Pullup ticket #4088 - requested by tron
www/apache22: security update

Revisions pulled up:
- www/apache22/Makefile                                         1.87
- www/apache22/PLIST                                            1.22
- www/apache22/distinfo                                         1.54

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Sun Mar  3 20:05:04 UTC 2013

   Modified Files:
   	pkgsrc/www/apache22: Makefile PLIST distinfo

   Log Message:
   Update "apache" package to version 2.2.24. Changes since 2.2.23:
   - SECURITY: CVE-2012-3499 (cve.mitre.org)
     Various XSS flaws due to unescaped hostnames and URIs HTML output in
     mod_info, mod_status, mod_imagemap, mod_ldap, and mod_proxy_ftp.
     [Jim Jagielski, Stefan Fritsch, Niels Heinen <heinenn google com>]
   - SECURITY: CVE-2012-4558 (cve.mitre.org)
     XSS in mod_proxy_balancer manager interface. [Jim Jagielski,
     Niels Heinen <heinenn google com>]
   - mod_rewrite: Stop merging RewriteBase down to subdirectories
     unless new option 'RewriteOptions MergeBase' is configured.
     Merging RewriteBase was unconditionally turned on in 2.2.23.
     Bug Report 53963. [Eric Covener]
   - mod_ssl: Send the error message for speaking http to an https port using
     HTTP/1.0 instead of HTTP/0.9, and omit the link that may be wrong when
     using SNI. Bug Report 50823. [Stefan Fritsch]
   - mod_ssl: log revoked certificates at level INFO
     instead of DEBUG. Bug Report 52162. [Stefan Fritsch]
   - mod_proxy_ajp: Support unknown HTTP methods. Bug Report 54416.
     [Rainer Jung]
   - mod_dir: Add support for the value 'disabled' in FallbackResource.
     [Vincent Deffontaines]
   - mod_ldap: Fix regression in handling "server unavailable" errors on
     Windows.  Bug Report 54140.  [Eric Covener]
   - mod_ssl: fix a regression with the string rendering of the "UID" RDN
     introduced in 2.2.15. Bug Report 54510. [Kaspar Brand]
   - ab: add TLS1.1/TLS1.2 options to -f switch, and adapt output
     to more accurately report the negotiated protocol. Bug Report 53916.
     [Nicol=E1s Pernas Maradei <nico emutex com>, Kaspar Brand]
   - mod_cache: Explicitly allow cache implementations to cache a 206 Partial
     Response if they so choose to do so. Previously an attempt to cache a 206
     was arbitrarily allowed if the response contained an Expires or
     Cache-Control header, and arbitrarily denied if both headers were missing.
     Currently the disk and memory cache providers do not cache 206 Partial
     Responses. [Graham Leggett]
   - core: Remove unintentional APR dependency introduced with
     Apache 2.2.22. [Eric Covener]
   - core: Use a TLS 1.0 close_notify alert for internal dummy connection if
     the chosen listener is configured for https. [Joe Orton]
   - mod_ssl: Add new directive SSLCompression to disable TLS-level
     compression. Bug Report 53219. [Bj=F6rn Jacke <bjoern j3e de>, Stefan Fri=
   tsch]


   To generate a diff of this commit:
   cvs rdiff -u -r1.86 -r1.87 pkgsrc/www/apache22/Makefile
   cvs rdiff -u -r1.21 -r1.22 pkgsrc/www/apache22/PLIST
   cvs rdiff -u -r1.53 -r1.54 pkgsrc/www/apache22/distinfo
Pullup ticket #4090 - requested by tron
net/wireshark: security update

Revisions pulled up:
- net/wireshark/Makefile                                        1.97
- net/wireshark/distinfo                                        1.63
- net/wireshark/patches/patch-ae                                deleted

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Thu Mar  7 12:44:11 UTC 2013

   Modified Files:
   	pkgsrc/net/wireshark: Makefile distinfo
   Removed Files:
   	pkgsrc/net/wireshark/patches: patch-ae

   Log Message:
   Update "wireshark" package to version 1.8.6. Changes since 1.8.5:
   - Bug Fixes
      The following vulnerabilities have been fixed.
        o wnpa-sec-2013-10
          The TCP dissector could crash. (Bug 8274)
          Versions affected: 1.8.0 to 1.8.5.
          CVE-2013-2475
        o wnpa-sec-2013-11
          The HART/IP dissectory could go into an infinite loop. (Bug
          8360)
          Versions affected: 1.8.0 to 1.8.5.
          CVE-2013-2476
        o wnpa-sec-2013-12
          The CSN.1 dissector could crash. Discovered by Laurent Butti.
          (Bug 8383)
          Versions affected: 1.8.0 to 1.8.5.
          CVE-2013-2477
        o wnpa-sec-2013-13
          The MS-MMS dissector could crash. Discovered by Laurent Butti.
          (Bug 8382)
          Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.
          CVE-2013-2478
        o wnpa-sec-2013-14
          The MPLS Echo dissector could go into an infinite loop.
          Discovered by Laurent Butti. (Bug 8039)
          Versions affected: 1.8.0 to 1.8.5.
          CVE-2013-2479
        o wnpa-sec-2013-15
          The RTPS and RTPS2 dissectors could crash. Discovered by
          Alyssa Milburn. (Bug 8332)
          Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.
          CVE-2013-2480
        o wnpa-sec-2013-16
          The Mount dissector could crash. Discovered by Alyssa Milburn.
          (Bug 8335)
          Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.
          CVE-2013-2481
        o wnpa-sec-2013-17
          The AMPQ dissector could go into an infinite loop. Discovered
          by Moshe Kaplan. (Bug 8337)
          Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.
          CVE-2013-2482
        o wnpa-sec-2013-18
          The ACN dissector could attempt to divide by zero. Discovered
          by Alyssa Milburn. (Bug 8340)
          Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.
          CVE-2013-2483
        o wnpa-sec-2013-19
          The CIMD dissector could crash. Discovered by Moshe Kaplan.
          (Bug 8346)
          Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.
          CVE-2013-2484
        o wnpa-sec-2013-20
          The FCSP dissector could go into an infinite loop. Discovered
          by Moshe Kaplan. (Bug 8359)
          Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.
          CVE-2013-2485
        o wnpa-sec-2013-21
          The RELOAD dissector could go into an infinite loop.
          Discovered by Even Jensen. (Bug 8364)
          Versions affected: 1.8.0 to 1.8.5.
          CVE-2013-2486
          CVE-2013-2487
        o wnpa-sec-2013-22
          The DTLS dissector could crash. Discovered by Laurent Butti.
          (Bug 8380)
          Versions affected: 1.8.0 to 1.8.5, 1.6.0 to 1.6.13.
          CVE-2013-2488
      The following bugs have been fixed:
        o Lua pinfo.cols.protocol not holding value in postdissector.
          (Bug 6020)
        o data combined via ssl_desegment_app_data not visible via
          "Follow SSL Stream" only decrypted ssl data tabs. (Bug 6434)
        o HTTP application/json-rpc should be decoded/shown as
          application/json. (Bug 7939)
        o Maximum value of 802.11-2012 Duration field should be 32767.
          (Bug 8056)
        o Voice RTP player crash if player is closed while playing. (Bug
          8065)
        o Display Filter Macros crash. (Bug 8073)
        o RRC RadioBearerSetup message decoding issue. (Bug 8290)
        o R-click filters add ! in front of field when choosing "apply
          as filter>selected". (Bug 8297)
        o BACnet - Loop Object - Setpoint-Reference property does not
          decode correctly. (Bug 8306)
        o WMM TSPEC Element Parsing is not done is wrong due to a wrong
          switch case number. (Bug 8320)
        o Incorrect RTP statistics (Lost Packets indication not ok).
          (Bug 8321)
        o Registering ieee802154 dissector for IEEE802.15.4 frames
          inside Linux SLL frames. (Bug 8325)
        o Version Field is skipped while parsing WMM_TSPEC causing wrong
          dissecting (1 byte offset missing) of all fields in the TSPEC.
          (Bug 8330)
        o [BACnet] UCS-2 strings longer than 127 characters do not
          decode correctly. (Bug 8331)
        o Malformed IEEE80211 frame triggers DISSECTOR_ASSERT. (Bug
          8345)
        o Decoding of GSM MAP SMS Diagnostics. (Bug 8378)
        o Incorrect packet length displayed for Flight Message Transfer
          Protocol (FMTP). (Bug 8407)
        o Netflow dissector flowDurationMicroseconds nanosecond
          conversion wrong. (Bug 8410)
        o BE (3) AC is wrongly named as "Video" in (qos_acs). (Bug 8432)
   - Updated Protocol Support
     ACN, AMQP, ASN.1 PER, BACnet, CIMD, CSN.1, DOCSIS TLVs, DTLS,
     FCSP, FMP/NOTIFY, FMTP, GSM MAP SMS, HART/IP, IEEE 802.11, IEEE
     802.15.4, JSON, Linux SLL, LTE RRC, Mount, MPLS Echo, Netflow,
     RELOAD, RSL, RTP, RTPS, RTPS2, SABP, SIP, SSL, TCP


   To generate a diff of this commit:
   cvs rdiff -u -r1.96 -r1.97 pkgsrc/net/wireshark/Makefile
   cvs rdiff -u -r1.62 -r1.63 pkgsrc/net/wireshark/distinfo
   cvs rdiff -u -r1.3 -r0 pkgsrc/net/wireshark/patches/patch-ae
pullups 4088 and 4090
Pullup ticket #4091 - requested by taca
www/typo3_45: security update

Revisions pulled up:
- www/typo3_45/Makefile                                         1.19-1.20
- www/typo3_45/PLIST                                            1.9
- www/typo3_45/distinfo                                         1.16-1.17

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Mar  5 13:57:48 UTC 2013

   Modified Files:
   	pkgsrc/www/typo3_45: Makefile PLIST distinfo

   Log Message:
   Update typo3_45 to 4.5.23.

   2013-02-14  de390e0                  [RELEASE] Release of TYPO3 4.5.23 (TYPO3 Release Team)
   2013-02-14  63a1e27                  [TASK] Raise submodule pointer (TYPO3 Release Team)
   2013-02-09  c9ef82d  #24248          [BUGFIX] t3lib_iconWorks must check if array exists before using it (Jigal van Hemert)
   2013-02-09  83f1185  #32686          [BUGFIX] BE user switch impossible when in adminOnly mode (Philipp Kitzberger)
   2013-02-09  3d289da  #34460          [BUGFIX] Excludefieds must exclude admin only tables (Georg Ringer)
   2013-02-09  6d006e2  #33214          [BUGFIX] TypoLink: absolute urls when installed in subfolder (Nils Seinschedt)
   2013-02-08  50372c5                  [TASK] Raise submodule pointer (Christian Kuhn)
   2013-02-07  6c8214e  #34129          [BUGFIX][Cache][PDO] Duplicate cache entry possible (Leon Dietsch)
   2013-02-03  cf0fb91  #36364          [BUGFIX] IE9 compatibility clear cache menu (Andreas Kiessling)
   2013-02-02  05d9084  #44416          [BUGFIX] Hook call modifyDBRow in ContentContentObject (Alina Fleser)
   2013-02-02  6f5e19f  #43886          [BUGFIX] Fix misspelling in RTE meta menu (Tomita Militaru)
   2013-02-02  b1a5a4b  #38505          [BUGFIX] load TCA before manipulation (Jigal van Hemert)
   2013-01-31  05c879f  #45050          [TASK] DataHandler::getAutoVersionId() should be public (Oliver Hader)
   2013-01-28  9c32684  #31027          [BUGFIX] Load date-time picker in scheduler module (Christian Kuhn)
   2013-01-27  8ff08c4  #42845          [BUGFIX] Quick Edit triggers warnings of missing key uid (Philipp Gampe)
   2013-01-27  d808455                  [TASK] Raise submodule pointer (Christian Kuhn)
   2013-01-25  ede6862  #39680          [BUGFIX] Fix warnings in em on tab Maintenance (Philipp Gampe)
   2013-01-25  1e0c188  #44145          [BUGFIX] Correct TCA inclusion for uploads rendering (Georg Ringer)
   2013-01-24  2b64b11  #38240          [BUGFIX] Update description on changed error reporting defaults (Mario Rimann)
   2013-01-24  e16d0f1  #43919          [BUGFIX] Fix typos in stdWrap_crop description (Wouter Wolters)
   2013-01-12  306b134  #38135          [BUGFIX] Apc Cache backend has side effects (Daniel Pötzinger)
   2013-01-04  44f7fdd  #44301          [BUGFIX] Invalid call to t3lib_TCEmain::processRemapStack() (Oliver Hader)
   2013-01-04  ea7de49                  [TASK] Raise submodule pointer (TYPO3 Release Team)
   2013-01-02  94fb5a7  #42092          [BUGFIX] Suggest wizard is behind form inputs (Xavier Perseguers)
   2013-01-01  04fca2a  #44263          [BUGFIX] phpdoc: $urlParameters can be a string (Stefan Neufeind)
   2012-12-20  da58b20  #34964          [BUGFIX] FE session records are never removed (Steffen Müller)
   2012-12-20  3ed1ba5  #32278          [BUGFIX] INTincScript_loadJSCode() causes PHP warnings (Markus Klein)
   2012-12-10  ec03f10  #43603          [BUGFIX] Enable the RTE with WebKit version 534 on iOS and Android (Stanislas Rolland)
   2012-12-10  10688b1  #38472          [BUGFIX] Remove HTML in RuntimeException from sysext 'install' (Philipp Gampe)
   2012-12-01  236e831  #25113          [BUGFIX] Fix wrong column title in web>list for field colpos (Martin Kästner)
   2012-12-01  339f739  #43470          [BUGFIX] SqlParser: trim all kinds of whitespaces (Stefan Neufeind)
   2012-11-30  1666d38  #43459          [TASK] Remove typo3.pageModule.js (Falk Kühnel)
   2012-11-30  8892bbe  #42292          [BUGFIX] Installer: Reference images wrong (Christian Kuhn)
   2012-11-30  9716cf8  #41608          [BUGFIX] Page Information shows incorrect number of total hits (Andrew Moore)
   2012-11-29  209d607  #42908          [BUGFIX] Old logo on "Install Tool is locked" page (Nikolas Schmidt-Voigt)
   2012-11-27  e87270e  #42236          [TASK] openid: Update php-openid to 2.2.2 (Stefan Neufeind)
   2012-11-24  7199e5d  #34098          [TASK] Group excludefields by table (Johannes Feustel)
   2012-11-24  971145f  #43264          [BUGFIX] Hide version selector if workspaces are used (Helmut Hummel)
   2012-11-21  8402d9b                  [TASK] Raise submodule pointer (TYPO3 Release Team)


   To generate a diff of this commit:
   cvs rdiff -u -r1.18 -r1.19 pkgsrc/www/typo3_45/Makefile
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/www/typo3_45/PLIST
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/www/typo3_45/distinfo

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Mar  6 14:23:39 UTC 2013

   Modified Files:
   	pkgsrc/www/typo3_45: Makefile distinfo

   Log Message:
   Update typo3_45 to 4.5.24 (TYPO3 4.5.24).

   2013-03-06  3cbef1f                  [RELEASE] Release of TYPO3 4.5.24 (TYPO3 Release Team)
   2013-03-06  79e2370                  [TASK] Raise submodule pointer (TYPO3 Release Team)
   2013-03-06  71135d8  #28587          [SECURITY] Open redirection with jumpurl (Franz G. Jahn)
   2013-03-01  0d77b86  #25003          [BUGFIX] Check minitems for TCAtree (Georg Ringer)
   2013-03-01  796680a  #34371          [BUGFIX] Keep hyphens in custom HTML5 attributes (Jigal van Hemert)
   2013-02-25  06571e6  #45570          Revert "[BUGFIX] FE session records are never removed" (Oliver Hader)


   To generate a diff of this commit:
   cvs rdiff -u -r1.19 -r1.20 pkgsrc/www/typo3_45/Makefile
   cvs rdiff -u -r1.16 -r1.17 pkgsrc/www/typo3_45/distinfo