Pullup ticket #3809 - requested by schmonz
www/ikiwiki: security update

Revisions pulled up:
- www/ikiwiki/Makefile                                          1.94
- www/ikiwiki/distinfo                                          1.78
- www/ikiwiki/PLIST                                             1.36

-------------------------------------------------------------------
   Module Name:	   pkgsrc
   Committed By:   schmonz
   Date:           Thu May 17 05:51:05 UTC 2012

   Modified Files:
           pkgsrc/www/ikiwiki: Makefile distinfo

   Log Message:
   Update to 3.20120516. From the changelog:

    * meta: Security fix; add missing sanitization of author and authorurl.
      Thanks, Raúl Benencia


   To generate a diff of this commit:
   cvs rdiff -u -r1.93 -r1.94 pkgsrc/www/ikiwiki/Makefile
   cvs rdiff -u -r1.77 -r1.78 pkgsrc/www/ikiwiki/distinfo
-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   schmonz
   Date:           Fri Apr 20 03:48:25 UTC 2012

   Modified Files:
           pkgsrc/www/ikiwiki: Makefile PLIST distinfo

   Log Message:
   Update to 3.20120419. From the changelog:

      * Remove dead link from plugins/teximg. Closes: #664885
      * inline: When the pagenames list includes pages that do not exist, skip
        them.
      * meta: Export author information in html <meta> tag. Closes: #664779
        Thanks, Martin Michlmayr
      * notifyemail: New plugin, sends email notifications about new and
        changed pages, and allows subscribing to comments.
      * Added a "changes" hook. Renamed the "change" hook to "rendered", but
        the old hook name is called for now for back-compat.
      * meta: Support keywords header. Closes: #664780
        Thanks, Martin Michlmayr
      * passwordauth: Fix url in password recovery email to be absolute.
      * httpauth: When it's the only auth method, avoid a pointless and
        confusing signin form, and go right to the httpauthurl.
      * rename: Allow rename to be started not from the edit page; return to
        the renamed page in this case.
      * remove: Support removing of pages in the transient underlay. (smcv)
      * inline, trail: The pagenames parameter is now a list of absolute
        pagenames, not relative wikilink type names. This is necessary to fix
        a bug, and makes pagenames more consistent with the pagespec used
        in the pages parameter. (smcv)
      * link: Fix renaming wikilinks that contain embedded urls.
      * graphviz: Handle self-links.
      * trail: Improve CSS, also display trail links at bottom of page,
        and a bug fix. (smcv)

   Add dependency on p5-HTML-Tree, suggested by Matthias Rampke in PR pkg/45688.


   To generate a diff of this commit:
   cvs rdiff -u -r1.92 -r1.93 pkgsrc/www/ikiwiki/Makefile
   cvs rdiff -u -r1.35 -r1.36 pkgsrc/www/ikiwiki/PLIST
   cvs rdiff -u -r1.76 -r1.77 pkgsrc/www/ikiwiki/distinfo
pullup 3809
Pullup ticket #3808 - requested by spz
devel/rt3: security update

Revisions pulled up:
- devel/rt3/Makefile                                            1.49
- devel/rt3/Makefile.install                                    1.18
- devel/rt3/PLIST                                               1.21
- devel/rt3/distinfo                                            1.22
- devel/rt3/patches/patch-lib_RT_Action_CreateTickets.pm        deleted
- devel/rt3/patches/patch-lib_RT_Ticket__Overlay.pm             deleted
- devel/rt3/patches/patch-lib_RT_Transaction__Overlay.pm        deleted
- devel/rt3/patches/patch-share_html_Admin_CustomFields_Modify.html deleted
- devel/rt3/patches/patch-share_html_Search_Bulk.html           deleted
- devel/rt3/patches/patch-share_html_Search_Elements_SelectChartType deleted
- devel/rt3/patches/patch-share_html_Ticket_Elements_PreviewScrips deleted

---
   Module Name:	pkgsrc
   Committed By:	spz
   Date:		Fri May 25 19:55:44 UTC 2012

   Modified Files:
   	pkgsrc/devel/rt3: Makefile Makefile.install PLIST distinfo
   Removed Files:
   	pkgsrc/devel/rt3/patches: patch-lib_RT_Action_CreateTickets.pm
   	    patch-lib_RT_Ticket__Overlay.pm
   	    patch-lib_RT_Transaction__Overlay.pm
   	    patch-share_html_Admin_CustomFields_Modify.html
   	    patch-share_html_Search_Bulk.html
   	    patch-share_html_Search_Elements_SelectChartType
   	    patch-share_html_Ticket_Elements_PreviewScrips

   Log Message:
   Update RT to version 3.8.12:

   Changes from 3.8.11 to 3.8.12:
       This release, in addition to being a bugfix release, also resolves a
       number of security vulnerabilities.  It resolves CVE-2011-2082,
       CVE-2011-2083, CVE-2011-2084, CVE-2011-2085, CVE-2011-4458,
       CVE-2011-4459, and CVE-2011-4460.

        * Upgrade prototype.js to version 1.7, for compatibility with google
          charts.
        * Remove ie7.js, which is no longer used.
        * Ensure that TransactionBatch scripts are only run once.

   Changes from 3.8.10 to 3.8.11:
       This release contains a number of bugfixes and minor security updates
       since the 3.8.10 release, most notably:

        * Adjust FCGI dependency to one which resolves FCGI's CVE-2011-2766

        * New WebHttpOnlyCookies option, enabled by default, which hides RT's
          cookie from direct Javascript access.

        * Compatibility with perl 5.12 and 5.14, by removing deprecated "for
          qw(...)" and "defined %hash" syntax.

        * MySQL 5.5 compatibility, by specifying ENGINE=InnoDB rather than
          TYPE=InnoDB

        * Ensure that RT::Interface::Web's _Overlay, _Local, and _Vendor files
          are loaded correctly.

        * Fix session cleaner for on-disk sessions, broken since 3.8.0.

        * Ensure that only one "Based on" attribute is stored for each custom
          field.

        * Fix the loading of Shredder plugins, broken in 3.8.10.
Pullup ticket #3807 - requested by spz
textproc/p5-YAML-LibYAML: security update

Revisions pulled up:
- textproc/p5-YAML-LibYAML/Makefile                             1.9-1.10
- textproc/p5-YAML-LibYAML/distinfo                             1.7-1.8
- textproc/p5-YAML-LibYAML/patches/patch-LibYAML_perl__libyaml.c 1.1

---
   Module Name:    pkgsrc
   Committed By:   sno
   Date:           Tue Apr 10 13:50:05 UTC 2012

   Modified Files:
           pkgsrc/textproc/p5-YAML-LibYAML: Makefile distinfo

   Log Message:
   Updating package for CPAN module YAML::LibYAML in textproc/p5-YAML-LibYAML
   from 0.37 to 0.38

   Upstream changes:
   version: 0.38
   date:    Tue Jan  3 22:56:01 PST 2012
   changes:
   - Apply SPROUT++ deparse test patch. Thanks!

---
   Module Name:	pkgsrc
   Committed By:	spz
   Date:		Thu May 24 20:21:18 UTC 2012

   Modified Files:
   	pkgsrc/textproc/p5-YAML-LibYAML: Makefile distinfo
   Added Files:
   	pkgsrc/textproc/p5-YAML-LibYAML/patches: patch-LibYAML_perl__libyaml.c

   Log Message:
   fix for CVS-2012-1152 taken from
   https://rt.cpan.org/Ticket/Attachment/920541/477607/YAML-LibYAML-0.35-format-err
   or.patch
Pullup tickets #3807 and #3808.