Pullup ticket #4071 - requested by taca
databases/ruby-activerecord31: security update
devel/ruby-activemodel31: security update
devel/ruby-activesupport31: security update
devel/ruby-railties31: security update
mail/ruby-actionmailer31: security update
www/ruby-actionpack31: security update
www/ruby-activeresource31: security update
www/ruby-rails31: security update

Revisions pulled up:
- databases/ruby-activerecord31/distinfo                        1.9
- devel/ruby-activemodel31/distinfo                             1.9
- devel/ruby-activesupport31/distinfo                           1.10
- devel/ruby-railties31/Makefile                                1.6
- devel/ruby-railties31/distinfo                                1.9
- lang/ruby/rails.mk                                            1.39
- mail/ruby-actionmailer31/distinfo                             1.9
- www/ruby-actionpack31/distinfo                                1.10
- www/ruby-activeresource31/distinfo                            1.9
- www/ruby-rails31/distinfo                                     1.9

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:16:07 UTC 2013

   Modified Files:
   	pkgsrc/lang/ruby: rails.mk

   Log Message:
   Start update of Ruby on Rails 3.1.11.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:17:07 UTC 2013

   Modified Files:
   	pkgsrc/devel/ruby-activesupport31: distinfo

   Log Message:
   Update ruby-activesupport31 to 3.1.11.

   ## Rails 3.1.11 (unreleased) ##

   * Allow `multi_json` version `>= 1.3`, relaxing back to semantic versioning
     2.0.0 (revert of #5861)
     Backport of #5896

     *Alex Riedler*

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:18:08 UTC 2013

   Modified Files:
   	pkgsrc/devel/ruby-activemodel31: distinfo

   Log Message:
   Update ruby-activemodel31 to 3.1.11.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:19:10 UTC 2013

   Modified Files:
   	pkgsrc/www/ruby-activeresource31: distinfo

   Log Message:
   Update ruby-activeresource31 to 3.1.11.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:21:05 UTC 2013

   Modified Files:
   	pkgsrc/databases/ruby-activerecord31: distinfo

   Log Message:
   Update ruby-activerecord31 to 3.1.11.

   ## Rails 3.1.11 (unreleased) ##

   *   Quote numeric values being compared to non-numeric columns. Otherwise,
       in some database, the string column values will be coerced to a numeric
       allowing 0, 0.0 or false to match any string starting with a non-digit.

       Example:

           App.where(apikey: 0) # => SELECT * FROM users WHERE apikey = '0'

       *Dylan Smith*

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:22:03 UTC 2013

   Modified Files:
   	pkgsrc/www/ruby-actionpack31: distinfo

   Log Message:
   Update ruby-actionpack31 to 3.1.11.

   ## Rails 3.1.11 (unreleased)

   * Fixed JSON params parsing regression for non-object JSON content.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:22:43 UTC 2013

   Modified Files:
   	pkgsrc/mail/ruby-actionmailer31: distinfo

   Log Message:
   Update ruby-actionmailer331 to 3.1.11.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:23:36 UTC 2013

   Modified Files:
   	pkgsrc/devel/ruby-railties31: Makefile distinfo

   Log Message:
   Update ruby-railties31 to 3.1.11.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:24:13 UTC 2013

   Modified Files:
   	pkgsrc/www/ruby-rails31: distinfo

   Log Message:
   Update of ruby-rails31 to 3.1.11.

   Change of version only.
Pullup ticket #4072 - requested by taca
databases/ruby-activerecord32: security update
devel/ruby-activemodel32: security update
devel/ruby-activesupport32: security update
devel/ruby-railties32: security update
mail/ruby-actionmailer32: security update
www/ruby-actionpack32: security update
www/ruby-activeresource32: security update
www/ruby-rails32: security update

Revisions pulled up:
- databases/ruby-activerecord32/distinfo                        1.10
- devel/ruby-activemodel32/distinfo                             1.10
- devel/ruby-activesupport32/distinfo                           1.10
- devel/ruby-railties32/Makefile                                1.4
- devel/ruby-railties32/distinfo                                1.10
- lang/ruby/rails.mk                                            1.40
- mail/ruby-actionmailer32/distinfo                             1.10
- www/ruby-actionpack32/distinfo                                1.10
- www/ruby-activeresource32/distinfo                            1.10
- www/ruby-rails32/distinfo                                     1.10

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:28:10 UTC 2013

   Modified Files:
   	pkgsrc/lang/ruby: rails.mk

   Log Message:
   Start update of Ruby on Rails 3.2.12.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:28:59 UTC 2013

   Modified Files:
   	pkgsrc/devel/ruby-activesupport32: distinfo

   Log Message:
   Update ruby-activesupport32 to 3.2.12.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:29:48 UTC 2013

   Modified Files:
   	pkgsrc/devel/ruby-activemodel32: distinfo

   Log Message:
   Update ruby-activemodel32 to 3.2.12.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:30:48 UTC 2013

   Modified Files:
   	pkgsrc/www/ruby-activeresource32: distinfo

   Log Message:
   Update ruby-activeresource32 to 3.2.12.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:31:19 UTC 2013

   Modified Files:
   	pkgsrc/databases/ruby-activerecord32: distinfo

   Log Message:
   Update ruby-activerecord32 to 3.2.12.

   ## Rails 3.2.12 (unreleased) ##

   *   Quote numeric values being compared to non-numeric columns. Otherwise,
       in some database, the string column values will be coerced to a numeric
       allowing 0, 0.0 or false to match any string starting with a non-digit.

       Example:

           App.where(apikey: 0) # => SELECT * FROM users WHERE apikey = '0'

       *Dylan Smith*

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:31:52 UTC 2013

   Modified Files:
   	pkgsrc/www/ruby-actionpack32: distinfo

   Log Message:
   Update ruby-actionpack32 to 3.2.12.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:32:32 UTC 2013

   Modified Files:
   	pkgsrc/mail/ruby-actionmailer32: distinfo

   Log Message:
   Update of ruby-actionmailer32 to 3.2.12.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:33:08 UTC 2013

   Modified Files:
   	pkgsrc/devel/ruby-railties32: Makefile distinfo

   Log Message:
   Update ruby-railties32 to 3.2.12.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:33:42 UTC 2013

   Modified Files:
   	pkgsrc/www/ruby-rails32: distinfo

   Log Message:
   Update ruby-rails32 to 3.2.12.

   Change of version only.
Pullup ticket #4073 - requested by taca
databases/ruby-activerecord3: security patch
devel/ruby-activemodel: security patch

Revisions pulled up:
- databases/ruby-activerecord3/Makefile                         1.9
- databases/ruby-activerecord3/distinfo                         1.19-1.20
- databases/ruby-activerecord3/patches/patch-lib_active__record_attribute__methods_write.rb 1.1-1.2
- devel/ruby-activemodel/Makefile                               1.12
- devel/ruby-activemodel/distinfo                               1.19-1.20
- devel/ruby-activemodel/patches/patch-lib_active__model_attribute__methods.rb 1.1-1.2

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 13:23:20 UTC 2013

   Modified Files:
   	pkgsrc/databases/ruby-activerecord3: Makefile distinfo
   Added Files:
   	pkgsrc/databases/ruby-activerecord3/patches:
   	    patch-lib_active__record_attribute__methods_write.rb

   Log Message:
   Add fix for Fix for CVE-2013-0277.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Feb 13 14:08:07 UTC 2013

   Modified Files:
   	pkgsrc/databases/ruby-activerecord3: distinfo
   	pkgsrc/databases/ruby-activerecord3/patches:
   	    patch-lib_active__record_attribute__methods_write.rb

   Log Message:
   Correct comment in a patch file.

   This change dosen't fix CVE-2013-0276 but give workaround for it.

   No PKGREVISION bump.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 15:30:42 UTC 2013

   Modified Files:
   	pkgsrc/devel/ruby-activemodel: Makefile distinfo
   Added Files:
   	pkgsrc/devel/ruby-activemodel/patches:
   	    patch-lib_active__model_attribute__methods.rb

   Log Message:
   Add fix for CVE-2013-0276.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Feb 13 14:07:31 UTC 2013

   Modified Files:
   	pkgsrc/devel/ruby-activemodel: distinfo
   	pkgsrc/devel/ruby-activemodel/patches:
   	    patch-lib_active__model_attribute__methods.rb

   Log Message:
   Correct comment in a patch file.

   This change dosen't fix CVE-2013-0276 but give workaround for it.

   No PKGREVISION bump.
Pullup ticket #4074 - requested by drochner
security/gnutls: security update

Revisions pulled up:
- security/gnutls/Makefile                                      1.123-1.124
- security/gnutls/distinfo                                      1.92

---
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Tue Jan 15 11:29:21 UTC 2013

   Modified Files:
           pkgsrc/security/gnutls: Makefile

   Log Message:
   wants to use pkg-config

---
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Tue Feb 12 13:16:25 UTC 2013

   Modified Files:
           pkgsrc/security/gnutls: Makefile distinfo

   Log Message:
   update to 3.0.28
   changes: bugfixes

   This prevents the recent TLS CBC padding timing attack (CVE-2013-1619).
Pullup tickets #4071, #4072, #4073 and #4074.