Pullup ticket #3993 - requested by is
x11/modular-xorg-server: security patch

Revisions pulled up:
- x11/modular-xorg-server/Makefile                              1.73 via patch
- x11/modular-xorg-server/distinfo                              1.47
- x11/modular-xorg-server/patches/patch-os_utils.c              1.1

---
   Module Name:	pkgsrc
   Committed By:	is
   Date:		Sat Dec 15 09:26:07 UTC 2012

   Modified Files:
   	pkgsrc/x11/modular-xorg-server: Makefile distinfo
   Added Files:
   	pkgsrc/x11/modular-xorg-server/patches: patch-os_utils.c

   Log Message:
   Fix CVE-2011-4028: File disclosure vulnerability.
   use O_NOFOLLOW to open the existing lock file, so symbolic links
   aren't followed, thus avoid revealing if it point to an existing
   file. Signed-off-by: Matthieu Herrb <matthieu.herrb@laas.fr>
   Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>

   Fix CVE-2011-4029: File permission change vulnerability.
   Use fchmod() to change permissions of the lock file instead of
   chmod(), thus avoid the race that can be exploited to set a symbolic
   link to any file or directory in the system. Signed-off-by: Matthieu
   Herrb <matthieu.herrb@laas.fr> Reviewed-by: Alan Coopersmith
   <alan.coopersmith@oracle.com>
Pullup ticket #3994 - requested by obache
emulators/suse121_libxml2: security update

Revisions pulled up:
- emulators/suse121_libxml2/Makefile                            1.5
- emulators/suse121_libxml2/distinfo                            1.5

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Tue Dec 18 11:25:52 UTC 2012

   Modified Files:
   	pkgsrc/emulators/suse121_libxml2: Makefile distinfo

   Log Message:
   Update libxml2 rpm to 2.7.8+git20110708-3.15.1 for CVE-2012-5134.

   Bump PKGREVISION.
Pullup ticket #3995 - requested by obache
www/opera: security update

Revisions pulled up:
- www/opera/Makefile                                            1.101
- www/opera/distinfo                                            1.43

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Tue Dec 18 11:56:21 UTC 2012

   Modified Files:
   	pkgsrc/www/opera: Makefile distinfo

   Log Message:
   Update opera to 12.12.

   Release notes
   Release date: 2012-12-18
   Opera 12.12 is a recommended upgrade offering security and stability enhancements.

   Fixes and Stability Enhancements since Opera 12.11
   General and User Interface
     * Several general fixes and stability improvements
     * New option `Delete settings and data for all extensions' option (off by
       default) in the Delete Private Data dialog
     * Corrected an issue where using the 'Delete Private Data' dialog could delete
       extension and settings data
     * Redesigned the 'Delete Private Data' dialog to be more usable with small
       screens
     * Fixed an issue where quitting Opera while in fullscreen mode could cripple
       the interface on the next start-up
   Security
     * Fixed an issue where malformed GIF images could allow execution of arbitrary    code; see our advisory
       http://www.opera.com/support/kb/view/1038/
     * Fixed an issue where repeated attempts to access a target site could trigger
       address field spoofing, as reported by Masato Kinugawa; see our advisory
       http://www.opera.com/support/kb/view/1040/
       UNIX-only
        * Fixed an issue where private data could be disclosed to other computer
          users, or be modified by them, as reported by Jann Horn; see our advisory
          http://www.opera.com/support/kb/view/1039/
Pullup tickets #3993, #3994 and #3995.