Pullup ticket #3789 - requested by wiz
chat/pidgin-otr: security update

Revisions pulled up:
- chat/pidgin-otr/Makefile                                      1.25 via patch
- chat/pidgin-otr/distinfo                                      1.3

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Wed May 16 14:36:18 UTC 2012

   Modified Files:
   	pkgsrc/chat/pidgin-otr: Makefile distinfo

   Log Message:
   Update to 3.2.1 (security update):

   2012-05-14

   	* INSTALL: Fixing typo and updating reference to CVS.
   	* Makefile.mingw, packaging/windows/pidgin-otr.nsi:
   	Updating to support building the win32 installer on
   	GNU/Linux.

   2012-05-12

   	* otr-plugin.c: Fixing a format string vulnerability.
   	Identified by intrigeri <intrigeri@boum.org>.

   	* Makefile.mingw, README, configure.ac, pidgin-otr.nsi:
   	Bumped version number to 3.2.1.

   2010-03-02

   	* po/vi.po: Vietnamese translation from Lyndon Johnson
   	<lyndon.johnson58@gmail.com>

   2009-11-14

   	* gtk-dialog.c (add_to_vbox_verify_fingerprint): Make
   	the fingerprints in the manual authentication dialog
   	selectable (but not selected by default).

   2009-08-24

   	* po/fr.po: Fixed \n errors

   2009-07-20

   	* po/fr.po: Complete French translation from Solveig
   	<perso@solveig.org>

   2009-06-24

   	* po/fr.po: Spelling correction from intrigeri
   	<intrigeri@boum.org>

   2009-03-18

   	* po/sv.po: Swedish translation from Daniel Nylander
   	<po@danielnylander.se>

   2009-01-18

   	* po/pl.po: Polish translation from Paweł Czochański
   	<czochanski@gmail.com>

   2008-09-24

   	* po/it.po: Italian translation from Vincenzo Reale
   	<smart2128@baslug.org>.

   2008-07-10

   	* otr-plugin.c: Use /dev/urandom to generate keys instead of
   	/dev/random.  [Really: on non-Win32, call
   	gcry_control(GCRYCTL_ENABLE_QUICK_RANDOM, 0); before OTRL_INIT;.]

   2008-07-07

   	* gtk-conv.c: Don't delete the OTR menus if a non-foreground
   	conversation window is closed.

   2008-06-19

   	* Makefile.static: Forgot to add tooltipmenu.o to
   	Makefile.static.  Fixed.

   2008-06-17

   	* otr-plugin.c: Except on WIN32, set the umask to 0077 before
   	creating the otr.* files in the purple directory so that they
   	end up mode 0600.  Based on a patch from Caspar Clemens Mierau
   	<damokles@ubuntu.com>.

   	* po/de.po: Updated German translation from Michael Meier
   	<mail@code.mmsources.de>.
Pullup ticket #3789.
Pullup ticket #3790 - requested by taca
security/sudo: security update

Revisions pulled up:
- security/sudo/Makefile                                        1.136 via patch
- security/sudo/distinfo                                        1.78
- security/sudo/patches/patch-aa                                1.29

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed May 16 14:49:56 UTC 2012

   Modified Files:
   	pkgsrc/security/sudo: Makefile distinfo
   	pkgsrc/security/sudo/patches: patch-aa

   Log Message:
   Update sudo package to 1.7.9p1.

   Fix seuciry problem of CVE-2012-2337.

   What's new in Sudo 1.7.9p1?

    * Fixed a bug when matching against an IP address with an associated
      netmask in the sudoers file.  In certain circumstances, this
      could allow users to run commands on hosts they are not authorized
      for.

   What's new in Sudo 1.7.9?

    * Fixed a false positive in visudo strict mode when aliases are
      in use.

    * The line on which a syntax error is reported in the sudoers file
      is now more accurate.  Previously it was often off by a line.

    * The #include and #includedir directives in sudoers now support
      relative paths.  If the path is not fully qualified it is expected
      to be located in the same directory of the sudoers file that is
      including it.

    * visudo will now fix the mode on the sudoers file even if no changes
      are made unless the -f option is specified.

    * The "use_loginclass" sudoers option works properly again.

    * For LDAP-based sudoers, values in the search expression are now
      escaped as per RFC 4515.

    * Fixed a race condition when I/O logging is not enabled that could
      result in tty-generated signals (e.g. control-C) being received
      by the command twice.

    * If none of the standard input, output or error are connected to
      a tty device, sudo will now check its parent's standard input,
      output or error for the tty name on systems with /proc and BSD
      systems that support the KERN_PROC_PID sysctl.  This allows
      tty-based tickets to work properly even when, e.g. standard
      input, output and error are redirected to /dev/null.

    * Fixed a bug where a pattern like "/usr/*" included /usr/bin/ in
      the results, which would be incorrectly be interpreted as if the
      sudoers file had specified a directory.

    * "visudo -c" will now list any include files that were checked
      in addition to the main sudoers file when everything parses OK.

    * Users that only have read-only access to the sudoers file may
      now run "visudo -c".  Previously, write permissions were required
      even though no writing is down in check-only mode.

   What's new in Sudo 1.7.8p2?

    * Fixed a crash in the monitor process on Solaris when NOPASSWD
      was specified or when authentication was disabled.
Pullup ticket #3791 - requested by he
databases/p5-DBD-postgresql: security update

Revisions pulled up:
- databases/p5-DBD-postgresql/Makefile                          1.61
- databases/p5-DBD-postgresql/distinfo                          1.31

---
   Module Name:	pkgsrc
   Committed By:	he
   Date:		Fri May 18 09:06:58 UTC 2012

   Modified Files:
   	pkgsrc/databases/p5-DBD-postgresql: Makefile distinfo

   Log Message:
   Update to version 2.19.2.  Changes:

   Version 2.19.2  Released March 12, 2012
     - Fix errors when multiple same-named placeholders are used. [GSM]
       (CPAN bug #75713)

   Version 2.19.1  Released March 10, 2012 (git commit db6f6da00467c7ea28d32c4df97e93ccc4d38f2b)
     - Fix crash when passing in an array with undefined elements. [GSM]

   Version 2.19.0  Released March 9, 2012 (git commit 05ab092905ce6891ed83e173412ee70d6cdb8cb5)
     - Use proper formatting for warn() and croak() (CPAN bug #75642)
       [Niko Tyni]
     - Fix localized regex in test (CPAN bug #70759)
     - Fix for named placeholders (CPAN bug #70953) [Jan Pazdziora]
     - Various fixes to the array-marshalling code [Noah Misch, Mark
       Stosberg, and David Christensen] (CPAN bug #58552)
     - Allow hi-bit chars in dollar-quoted identifiers
       [David Christensen] (CPAN bug #73832)
     - Have do() return count for things such as CREATE TABLE .. AS SELECT
       Will only work on 9.0 or better. (CPAN bug #71073) [Pavel Stehule]
     - Better error message when trying to do things post-disconnect [GSM]
     - Always respect pg_server_prepare=0 by using PQexec not PQexecParams. [GSM]
     - Fix error in async docs (CPAN bug #72812)
     - Switch from subversion to git.
       git clone git://bucardo.org/dbdpg.git [GSM]
Pullup tickets #3790 and #3791.
Pullup ticket #3792 - requested by joerg
pkgtools/pbulk: bug fix update

Revisions pulled up:
- pkgtools/pbulk/Makefile                                       1.63
- pkgtools/pbulk/files/pbulk/scripts/compute-packages.awk       1.4

---
   Module Name:	pkgsrc
   Committed By:	joerg
   Date:		Sun May 20 20:12:02 UTC 2012

   Modified Files:
   	pkgsrc/pkgtools/pbulk: Makefile
   	pkgsrc/pkgtools/pbulk/files/pbulk/scripts: compute-packages.awk

   Log Message:
   pbulk-0.49: Fix a bug in the computation of the restricted subset.
Pullup ticket #3792.
Pullup ticket #3793 - requested by bouyer
security/p5-AuthCAS: new package required for security update

Revisions pulled up:
- security/Makefile                                             1.434
- security/p5-AuthCAS/DESCR					new file
- security/p5-AuthCAS/Makefile                                  1.2-1.4
- security/p5-AuthCAS/distinfo					new file

---
   Module Name:	pkgsrc
   Committed By:	bouyer
   Date:		Wed May 16 15:55:24 UTC 2012

   Log Message:
   Inital import of security/p5-AuthCAS version 1.5

   AuthCAS aims at providing a Perl API to Yale's Central Authentication System
   (CAS). Only a basic Perl library is provided with CAS whereas AuthCAS is a
   full object-oriented library.
---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Thu May 17 10:21:12 UTC 2012

   Modified Files:
   	pkgsrc/security/p5-AuthCAS: Makefile

   Log Message:
   pkglint cleanup: use standard packlist path.

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Thu May 17 10:35:14 UTC 2012

   Modified Files:
   	pkgsrc/security/p5-AuthCAS: Makefile

   Log Message:
   Change HOMEPAGE to permalink.

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Thu May 17 10:52:49 UTC 2012

   Modified Files:
   	pkgsrc/security/p5-AuthCAS: Makefile

   Log Message:
   Add missing dependency on p5-IO-Socket-SSL and p5-libwww (for LWP::UserAgent).

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	jnemeth
   Date:		Thu May 17 05:05:37 UTC 2012

   Modified Files:
   	pkgsrc/security: Makefile

   Log Message:
   add and enable p5-AuthCAS
Pullup ticket #3794 - requested by bouyer
textproc/p5-Unicode-LineBreak: new package required for security update

Revisions pulled up:
- textproc/Makefile                                             1.622
- textproc/p5-Unicode-LineBreak/DESCR				new file
- textproc/p5-Unicode-LineBreak/Makefile                        1.2-1.3
- textproc/p5-Unicode-LineBreak/distinfo			new file

---
    Module Name:	pkgsrc
    Committed By:	bouyer
    Date:		Wed May 16 15:58:12 UTC 2012

    Log Message:
    Initial import of textproc/p5-Unicode-LineBreak 2012.02

    Three main modules and some supporting program files are contained. For
    more details read following POD documentations:

        Text::LineFold - Line Folding for Plain Text
        Unicode::GCString - String as Sequence of UAX #29 Grapheme Clusters
        Unicode::LineBreak - UAX #14 Unicode Line Breaking Algorithm
---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Thu May 17 10:32:20 UTC 2012

   Modified Files:
   	pkgsrc/textproc/p5-Unicode-LineBreak: Makefile

   Log Message:
   Add missing dependency. Not make-jobs safe.
   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Thu May 17 10:37:43 UTC 2012

   Modified Files:
   	pkgsrc/textproc/p5-Unicode-LineBreak: Makefile

   Log Message:
   canonicalize MASTER_SITES and HOMEPAGE url.

---
   Module Name:	pkgsrc
   Committed By:	jnemeth
   Date:		Thu May 17 05:11:39 UTC 2012

   Modified Files:
   	pkgsrc/textproc: Makefile

   Log Message:
   add and enable p5-Unicode-LineBreak
Pullup ticket #3795 - requested by taca
textproc/libxml2: security patch

Revisions pulled up:
- textproc/libxml2/Makefile                                     1.116
- textproc/libxml2/distinfo                                     1.91-1.92
- textproc/libxml2/patches/patch-threads.c                      1.2
- textproc/libxml2/patches/patch-xpointer.c                     1.2

---
   Module Name:	pkgsrc
   Committed By:	mishka
   Date:		Fri Apr 27 15:05:02 UTC 2012

   Modified Files:
   	pkgsrc/textproc/libxml2: distinfo
   	pkgsrc/textproc/libxml2/patches: patch-threads.c

   Log Message:
   FreeBSD 6 and earlier misses the pthread_equal() stub as well.
   While here, improve comments a little bit.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon May 21 12:22:54 UTC 2012

   Modified Files:
   	pkgsrc/textproc/libxml2: Makefile distinfo
   	pkgsrc/textproc/libxml2/patches: patch-xpointer.c

   Log Message:
   Add fix for http://secunia.com/advisories/49177/ from repository.

   Bump PKGREVISION.
Pullup tickets #3793, #3794 and #3795.
Pullup ticket #3796 - requested by bouyer
mail/sympa: security update

Revisions pulled up:
- mail/sympa/MESSAGE                                            1.4
- mail/sympa/Makefile                                           1.47
- mail/sympa/PLIST                                              1.10
- mail/sympa/distinfo                                           1.13
- mail/sympa/files/bulk.sh                                      1.1
- mail/sympa/patches/patch-aa                                   1.6
- mail/sympa/patches/patch-ab                                   1.5
- mail/sympa/patches/patch-ac                                   1.3
- mail/sympa/patches/patch-af                                   1.3
- mail/sympa/patches/patch-ag                                   deleted
- mail/sympa/patches/patch-ah                                   deleted
- mail/sympa/patches/patch-ai                                   deleted
- mail/sympa/patches/patch-aj                                   deleted

---
   Module Name:	pkgsrc
   Committed By:	bouyer
   Date:		Wed May 16 16:16:46 UTC 2012

   Modified Files:
   	pkgsrc/mail/sympa: MESSAGE Makefile PLIST distinfo
   	pkgsrc/mail/sympa/patches: patch-aa patch-ab patch-ac patch-af
   Added Files:
   	pkgsrc/mail/sympa/files: bulk.sh
   Removed Files:
   	pkgsrc/mail/sympa/patches: patch-ag patch-ah patch-ai patch-aj

   Log Message:
   Update sympa to latest stable release 6.1.11. Lots of changes since the 5.4
   series, users are encouraged to read /usr/pkg/share/doc/sympa/NEWS for
   details. Summary of new features:

   ***   New bulk.pl daemon installed with Sympa. This daemon is dedicated to
         mail distribution and allows to parallelize this process on a single
         server as well as on multiple servers.
   ***   [Olivier Lumineau, CRU] Fresh new web CSS for the web interface.
   ***   Replace storage of password with encryption by md5 fingerprint. This
         make remind password impossible. So now a one time ticket table is created
         ticket are  sent by email as an authentication token. Ticket can be used
         for lost password, create account, moderation request . It should be
         generalized to all operation that need a email chalenge.
   ***  New propertie in object message : spam_status .  This feature is used in
        modindex (listing of message waiting for moderation) to show message
        tagued as spam.
        4 new parameters :
   	 - antispam_feature default off
   	 - antispam_tag_header_name default X-Spam-Status
   	 - antispam_tag_header_spam_regexp default ^\s*Yes
   	 - antispam_tag_header_ham_regexp default ^\s*No
   ***  DKIM : Sympa now supports DKIM for message diffusion and control.
   ***  web_tt2/Makefile.am, web_tt2/ca.tt2, web_tt2/lca.tt2,
        wwsympa/wwsympa.fcgi.in:  It is now possible to create Custom actions
        at the list or robot level. These custom actions allow you to create
        new pages in the Sympa web interface. for now, you can only display
        informations using this method. any post treatment (such as form
        submission) must be handled outside of Sympa. See
        https://www.sympa.org/manual_6.1/customizing#custom_actions for more
        details.
   ***  [Submitted by J. jourdan] "suspension of membership." The user can suspend
        his subscription to the lists
        that he subscribes. For a finite length or not. Added a calendar in
        javascript to select a date.

   Also, lots of translastion updates, and bug fixes (including security ones)
Pullup ticket #3796.
Pullup ticket #3797 - requested by taca
net/bind99/: security update

Revisions pulled up:
- net/bind99/Makefile                                           1.3-1.4
- net/bind99/PLIST                                              1.2
- net/bind99/distinfo                                           1.4
- net/bind99/files/named9.sh                                    1.2
- net/bind99/patches/patch-bin_tests_system_Makefile.in         1.2
- net/bind99/patches/patch-lib_dns_resolver.c                   deleted

---
   Module Name:	pkgsrc
   Committed By:	marino
   Date:		Sun May 20 12:00:15 UTC 2012

   Modified Files:
   	pkgsrc/net/bind99: Makefile
   	pkgsrc/net/bind99/files: named9.sh

   Log Message:
   PR#45780 net/bind99: Fix chroot operation

   DNSSEC related, bind99 needs same fix as bind98

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue May 22 03:31:07 UTC 2012

   Modified Files:
   	pkgsrc/net/bind99: Makefile PLIST distinfo
   	pkgsrc/net/bind99/patches: patch-bin_tests_system_Makefile.in
   Removed Files:
   	pkgsrc/net/bind99/patches: patch-lib_dns_resolver.c

   Log Message:
   Update biind99 package to 9.9.1.

   pkgsrc change: add an comment to patches/patch-bin_tests_system_Makefile.in.

   Changes from release announce:

   Security Fixes

   *  Windows binary packages distributed by ISC are now built and linked
      against OpenSSL 1.0.0i

   New Features

   *  None

   Feature Changes

   *  BIND now recognizes the TLSA resource record type, created to
      support IETF DANE (DNS-based Authentication of Named Entities)
      [RT #28989]

   *  A note will be added to the README in future releases to explain
      that the improved scalability provided by using multiple threads
      to listen for and process queries (change 3137, RT #22992) does
      not provide any performance benefit when running BIND on versions
      of the linux kernel that do not include the 'lockless UDP transmit
      path' changes that were incorporated in 2.6.39.  (Some linux
      distributors may have provided this functionality under their
      own version numbering systems).

   Bug Fixes

   *  The locking strategy around the handling of iterative queries
      has been tuned to reduce unnecessary contention in a multi-threaded
      environment.  (Note that this may not provide a measurable
      improvement over previous versions of BIND, but it corrects the
      performance impact of change 3309 / RT #27995) [RT #29239]

   *  Addresses a race condition that can cause named to to crash when
      the masters list for a zone is updated via rndc reload/reconfig
      [RT #26732]

   *  named-checkconf now correctly validates dns64 clients acl
      definitions. [RT #27631]

   *  Fixes a race condition in zone.c that can cause named to crash
      during the processing of rndc delzone [RT #29028]

   *  Prevents a named segfault from resolver.c due to procedure
      fctx_finddone() not being thread-safe.  [RT #27995]

   *  Improves DNS64 reverse zone performance. [RT #28563]

   *  Adds wire format lookup method to sdb. [RT #28563]

   *  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
      an assertion when flushing cache data. [RT #28571]

   *  Prevents intermittent named crashes following an rndc reload [RT
      #28606]

   *  Resolves inconsistencies in locating DNSSEC keys where zone names
      contain characters that require special mappings [RT #28600]

   *  A new flag -R  has been added to queryperf for running tests
      using non-recursive queries.  It also now builds correctly on
      MacOS version 10.7 (darwin)  [RT #28565]

   *  Named no longer crashes if gssapi is enabled in named.conf but
      was not compiled into the binary [RT #28338]

   *  SDB now handles unexpected errors from back-end database drivers
      gracefully instead of exiting on an assert. [RT #28534]

   *  Prevents named crashes as a result of dereferencing a NULL pointer
      in zmgr_start_xfrin_ifquota if the zone was being removed while
      there were zone transfers still pending [RT #28419]

   *  Corrects a parser bug that could cause named to crash while
      reading a malformed zone file. [RT #28467]

   *  Ensures that when a client recurses its status fields are
      consistently set so that named doesn't fail on an INSIST in
      client.c:exit_check. [RT #28346]

   *  Fixed a problem preventing proper use of 64 bit time values in
      libbind. [RT # 26542]

   *  isccc/cc.c:table_fromwire could fail to free an allocated object
      on error, leading to a possible memory leak condition. [RT #28265]

   *  Fixed a build error on systems without ENOTSUP.  [RT #28200]

   *  The header file isc/hmacsha.h is now installed when building
      BIND. [RT #28169]

   *  AAAA responses will no longer be returned in the additional
      section when filter-aaaa-on-v4 is in use.  (Prior to this change,
      they would be returned for some query types). [RT #27292]
Pullup ticket #3798 - requested by taca
net/bind98: security update

Revisions pulled up:
- net/bind98/Makefile                                           1.10-1.11
- net/bind98/distinfo                                           1.10-1.11
- net/bind98/files/named9.sh                                    1.2
- net/bind98/patches/patch-bin_tests_system_Makefile.in         1.1-1.2
- net/bind98/patches/patch-lib_dns_resolver.c                   deleted

---
   Module Name:    pkgsrc
   Committed By:   marino
   Date:           Sun May 20 13:22:40 UTC 2012

   Modified Files:
           pkgsrc/net/bind98: distinfo
   Added Files:
           pkgsrc/net/bind98/patches: patch-bin_tests_system_Makefile.in

   Log Message:
   net/bind98: Fix undefined reference to 'main'

   Bind98 needs the same fix bind99 received on 23 Mar 2012 to fix the
   linking of driver.so

---
   Module Name:	pkgsrc
   Committed By:	marino
   Date:		Sun May 20 09:10:44 UTC 2012

   Modified Files:
   	pkgsrc/net/bind98: Makefile
   	pkgsrc/net/bind98/files: named9.sh

   Log Message:
   PR#45780 net/bind98: Fix chroot operation

   Implemented per PR.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue May 22 03:32:31 UTC 2012

   Modified Files:
   	pkgsrc/net/bind98: Makefile distinfo
   	pkgsrc/net/bind98/patches: patch-bin_tests_system_Makefile.in
   Removed Files:
   	pkgsrc/net/bind98/patches: patch-lib_dns_resolver.c

   Log Message:
   Update bind98 to 9.8.3.

   pkgsrc change: add an comment to patches/patch-bin_tests_system_Makefile.in.

   Changes from release announce:

   Security Fixes

   *  Windows binary packages distributed by ISC are now built and linked
      against OpenSSL 1.0.0i

   New Features

   *  None

   Feature Changes

   *  BIND now recognizes the TLSA resource record type, created to
      support IETF DANE (DNS-based Authentication of Named Entities)
      [RT #28989]

   Bug Fixes

   *  The locking strategy around the handling of iterative queries
      has been tuned to reduce unnecessary contention in a multi-threaded
      environment.  (Note that this may not provide a measurable
      improvement over previous versions of BIND, but it corrects the
      performance impact of change 3309 / RT #27995) [RT #29239]

   *  Addresses a race condition that can cause named to to crash when
      the masters list for a zone is updated via rndc reload/reconfig
      [RT #26732]

   *  named-checkconf now correctly validates dns64 clients acl
      definitions. [RT #27631]

   *  Fixes a race condition in zone.c that can cause named to crash
      during the processing of rndc delzone [RT #29028]

   *  Prevents a named segfault from resolver.c due to procedure
      fctx_finddone() not being thread-safe.  [RT #27995]

   *  Improves DNS64 reverse zone performance. [RT #28563]

   *  Adds wire format lookup method to sdb. [RT #28563]

   *  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
      an assertion when flushing cache data. [RT #28571]

   *  Resolves inconsistencies in locating DNSSEC keys where zone names
      contain characters that require special mappings [RT #28600]

   *  A new flag -R  has been added to queryperf for running tests
      using non-recursive queries.  It also now builds correctly on
      MacOS version 10.7 (darwin)  [RT #28565]

   *  Named no longer crashes if gssapi is enabled in named.conf but
      was not compiled into the binary [RT #28338]

   *  SDB now handles unexpected errors from back-end database drivers
      gracefully instead of exiting on an assert. [RT #28534]
Pullup ticket #3799 - requested by taca
net/bind97: security update

Revisions pulled up:
- net/bind97/Makefile                                           1.14
- net/bind97/distinfo                                           1.13
- net/bind97/patches/patch-lib_dns_resolver.c                   deleted

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue May 22 03:33:28 UTC 2012

   Modified Files:
   	pkgsrc/net/bind97: Makefile distinfo
   Removed Files:
   	pkgsrc/net/bind97/patches: patch-lib_dns_resolver.c

   Log Message:
   Update bind97 package to 9.7.6.

   New Features

   *  None

   Feature Changes

   *  BIND now recognizes the TLSA resource record type, created to
      support IETF DANE (DNS-based Authentication of Named Entities)
      [RT #28989]

   Bug Fixes

   *  The locking strategy around the handling of iterative queries
      has been tuned to reduce unnecessary contention in a multi-threaded
      environment.  (Note that this may not provide a measurable
      improvement over previous versions of BIND, but it corrects the
      performance impact of change 3309 / RT #27995) [RT #29239]

   *  Addresses a race condition that can cause named to to crash when
      the masters list for a zone is updated via rndc reload/reconfig
      [RT #26732]

   *  Fixes a race condition in zone.c that can cause named to crash
      during the processing of rndc delzone [RT #29028]

   *  Prevents a named segfault from resolver.c due to procedure
      fctx_finddone() not being thread-safe.  [RT #27995]

   *  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
      an assertion when flushing cache data. [RT #28571]

   *  A new flag -R  has been added to queryperf for running tests
      using non-recursive queries.  It also now builds correctly on
      MacOS version 10.7 (darwin)  [RT #28565]

   *  Named no longer crashes if gssapi is enabled in named.conf but
      was not compiled into the binary [RT #28338]

   *  SDB now handles unexpected errors from back-end database drivers
      gracefully instead of exiting on an assert. [RT #28534]
Pullup ticket #3800 - requested by taca
net/bind96: security update

Revisions pulled up:
- net/bind96/Makefile                                           1.25
- net/bind96/distinfo                                           1.17
- net/bind96/patches/patch-lib_dns_resolver.c                   deleted

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue May 22 03:34:32 UTC 2012

   Modified Files:
   	pkgsrc/net/bind96: Makefile distinfo
   Removed Files:
   	pkgsrc/net/bind96/patches: patch-lib_dns_resolver.c

   Log Message:
   Update bind96 package to 9.6.3.1.ESV.7 (BIND 9.6-ESV-R7).

   New Features

   *  None

   Feature Changes

   *  BIND now recognizes the TLSA resource record type, created to
      support IETF DANE (DNS-based Authentication of Named Entities)
      [RT #28989]

   Bug Fixes

   *  The locking strategy around the handling of iterative queries
      has been tuned to reduce unnecessary contention in a multi-threaded
      environment.  (Note that this may not provide a measurable
      improvement over previous versions of BIND, but it corrects the
      performance impact of change 3309 / RT #27995) [RT #29239]

   *  Addresses a race condition that can cause named to to crash when
      the masters list for a zone is updated via rndc reload/reconfig
      [RT #26732]

   *  Fixes a race condition in zone.c that can cause named to crash
      during the processing of rndc delzone [RT #29028]

   *  Prevents a named segfault from resolver.c due to procedure
      fctx_finddone() not being thread-safe.  [RT #27995]

   *  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
      an assertion when flushing cache data. [RT #28571]

   *  Resolves inconsistencies in locating DNSSEC keys where zone names
      contain characters that require special mappings [RT #28600]

   *  A new flag -R  has been added to queryperf for running tests
      using non-recursive queries.  It also now builds correctly on
      MacOS version 10.7 (darwin)  [RT #28565]

   *  Named no longer crashes if gssapi is enabled in named.conf but
      was not compiled into the binary [RT #28338]

   *  SDB now handles unexpected errors from back-end database drivers
      gracefully instead of exiting on an assert. [RT #28534]
Pullup ticket #3797, #3798, #3799 and #3800.
Pullup ticket #3802 - requested by reed
x11/slock: security update

Revisions pulled up:
- x11/slock/Makefile                                            1.4
- x11/slock/distinfo                                            1.2

---
   Module Name:    pkgsrc
   Committed By:   reed
   Date:           Wed May 23 17:10:50 UTC 2012

   Modified Files:
           pkgsrc/doc: CHANGES-2012
           pkgsrc/x11/slock: Makefile distinfo

   Log Message:
   Upgrade slock to 1.0

   Add license and change homepage.

   No changes file included in source distribution.
   Changes can be seen at http://hg.suckless.org/slock/ (see changelog
   for last few versions).

   One important fix is:
   added XRaiseWindow workaround when new clients are launched

   See http://secunia.com/advisories/48700/ for the security issue.
Pullup ticket #3801.