -j1
 
@@ -70,9 +57,8 @@ configure-options =
   --with-mpc=${mpc:location}
   --enable-languages="c,c++"
   --with-isl=${isl:location}
-  --with-cloog=${cloog:location}
 environment =
-  LDFLAGS=-Wl,-rpath=${cloog:location}/lib -Wl,-rpath=${gmp:location}/lib -Wl,-rpath=${isl:location}/lib -Wl,-rpath=${mpc:location}/lib -Wl,-rpath=${mpfr:location}/lib
+  LDFLAGS=-Wl,-rpath=${gmp:location}/lib -Wl,-rpath=${isl:location}/lib -Wl,-rpath=${mpc:location}/lib -Wl,-rpath=${mpfr:location}/lib
 
 [gcc-minimal]
 <= gcc-common
@@ -98,6 +84,5 @@ configure-options =
   --with-mpc=${mpc:location}
   --enable-languages="c,c++,fortran"
   --with-isl=${isl:location}
-  --with-cloog=${cloog:location}
 environment =
-  LDFLAGS=-Wl,-rpath=${cloog:location}/lib -Wl,-rpath=${gmp:location}/lib -Wl,-rpath=${isl:location}/lib -Wl,-rpath=${mpc:location}/lib -Wl,-rpath=${mpfr:location}/lib
+  LDFLAGS=-Wl,-rpath=${gmp:location}/lib -Wl,-rpath=${isl:location}/lib -Wl,-rpath=${mpc:location}/lib -Wl,-rpath=${mpfr:location}/lib

component/gdal/buildout.cfg

+[buildout]
+extends =
+  ../numpy/buildout.cfg
+  ../curl/buildout.cfg
+  ../geos/buildout.cfg
+  ../giflib/buildout.cfg
+  ../jasper/buildout.cfg
+  ../libexpat/buildout.cfg
+  ../pcre/buildout.cfg
+  ../proj4/buildout.cfg
+  ../sqlite3/buildout.cfg
+  ../webp/buildout.cfg
+
+parts =
+  gdal-python
+
+[gdal]
+recipe = slapos.recipe.cmmi
+version = 1.11.1
+url = http://download.osgeo.org/gdal/${:version}/gdal-${:version}.tar.xz
+md5sum = 2e126d7c6605691d38f3e71b945f5c73
+configure-options =
+  --with-curl=${curl:location}/bin/curl-config
+  --with-expat=${libexpat:location}
+  --with-geos=${geos:location}/bin/geos-config
+  --with-gif=${giflib:location}
+  --with-jasper=${jasper:location}
+  --with-jpeg=${libjpeg:location}
+  --with-libtiff=${libtiff:location}
+  --with-libz=${zlib:location}
+  --with-png=${libpng:location}
+  --with-static-proj4=${proj4:location}
+  --with-sqlite3=${sqlite3:location}
+  --with-wepb=${webp:location}
+  --with-xml2=${libxml2:location}/bin/xml2-config
+environment =
+  CPPFLAGS=-I${pcre:location}/include
+  LDFLAGS=-L${pcre:location}/lib -Wl,-rpath=${buildout:parts-directory}/${:_buildout_section_name_}/lib -Wl,-rpath=${curl:location}/lib -Wl,-rpath=${geos:location}/lib -Wl,-rpath=${giflib:location}/lib -Wl,-rpath=${jasper:location}/lib -Wl,-rpath=${jbigkit:location}/lib -Wl,-rpath=${libexpat:location}/lib -Wl,-rpath=${libjpeg:location}/lib -Wl,-rpath=${libpng:location}/lib -Wl,-rpath=${libtiff:location}/lib -Wl,-rpath=${libxml2:location}/lib -Wl,-rpath=${openssl:location}/lib -Wl,-rpath=${pcre:location}/lib -Wl,-rpath=${sqlite3:location}/lib -Wl,-rpath=${webp:location}/lib -Wl,-rpath=${zlib:location}/lib
+
+[gdal-python]
+recipe = zc.recipe.egg:custom
+egg = GDAL ==${gdal:version}
+setup-eggs = ${numpy:egg}
+rpath = ${:library-dirs}
+include-dirs =
+  ${gdal:location}/include
+library-dirs =
+  ${gdal:location}/lib
+environment = gdal-python-env
+
+[gdal-python-env]
+PATH = ${gdal:location}/bin:%(PATH)s

component/geos/buildout.cfg

+[buildout]
+parts =
+  geos
+
+[geos]
+recipe = slapos.recipe.cmmi
+version = 3.4.2
+url = http://download.osgeo.org/geos/geos-${:version}.tar.bz2
+md5sum = fc5df2d926eb7e67f988a43a92683bae
+configure-options =
+  --disable-dependency-tracking
+  --disable-static

component/gettext/buildout.cfg

@@ -2,16 +2,16 @@
 parts =
   gettext
 extends =
-  ../ncurses/buildout.cfg
   ../libxml2/buildout.cfg
+  ../lunzip/buildout.cfg
+  ../ncurses/buildout.cfg
   ../perl/buildout.cfg
   ../zlib/buildout.cfg
-  ../xz-utils/buildout.cfg
 
 [gettext]
 recipe = slapos.recipe.cmmi
-url = http://ftp.gnu.org/pub/gnu/gettext/gettext-0.19.3.tar.xz
-md5sum = 092c3f460553ceb4a638ff81d36434c4
+url = http://ftp.gnu.org/pub/gnu/gettext/gettext-0.19.4.tar.lz
+md5sum = 3e2c6f64efbffd97520ec3b998682c6b
 
 configure-options =
   --disable-static
@@ -29,6 +29,6 @@ configure-options =
   --without-xz
 
 environment =
-  PATH=${perl:location}/bin:${xz-utils:location}/bin:%(PATH)s
+  PATH=${perl:location}/bin:${lunzip:location}/bin:%(PATH)s
   CPPFLAGS=-I${libxml2:location}/include -I${zlib:location}/include -I${ncurses:location}/include
   LDFLAGS=-L${libxml2:location}/lib -Wl,-rpath=${libxml2:location}/lib -L${zlib:location}/lib -Wl,-rpath=${zlib:location}/lib -L${ncurses:location}/lib -Wl,-rpath=${ncurses:location}/lib

component/ghostscript/buildout.cfg

@@ -2,7 +2,6 @@
 extends =
   ../fontconfig/buildout.cfg
   ../freetype/buildout.cfg
-  ../libjpeg/buildout.cfg
   ../libtiff/buildout.cfg
   ../libxml2/buildout.cfg
   ../pkgconfig/buildout.cfg
@@ -33,8 +32,8 @@ environment =
 
 [ghostscript-9]
 <= ghostscript-common
-url = http://downloads.ghostscript.com/public/ghostscript-9.15.tar.bz2
-md5sum = 0ee21d975c67a4883ba66bcc332418f5
+url = http://downloads.ghostscript.com/public/ghostscript-9.16.tar.bz2
+md5sum = 21732fd6e39acc283bc623b8842cbfbb
 
 [ghostscript-fonts]
 recipe = hexagonit.recipe.download

component/git/buildout.cfg

@@ -8,6 +8,7 @@ extends =
   ../libexpat/buildout.cfg
   ../openssl/buildout.cfg
   ../pcre/buildout.cfg
+  ../perl/buildout.cfg
   ../xz-utils/buildout.cfg
   ../zlib/buildout.cfg
 parts =
@@ -15,16 +16,16 @@ parts =
 
 [git]
 recipe = slapos.recipe.cmmi
-url = https://www.kernel.org/pub/software/scm/git/git-2.1.0.tar.xz
-md5sum = 47b1f55d9a16be112f7ae2c778a9b30c
+url = https://www.kernel.org/pub/software/scm/git/git-2.2.1.tar.xz
+md5sum = 43e01f9d96ba8c11611e0eef0d9f9f28
 configure-options =
   --with-curl=${curl:location}
   --with-openssl=${openssl:location}
   --with-zlib=${zlib:location}
   --with-libpcre=${pcre:location}
   --with-expat=${libexpat:location}
+  --with-perl=${perl:location}/bin/perl
 environment =
-  NO_PERL=y
   NO_PYTHON=y
   NO_TCLTK=y
   PATH=${curl:location}/bin:${gettext:location}/bin:${xz-utils:location}/bin:%(PATH)s

component/glib/buildout.cfg

@@ -10,8 +10,8 @@ parts =
 
 [glib]
 recipe = slapos.recipe.cmmi
-url = http://ftp.gnome.org/pub/gnome/core/3.12/3.12.2/sources/glib-2.40.0.tar.xz
-md5sum = 05fb7cb17eacbc718e90366a1eae60d9
+url = http://ftp.gnome.org/pub/gnome/core/3.14/3.14.2/sources/glib-2.42.1.tar.xz
+md5sum = 89c4119e50e767d3532158605ee9121a
 configure-options =
   --disable-static
   --disable-selinux

component/glibmm/buildout.cfg

@@ -11,8 +11,8 @@ parts =
 
 [glibmm]
 recipe = slapos.recipe.cmmi
-url = http://ftp.gnome.org/pub/gnome/core/3.12/3.12.2/sources/glibmm-2.40.0.tar.xz
-md5sum = f62754f4f5c9030f8ff43c7ed20556c2
+url = http://ftp.gnome.org/pub/gnome/core/3.14/3.14.2/sources/glibmm-2.42.0.tar.xz
+md5sum = 7c52cc42085d30ac3b73d74c3f2eb22e
 pkg_config_depends = ${glib:location}/lib/pkgconfig:${libsigc:location}/lib/pkgconfig
 configure-options =
   --disable-documentation

component/glpk/buildout.cfg

+[buildout]
+parts =
+  glpk
+
+[glpk]
+recipe = slapos.recipe.cmmi
+url = http://ftp.gnu.org/gnu/glpk/glpk-4.55.tar.gz
+md5sum = c632a7a631b8aed02e28eafcd99477f7

component/gmp/buildout.cfg

@@ -9,7 +9,7 @@ parts =
 [gmp]
 recipe = slapos.recipe.cmmi
 version = 6.0.0a
-url = ftp://ftp.gmplib.org/pub/gmp-6.0.0/gmp-${:version}.tar.xz
+url = https://gmplib.org/download/gmp/gmp-${:version}.tar.xz
 md5sum = 1e6da4e434553d2811437aa42c7f7c76
 configure-options =
   --enable-cxx

component/gnutls/buildout.cfg

@@ -4,20 +4,20 @@ extends =
   ../nettle/buildout.cfg
   ../p11-kit/buildout.cfg
   ../pkgconfig/buildout.cfg
-  ../xz-utils/buildout.cfg
+  ../lunzip/buildout.cfg
   ../zlib/buildout.cfg
 
 parts = gnutls
 
 [gpg-error]
 recipe = slapos.recipe.cmmi
-url = ftp://ftp.gnupg.org/gcrypt/libgpg-error/libgpg-error-1.17.tar.bz2
-md5sum = b4f8d8b9ff14aed41f279aa844563539
+url = ftp://ftp.gnupg.org/gcrypt/libgpg-error/libgpg-error-1.19.tar.bz2
+md5sum = c04c16245b92829281f43b5bef7d16da
 
 [gcrypt]
 recipe = slapos.recipe.cmmi
-url = ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-1.6.2.tar.bz2
-md5sum = b54395a93cb1e57619943c082da09d5f
+url = ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-1.6.3.tar.bz2
+md5sum = 4262c3aadf837500756c2051a5c4ae5e
 configure-options =
   --with-gpg-error-prefix=${gpg-error:location}
 environment =
@@ -26,8 +26,8 @@ environment =
 
 [gnutls]
 recipe = slapos.recipe.cmmi
-url = ftp://ftp.gnutls.org/gcrypt/gnutls/v3.2/gnutls-3.2.20.tar.xz
-md5sum = 637ef52191bf87a597240a49cc533972
+url = ftp://ftp.gnutls.org/gcrypt/gnutls/v3.2/gnutls-3.2.21.tar.lz
+md5sum = a653d93a5a26434474c603470cc86666
 configure-options =
   --disable-static
   --disable-libdane
@@ -35,7 +35,7 @@ configure-options =
   --disable-crywrap
   --without-tpm
 environment =
-  PATH=${pkgconfig:location}/bin:${xz-utils:location}/bin:%(PATH)s
+  PATH=${pkgconfig:location}/bin:${lunzip:location}/bin:%(PATH)s
   PKG_CONFIG_PATH=${nettle:location}/lib/pkgconfig:${p11-kit:location}/lib/pkgconfig:${zlib:location}/lib/pkgconfig
   CPPFLAGS=-I${gmp:location}/include -I${zlib:location}/include
   LDFLAGS=-L${gmp:location}/lib -Wl,-rpath=${gmp:location}/lib -Wl,-rpath=${nettle:location}/lib -L${zlib:location}/lib -Wl,-rpath=${zlib:location}/lib

component/graphviz/buildout.cfg

@@ -6,19 +6,14 @@ parts =
   graphviz
 extends =
   ../bzip2/buildout.cfg
-  ../fontconfig/buildout.cfg
-  ../freetype/buildout.cfg
-  ../libpng/buildout.cfg
-  ../glib/buildout.cfg
   ../gtk-2/buildout.cfg
   ../pkgconfig/buildout.cfg
-  ../xorg/buildout.cfg
   ../zlib/buildout.cfg
 
 [graphviz]
 recipe = slapos.recipe.cmmi
-url = http://www.graphviz.org/pub/graphviz/stable/SOURCES/graphviz-2.36.0.tar.gz
-md5sum = 1f41664dba0c93109ac8b71216bf2b57
+url = http://www.graphviz.org/pub/graphviz/stable/SOURCES/graphviz-2.38.0.tar.gz
+md5sum = 5b6a829b2ac94efcd5fa3c223ed6d3ae
 pkg_config_depends = ${pango:location}/lib/pkgconfig:${pango:pkg_config_depends}
 configure-options =
   --with-included-ltdl

component/grep/buildout.cfg

@@ -8,8 +8,8 @@ parts =
 
 [grep]
 recipe = slapos.recipe.cmmi
-url = http://ftp.gnu.org/gnu/grep/grep-2.20.tar.xz
-md5sum = 2cbea44a4f1548aee20b9ff2d3076908
+url = http://ftp.gnu.org/gnu/grep/grep-2.21.tar.xz
+md5sum = 43c48064d6409862b8a850db83c8038a
 environment =
   PATH=${xz-utils:location}/bin:%(PATH)s
   CPPFLAGS=-I${pcre:location}/include

component/groonga/buildout.cfg

@@ -6,13 +6,15 @@ parts =
   groonga
 
 extends =
+  ../jemalloc/buildout.cfg
+  ../libstemmer/buildout.cfg
   ../pkgconfig/buildout.cfg
   ../zlib/buildout.cfg
 
 [groonga]
 recipe = slapos.recipe.cmmi
-url = http://packages.groonga.org/source/groonga/groonga-4.0.7.tar.gz
-md5sum = 5d11546f921377d040f700bb74f1d7e4
+url = http://packages.groonga.org/source/groonga/groonga-5.0.4.tar.gz
+md5sum = 4c83e9b12e9fad96a5b51874ddf66dc4
 # temporary patch to respect more tokens in natural language mode.
 patches =
   ${:_profile_base_location_}/groonga.patch#9ed02fbe8400402d3eab47eee149978b
@@ -23,16 +25,20 @@ configure-options =
   --disable-benchmark
   --disable-document
   --disable-groonga-httpd
+  --with-jemalloc
+  --with-libstemmer
+  --with-libstemmer-include=${libstemmer:location}/include
+  --with-libstemmer-lib=${libstemmer:location}/lib
   --without-mecab
+  --without-kytea
 environment =
-  CPPFLAGS =-I${zlib:location}/include
-  LDFLAGS =-Wl,-rpath=${zlib:location}/lib -L${zlib:location}/lib
+  CPPFLAGS=-I${libstemmer:location}/include -I${libstemmer:location}/include -I${zlib:location}/include
+  LDFLAGS=-Wl,-rpath=${jemalloc:location}/lib -L${jemalloc:location}/lib -Wl,-rpath=${libstemmer:location}/lib -L${libstemmer:location}/lib -Wl,-rpath=${zlib:location}/lib -L${zlib:location}/lib
 
 [groonga-normalizer-mysql]
 recipe = slapos.recipe.cmmi
-version = 1.0.6
-url = http://packages.groonga.org/source/groonga-normalizer-mysql/groonga-normalizer-mysql-${:version}.tar.gz
-md5sum = 12740a835cfdf4b0dac66c3f2f152d84
+url = http://packages.groonga.org/source/groonga-normalizer-mysql/groonga-normalizer-mysql-1.1.0.tar.gz
+md5sum = 0a0b523547999f90d347982fe9d03c0e
 location = ${groonga:location}
 configure-options =
   --disable-static

component/gtk-2/buildout.cfg

 [buildout]
 extends =
   ../autoconf/buildout.cfg
-  ../libtool/buildout.cfg
   ../automake/buildout.cfg
   ../bzip2/buildout.cfg
   ../fontconfig/buildout.cfg
@@ -12,7 +11,8 @@ extends =
   ../libjpeg/buildout.cfg
   ../libpng/buildout.cfg
   ../libtiff/buildout.cfg
-  ../libxml2/buildout.cfg
+  ../libtool/buildout.cfg
+  ../m4/buildout.cfg
   ../perl/buildout.cfg
   ../pkgconfig/buildout.cfg
   ../xorg/buildout.cfg
@@ -43,6 +43,7 @@ configure-options =
   --enable-fc
   --disable-lto
 environment =
+  M4=${m4:location}/bin/m4
   PATH=${freetype:location}/bin:${pkgconfig:location}/bin:${xz-utils:location}/bin:${autoconf:location}/bin:${automake:location}/bin:${libtool:location}/bin:%(PATH)s
   PKG_CONFIG_PATH=${:pkg_config_depends}
   CPPFLAGS=-I${zlib:location}/include
@@ -65,8 +66,8 @@ environment =
 
 [pango]
 recipe = slapos.recipe.cmmi
-url = http://ftp.gnome.org/pub/gnome/core/3.12/3.12.2/sources/pango-1.36.3.tar.xz
-md5sum = d9532826e95bdb374355deebc42441bb
+url = http://ftp.gnome.org/pub/gnome/core/3.14/3.14.2/sources/pango-1.36.8.tar.xz
+md5sum = 217a9a753006275215fa9fa127760ece
 pkg_config_depends = ${harfbuzz:location}/lib/pkgconfig:${harfbuzz:pkg_config_depends}
 configure-options =
   --disable-static
@@ -79,8 +80,8 @@ environment =
 
 [gdk-pixbuf]
 recipe = slapos.recipe.cmmi
-url = http://ftp.gnome.org/pub/gnome/core/3.12/3.12.2/sources/gdk-pixbuf-2.30.7.tar.xz
-md5sum = 1195d26f14adfe99ff0878d37678a70a
+url = http://ftp.gnome.org/pub/gnome/core/3.14/3.14.2/sources/gdk-pixbuf-2.31.1.tar.xz
+md5sum = 74cde211f5b7ac1015d1a7c9feee037c
 pkg_config_depends = ${glib:location}/lib/pkgconfig:${libX11:location}/lib/pkgconfig:${libX11:pkg_config_depends}
 configure-options =
   --disable-static
@@ -96,8 +97,8 @@ environment =
 
 [atk]
 recipe = slapos.recipe.cmmi
-url = http://ftp.gnome.org/pub/gnome/core/3.12/3.12.2/sources/atk-2.12.0.tar.xz
-md5sum = 930238dec55fdbf8eda9975b44f07b76
+url = http://ftp.gnome.org/pub/gnome/core/3.14/3.14.2/sources/atk-2.14.0.tar.xz
+md5sum = ecb7ca8469a5650581b1227d78051b8b
 environment =
   PATH=${glib:location}/bin:${pkgconfig:location}/bin:${xz-utils:location}/bin:%(PATH)s
   PKG_CONFIG_PATH=${glib:location}/lib/pkgconfig
@@ -106,8 +107,8 @@ environment =
 
 [gtk-2]
 recipe = slapos.recipe.cmmi
-url = http://ftp.gnome.org/pub/gnome/core/3.12/3.12.2/sources/gtk+-2.24.23.tar.xz
-md5sum = 0be39fbed4ca125645175cd6e22f2548
+url = http://ftp.gnome.org/pub/gnome/core/3.14/3.14.2/sources/gtk+-2.24.25.tar.xz
+md5sum = 612350704dd3aacb95355a4981930c6f
 pkg_config_depends = ${pango:location}/lib/pkgconfig:${pango:pkg_config_depends}:${atk:location}/lib/pkgconfig:${gdk-pixbuf:location}/lib/pkgconfig
 configure-options =
   --disable-static

component/gtkmm/buildout.cfg

 [buildout]
 extends =
   ../bzip2/buildout.cfg
-  ../fontconfig/buildout.cfg
   ../freetype/buildout.cfg
   ../glibmm/buildout.cfg
   ../gtk-2/buildout.cfg
-  ../libpng/buildout.cfg
-  ../libxml2/buildout.cfg
   ../perl/buildout.cfg
   ../xorg/buildout.cfg
   ../xz-utils/buildout.cfg
   ../zlib/buildout.cfg
+
 parts =
   gtkmm
 

component/haproxy/buildout.cfg

@@ -11,8 +11,8 @@ parts = haproxy
 
 [haproxy]
 recipe = slapos.recipe.cmmi
-url = http://www.haproxy.org/download/1.5/src/haproxy-1.5.8.tar.gz
-md5sum = 7bffa1afa069d90ce03b7cd9aa0557cd
+url = http://www.haproxy.org/download/1.5/src/haproxy-1.5.11.tar.gz
+md5sum = 5500a79d0d2b238d4a1e9749bd0c2cb2
 configure-command = true
 # If the system is running on Linux 2.6, we use "linux26" as the TARGET,
 # otherwise use "generic".

component/inkscape/buildout.cfg

@@ -5,7 +5,6 @@ extends =
   ../bzip2/buildout.cfg
   ../freetype/buildout.cfg
   ../garbage-collector/buildout.cfg
-  ../gcc/buildout.cfg
   ../gettext/buildout.cfg
   ../glibmm/buildout.cfg
   ../gtk-2/buildout.cfg

component/ipython/buildout.cfg

+[buildout]
+extends =
+  ../numpy/buildout.cfg
+  ../matplotlib/buildout.cfg
+
+parts =
+  ipython
+
+[ipython-env]
+<= numpy-env
+
+[ipython]
+recipe = zc.recipe.egg:custom
+egg = ipython
+environment = ipython-env
+setup-eggs = ${numpy:egg}
+
+[ipython_notebook]
+recipe = zc.recipe.egg:scripts
+eggs = ipython[notebook]
+  ${matplotlib:egg}
+environment = ipython-env
+setup-eggs = ${numpy:egg}
+initialization =
+  # https://github.com/ipython/ipython/issues/5420
+  import os
+  os.environ['PYTHONPATH'] = ':'.join(sys.path)

component/jasper/CVE-2014-8137.patch

+Description: CVE-2014-8137: double-free in in jas_iccattrval_destroy()
+Origin: vendor, https://bugzilla.redhat.com/attachment.cgi?id=967283,
+ https://bugzilla.redhat.com/attachment.cgi?id=967284
+Bug-Debian: https://bugs.debian.org/773463
+Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1173157
+Forwarded: no
+Author: Tomas Hoger <thoger@redhat.com>
+Last-Update: 2014-12-20
+
+--- a/src/libjasper/base/jas_icc.c
++++ b/src/libjasper/base/jas_icc.c
+@@ -1010,7 +1010,6 @@ static int jas_icccurv_input(jas_iccattr
+ 	return 0;
+ 
+ error:
+-	jas_icccurv_destroy(attrval);
+ 	return -1;
+ }
+ 
+@@ -1128,7 +1127,6 @@ static int jas_icctxtdesc_input(jas_icca
+ #endif
+ 	return 0;
+ error:
+-	jas_icctxtdesc_destroy(attrval);
+ 	return -1;
+ }
+ 
+@@ -1207,8 +1205,6 @@ static int jas_icctxt_input(jas_iccattrv
+ 		goto error;
+ 	return 0;
+ error:
+-	if (txt->string)
+-		jas_free(txt->string);
+ 	return -1;
+ }
+ 
+@@ -1329,7 +1325,6 @@ static int jas_icclut8_input(jas_iccattr
+ 		goto error;
+ 	return 0;
+ error:
+-	jas_icclut8_destroy(attrval);
+ 	return -1;
+ }
+ 
+@@ -1498,7 +1493,6 @@ static int jas_icclut16_input(jas_iccatt
+ 		goto error;
+ 	return 0;
+ error:
+-	jas_icclut16_destroy(attrval);
+ 	return -1;
+ }
+ 
+--- a/src/libjasper/jp2/jp2_dec.c
++++ b/src/libjasper/jp2/jp2_dec.c
+@@ -291,7 +291,10 @@ jas_image_t *jp2_decode(jas_stream_t *in
+ 	case JP2_COLR_ICC:
+ 		iccprof = jas_iccprof_createfrombuf(dec->colr->data.colr.iccp,
+ 		  dec->colr->data.colr.iccplen);
+-		assert(iccprof);
++		if (!iccprof) {
++			jas_eprintf("error: failed to parse ICC profile\n");
++			goto error;
++		}
+ 		jas_iccprof_gethdr(iccprof, &icchdr);
+ 		jas_eprintf("ICC Profile CS %08x\n", icchdr.colorspc);
+ 		jas_image_setclrspc(dec->image, fromiccpcs(icchdr.colorspc));

component/jasper/CVE-2014-8138.patch

+Description: CVE-2014-8138: heap overflow in jp2_decode()
+Origin: vendor, https://bugzilla.redhat.com/attachment.cgi?id=967280
+Bug-Debian: https://bugs.debian.org/773463
+Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1173162
+Forwarded: no
+Author: Tomas Hoger <thoger@redhat.com>
+Last-Update: 2014-12-20
+
+--- a/src/libjasper/jp2/jp2_dec.c
++++ b/src/libjasper/jp2/jp2_dec.c
+@@ -389,6 +389,11 @@ jas_image_t *jp2_decode(jas_stream_t *in
+ 	/* Determine the type of each component. */
+ 	if (dec->cdef) {
+ 		for (i = 0; i < dec->numchans; ++i) {
++			/* Is the channel number reasonable? */
++			if (dec->cdef->data.cdef.ents[i].channo >= dec->numchans) {
++				jas_eprintf("error: invalid channel number in CDEF box\n");
++				goto error;
++			}
+ 			jas_image_setcmpttype(dec->image,
+ 			  dec->chantocmptlut[dec->cdef->data.cdef.ents[i].channo],
+ 			  jp2_getct(jas_image_clrspc(dec->image),

component/jasper/CVE-2014-9029.patch

+Description: CVE-2014-9029: Heap overflows in libjasper
+Origin: vendor
+Forwarded: no
+Author: Tomas Hoger <thoger@redhat.com>
+Reviewed-by: Salvatore Bonaccorso <carnil@debian.org>
+Last-Update: 2014-11-28
+
+--- a/src/libjasper/jpc/jpc_dec.c
++++ b/src/libjasper/jpc/jpc_dec.c
+@@ -1280,7 +1280,7 @@ static int jpc_dec_process_coc(jpc_dec_t
+ 	jpc_coc_t *coc = &ms->parms.coc;
+ 	jpc_dec_tile_t *tile;
+ 
+-	if (JAS_CAST(int, coc->compno) > dec->numcomps) {
++	if (JAS_CAST(int, coc->compno) >= dec->numcomps) {
+ 		jas_eprintf("invalid component number in COC marker segment\n");
+ 		return -1;
+ 	}
+@@ -1306,7 +1306,7 @@ static int jpc_dec_process_rgn(jpc_dec_t
+ 	jpc_rgn_t *rgn = &ms->parms.rgn;
+ 	jpc_dec_tile_t *tile;
+ 
+-	if (JAS_CAST(int, rgn->compno) > dec->numcomps) {
++	if (JAS_CAST(int, rgn->compno) >= dec->numcomps) {
+ 		jas_eprintf("invalid component number in RGN marker segment\n");
+ 		return -1;
+ 	}
+@@ -1355,7 +1355,7 @@ static int jpc_dec_process_qcc(jpc_dec_t
+ 	jpc_qcc_t *qcc = &ms->parms.qcc;
+ 	jpc_dec_tile_t *tile;
+ 
+-	if (JAS_CAST(int, qcc->compno) > dec->numcomps) {
++	if (JAS_CAST(int, qcc->compno) >= dec->numcomps) {
+ 		jas_eprintf("invalid component number in QCC marker segment\n");
+ 		return -1;
+ 	}

component/jasper/buildout.cfg

@@ -13,6 +13,9 @@ patches =
   ${:_profile_base_location_}/misc-fixes.patch#1202be8418907dfe58f819f7b47da24f
   ${:_profile_base_location_}/fix-filename-buffer-overflow.patch#38403f9c82a18547beca16c9c6f4ce7a
   ${:_profile_base_location_}/CVE-2011-4516-and-CVE-2011-4517.patch#a9676718ed016f66a3c76acf764c9e72
+  ${:_profile_base_location_}/CVE-2014-9029.patch#d69195cf17878f024cc0b580045ec314
+  ${:_profile_base_location_}/CVE-2014-8137.patch#bc5103b9a33315538106bf6652383a10
+  ${:_profile_base_location_}/CVE-2014-8138.patch#bfb9604fe84b6e686fea29bd760cf34d
 # jasper configure script is not executable by default
 configure-command =
   /bin/sh ./configure --prefix=${buildout:parts-directory}/${:_buildout_section_name_} --disable-static --enable-shared --disable-opengl

component/libdmtx/buildout.cfg

@@ -6,7 +6,6 @@ extends =
   ../bzip2/buildout.cfg
   ../imagemagick/buildout.cfg
   ../jbigkit/buildout.cfg
-  ../libpng/buildout.cfg
   ../zlib/buildout.cfg
 parts =
   libdmtx

component/libffi/buildout.cfg

@@ -4,9 +4,9 @@ parts =
 
 [libffi]
 recipe = slapos.recipe.cmmi
-version = 3.1
+version = 3.2.1
 url = ftp://sourceware.org/pub/libffi/libffi-${:version}.tar.gz
-md5sum = f5898b29bbfd70502831a212d9249d10
+md5sum = 83b89587607e3eb65c70d361f13bab43
 location = ${buildout:parts-directory}/${:_buildout_section_name_}
 patch-options = -p1
 patches =

component/libpng/buildout.cfg

@@ -18,15 +18,15 @@ environment =
 
 [libpng12]
 <= libpng-common
-url = http://download.sourceforge.net/libpng/libpng-1.2.51.tar.xz
-md5sum = 4efba67fa5aa2b785c6fcec2cc3e90c9
+url = http://download.sourceforge.net/libpng/libpng-1.2.52.tar.xz
+md5sum = 49d5c71929bf69a172147c47b9309fbe
 
 [libpng15]
 <= libpng-common
-url = http://download.sourceforge.net/libpng/libpng-1.5.19.tar.xz
-md5sum = 1e2afb372b9979b2133829ee8136f30f
+url = http://download.sourceforge.net/libpng/libpng-1.5.21.tar.xz
+md5sum = 22eaa2e90352fcd153bed0cdecf542cb
 
 [libpng]
 <= libpng-common
-url = http://download.sourceforge.net/libpng/libpng-1.6.14.tar.xz
-md5sum = aefd9fda2178acab908707737174a0cd
+url = http://download.sourceforge.net/libpng/libpng-1.6.16.tar.xz
+md5sum = 23b7286b5d4a86de950fd2ffc5cac742

component/libreoffice-bin/buildout.cfg

@@ -9,14 +9,14 @@ parts =
 [libreoffice-bin]
 recipe = slapos.recipe.build
 # here, two %s are used, first one is for directory name (eg. x86_64), and second one is for filename (eg. x86-64).
-version = 4.3.4.1
+version = 4.4.1.2
 url = http://downloadarchive.documentfoundation.org/libreoffice/old/${:version}/rpm/%s/LibreOffice_${:version}_Linux_%s_rpm.tar.gz
 # supported architectures md5sums
-md5sum_x86 = 6fddbe8508fd2e6d5b942ad360013da2
-md5sum_x86-64 = b3b0eab681d2cd2d22e3c065530b36c2
+md5sum_x86 = 23b740e84bc2b8774d50ac97dd553afd
+md5sum_x86-64 = 8de6f3d1d4af3826a3a1695a47444948
 
 # where office code can be found?
-officedir = libreoffice4.3
+officedir = libreoffice4.4
 
 # script to install
 script =

component/librsvg/buildout.cfg

@@ -2,13 +2,11 @@
 parts = librsvg
 extends =
   ../bzip2/buildout.cfg
-  ../pkgconfig/buildout.cfg
-  ../libpng/buildout.cfg
-  ../libxml2/buildout.cfg
-  ../zlib/buildout.cfg
   ../gtk-2/buildout.cfg
-  ../xorg/buildout.cfg
+  ../libxml2/buildout.cfg
+  ../pkgconfig/buildout.cfg
   ../xz-utils/buildout.cfg
+  ../zlib/buildout.cfg
 
 [libcroco]
 recipe = slapos.recipe.cmmi
@@ -23,8 +21,8 @@ environment =
 
 [librsvg]
 recipe = slapos.recipe.cmmi
-url = http://ftp.gnome.org/pub/gnome/core/3.12/3.12.2/sources/librsvg-2.40.2.tar.xz
-md5sum = acdecdb9f08f3bf662a68bf7dafb8b82
+url = http://ftp.gnome.org/pub/gnome/core/3.14/3.14.2/sources/librsvg-2.40.5.tar.xz
+md5sum = c2b044fccf415902a052d0e978e0ea60
 pkg_config_depends = ${pango:location}/lib/pkgconfig:${pango:pkg_config_depends}:${zlib:location}/lib/pkgconfig:${gdk-pixbuf:location}/lib/pkgconfig:${libcroco:location}/lib/pkgconfig
 configure-options =
   --disable-static

component/libsigc/buildout.cfg

@@ -9,8 +9,8 @@ parts =
 
 [libsigc]
 recipe = slapos.recipe.cmmi
-url = http://ftp.gnome.org/pub/gnome/core/3.12/3.12.2/sources/libsigc++-2.3.1.tar.xz
-md5sum = 06a0569e8ba161d3428e7daa838682f8
+url = http://ftp.gnome.org/pub/gnome/core/3.14/3.14.2/sources/libsigc++-2.4.0.tar.xz
+md5sum = c6cd2259f5ef973e4c8178d0abbdbfa7
 configure-options =
   --disable-documentation
 environment =

component/libstemmer/buildout.cfg

+# libstemmer
+# http://snowball.tartarus.org/
+
+[libstemmer]
+recipe = slapos.recipe.cmmi
+url = http://snowball.tartarus.org/dist/libstemmer_c.tgz
+md5sum = 6f32f8f81cd6fa0150333ab540af5e27
+patch-options = -p0
+patches =
+  ${:_profile_base_location_}/libstemmer.Makefile.patch#f337bfe457ecf00d3297043a153d402a
+location = ${buildout:parts-directory}/${:_buildout_section_name_}
+configure-command = true
+make-options = DESTDIR=${:location}
+

component/libstemmer/libstemmer.Makefile.patch

+--- Makefile.orig	2014-12-29 15:39:57.433970435 +0100
++++ Makefile	2014-12-29 15:54:42.115248445 +0100
+@@ -1,9 +1,19 @@
+ include mkinc.mak
+-CFLAGS=-Iinclude
+-all: libstemmer.o stemwords
+-libstemmer.o: $(snowball_sources:.c=.o)
+-	$(AR) -cru $@ $^
+-stemwords: examples/stemwords.o libstemmer.o
+-	$(CC) -o $@ $^
++CFLAGS+=-Iinclude -fPIC
++DESTDIR=/usr/local
++all: libstemmer.so libstemmer.a stemwords
++libstemmer.so: $(snowball_sources:.c=.o)
++	$(CC) $(CFLAGS) -shared $(LDFLAGS) -Wl,-soname,$@.0d -o $@.0d.0.0 $^
++	ln -s $@.0d.0.0 $@.0d
++	ln -s $@.0d.0.0 $@
++libstemmer.a: $(snowball_sources:.c=.o)
++	$(AR) -crs $@ $^
++stemwords: examples/stemwords.o libstemmer.so
++	$(CC) $(CFLAGS) $(LDFLAGS) -o $@ $^
+ clean:
+-	rm -f stemwords *.o src_c/*.o runtime/*.o libstemmer/*.o
++	rm -f stemwords libstemmer.so* libstemmer.a *.o src_c/*.o runtime/*.o libstemmer/*.o
++install: all
++	mkdir -p $(DESTDIR)/include
++	mkdir -p $(DESTDIR)/lib
++	cp -a include/*.h $(DESTDIR)/include/
++	cp -a libstemmer.* $(DESTDIR)/lib/

component/libtasn1/buildout.cfg

@@ -4,8 +4,8 @@ parts =
 
 [libtasn1]
 recipe = slapos.recipe.cmmi
-url = http://ftp.gnu.org/gnu/libtasn1/libtasn1-4.2.tar.gz
-md5sum = 414df906df421dee0a5cf7548788d153
+url = http://ftp.gnu.org/gnu/libtasn1/libtasn1-4.5.tar.gz
+md5sum = 81d272697545e82d39f6bd14854b68f0
 configure-options =
   --disable-static
   --disable-gtk-doc-html

component/libtiff/CVE-2012-4564.patch

-Index: tiff-4.0.3/tools/ppm2tiff.c
-===================================================================
---- tiff-4.0.3.orig/tools/ppm2tiff.c	2013-06-23 10:36:50.779629492 -0400
-+++ tiff-4.0.3/tools/ppm2tiff.c	2013-06-23 10:36:50.775629494 -0400
-@@ -89,6 +89,7 @@
- 	int c;
- 	extern int optind;
- 	extern char* optarg;
-+	tmsize_t scanline_size;
- 
- 	if (argc < 2) {
- 	    fprintf(stderr, "%s: Too few arguments\n", argv[0]);
-@@ -237,8 +238,16 @@
- 	}
- 	if (TIFFScanlineSize(out) > linebytes)
- 		buf = (unsigned char *)_TIFFmalloc(linebytes);
--	else
--		buf = (unsigned char *)_TIFFmalloc(TIFFScanlineSize(out));
-+	else {
-+		scanline_size = TIFFScanlineSize(out);
-+		if (scanline_size != 0)
-+			buf = (unsigned char *)_TIFFmalloc(TIFFScanlineSize(out));
-+		else {
-+			fprintf(stderr, "%s: scanline size overflow\n",infile);
-+			(void) TIFFClose(out);
-+			exit(-2);
-+			}
-+		}
- 	if (resolution > 0) {
- 		TIFFSetField(out, TIFFTAG_XRESOLUTION, resolution);
- 		TIFFSetField(out, TIFFTAG_YRESOLUTION, resolution);

component/libtiff/CVE-2013-1960.patch

-Index: tiff-4.0.3/tools/tiff2pdf.c
-===================================================================
---- tiff-4.0.3.orig/tools/tiff2pdf.c	2013-06-23 10:36:50.979629486 -0400
-+++ tiff-4.0.3/tools/tiff2pdf.c	2013-06-23 10:36:50.975629486 -0400
-@@ -3341,33 +3341,56 @@
- 	uint32 height){
- 
- 	tsize_t i=0;
--	uint16 ri =0;
--	uint16 v_samp=1;
--	uint16 h_samp=1;
--	int j=0;
--	
--	i++;
--	
--	while(i<(*striplength)){
-+
-+	while (i < *striplength) {
-+		tsize_t datalen;
-+		uint16 ri;
-+		uint16 v_samp;
-+		uint16 h_samp;
-+		int j;
-+		int ncomp;
-+
-+		/* marker header: one or more FFs */
-+		if (strip[i] != 0xff)
-+			return(0);
-+		i++;
-+		while (i < *striplength && strip[i] == 0xff)
-+			i++;
-+		if (i >= *striplength)
-+			return(0);
-+		/* SOI is the only pre-SOS marker without a length word */
-+		if (strip[i] == 0xd8)
-+			datalen = 0;
-+		else {
-+			if ((*striplength - i) <= 2)
-+				return(0);
-+			datalen = (strip[i+1] << 8) | strip[i+2];
-+			if (datalen < 2 || datalen >= (*striplength - i))
-+				return(0);
-+		}
- 		switch( strip[i] ){
--			case 0xd8:
--				/* SOI - start of image */
-+			case 0xd8:	/* SOI - start of image */
- 				_TIFFmemcpy(&(buffer[*bufferoffset]), &(strip[i-1]), 2);
- 				*bufferoffset+=2;
--				i+=2;
- 				break;
--			case 0xc0:
--			case 0xc1:
--			case 0xc3:
--			case 0xc9:
--			case 0xca:
-+			case 0xc0:	/* SOF0 */
-+			case 0xc1:	/* SOF1 */
-+			case 0xc3:	/* SOF3 */
-+			case 0xc9:	/* SOF9 */
-+			case 0xca:	/* SOF10 */
- 				if(no==0){
--					_TIFFmemcpy(&(buffer[*bufferoffset]), &(strip[i-1]), strip[i+2]+2);
--					for(j=0;j<buffer[*bufferoffset+9];j++){
--						if( (buffer[*bufferoffset+11+(2*j)]>>4) > h_samp) 
--							h_samp = (buffer[*bufferoffset+11+(2*j)]>>4);
--						if( (buffer[*bufferoffset+11+(2*j)] & 0x0f) > v_samp) 
--							v_samp = (buffer[*bufferoffset+11+(2*j)] & 0x0f);
-+					_TIFFmemcpy(&(buffer[*bufferoffset]), &(strip[i-1]), datalen+2);
-+					ncomp = buffer[*bufferoffset+9];
-+					if (ncomp < 1 || ncomp > 4)
-+						return(0);
-+					v_samp=1;
-+					h_samp=1;
-+					for(j=0;j<ncomp;j++){
-+						uint16 samp = buffer[*bufferoffset+11+(3*j)];
-+						if( (samp>>4) > h_samp) 
-+							h_samp = (samp>>4);
-+						if( (samp & 0x0f) > v_samp) 
-+							v_samp = (samp & 0x0f);
- 					}
- 					v_samp*=8;
- 					h_samp*=8;
-@@ -3381,45 +3404,43 @@
-                                           (unsigned char) ((height>>8) & 0xff);
- 					buffer[*bufferoffset+6]=
-                                             (unsigned char) (height & 0xff);
--					*bufferoffset+=strip[i+2]+2;
--					i+=strip[i+2]+2;
--
-+					*bufferoffset+=datalen+2;
-+					/* insert a DRI marker */
- 					buffer[(*bufferoffset)++]=0xff;
- 					buffer[(*bufferoffset)++]=0xdd;
- 					buffer[(*bufferoffset)++]=0x00;
- 					buffer[(*bufferoffset)++]=0x04;
- 					buffer[(*bufferoffset)++]=(ri >> 8) & 0xff;
- 					buffer[(*bufferoffset)++]= ri & 0xff;
--				} else {
--					i+=strip[i+2]+2;
- 				}
- 				break;
--			case 0xc4:
--			case 0xdb:
--				_TIFFmemcpy(&(buffer[*bufferoffset]), &(strip[i-1]), strip[i+2]+2);
--				*bufferoffset+=strip[i+2]+2;
--				i+=strip[i+2]+2;
-+			case 0xc4: /* DHT */
-+			case 0xdb: /* DQT */
-+				_TIFFmemcpy(&(buffer[*bufferoffset]), &(strip[i-1]), datalen+2);
-+				*bufferoffset+=datalen+2;
- 				break;
--			case 0xda:
-+			case 0xda: /* SOS */
- 				if(no==0){
--					_TIFFmemcpy(&(buffer[*bufferoffset]), &(strip[i-1]), strip[i+2]+2);
--					*bufferoffset+=strip[i+2]+2;
--					i+=strip[i+2]+2;
-+					_TIFFmemcpy(&(buffer[*bufferoffset]), &(strip[i-1]), datalen+2);
-+					*bufferoffset+=datalen+2;
- 				} else {
- 					buffer[(*bufferoffset)++]=0xff;
- 					buffer[(*bufferoffset)++]=
-                                             (unsigned char)(0xd0 | ((no-1)%8));
--					i+=strip[i+2]+2;
- 				}
--				_TIFFmemcpy(&(buffer[*bufferoffset]), &(strip[i-1]), (*striplength)-i-1);
--				*bufferoffset+=(*striplength)-i-1;
-+				i += datalen + 1;
-+				/* copy remainder of strip */
-+				_TIFFmemcpy(&(buffer[*bufferoffset]), &(strip[i]), *striplength - i);
-+				*bufferoffset+= *striplength - i;
- 				return(1);
- 			default:
--				i+=strip[i+2]+2;
-+				/* ignore any other marker */
-+				break;
- 		}
-+		i += datalen + 1;
- 	}
--	
- 
-+	/* failed to find SOS marker */
- 	return(0);
- }
- #endif

component/libtiff/CVE-2013-4231.patch

-Description: Buffer overflow in gif2tiff
-Bug: http://bugzilla.maptools.org/show_bug.cgi?id=2450
-Bug-Debian: http://bugs.debian.org/719303
-
-Index: tiff-4.0.3/tools/gif2tiff.c
-===================================================================
---- tiff-4.0.3.orig/tools/gif2tiff.c	2013-08-22 11:46:11.960846910 -0400
-+++ tiff-4.0.3/tools/gif2tiff.c	2013-08-22 11:46:11.956846910 -0400
-@@ -333,6 +333,8 @@
-     int status = 1;
- 
-     datasize = getc(infile);
-+    if (datasize > 12)
-+	return 0;
-     clear = 1 << datasize;
-     eoi = clear + 1;
-     avail = clear + 2;

component/libtiff/CVE-2013-4232.patch

-Description: use after free in tiff2pdf
-Bug: http://bugzilla.maptools.org/show_bug.cgi?id=2449
-Bug-Debian: http://bugs.debian.org/719303
-
-Index: tiff-4.0.3/tools/tiff2pdf.c
-===================================================================
---- tiff-4.0.3.orig/tools/tiff2pdf.c	2013-08-22 11:46:37.292847242 -0400
-+++ tiff-4.0.3/tools/tiff2pdf.c	2013-08-22 11:46:37.292847242 -0400
-@@ -2461,7 +2461,8 @@
- 					(unsigned long) t2p->tiff_datasize, 
- 					TIFFFileName(input));
- 				t2p->t2p_error = T2P_ERR_ERROR;
--			  _TIFFfree(buffer);
-+				_TIFFfree(buffer);
-+				return(0);
- 			} else {
- 				buffer=samplebuffer;
- 				t2p->tiff_datasize *= t2p->tiff_samplesperpixel;

component/libtiff/CVE-2013-4244.patch

-Description: OOB write in gif2tiff
-Bug-Redhat: https://bugzilla.redhat.com/show_bug.cgi?id=996468
-
-Index: tiff-4.0.3/tools/gif2tiff.c
-===================================================================
---- tiff-4.0.3.orig/tools/gif2tiff.c	2013-08-24 11:17:13.546447901 -0400
-+++ tiff-4.0.3/tools/gif2tiff.c	2013-08-24 11:17:13.546447901 -0400
-@@ -400,6 +400,10 @@
-     }
- 
-     if (oldcode == -1) {
-+        if (code >= clear) {
-+            fprintf(stderr, "bad input: code=%d is larger than clear=%d\n",code, clear);
-+            return 0;
-+        }
- 	*(*fill)++ = suffix[code];
- 	firstchar = oldcode = code;
- 	return 1;

component/libtiff/buildout.cfg

@@ -14,12 +14,7 @@ url = http://www.imagemagick.org/download/delegates/tiff-${:version}.tar.gz
 md5sum = 051c1068e6a0627f461948c365290410
 patch-options = -p1
 patches =
-  ${:_profile_base_location_}/CVE-2012-4564.patch#45667ee618dbe78acce1129706556124
-  ${:_profile_base_location_}/CVE-2013-1960.patch#21a3d119cd3eeadd35ccc355fbd748cf
-  ${:_profile_base_location_}/CVE-2013-1961.patch#bb219740a815b9b47698b83d0ae9f82a
-  ${:_profile_base_location_}/CVE-2013-4231.patch#f6ff024c8df861a6dbb5a0ecd8a0f853
-  ${:_profile_base_location_}/CVE-2013-4232.patch#b439184b3a5f434a3e3235f611b54a89
-  ${:_profile_base_location_}/CVE-2013-4244.patch#2acff059c6156953aadb436b475e5acb
+  ${:_profile_base_location_}/tiff_4.0.3-12.3.debian.patch#c246dc095f57f869b35cf40a32aa8366
 configure-options =
   --disable-static
   --without-x

component/libtool/buildout.cfg

 [buildout]
+extends =
+  ../xz-utils/buildout.cfg
 parts = libtool
 
 [libtool]
 recipe = slapos.recipe.cmmi
-md5sum = d2f3b7d4627e69e13514a40e72a24d50
-url = http://ftp.gnu.org/gnu/libtool/libtool-2.4.2.tar.gz
+md5sum = ee9c087775aeb98ce53a9c69da865a55
+url = http://ftp.gnu.org/gnu/libtool/libtool-2.4.5.tar.xz
 configure-options =
   --disable-static
+environment =
+  PATH=${xz-utils:location}/bin:%(PATH)s

component/libxml2/buildout.cfg

@@ -11,8 +11,8 @@ parts =
 
 [libxml2]
 recipe = slapos.recipe.cmmi
-url = ftp://ftp.xmlsoft.org/libxml2/libxml2-2.9.1.tar.gz
-md5sum = 9c0cfef285d5c4a5c80d00904ddab380
+url = ftp://ftp.xmlsoft.org/libxml2/libxml2-2.9.2.tar.gz
+md5sum = 9e6a9aca9d155737868b3dc5fd82f788
 configure-options =
   --disable-static
   --without-python

component/libyaml/buildout.cfg

@@ -5,5 +5,5 @@ parts =
 
 [libyaml]
 recipe = slapos.recipe.cmmi
-url = http://pyyaml.org/download/libyaml/yaml-0.1.4.tar.gz
-md5sum = 36c852831d02cf90508c29852361d01b
+url = http://pyyaml.org/download/libyaml/yaml-0.1.6.tar.gz
+md5sum = 5fe00cda18ca5daeb43762b80c38e06e

component/lunzip/buildout.cfg

+[buildout]
+parts =
+  lunzip
+
+[lunzip]
+recipe = slapos.recipe.cmmi
+url = http://download.savannah.gnu.org/releases/lzip/lunzip/lunzip-1.6.tar.gz
+md5sum = 5e6ad4fe91f235be64227bc9930986fe
+configure-options =
+  --disable-static

component/lzo/buildout.cfg

+[buildout]
+
+parts =
+  lzo
+
+[lzo]
+recipe = slapos.recipe.cmmi
+url = http://www.oberhumer.com/opensource/lzo/download/lzo-2.09.tar.gz 
+md5sum = c7ffc9a103afe2d1bba0b015e7aa887f 

component/make/buildout.cfg

 [buildout]
-extends =
-  ../autoconf/buildout.cfg
-  ../automake/buildout.cfg
+parts =
+  make
 
 [make]
 # make 3.82 breaks too many things. Stick with 3.81.

component/manpy/buildout.cfg

+[buildout]
+extends =
+  ../scipy/buildout.cfg
+  ../rpy2/buildout.cfg
+  ../pulp/buildout.cfg
+  ../git/buildout.cfg
+  ../mysql-python/buildout.cfg
+
+parts = 
+  manpy
+
+[dream-repository.git]
+recipe = slapos.recipe.build:gitclone
+repository = http://git.erp5.org/repos/dream.git
+branch = master
+git-executable = ${git:location}/bin/git
+develop = true
+
+[dream-build]
+; use a develop egg to easily develop and because dream already exist on pypi
+; https://pypi.python.org/pypi/dream
+recipe = zc.recipe.egg:develop
+setup = ${dream-repository.git:location}
+
+[manpy-env]
+<= numpy-env
+
+[manpy]
+dependency = ${dream-build:setup}
+recipe = zc.recipe.egg:script
+eggs = dream
+environment = manpy-env
+setup-eggs =
+  ${scipy:egg}
+  ${mysql-python:egg}
+initialization =
+  ${pulp:initialization}
+  ${rpy2:initialization}

component/mariadb/buildout.cfg

@@ -7,7 +7,6 @@ extends =
   ../groonga/buildout.cfg
   ../jemalloc/buildout.cfg
   ../libaio/buildout.cfg
-  ../libevent/buildout.cfg
   ../libxml2/buildout.cfg
   ../ncurses/buildout.cfg
   ../openssl/buildout.cfg
@@ -21,9 +20,9 @@ parts =
 
 [mariadb]
 recipe = slapos.recipe.cmmi
-version = 10.0.14
+version = 10.0.19
 url = https://downloads.mariadb.org/f/mariadb-${:version}/source/mariadb-${:version}.tar.gz/from/http:/ftp.osuosl.org/pub/mariadb
-md5sum = 80fea71de54a9cfa7f5508df53d3f06d
+md5sum = aeaf101c688515dc8f73a5250e6c1df9
 patch-options = -p0
 patches =
   ${:_profile_base_location_}/mariadb_10.0.8_create_system_tables__no_test.patch#a176d491cf45fccd53ee397c70393bc4
@@ -41,12 +40,13 @@ configure-options =
   -DENABLE_DTRACE=0
   -DWITH_EXTRA_CHARSETS=complex
   -DWITH_EMBEDDED_SERVER=0
+  -DWITH_JEMALLOC=yes
   -DWITHOUT_EXAMPLE_STORAGE_ENGINE=1
+  -DWITHOUT_MROONGA_STORAGE_ENGINE=1
   -DWITHOUT_DAEMON_EXAMPLE=1
   -DCMAKE_C_FLAGS="-I${jemalloc:location}/include -I${libaio:location}/include -I${libxml2:location}/include -I${ncurses:location}/include -I${openssl:location}/include -I${pcre:location}/include -I${readline5:location}/include -I${zlib:location}/include"
   -DCMAKE_CXX_FLAGS="-I${jemalloc:location}/include -I${libaio:location}/include -I${libxml2:location}/include -I${ncurses:location}/include -I${openssl:location}/include -I${pcre:location}/include -I${readline5:location}/include -I${zlib:location}/include"
   -DCMAKE_INSTALL_RPATH=${jemalloc:location}/lib:${libaio:location}/lib:${libxml2:location}/lib:${ncurses:location}/lib:${openssl:location}/lib:${pcre:location}/lib:${readline5:location}/lib:${zlib:location}/lib
-  -DWITHOUT_TOKUDB=true
 environment =
   CMAKE_PROGRAM_PATH=${cmake:location}/bin
   CMAKE_INCLUDE_PATH=${libaio:location}/include:${libaio:location}/include:${libxml2:location}/include:${ncurses:location}/include:${openssl:location}/include:${pcre:location}/include:${readline5:location}/include:${zlib:location}/include
@@ -57,8 +57,8 @@ environment =
 # mroonga - a storage engine for MySQL. It provides fast fulltext search feature to all MySQL users.
 # http://mroonga.github.com/
 recipe = slapos.recipe.cmmi
-url = http://packages.groonga.org/source/mroonga/mroonga-4.07.tar.gz
-md5sum = fcfca7934b1f8df981fca579d3cd41bd
+url = http://packages.groonga.org/source/mroonga/mroonga-5.03.tar.gz
+md5sum = 4f5413d5c94ebc44caeeb5cb62d346ed
 configure-command = mkdir fake_mariadb_source && ln -s ${mariadb:location}/include/mysql/private fake_mariadb_source/sql && ./configure
 configure-options =
   --prefix=${buildout:parts-directory}/${:_buildout_section_name_}

component/matplotlib/buildout.cfg

+[buildout]
+extends =
+  ../numpy/buildout.cfg
+  ../pkgconfig/buildout.cfg
+  ../libpng/buildout.cfg
+  ../freetype/buildout.cfg
+
+parts =
+  matplotlib
+
+[matplotlib-env]
+<= numpy-env
+PATH = ${pkgconfig:location}/bin:%(PATH)s
+PKG_CONFIG_PATH = ${libpng:location}/lib/pkgconfig:${freetype:location}/lib/pkgconfig:${zlib:location}/lib/pkgconfig
+CFLAGS = -I${libpng:location}/include -I${freetype:location}/include
+
+[matplotlib]
+recipe = zc.recipe.egg:custom
+egg = matplotlib
+environment = matplotlib-env
+setup-eggs = ${numpy:egg}
+rpath =
+  ${libpng:location}/lib
+  ${freetype:location}/lib
+

component/mesa/buildout.cfg

@@ -38,6 +38,9 @@ environment =
   ACLOCAL=${automake:location}/bin/aclocal -I${libtool:location}/share/aclocal -I${pkgconfig:location}/share/aclocal
   AUTOCONF=${autoconf:location}/bin/autoconf
   AUTOMAKE=${automake:location}/bin/automake
+make-options =
+  -j1
+  LIBTOOL=${libtool:location}/bin/libtool
 
 [glu]
 recipe = slapos.recipe.cmmi

component/msgpack-python/buildout.cfg

+[buildout]
+parts =
+  msgpack-python
+
+[msgpack-python]
+recipe = zc.recipe.egg:custom
+egg = msgpack-python

component/netcat/buildout.cfg

+[buildout]
+
+parts = netcat
+
+[netcat]
+recipe = slapos.recipe.cmmi
+url = http://sourceforge.net/projects/netcat/files/netcat/0.7.1/netcat-0.7.1.tar.gz
+md5sum = 088def25efe04dcdd1f8369d8926ab34
\ No newline at end of file

component/nginx/buildout.cfg

@@ -11,8 +11,8 @@ parts = nginx-output
 
 [nginx-common]
 recipe = slapos.recipe.cmmi
-url = http://nginx.org/download/nginx-1.7.6.tar.gz
-md5sum = dd444e5333e0d324bec480e2ff67870a
+url = http://nginx.org/download/nginx-1.7.8.tar.gz
+md5sum = fd5ab813fc1853cd8efe580ead577c3e
 
 [nginx]
 <= nginx-common

component/noVNC/buildout.cfg

@@ -4,7 +4,7 @@ parts =
 
 [noVNC]
 recipe = hexagonit.recipe.download
-# Post-0.4 release from January 2013
-url = http://github.com/kanaka/noVNC/zipball/3b2acc2258d36137a37edfbe0f03a3099189c49d
-md5sum = a276be8fa193652bb5de8a271603f11f
+# version-0.5.1 release from 29 Nov 2014
+url = https://github.com/kanaka/noVNC/archive/v0.5.1.tar.gz
+md5sum = ac55b2316b2164b6e09ae3bd89c37cb6
 strip-top-level-dir = true

component/nodejs/buildout.cfg

@@ -9,7 +9,22 @@ parts =
   nodejs
 
 [nodejs]
-<= nodejs-0.8
+<= nodejs-0.10
+
+[nodejs-0.10]
+# Server-side Javascript.
+recipe = slapos.recipe.cmmi
+url = http://nodejs.org/dist/v0.10.36/node-v0.10.36.tar.gz
+md5sum = 4b3527b830f2dacaba01aececd509c6f
+configure-options =
+  --openssl-includes=${openssl:location}/include
+  --openssl-libpath=${openssl:location}/lib
+environment =
+  HOME=${buildout:parts-directory}/${:_buildout_section_name_}
+  PATH=${pkgconfig:location}/bin:%(PATH)s
+  PKG_CONFIG_PATH=${openssl:location}/lib/pkgconfig/
+  CPPFLAGS=-I${zlib:location}/include
+  LDFLAGS=-Wl,-rpath=${openssl:location}/lib -L${zlib:location}/lib -Wl,-rpath=${zlib:location}/lib
 
 [nodejs-0.8]
 # Server-side Javascript.

component/numpy/buildout.cfg

@@ -2,21 +2,19 @@
 
 extends =
   ../gcc/buildout.cfg
-  ../libatlas/buildout.cfg
-
-version = versions
+  ../openblas/buildout.cfg
 
 [numpy-env]
 PATH = ${gcc-fortran:location}/bin:%(PATH)s
-BLAS = ${libatlas:location}/lib/libcblas.a
-LAPACK = ${libatlas:location}/lib/liblapack.a
-ATLAS = ${libatlas:location}/lib/libatlas.a
+OPENBLAS = ${openblas:location}/lib/libopenblas.so
+LAPACK = ${openblas:location}/lib/libopenblas.so
+ATLAS = ${openblas:location}/lib/libopenblas.so
 
 [numpy]
 recipe = zc.recipe.egg:custom
 egg = numpy
 environment = numpy-env
-# no need to add libatlas location because they are statically linked.
 rpath =
   ${gcc-fortran:location}/lib
   ${gcc-fortran:location}/lib64
+  ${openblas:location}/lib

component/openblas/buildout.cfg

+[buildout]
+parts =
+  openblas
+
+[openblas]
+recipe = slapos.recipe.cmmi
+url = http://github.com/xianyi/OpenBLAS/tarball/v0.2.13
+md5sum = 74adf4c0d0d82bff4774be5bf2134183
+configure-command = true
+make-options =
+  PREFIX="${buildout:parts-directory}/${:_buildout_section_name_}"
+  BINARY="$(uname -m | grep -q x86_64 && echo 64 || echo 32)"
+  NO_STATIC=1
+  USE_OPENMP=1
+  USE_THREAD=1
+# to build generic binary that supports multiple architecture in one binary
+# DYNAMIC_ARCH=1
+environment =
+  PATH=${gcc-fortran:location}/bin:%(PATH)s
+  LD_LIBRARY_PATH=${gcc-fortran:location}/lib:${gcc-fortran:location}/lib64
+  LDFLAGS=-Wl,-rpath=${gcc-fortran:location}/lib -Wl,-rpath=${gcc-fortran:location}/lib64

component/openldap/buildout.cfg

@@ -8,8 +8,8 @@ extends =
 
 [openldap]
 recipe = slapos.recipe.cmmi
-url = ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-2.4.33.tgz
-md5sum = 5adae44897647c15ce5abbff313bc85a
+url = ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-2.4.40.tgz
+md5sum = 423c1f23d2a0cb96b3e9baf7e9d7dda7
 configure-options =
   --disable-static
   --disable-slapd

component/openssl/buildout.cfg

@@ -16,13 +16,14 @@ parts =
 
 [openssl]
 recipe = slapos.recipe.cmmi
-url = https://www.openssl.org/source/openssl-1.0.1j.tar.gz
-md5sum = f7175c9cd3c39bb1907ac8bba9df8ed3
+url = https://www.openssl.org/source/openssl-1.0.1n.tar.gz
+md5sum = 139568bd5a56fa49b72a290d37113f30
 patch-binary = ${patch:location}/bin/patch
 patches =
-  ${:_profile_base_location_}/openssl-nodoc.patch#b4887a7b4e18402447bc6227d2493b92
-  ${:_profile_base_location_}/openssl-exlibs.patch#dfb8979460d6d75f2d23d1ea83bbb40a
-patch-options = -p0
+  ${:_profile_base_location_}/openssl-nodoc.patch#dd1345ae7ed18ccf176bc6b77c516f98
+  ${:_profile_base_location_}/openssl-exlibs.patch#fba5c873cf974ba80a973be41da3c738
+  ${:_profile_base_location_}/openssl-1.0.1m-parallel-build.patch#a1ddd93b5b296473c7446131deb31f93
+patch-options = -p1
 configure-command = ./config
 configure-options =
   -I${zlib:location}/include
@@ -33,10 +34,6 @@ configure-options =
   shared no-idea no-mdc2 no-rc5 zlib
   -Wl,-rpath=${zlib:location}/lib -Wl,-rpath=${buildout:parts-directory}/${:_buildout_section_name_}/lib
   && make depend
-
-# it seems that parallel build sometimes fails for openssl.
-make-options =
-  -j1
 make-targets =
   all install_sw && rm -f ${buildout:parts-directory}/${:_buildout_section_name_}/etc/ssl/certs/* && for i in ${ca-certificates:location}/certs/*/*.crt; do ln -sv $i ${buildout:parts-directory}/${:_buildout_section_name_}/etc/ssl/certs/`${buildout:parts-directory}/${:_buildout_section_name_}/bin/openssl x509 -hash -noout -in $i`.0; done; true
 environment =

component/openssl/openssl-exlibs.patch

---- engines/ccgost/Makefile~	2010-08-24 23:46:34.000000000 +0200
-+++ engines/ccgost/Makefile	2012-03-14 10:11:46.826419864 +0100
+--- a/engines/ccgost/Makefile~	2010-08-24 23:46:34.000000000 +0200
++++ b/engines/ccgost/Makefile	2012-03-14 10:11:46.826419864 +0100
 @@ -7,6 +7,7 @@
  AR= ar r
  CFLAGS= $(INCLUDES) $(CFLAG)

component/openssl/openssl-nodoc.patch

---- Makefile	2012-01-18 14:42:28.000000000 +0100
-+++ Makefile	2012-01-24 17:43:40.000000000 +0100
+--- a/Makefile	2012-01-18 14:42:28.000000000 +0100
++++ b/Makefile	2012-01-24 17:43:40.000000000 +0100
 @@ -494,7 +494,7 @@
  dist_pem_h:
  	(cd crypto/pem; $(MAKE) -e $(BUILDENV) pem.h; $(MAKE) clean)

component/openvpn/buildout.cfg

+[buildout]
+extends =
+  ../lzo/buildout.cfg
+  ../patch/buildout.cfg
+  ../openssl/buildout.cfg
+  ../flex/buildout.cfg
+
+parts =
+  openvpn
+
+[openvpn]
+recipe = slapos.recipe.cmmi
+url = http://swupdate.openvpn.org/community/releases/openvpn-2.3.6.tar.gz
+md5sum = 6ca03fe0fd093e0d01601abee808835c 
+patch-binary = ${patch:location}/bin/patch
+patches =
+  ${:_profile_base_location_}/openvpn-ciphernone.patch#462b53a45da2fa686822618c4faafd19
+patch-options = -p0
+configure-options = 
+  --disable-plugin-auth-pam
+  --enable-static
+/bin/bash: q: command not found
+environment =
+  LZO_LIBS=-L${lzo:location}/lib -llzo2
+  LZO_CFLAGS=-I${lzo:location}/include
+  OPENSSL_SSL_LIBS="-L${openssl:location}/lib -lssl" 
+  OPENSSL_SSL_CFLAGS="-I${openssl:location}/include/" 
+  OPENSSL_CRYPTO_LIBS="-L${openssl:location}/lib -lcrypto" 
+  OPENSSL_CRYPTO_CFLAGS="-I${openssl:location}/include"
+  LDFLAGS =-Wl,-rpath=${lzo:location}/lib -Wl,-rpath=${flex:location}/lib -Wl,-rpath=${openssl:location}/lib
+  CPPFLAGS=-I${lzo:location}/include -I${flex:location}/include
+

component/openvpn/openvpn-ciphernone.patch

+--- src/openvpn/crypto_backend.h
++++ src/openvpn/crypto_backend.h
+@@ -237,8 +237,7 @@
+  *
+  * @return		true iff the cipher is a CBC mode cipher.
+  */
+-bool cipher_kt_mode_cbc(const cipher_kt_t *cipher)
+-  __attribute__((nonnull));
++bool cipher_kt_mode_cbc(const cipher_kt_t *cipher);
+ 
+ /**
+  * Check if the supplied cipher is a supported OFB or CFB mode cipher.
+@@ -247,8 +246,7 @@
+  *
+  * @return		true iff the cipher is a OFB or CFB mode cipher.
+  */
+-bool cipher_kt_mode_ofb_cfb(const cipher_kt_t *cipher)
+-  __attribute__((nonnull));
++bool cipher_kt_mode_ofb_cfb(const cipher_kt_t *cipher);
+ 
+ 
+ /**

component/p7zip/buildout.cfg

+[buildout]
+parts =
+  p7zip
+
+[p7zip]
+recipe = slapos.recipe.cmmi
+url = http://downloads.sf.net/project/p7zip/p7zip/${:version}/p7zip_${:version}_src_all.tar.bz2
+version = 9.38.1
+md5sum = 6cba8402ccab2370d3b70c5e28b3d651
+configure-command = rm -r DOC
+make-options =
+  DEST_HOME=${buildout:parts-directory}/${:_buildout_section_name_}

component/pandas/buildout.cfg

+[buildout]
+extends =
+  ../numpy/buildout.cfg
+
+parts =
+  pandas
+
+[pandas-env]
+<= numpy-env
+
+[pandas]
+recipe = zc.recipe.egg:custom
+egg = pandas
+environment = pandas-env
+setup-eggs = ${numpy:egg}

component/patch/buildout.cfg

@@ -6,7 +6,7 @@ parts =
 
 [patch]
 recipe = slapos.recipe.cmmi
-url = ftp://ftp.gnu.org/gnu/patch/patch-2.7.1.tar.xz
-md5sum = e9ae5393426d3ad783a300a338c09b72
+url = ftp://ftp.gnu.org/gnu/patch/patch-2.7.3.tar.xz
+md5sum = 29b87be845e4662ab0ca0d48a805ecc6
 environment =
   PATH=${xz-utils:location}/bin:%(PATH)s

component/perl/buildout.cfg

@@ -7,9 +7,9 @@ parts =
 
 [perl]
 recipe = slapos.recipe.cmmi
-version = 5.20.0
+version = 5.20.2
 url = http://www.cpan.org/src/5.0/perl-${:version}.tar.bz2
-md5sum = 20cbecd4e9e880ee7a50a136c8b1484e
+md5sum = 21062666f1c627aeb6dbff3c6952738b
 siteprefix = ${buildout:parts-directory}/site_${:_buildout_section_name_}
 patch-options = -p1
 patches =
@@ -25,4 +25,4 @@ configure-command =
     -Dusethreads
 environment =
   PATH=${patch:location}/bin:%(PATH)s
-post-make-hook = ${:_profile_base_location_}/perl-create-libs-symlink.py#7fded8308c1676decf77575c6d6b325f:post_make_hook
+post-make-hook = ${:_profile_base_location_}/perl-create-libs-symlink.py#539cb3cd0d1090f7f30a8e5a82b37854:post_make_hook

component/perl/perl-create-libs-symlink.py

@@ -15,7 +15,7 @@ def post_make_hook(options, buildout):
     print "ERROR - no libperl.* found!"
     exit
   elif nr_matches > 1:
-    print "WARNING - several libperl.a found, taking only the first one:", matches.join("\n")
+    print "WARNING - several libperl.a found, taking only the first one:", "\n".join(matches)
   
   # matches[0] is a prefix of "location"
   # For the symlink, we want the relative path.

component/poppler/buildout.cfg

@@ -3,24 +3,23 @@ parts = poppler
 extends =
   ../bzip2/buildout.cfg
   ../fontconfig/buildout.cfg
-  ../freetype/buildout.cfg
   ../jbigkit/buildout.cfg
   ../libjpeg/buildout.cfg
   ../libpng/buildout.cfg
   ../libtiff/buildout.cfg
-  ../libxml2/buildout.cfg
   ../pkgconfig/buildout.cfg
   ../xz-utils/buildout.cfg
   ../zlib/buildout.cfg
 
 [poppler]
 recipe = slapos.recipe.cmmi
-url = http://poppler.freedesktop.org/poppler-0.26.0.tar.xz
-md5sum = 76c3b2f18002a0f1e2bbbc7cccd1b957
+url = http://poppler.freedesktop.org/poppler-0.30.0.tar.xz
+md5sum = fb0a9d82b5433c823421a123eb8e9789
 configure-options =
   --disable-cairo-output
   --disable-cms
   --disable-libcurl
+  --disable-libopenjpeg
   --disable-gtk-doc-html
   --disable-gtk-test
   --disable-poppler-cpp

component/proj4/buildout.cfg

+[buildout]
+parts =
+  proj4
+
+[proj4]
+recipe = slapos.recipe.cmmi
+version = 4.8.0
+url = http://download.osgeo.org/proj/proj-${:version}.tar.gz
+md5sum = d815838c92a29179298c126effbb1537
+configure-options =
+  --disable-dependency-tracking

component/pulp/buildout.cfg

+[buildout]
+extends =
+  ../glpk/buildout.cfg
+  ../numpy/buildout.cfg
+
+parts =
+  pulp
+
+# XXX patched pulp version that does not specify pyparsing version number
+# because it conflicts with slapos version
+[pulp-repository.git]
+recipe = slapos.recipe.build:gitclone
+repository = https://gitlab.com/jerome-nexedi/pulp-or.git
+branch = master
+git-executable = ${git:location}/bin/git
+develop = true
+
+[pulp-build]
+recipe = zc.recipe.egg:develop
+setup = ${pulp-repository.git:location}
+
+[pulp-env]
+<= numpy-env
+PATH=${glpk:location}/bin
+
+[pulp]
+dependencies = ${pulp-build:setup}
+recipe = zc.recipe.egg:custom
+egg = pulp
+environment = pulp-env
+setup-eggs = ${numpy:egg}
+initialization =
+  # pulp needs glpk in $PATH
+  import os
+  os.environ['PATH'] = '${glpk:location}/bin' + os.pathsep + os.environ.get('PATH', '')

component/pycrypto-python/buildout.cfg

@@ -5,8 +5,6 @@ extends =
 parts =
   pycrypto-python
 
-versions = versions
-
 [pycrypto-python]
 recipe = zc.recipe.egg:custom
 egg = pycrypto
@@ -22,6 +20,3 @@ rpath =
 ac_cv_func_malloc_0_nonnull = yes
 LDFLAGS = -L${gmp:location}/lib
 CPPFLAGS = -I${gmp:location}/include
-
-[versions]
-pycrypto = 2.6.1

component/python-2.7/buildout.cfg

@@ -27,9 +27,9 @@ python = python2.7
 
 [python2.7]
 recipe = slapos.recipe.cmmi
-package_version = 2.7.8
+package_version = 2.7.10
 package_version_suffix =
-md5sum = d235bdfa75b8396942e360a70487ee00
+md5sum = c685ef0b8e9f27b5e3db5db12b268ac6
 
 # This is actually the default setting for prefix, but we can't use it in
 # other settings in this part if we don't set it explicitly here.
@@ -39,8 +39,7 @@ executable = ${:prefix}/bin/python${:version}
 
 patch-options = -p1
 patches =
-  ${:_profile_base_location_}/tls_sni.patch#c95af105e6e96aaa58a50137595872a0
-  ${:_profile_base_location_}/tls_sni_httplib.patch#5c9d00d23b85169df792a936a056cbcc
+  ${:_profile_base_location_}/fix_compiler_module_issue_20613.patch#94443a77f903e9de880a029967fa6aa7
 url =
   http://python.org/ftp/python/${:package_version}/Python-${:package_version}${:package_version_suffix}.tar.xz
 configure-options =

component/python-2.7/tls_sni.patch

-Description: Support TLS SNI extension in ssl module
-Author: markk
-Bug-Python: http://bugs.python.org/issue5639
-
---- a/Lib/ssl.py
-+++ b/Lib/ssl.py
-@@ -202,6 +202,7 @@
-     def __init__(self, sock, keyfile=None, certfile=None,
-                  server_side=False, cert_reqs=CERT_NONE,
-                  ssl_version=PROTOCOL_SSLv23, ca_certs=None,
-+                 server_hostname=None,
-                  do_handshake_on_connect=True,
-                  suppress_ragged_eofs=True, ciphers=None):
-         # Can't use sock.type as other flags (such as SOCK_NONBLOCK) get
-@@ -238,6 +239,7 @@
-             self._sslobj = _ssl.sslwrap(self._sock, server_side,
-                                         keyfile, certfile,
-                                         cert_reqs, ssl_version, ca_certs,
-+                                        server_hostname,
-                                         ciphers)
-             if do_handshake_on_connect:
-                 self.do_handshake()
-@@ -246,6 +248,7 @@
-         self.cert_reqs = cert_reqs
-         self.ssl_version = ssl_version
-         self.ca_certs = ca_certs
-+        self.server_hostname = server_hostname
-         self.ciphers = ciphers
-         self.do_handshake_on_connect = do_handshake_on_connect
-         self.suppress_ragged_eofs = suppress_ragged_eofs
-@@ -411,7 +414,7 @@
-             raise ValueError("attempt to connect already-connected SSLSocket!")
-         self._sslobj = _ssl.sslwrap(self._sock, False, self.keyfile, self.certfile,
-                                     self.cert_reqs, self.ssl_version,
--                                    self.ca_certs, self.ciphers)
-+                                    self.ca_certs, self.server_hostname, self.ciphers)
-         try:
-             if return_errno:
-                 rc = socket.connect_ex(self, addr)
-@@ -452,6 +455,7 @@
-                               cert_reqs=self.cert_reqs,
-                               ssl_version=self.ssl_version,
-                               ca_certs=self.ca_certs,
-+                              server_hostname=None,
-                               ciphers=self.ciphers,
-                               do_handshake_on_connect=self.do_handshake_on_connect,
-                               suppress_ragged_eofs=self.suppress_ragged_eofs),
-@@ -566,7 +570,7 @@
-         sock = sock._sock
- 
-     ssl_sock = _ssl.sslwrap(sock, 0, keyfile, certfile, CERT_NONE,
--                            PROTOCOL_SSLv23, None)
-+                            PROTOCOL_SSLv23, None, None, None)
-     try:
-         sock.getpeername()
-     except socket_error:
---- a/Modules/_ssl.c
-+++ b/Modules/_ssl.c
-@@ -267,7 +267,7 @@
-                enum py_ssl_server_or_client socket_type,
-                enum py_ssl_cert_requirements certreq,
-                enum py_ssl_version proto_version,
--               char *cacerts_file, char *ciphers)
-+               char *cacerts_file, char *server_hostname, char *ciphers)
- {
-     PySSLObject *self;
-     char *errstr = NULL;
-@@ -389,6 +389,14 @@
- 
-     PySSL_BEGIN_ALLOW_THREADS
-     self->ssl = SSL_new(self->ctx); /* New ssl struct */
-+#if OPENSSL_VERSION_NUMBER >= 0x0090806fL && !defined(OPENSSL_NO_TLSEXT)
-+    /* If SNI isn't supported, we just don't call it and fail silently,
-+     * as there's not much else we can do.
-+     */
-+    if ((socket_type == PY_SSL_CLIENT) &&
-+             (proto_version != PY_SSL_VERSION_SSL2) && server_hostname)
-+        SSL_set_tlsext_host_name(self->ssl, server_hostname);
-+#endif
-     PySSL_END_ALLOW_THREADS
-     SSL_set_fd(self->ssl, Sock->sock_fd);       /* Set the socket for SSL */
- #ifdef SSL_MODE_AUTO_RETRY
-@@ -431,15 +439,16 @@
-     char *key_file = NULL;
-     char *cert_file = NULL;
-     char *cacerts_file = NULL;
-+    char *server_hostname = NULL;
-     char *ciphers = NULL;
- 
--    if (!PyArg_ParseTuple(args, "O!i|zziizz:sslwrap",
-+    if (!PyArg_ParseTuple(args, "O!i|zziizzz:sslwrap",
-                           PySocketModule.Sock_Type,
-                           &Sock,
-                           &server_side,
-                           &key_file, &cert_file,
-                           &verification_mode, &protocol,
--                          &cacerts_file, &ciphers))
-+                          &cacerts_file, &server_hostname, &ciphers))
-         return NULL;
- 
-     /*
-@@ -452,13 +461,13 @@
- 
-     return (PyObject *) newPySSLObject(Sock, key_file, cert_file,
-                                        server_side, verification_mode,
--                                       protocol, cacerts_file,
-+                                       protocol, cacerts_file, server_hostname,
-                                        ciphers);
- }
- 
- PyDoc_STRVAR(ssl_doc,
- "sslwrap(socket, server_side, [keyfile, certfile, certs_mode, protocol,\n"
--"                              cacertsfile, ciphers]) -> sslobject");
-+"                              cacertsfile, ciphers, server_hostname]) -> sslobject");
- 
- /* SSL object methods */
- 

component/python-2.7/tls_sni_httplib.patch

-Author: Arnaud Fontaine <arnaud.fontaine@nexedi.com>
-Description: Enable TLS SNI support for httplib
-
---- a/Lib/httplib.py	2014-07-31 14:50:21.178088529 +0900
-+++ b/Lib/httplib.py	2014-07-31 20:11:09.279081382 +0900
-@@ -1195,7 +1195,12 @@
-             if self._tunnel_host:
-                 self.sock = sock
-                 self._tunnel()
--            self.sock = ssl.wrap_socket(sock, self.key_file, self.cert_file)
-+                server_hostname = self._tunnel_host
-+            else:
-+                server_hostname = self.host
-+
-+            self.sock = ssl.wrap_socket(sock, self.key_file, self.cert_file,
-+                                        server_hostname=server_hostname)
- 
-     __all__.append("HTTPSConnection")
- 
---- a/Lib/ssl.py	2014-07-31 19:33:21.911968158 +0900
-+++ b/Lib/ssl.py	2014-07-31 19:33:57.428391985 +0900
-@@ -481,14 +481,15 @@
-                 server_side=False, cert_reqs=CERT_NONE,
-                 ssl_version=PROTOCOL_SSLv23, ca_certs=None,
-                 do_handshake_on_connect=True,
--                suppress_ragged_eofs=True, ciphers=None):
-+                suppress_ragged_eofs=True, ciphers=None,
-+                server_hostname=None):
- 
-     return SSLSocket(sock, keyfile=keyfile, certfile=certfile,
-                      server_side=server_side, cert_reqs=cert_reqs,
-                      ssl_version=ssl_version, ca_certs=ca_certs,
-                      do_handshake_on_connect=do_handshake_on_connect,
-                      suppress_ragged_eofs=suppress_ragged_eofs,
--                     ciphers=ciphers)
-+                     ciphers=ciphers, server_hostname=server_hostname)
- 
- 
- # some utility functions

component/python-cliff/buildout.cfg

+[buildout]
+
+[python-cliff]
+recipe = zc.recipe.egg:custom
+egg = cliff
+setup-eggs = ${python-cliff-prep:eggs}
+
+[python-cliff-prep]
+recipe = zc.recipe.egg
+eggs =
+  pbr
+

component/python-cryptography/buildout.cfg

@@ -22,5 +22,6 @@ CPATH = ${openssl:location}/include
 recipe = zc.recipe.egg
 eggs =
   ${python-cffi:egg}
+  enum34
   pycparser
   six

component/python-kerberos/buildout.cfg

+[buildout]
+extends =
+#  ../openssl/buildout.cfg
+  ../kerberos/buildout.cfg
+#  ../pkgconfig/buildout.cfg
+
+parts =
+  python-kerberos
+
+[python-kerberos]
+recipe = zc.recipe.egg:custom
+egg = kerberos
+environment = python-kerberos-env
+#setup-eggs = ${python-cryptography-prep:eggs}
+
+[python-kerberos-env]
+PATH = ${kerberos:location}/bin:%(PATH)s
+#PKG_CONFIG_PATH = ${openssl:location}/lib/pkgconfig
+LD_LIBRARY_PATH = ${kerberos:location}/lib
+CPATH = ${kerberos:location}/include
+
+[python-cryptography-prep]
+recipe = zc.recipe.egg
+eggs =
+  ${python-cffi:egg}
+  enum34
+  pycparser
+  six

component/qemu-kvm/buildout.cfg

@@ -15,10 +15,10 @@ extends =
 [kvm]
 recipe = slapos.recipe.cmmi
 # qemu-kvm and qemu are now the same since 1.3.
-url = http://wiki.qemu-project.org/download/qemu-1.6.1.tar.bz2
-md5sum = 3a897d722457c5a895cd6ac79a28fda0
+url = http://wiki.qemu-project.org/download/qemu-2.2.1.tar.bz2
+md5sum = 833ff4457062456d38d6567f802ffef4
 configure-options =
-  --target-list=x86_64-softmmu
+  --target-list="$(uname -m 2>/dev/null|sed 's,^i[456]86$,i386,')-softmmu"
   --enable-system
   --with-system-pixman
   --disable-sdl
@@ -40,25 +40,12 @@ environment =
   PKG_CONFIG_PATH=${gnutls:location}/lib/pkgconfig:${glib:location}/lib/pkgconfig:${pixman:location}/lib/pkgconfig
   LDFLAGS=-L${pixman:location}/lib -Wl,-rpath=${pixman:location}/lib
 
-# The following is only available in buildout2, which we don't use yet.
-[kvm-bits64]
-configure-options =
-  --target-list=x86_64-softmmu
-  ${kvm:configure-options}
-
-[kvm-bits32]
-configure-options =
-  --target-list=i386-softmmu
-  ${kvm:configure-options}
-
-
 [debian-amd64-netinst.iso]
-# Download the installer of Debian 7 (Wheezy)
+# Download the installer of Debian 8 (Jessie)
 recipe = hexagonit.recipe.download
-url = http://cdimage.debian.org/debian-cd/7.2.0/amd64/iso-cd/debian-7.2.0-amd64-netinst.iso 
+url = http://cdimage.debian.org/debian-cd/8.1.0/amd64/iso-cd/debian-8.1.0-amd64-netinst.iso
 filename = ${:_buildout_section_name_}
-md5sum = b86774fe4de88be6378ba3d71b8029bd 
+md5sum = 1a311f9afb68d6365211b13b4342c40b
 download-only = true
 mode = 0644
 location = ${buildout:parts-directory}/${:_buildout_section_name_}
-

component/r-language/buildout.cfg

+[buildout]
+extends =
+  ../bzip2/buildout.cfg
+  ../gcc/buildout.cfg
+  ../pcre/buildout.cfg
+  ../readline/buildout.cfg
+  ../xz-utils/buildout.cfg
+  ../zlib/buildout.cfg
+
+parts =
+  gcc-fortran
+  r-language
+
+[r-language]
+recipe = slapos.recipe.cmmi
+url = http://cran.univ-paris1.fr/src/base/R-3/R-3.2.0.tar.gz
+md5sum = 66fa17ad457d7e618191aa0f52fc402e
+configure-options =
+  --enable-R-shlib
+  --with-readline=yes
+  --without-tcltk
+  --without-cairo
+  --without-libpng
+  --without-jpeglib
+  --without-libtiff
+  --with-system-zlib
+  --with-system-bzlib
+  --with-system-pcre
+  --with-system-xz
+  --without-ICU
+  --without-x
+environment =
+  PATH=${gcc-fortran:location}/bin:%(PATH)s
+  CPPFLAGS=-I${bzip2:location}/include  -I${pcre:location}/include -I${readline:location}/include -I${ncurses:location}/include -I${xz-utils:location}/include -I${zlib:location}/include
+  LDFLAGS=-L${bzip2:location}/lib -Wl,-rpath=${bzip2:location}/lib -L${gcc-fortran:location}/lib -Wl,-rpath=${gcc-fortran:location}/lib -L${gcc-fortran:location}/lib64 -Wl,-rpath=${gcc-fortran:location}/lib64 -L${ncurses:location}/lib -Wl,-rpath=${ncurses:location}/lib -L${pcre:location}/lib -Wl,-rpath=${pcre:location}/lib -L${readline:location}/lib -Wl,-rpath=${readline:location}/lib -L${xz-utils:location}/lib -Wl,-rpath=${xz-utils:location}/lib -L${zlib:location}/lib -Wl,-rpath=${zlib:location}/lib

component/r-language/software.cfg

+# A minimal software release to test the r-language component (depends on gfortran).
+
+[buildout]
+extends = 
+  ../../stack/slapos.cfg
+  ../../component/gcc/buildout.cfg
+  ../../component/r-language/buildout.cfg
+
+parts =
+  eggs
+  gcc-fortran
+  r-language
+
+[eggs]
+recipe = zc.recipe.egg
+eggs =
+  ${lxml-python:egg}
+  slapos.cookbook
+

component/ragel/buildout.cfg

@@ -8,7 +8,7 @@ parts =
 
 [ragel]
 recipe = slapos.recipe.cmmi
-url = http://www.complang.org/ragel/ragel-6.8.tar.gz
+url = http://www.colm.net/files/ragel/ragel-6.8.tar.gz
 md5sum = 1bb39745ac23da449019f9f2cb4b0d01
 configure-options =
   --prefix=${buildout:parts-directory}/${:_buildout_section_name_}