Pullup ticket #3999 - requested by jnemeth
comms/asterisk: security update

Revisions pulled up:
- comms/asterisk/Makefile                                       1.79
- comms/asterisk/distinfo                                       1.52

---
   Module Name:    pkgsrc
   Committed By:   jnemeth
   Date:           Fri Jan  4 03:09:56 UTC 2013

   Modified Files:
           pkgsrc/comms/asterisk: Makefile distinfo

   Log Message:
   Update to Asterisk 11.1.2:  this is a security update for AST-2012-014
   and AST-2012-015.  Apparently the last update didn't completely
   fix the issues.

   The Asterisk Development Team has announced a security release for
   Asterisk 11, Asterisk 11.1.2. This release addresses the security
   vulnerabilities reported in AST-2012-014 and AST-2012-015, and
   replaces the previous version of Asterisk 11 released for these
   security vulnerabilities. The prior release left open a vulnerability
   in res_xmpp that exists only in Asterisk 11; as such, other versions
   of Asterisk were resolved correctly by the previous releases.

   The release of these versions resolve the following two issues:

   * Stack overflows that occur in some portions of Asterisk that manage a TCP
     connection. In SIP, this is exploitable via a remote unauthenticated session;
     in XMPP and HTTP connections, this is exploitable via remote authenticated
     sessions. The vulnerabilities in SIP and HTTP were corrected in a prior
     release of Asterisk; the vulnerability in XMPP is resolved in this release.

   * A denial of service vulnerability through exploitation of the device state
     cache. Anonymous calls had the capability to create devices in Asterisk that
     would never be disposed of. Handling the cachability of device states
     aggregated via XMPP is handled in this release.

   These issues and their resolutions are described in the security advisories.

   For more information about the details of these vulnerabilities, please read
   security advisories AST-2012-014 and AST-2012-015.

   For a full list of changes in the current release, please see the ChangeLog:

   http://downloads.asterisk.org/pub/telephony/asterisk/releases/ChangeLog-11.1.2

   The security advisories are available at:

    * http://downloads.asterisk.org/pub/security/AST-2012-014.pdf
    * http://downloads.asterisk.org/pub/security/AST-2012-015.pdf

   Thank you for your continued support of Asterisk - and we apologize for having
   to do this twice!
Pullup ticket #3999.
LICENSE=, RESTRICTED=, set NO_*_ON_*.

The license is only available as a pdf, and I decline to extract and
check in text.

This license is clearly non-Free, and no permission is granted to
distribute source or binaries, so set NO_*_ON_*.

Fixes PR pkg/43210.
Add LICENSE=, set NO_*_ON_*.

The licensing for this package is unclear.  In particular, it appears
to contain an embedded copy of pdflib.  Mark it non-redistributable
until someone analyzes and addresses the issues.
Revert commit wrongly on stable branch
revert commit wrongly ons stable branch
Pullup ticket #4000 - requested by dholland
sysutils/bacula: build fix

Revisions pulled up:
- sysutils/bacula/PLIST.server                                  1.10

---
   Module Name:	pkgsrc
   Committed By:	dholland
   Date:		Fri Jan  4 23:25:50 UTC 2013

   Modified Files:
   	pkgsrc/sysutils/bacula: PLIST.server

   Log Message:
   Improve previous change so it honors BACULA_DB. From Petar Bogdanovic.
Pullup ticket #4000.
Pullup ticket #4003 - requested by wiz
graphics/freetype2: security update

Revisions pulled up:
- graphics/freetype2/Makefile                                   1.89
- graphics/freetype2/PLIST                                      1.19
- graphics/freetype2/distinfo                                   1.49

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Sun Jan  6 00:38:13 UTC 2013

   Modified Files:
   	pkgsrc/graphics/freetype2: Makefile PLIST distinfo

   Log Message:
   Update to 2.4.11:

   CHANGES BETWEEN 2.4.10 and 2.4.11

     I. IMPORTANT BUG FIXES

       - Some vulnerabilities in the  BDF implementation have been fixed.
         Users of this font format should upgrade.

     II. IMPORTANT CHANGES

       - Subpixel  hinting support  has been  contributed by  Infinality,
         based on Greg Hitchcock's whitepaper at

           http://www.microsoft.com/typography/cleartype/truetypecleartype.aspx

         Originally, it was a separate patch available from

           http://www.infinality.net/blog/

         and which has been integrated.

         Note that  ClearType support is not  completely implemented!  In
         particular,  full support  for the  options `compatible_widths',
         `symmetrical_smoothing,  and  `bgr'  (via the  GETINFO  bytecode
         instruction) is missing.

         Activation of  subpixel hinting  support can be  controlled with
         the `TT_CONFIG_OPTION_SUBPIXEL_HINTING' configuration option; it
         is switched off by default.  This feature is still experimental;
         we welcome test reports!

       - Support for OpenType collections (OTC) has been added.

       - Pure CFF fonts within an SFNT wrapper are now supported.

     III. MISCELLANEOUS

       - Minor rendering improvements to the auto-hinter.

       - `FT_GlyphSlot_Oblique' now uses a shear angle of 12°.

       - Experimental support  to handle `property modules',  for example
         to control the  behaviour of the auto-hinter.   The API consists
         of two new functions, `FT_Property_Set' and `FT_Property_Get'.

         The code is  still subject to change and should  not be used for
         production.

       - The `ftdiff' demo program now supports UTF-8 encoded input files
         for option `-f'.

       - Using keys `r' and `R', you can now adjust the stroker radius in
         the `ftview' demo program.

       - Other, minor fixes and improvements.


   To generate a diff of this commit:
   cvs rdiff -u -r1.88 -r1.89 pkgsrc/graphics/freetype2/Makefile
   cvs rdiff -u -r1.18 -r1.19 pkgsrc/graphics/freetype2/PLIST
   cvs rdiff -u -r1.48 -r1.49 pkgsrc/graphics/freetype2/distinfo
pullup 4003
Pullup ticket #4001 - requested by kleink
textproc/p5-Text-vCard: build fix

Revisions pulled up:
- textproc/p5-Text-vCard/Makefile                               1.18

---
   Module Name:	pkgsrc
   Committed By:	kleink
   Date:		Sun Jan  6 14:21:16 UTC 2013

   Modified Files:
   	pkgsrc/textproc/p5-Text-vCard: Makefile

   Log Message:
   Simplify MASTER_SITES by staying in the by-module hierarchy as
   implied by MASTER_SITE_PERL_CPAN, rather than traversing ../by-authors.

   Fixes a distfile fetch problem experienced by wiz.
Pullup ticket #4002 - requested by spz
security/gnupg: security update

Revisions pulled up:
- security/gnupg/Makefile                                       1.115
- security/gnupg/distinfo                                       1.56
- security/gnupg/patches/patch-ak                               deleted
- security/gnupg/patches/patch-cipher_idea-stub.c               deleted
- security/gnupg/patches/patch-mpi_mpi-inline.h                 deleted

---
   Module Name:	pkgsrc
   Committed By:	spz
   Date:		Sun Jan  6 14:50:48 UTC 2013

   Modified Files:
   	pkgsrc/security/gnupg: Makefile distinfo
   Removed Files:
   	pkgsrc/security/gnupg/patches: patch-ak patch-cipher_idea-stub.c
   	    patch-mpi_mpi-inline.h

   Log Message:
   update of gnupg
   Fixes CVE-2012-6085

   Upstream Changes:
       * Add support for the old cipher algorithm IDEA.

       * Minor bug fixes.

       * Small changes to better cope with future OpenPGP and GnuPG
         features.
Pullup tickets #4001 and #4002.