Pullup ticket #4213 - requested by spz
lang/python27: security patch

Revisions pulled up:
- lang/python27/Makefile                                        1.27
- lang/python27/PLIST.common                                    1.6
- lang/python27/distinfo                                        1.25
- lang/python27/patches/patch-Lib_test_nullbytecert.pem         1.1
- lang/python27/patches/patch-Lib_test_test__ssl.py             1.1
- lang/python27/patches/patch-Misc_NEWS                         1.1
- lang/python27/patches/patch-Modules___ssl.c                   1.2

---
   Module Name:	pkgsrc
   Committed By:	spz
   Date:		Sun Aug 18 13:42:14 UTC 2013

   Modified Files:
   	pkgsrc/lang/python27: Makefile PLIST.common distinfo
   	pkgsrc/lang/python27/patches: patch-Modules___ssl.c
   Added Files:
   	pkgsrc/lang/python27/patches: patch-Lib_test_nullbytecert.pem
   	    patch-Lib_test_test__ssl.py patch-Misc_NEWS

   Log Message:
   patch for CVE-2013-4238 taken from
   http://hg.python.org/cpython/rev/bd2360476bdb
Pullup ticket #4214 - requested by bsiegert
devel/doxygen: build fix

Revisions pulled up:
- devel/doxygen/distinfo                                        1.50
- devel/doxygen/patches/patch-tmake_lib_macosx-c++_tmake.conf   1.1

---
   Module Name:    pkgsrc
   Committed By:   bsiegert
   Date:           Tue Aug 20 17:41:15 UTC 2013

   Modified Files:
           pkgsrc/devel/doxygen: distinfo
   Added Files:
           pkgsrc/devel/doxygen/patches: patch-tmake_lib_macosx-c++_tmake.conf

   Log Message:
   Fix build on Mac OS 10.8 by removing an unsupported compiler option.
Pullup ticket #4215 - requested by hannken
net/chrony: security update

Revisions pulled up:
- net/chrony/Makefile                                           1.29
- net/chrony/PLIST                                              1.5
- net/chrony/distinfo                                           1.8
- net/chrony/files/chronyd.sh                                   1.5
- net/chrony/patches/patch-aa                                   1.5
- net/chrony/patches/patch-ab                                   1.5
- net/chrony/patches/patch-ac                                   1.5
- net/chrony/patches/patch-ad                                   1.4
- net/chrony/patches/patch-ae                                   1.5
- net/chrony/patches/patch-af                                   1.4
- net/chrony/patches/patch-ag                                   1.4

---
   Module Name:    pkgsrc
   Committed By:   hannken
   Date:           Fri Aug 16 08:30:20 UTC 2013

   Modified Files:
           pkgsrc/net/chrony: Makefile PLIST distinfo
           pkgsrc/net/chrony/files: chronyd.sh
           pkgsrc/net/chrony/patches: patch-aa patch-ab patch-ac patch-ad patch-ae
               patch-af
   Added Files:
           pkgsrc/net/chrony/patches: patch-ag

   Log Message:
   Update chrony to version 1.29. For a full list of changes
   since 1.24 see file NEWS in the distfile.

   Security fixes since 1.24:

   * Fix crash when processing crafted commands (CVE-2012-4502)
     (possible with IP addresses allowed by cmdallow and localhost)
   * Don't send uninitialized data in SUBNETS_ACCESSED and CLIENT_ACCESSES
     replies (CVE-2012-4503) (not used by chronyc)

   Reviewed by: Joerg Sonnenberger <joerg%netbsd.org@localhost>
Pullup tickets #4213, #4214 and #4215.
Pullup ticket #4216 - requested by drochner
security/putty: security update

Revisions pulled up:
- security/putty/Makefile                                       1.34-1.35
- security/putty/distinfo                                       1.14-1.15
- security/putty/patches/patch-CVE-2013-4852-1                  deleted
- security/putty/patches/patch-CVE-2013-4852-2                  deleted
- security/putty/patches/patch-import.c                         1.2-1.3
- security/putty/patches/patch-terminal.c                       deleted
- security/putty/patches/patch-timing.c                         1.2
- security/putty/patches/patch-unix_gtkfont_c                   deleted
- security/putty/patches/patch-unix_gtkwin.c                    1.3
- security/putty/patches/patch-unix_uxnet.c                     1.2
- security/putty/patches/patch-unix_uxucs.c                     1.2
- security/putty/patches/patch-windows_window.c                 1.2

---
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Tue Aug  6 12:23:37 UTC 2013

   Modified Files:
           pkgsrc/security/putty: Makefile distinfo
           pkgsrc/security/putty/patches: patch-import.c
   Added Files:
           pkgsrc/security/putty/patches: patch-CVE-2013-4852-1
               patch-CVE-2013-4852-2

   Log Message:
   add patch from upstream to fix possible heap overflow in SSH handshake
   due to integer overflow (CVE-2013-4852)
   bump PKGREV

---
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Wed Aug  7 11:06:39 UTC 2013

   Modified Files:
           pkgsrc/security/putty: Makefile distinfo
           pkgsrc/security/putty/patches: patch-import.c patch-timing.c
               patch-unix_gtkwin.c patch-unix_uxnet.c patch-unix_uxucs.c
               patch-windows_window.c
   Removed Files:
           pkgsrc/security/putty/patches: patch-CVE-2013-4852-1
               patch-CVE-2013-4852-2 patch-terminal.c patch-unix_gtkfont_c

   Log Message:
   update to 0.63
   This fixes a buffer overflow which was patched in pkgsrc
   (CVE-2013-4852), two other buffer overflows (CVE-2013-4206,
   CVE-2013-4207), and it clears private keys after use now
   (CVE-2013-4208). Other than that, there are mostly bug fixes from 0.62
   and a few small features.
Pullup ticket #4217 - requested by drochner
net/filezilla: security update

Revisions pulled up:
- net/filezilla/Makefile                                        1.44-1.45
- net/filezilla/PLIST                                           1.10
- net/filezilla/distinfo                                        1.17-1.18
- net/filezilla/patches/patch-CVE-2013-4206                     1.1
- net/filezilla/patches/patch-CVE-2013-4208                     1.1
- net/filezilla/patches/patch-CVE-2013-4852-1                   deleted
- net/filezilla/patches/patch-CVE-2013-4852-2                   deleted
- net/filezilla/patches/patch-CVE-2013-4852-3                   deleted
- net/filezilla/patches/patch-aa                                deleted

---
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Tue Aug  6 12:55:10 UTC 2013

   Modified Files:
           pkgsrc/net/filezilla: Makefile distinfo
   Added Files:
           pkgsrc/net/filezilla/patches: patch-CVE-2013-4852-1
               patch-CVE-2013-4852-2 patch-CVE-2013-4852-3

   Log Message:
   apply patches from pkgsrc/security/putty to fix embedded sftp client
   bump PKGREV

---
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Wed Aug  7 16:48:49 UTC 2013

   Modified Files:
           pkgsrc/net/filezilla: Makefile PLIST distinfo
   Added Files:
           pkgsrc/net/filezilla/patches: patch-CVE-2013-4206
   patch-CVE-2013-4208 Removed Files:
           pkgsrc/net/filezilla/patches: patch-CVE-2013-4852-1
               patch-CVE-2013-4852-2 patch-CVE-2013-4852-3 patch-aa

   Log Message:
   update to 3.7.2
   This is a major update, many fixes and improvements.
   Main reason for the update was to sync the embedded sftp client
   with putty after fixes for vulnerabilities.
Pullup tickets #4216 and #4217.