Pullup ticket #3790 - requested by taca
security/sudo: security update

Revisions pulled up:
- security/sudo/Makefile                                        1.136 via patch
- security/sudo/distinfo                                        1.78
- security/sudo/patches/patch-aa                                1.29

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed May 16 14:49:56 UTC 2012

   Modified Files:
   	pkgsrc/security/sudo: Makefile distinfo
   	pkgsrc/security/sudo/patches: patch-aa

   Log Message:
   Update sudo package to 1.7.9p1.

   Fix seuciry problem of CVE-2012-2337.

   What's new in Sudo 1.7.9p1?

    * Fixed a bug when matching against an IP address with an associated
      netmask in the sudoers file.  In certain circumstances, this
      could allow users to run commands on hosts they are not authorized
      for.

   What's new in Sudo 1.7.9?

    * Fixed a false positive in visudo strict mode when aliases are
      in use.

    * The line on which a syntax error is reported in the sudoers file
      is now more accurate.  Previously it was often off by a line.

    * The #include and #includedir directives in sudoers now support
      relative paths.  If the path is not fully qualified it is expected
      to be located in the same directory of the sudoers file that is
      including it.

    * visudo will now fix the mode on the sudoers file even if no changes
      are made unless the -f option is specified.

    * The "use_loginclass" sudoers option works properly again.

    * For LDAP-based sudoers, values in the search expression are now
      escaped as per RFC 4515.

    * Fixed a race condition when I/O logging is not enabled that could
      result in tty-generated signals (e.g. control-C) being received
      by the command twice.

    * If none of the standard input, output or error are connected to
      a tty device, sudo will now check its parent's standard input,
      output or error for the tty name on systems with /proc and BSD
      systems that support the KERN_PROC_PID sysctl.  This allows
      tty-based tickets to work properly even when, e.g. standard
      input, output and error are redirected to /dev/null.

    * Fixed a bug where a pattern like "/usr/*" included /usr/bin/ in
      the results, which would be incorrectly be interpreted as if the
      sudoers file had specified a directory.

    * "visudo -c" will now list any include files that were checked
      in addition to the main sudoers file when everything parses OK.

    * Users that only have read-only access to the sudoers file may
      now run "visudo -c".  Previously, write permissions were required
      even though no writing is down in check-only mode.

   What's new in Sudo 1.7.8p2?

    * Fixed a crash in the monitor process on Solaris when NOPASSWD
      was specified or when authentication was disabled.
Pullup ticket #3791 - requested by he
databases/p5-DBD-postgresql: security update

Revisions pulled up:
- databases/p5-DBD-postgresql/Makefile                          1.61
- databases/p5-DBD-postgresql/distinfo                          1.31

---
   Module Name:	pkgsrc
   Committed By:	he
   Date:		Fri May 18 09:06:58 UTC 2012

   Modified Files:
   	pkgsrc/databases/p5-DBD-postgresql: Makefile distinfo

   Log Message:
   Update to version 2.19.2.  Changes:

   Version 2.19.2  Released March 12, 2012
     - Fix errors when multiple same-named placeholders are used. [GSM]
       (CPAN bug #75713)

   Version 2.19.1  Released March 10, 2012 (git commit db6f6da00467c7ea28d32c4df97e93ccc4d38f2b)
     - Fix crash when passing in an array with undefined elements. [GSM]

   Version 2.19.0  Released March 9, 2012 (git commit 05ab092905ce6891ed83e173412ee70d6cdb8cb5)
     - Use proper formatting for warn() and croak() (CPAN bug #75642)
       [Niko Tyni]
     - Fix localized regex in test (CPAN bug #70759)
     - Fix for named placeholders (CPAN bug #70953) [Jan Pazdziora]
     - Various fixes to the array-marshalling code [Noah Misch, Mark
       Stosberg, and David Christensen] (CPAN bug #58552)
     - Allow hi-bit chars in dollar-quoted identifiers
       [David Christensen] (CPAN bug #73832)
     - Have do() return count for things such as CREATE TABLE .. AS SELECT
       Will only work on 9.0 or better. (CPAN bug #71073) [Pavel Stehule]
     - Better error message when trying to do things post-disconnect [GSM]
     - Always respect pg_server_prepare=0 by using PQexec not PQexecParams. [GSM]
     - Fix error in async docs (CPAN bug #72812)
     - Switch from subversion to git.
       git clone git://bucardo.org/dbdpg.git [GSM]
Pullup tickets #3790 and #3791.