Pullup tickets #4175 and #4176.
Pullup ticket #4177 - requested by taca
x11/libXi: security update

Revisions pulled up:
- x11/libXi/Makefile                                            1.24
- x11/libXi/distinfo                                            1.20

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Wed Jul  3 06:27:03 UTC 2013

   Modified Files:
   	pkgsrc/x11/libXi: Makefile distinfo

   Log Message:
   Update to 1.7.2.

   Changes in 1.7.2:
   Only one minor change since the RC. Again, this release contains the fixes
   for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
   update.

   Peter Hutterer (1):
         libXi 1.7.2

   Thomas Klausner (1):
         Remove check that can never be true.

   Changses in 1.7.1.901:
   First and likely only RC for libXi 1.7.2. This one has a bunch of changes
   for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
   integer overflows and other corruption that happens if we trust the server
   a bit too much on the data we're being sent.

   On top of those fixes, the sequence number in XI2 events is now set
   propertly too (#64687).

   Please test, if you find any issues let me know.

   Alan Coopersmith (14):
         Expand comment on the memory vs. reply ordering in XIGetSelectedEvents()
         Use _XEatDataWords to avoid overflow of rep.length bit shifting
         Stack buffer overflow in XGetDeviceButtonMapping() [CVE-2013-1998 1/3]
         memory corruption in _XIPassiveGrabDevice() [CVE-2013-1998 2/3]
         unvalidated lengths in XQueryDeviceState() [CVE-2013-1998 3/3]
         integer overflow in XGetDeviceControl() [CVE-2013-1984 1/8]
         integer overflow in XGetFeedbackControl() [CVE-2013-1984 2/8]
         integer overflow in XGetDeviceDontPropagateList() [CVE-2013-1984 3/8]
         integer overflow in XGetDeviceMotionEvents() [CVE-2013-1984 4/8]
         integer overflow in XIGetProperty() [CVE-2013-1984 5/8]
         integer overflow in XIGetSelectedEvents() [CVE-2013-1984 6/8]
         Avoid integer overflow in XGetDeviceProperties() [CVE-2013-1984 7/8]
         Avoid integer overflow in XListInputDevices() [CVE-2013-1984 8/8]
         sign extension issue in XListInputDevices() [CVE-2013-1995]

   Peter Hutterer (7):
         Copy the sequence number into the target event too (#64687)
         Don't overwrite the cookies serial number
         Fix potential corruption in mask_len handling
         Change size += to size = in XGetDeviceControl
         If the XGetDeviceDontPropagateList reply has an invalid length, return 0
         Include limits.h to prevent build error: missing INT_MAX
         libXi 1.7.1.901
Pullup ticket #4178 - requested by taca
www/squid3: security update

Revisions pulled up:
- www/squid3/Makefile                                           1.14-1.17
- www/squid3/distinfo                                           1.9-1.11

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Wed Jul  3 12:47:11 UTC 2013

   Modified Files:
   	pkgsrc/www/squid3: Makefile distinfo

   Log Message:
   Changes 3.3.6:
   Bug 3762: remove bogus WARNING in cache.log
   Fix Ip::Address::operator =(sockaddr_storage)
   Make sure %<tt includes all [failed] connection attempts.
   Bug 3854: pt1: compile errors on AIX
   Fix request headers logging for icap_log
   Support HTTP reply ACLs in icap_log and log_icap
   Bug 3802: Fix wrong check inside Format::Format::assemble
   Bug 3786: Fix configure with --disable-internal-dns compile error
   Polished icap_service and ecap_service documentation.
   SourceFormat Enforcement
   Bug 3717: assertion failed with dstdom_regex with IP based URL
   Fix incorrect external_acl_type codes
   Avoid segfaults on seriously malformed requests when ICAP logging is enabled.
   Ask for SSL key password when started with -N but without sslpassword_program.
   basic_ncsa_auth: fix unused variable warnings (typo in rev.12762)
   Fix buffer null termination
   Bug 1991: kqueue causes SSL to hang

---
   Module Name:	pkgsrc
   Committed By:	jperkin
   Date:		Fri Jul 12 10:45:05 UTC 2013

   Modified Files:
   	pkgsrc/audio/icecast: Makefile
   	pkgsrc/audio/mt-daapd: Makefile
   	pkgsrc/audio/pulseaudio: Makefile
   	pkgsrc/audio/ubs: Makefile
   	pkgsrc/chat/anope: Makefile
   	pkgsrc/chat/atheme: Makefile
   	pkgsrc/chat/bitlbee: Makefile
   	pkgsrc/chat/gale: Makefile
   	pkgsrc/chat/inspircd: Makefile
   	pkgsrc/chat/inspircd12: Makefile
   	pkgsrc/chat/ircd-hybrid: Makefile
   	pkgsrc/chat/ircu: Makefile
   	pkgsrc/chat/jabberd: Makefile
   	pkgsrc/chat/jabberd2: Makefile
   	pkgsrc/chat/silc-server: Makefile
   	pkgsrc/chat/unrealircd: Makefile
   	pkgsrc/comms/asterisk: Makefile
   	pkgsrc/comms/asterisk10: Makefile
   	pkgsrc/comms/asterisk18: Makefile
   	pkgsrc/comms/fidogate: Makefile
   	pkgsrc/comms/mgetty+sendfax: Makefile
   	pkgsrc/comms/minicom: Makefile
   	pkgsrc/comms/snooper: Makefile
   	pkgsrc/databases/apache-cassandra: Makefile
   	pkgsrc/databases/gnats: Makefile
   	pkgsrc/databases/mysql5-server: Makefile
   	pkgsrc/databases/mysql51-server: Makefile
   	pkgsrc/databases/mysql55-server: Makefile
   	pkgsrc/databases/mysql56-server: Makefile
   	pkgsrc/databases/openldap-server: Makefile
   	pkgsrc/databases/pgbouncer: Makefile
   	pkgsrc/databases/phpmyadmin: Makefile
   	pkgsrc/databases/postgresql84-server: Makefile
   	pkgsrc/databases/postgresql90-server: Makefile
   	pkgsrc/databases/postgresql91-server: Makefile
   	pkgsrc/databases/postgresql92-server: Makefile
   	pkgsrc/databases/virtuoso: Makefile
   	pkgsrc/devel/cvsd: Makefile
   	pkgsrc/devel/distcc: Makefile
   	pkgsrc/devel/memcached: Makefile
   	pkgsrc/devel/monotone-server: Makefile
   	pkgsrc/filesystems/tahoe-lafs: Makefile
   	pkgsrc/inputmethod/canna-dict: Makefile
   	pkgsrc/inputmethod/canna-server: Makefile
   	pkgsrc/inputmethod/ja-freewnn-server: Makefile
   	pkgsrc/inputmethod/sj3-server: Makefile
   	pkgsrc/mail/amavisd-new: Makefile
   	pkgsrc/mail/courier-imap: Makefile
   	pkgsrc/mail/courier-maildir: Makefile
   	pkgsrc/mail/dcc: Makefile
   	pkgsrc/mail/dkim-milter: Makefile
   	pkgsrc/mail/dovecot: Makefile
   	pkgsrc/mail/dovecot2: Makefile
   	pkgsrc/mail/dspam: Makefile
   	pkgsrc/mail/enma: Makefile
   	pkgsrc/mail/exim: Makefile
   	pkgsrc/mail/exim3: Makefile
   	pkgsrc/mail/fml: Makefile
   	pkgsrc/mail/fml4: Makefile
   	pkgsrc/mail/freepops: Makefile
   	pkgsrc/mail/gld: Makefile
   	pkgsrc/mail/imapproxy: Makefile
   	pkgsrc/mail/maildrop: Makefile
   	pkgsrc/mail/mailman: Makefile
   	pkgsrc/mail/majordomo: Makefile
   	pkgsrc/mail/milter-greylist: Makefile
   	pkgsrc/mail/milter-manager: Makefile
   	pkgsrc/mail/milter-regex: Makefile
   	pkgsrc/mail/mimedefang: Makefile
   	pkgsrc/mail/nullmailer: Makefile
   	pkgsrc/mail/opendkim: Makefile
   	pkgsrc/mail/policyd-weight: Makefile
   	pkgsrc/mail/popa3d: Makefile
   	pkgsrc/mail/postgrey: Makefile
   	pkgsrc/mail/prayer: Makefile
   	pkgsrc/mail/qpopper: Makefile
   	pkgsrc/mail/quickml: Makefile
   	pkgsrc/mail/sendmail: Makefile
   	pkgsrc/mail/smtp-vilter: Makefile
   	pkgsrc/mail/spamd: Makefile
   	pkgsrc/mail/sqlgrey: Makefile
   	pkgsrc/mail/sqwebmail: Makefile
   	pkgsrc/mail/sympa: Makefile
   	pkgsrc/mail/tmda: Makefile
   	pkgsrc/multimedia/gmediaserver: Makefile
   	pkgsrc/multimedia/mediatomb: Makefile
   	pkgsrc/net/DarwinStreamingServer: Makefile
   	pkgsrc/net/avahi: Makefile
   	pkgsrc/net/bind96: Makefile
   	pkgsrc/net/bind98: Makefile
   	pkgsrc/net/bind99: Makefile
   	pkgsrc/net/cacti: Makefile
   	pkgsrc/net/cntlm: Makefile
   	pkgsrc/net/couriertcpd: Makefile
   	pkgsrc/net/freeradius: Makefile
   	pkgsrc/net/freeradius2: Makefile
   	pkgsrc/net/gofish: Makefile
   	pkgsrc/net/iodine: Makefile
   	pkgsrc/net/irrd: Makefile
   	pkgsrc/net/kismet: Makefile
   	pkgsrc/net/lambdamoo: Makefile
   	pkgsrc/net/lldpd: Makefile
   	pkgsrc/net/mldonkey: Makefile
   	pkgsrc/net/mydns-mysql: Makefile
   	pkgsrc/net/mydns-pgsql: Makefile
   	pkgsrc/net/netdisco: Makefile
   	pkgsrc/net/nsd: Makefile
   	pkgsrc/net/openntpd: Makefile
   	pkgsrc/net/openvpn: Makefile
   	pkgsrc/net/pygopherd: Makefile
   	pkgsrc/net/quagga: Makefile
   	pkgsrc/net/rancid: Makefile
   	pkgsrc/net/rbldnsd: Makefile
   	pkgsrc/net/ruby-stompserver: Makefile
   	pkgsrc/net/snort: Makefile
   	pkgsrc/net/spread: Makefile
   	pkgsrc/net/tacacs-shrubbery: Makefile
   	pkgsrc/net/teamspeak-server: Makefile
   	pkgsrc/net/tor: Makefile
   	pkgsrc/net/unbound: Makefile
   	pkgsrc/net/uucp: Makefile
   	pkgsrc/net/vsftpd: Makefile
   	pkgsrc/net/xymon: Makefile
   	pkgsrc/net/xymonclient: Makefile
   	pkgsrc/news/leafnode: Makefile
   	pkgsrc/news/nntpcache: Makefile
   	pkgsrc/parallel/gridscheduler: Makefile
   	pkgsrc/parallel/sge: Makefile
   	pkgsrc/parallel/slurm: Makefile
   	pkgsrc/print/cups: Makefile
   	pkgsrc/security/cyrus-sasl: Makefile
   	pkgsrc/security/dirmngr: Makefile
   	pkgsrc/security/f-prot-antivirus6-ms-bin: Makefile
   	pkgsrc/security/libprelude: Makefile
   	pkgsrc/security/libprelude-lua: Makefile
   	pkgsrc/security/libprelude-perl: Makefile
   	pkgsrc/security/libprelude-python: Makefile
   	pkgsrc/security/libprelude-ruby: Makefile
   	pkgsrc/security/opendnssec: Makefile
   	pkgsrc/security/openssh: Makefile
   	pkgsrc/security/pks: Makefile
   	pkgsrc/security/policykit: Makefile
   	pkgsrc/security/prelude-correlator: Makefile
   	pkgsrc/security/prelude-lml: Makefile
   	pkgsrc/security/prelude-manager: Makefile
   	pkgsrc/security/py-prewikka: Makefile
   	pkgsrc/security/sfs: Makefile
   	pkgsrc/security/stunnel: Makefile
   	pkgsrc/sysutils/amanda-common: Makefile
   	pkgsrc/sysutils/bacula: Makefile
   	pkgsrc/sysutils/dbus: Makefile
   	pkgsrc/sysutils/hal: Makefile
   	pkgsrc/sysutils/munin-node: Makefile
   	pkgsrc/sysutils/munin-server: Makefile
   	pkgsrc/sysutils/sysbuild-user: Makefile
   	pkgsrc/sysutils/ups-nut: Makefile
   	pkgsrc/textproc/dict-server: Makefile
   	pkgsrc/www/apache: Makefile
   	pkgsrc/www/apache-tomcat6: Makefile
   	pkgsrc/www/apache-tomcat7: Makefile
   	pkgsrc/www/apache2: Makefile
   	pkgsrc/www/apache22: Makefile
   	pkgsrc/www/apache24: Makefile
   	pkgsrc/www/dansguardian: Makefile
   	pkgsrc/www/jetty7: Makefile
   	pkgsrc/www/nginx: Makefile
   	pkgsrc/www/nginx-devel: Makefile
   	pkgsrc/www/ocsigen: Makefile
   	pkgsrc/www/php-concrete5: Makefile
   	pkgsrc/www/php-owncloud: Makefile
   	pkgsrc/www/php-piwigo: Makefile
   	pkgsrc/www/php-soycms: Makefile
   	pkgsrc/www/php-sugarcrm: Makefile
   	pkgsrc/www/php-tiki6: Makefile
   	pkgsrc/www/php-tt-rss: Makefile
   	pkgsrc/www/privoxy: Makefile
   	pkgsrc/www/screws: Makefile
   	pkgsrc/www/sencha-sns: Makefile
   	pkgsrc/www/squid3: Makefile
   	pkgsrc/www/squidGuard: Makefile
   	pkgsrc/www/tinyproxy: Makefile

   Log Message:
   Bump PKGREVISION of all packages which create users, to pick up change of
   sysutils/user_* packages.

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Fri Jul 12 21:32:36 UTC 2013

   Modified Files:
   	pkgsrc/www/squid3: Makefile distinfo

   Log Message:
   Changes 3.3.7:
   * Protect against buffer overrun in DNS query generation
   * SourceFormat Enforcement
   * Bug 3297: Fix openSSL related build failures
   * Fix build on FreeBSD 9.x platform with clang

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Sun Jul 14 17:54:44 UTC 2013

   Modified Files:
   	pkgsrc/www/squid3: Makefile distinfo

   Log Message:
   Changes 3.3.8:
   * Better handling of strange port values in Host:
   * Bug 3869: assertion failed: MemBuf.cc:272: size < capacity
Pullup ticket #4184 - requested by tron
www/apache22: security update

Revisions pulled up:
- www/apache22/Makefile                                         1.92
- www/apache22/distinfo                                         1.57
- www/apache22/patches/patch-modules_mappers_mod_rewrite.c      deleted

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Mon Jul 15 18:15:49 UTC 2013

   Modified Files:
   	pkgsrc/www/apache22: Makefile distinfo
   Removed Files:
   	pkgsrc/www/apache22/patches: patch-modules_mappers_mod_rewrite.c

   Log Message:
   Update "apache22" package to version 2.2.25. Changes since 2.2.24:
   - SECURITY: CVE-2013-1862 (cve.mitre.org)
     mod_rewrite: Ensure that client data written to the RewriteLog is
     escaped to prevent terminal escape sequences from entering the
     log file.  [Eric Covener, Jeff Trawick, Joe Orton]
   - core: Limit ap_pregsub() to 64MB and add ap_pregsub_ex() for longer
     strings.  The default limit for ap_pregsub() can be adjusted at compile
      time by defining AP_PREGSUB_MAXLEN.  [Stefan Fritsch, Jeff Trawick]
   - core: Support the SINGLE_LISTEN_UNSERIALIZED_ACCEPT optimization
     on Linux kernel versions 3.x and above.  Bug#55121.  [Bradley Heilbrun
     <apache heilbrun.org>]
   - mod_setenvif: Log error on substitution overflow.
     [Stefan Fritsch]
   - mod_ssl/proxy: enable the SNI extension for backend TLS connections
     [Kaspar Brand]
   - mod_proxy: Use the the same hostname for SNI as for the HTTP request when
     forwarding to SSL backends. Bug#53134.
     [Michael Weiser <michael weiser.dinsnail.net>, Ruediger Pluem]
   - mod_ssl: Quiet FIPS mode weak keys disabled and FIPS not selected emits
     in the error log to debug level.  [William Rowe]
   - mod_ssl: Catch missing, mismatched or encrypted client cert/key pairs
     with SSLProxyMachineCertificateFile/Path directives. Bug#52212, Bug#54698.
     [Keith Burdis <keith burdis.org>, Joe Orton, Kaspar Brand]
   - mod_proxy_balancer: Added balancer parameter failontimeout to allow server
     admin to configure an IO timeout as an error in the balancer.
     [Daniel Ruggeri]
   - mod_authnz_ldap: Allow using exec: calls to obtain LDAP bind
     password.  [Daniel Ruggeri]
   - htdigest: Fix buffer overflow when reading digest password file
     with very long lines. Bug#54893. [Rainer Jung]
   - mod_dav: Sending a MERGE request against a URI handled by mod_dav_svn with
     the source href (sent as part of the request body as XML) pointing to a
     URI that is not configured for DAV will trigger a segfault. [Ben Reser
     <ben reser.org>]
   - mod_dav: Ensure URI is correctly uriencoded on return. Bug#54611
     [Timothy Wood <tjw omnigroup.com>]
   - mod_dav: Make sure that when we prepare an If URL for Etag comparison,
     we compare unencoded paths. Bug#53910 [Timothy Wood <tjw omnigroup.com>]
   - mod_dav: Sending an If or If-Match header with an invalid ETag doesn't
     result in a 412 Precondition Failed for a COPY operation. PR54610
     [Timothy Wood <tjw omnigroup.com>]
   - mod_dav: When a PROPPATCH attempts to remove a non-existent dead
     property on a resource for which there is no dead property in the same
     namespace httpd segfaults. Bug#52559 [Diego Santa Cruz
     <diego.santaCruz spinetix.com>]
   - mod_dav: Do not fail PROPPATCH when prop namespace is not known.
     Bug#52559 [Diego Santa Cruz <diego.santaCruz spinetix.com>]
   - mod_dav: Do not segfault on PROPFIND with a zero length DBM.
     Bug#52559 [Diego Santa Cruz <diego.santaCruz spinetix.com>]


   To generate a diff of this commit:
   cvs rdiff -u -r1.91 -r1.92 pkgsrc/www/apache22/Makefile
   cvs rdiff -u -r1.56 -r1.57 pkgsrc/www/apache22/distinfo
   cvs rdiff -u -r1.3 -r0 \
       pkgsrc/www/apache22/patches/patch-modules_mappers_mod_rewrite.c
pullup #4184
Pullup ticket #4182 - requested by taca
mail/roundcube: dependency fix

Revisions pulled up:
- mail/roundcube/Makefile                                       1.57

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Jul  8 03:35:00 UTC 2013

   Modified Files:
   	pkgsrc/mail/roundcube: Makefile

   Log Message:
   roundcube require pear-Mail_mimeDecode, too.

   Bump PKGREVISION.
Pullup ticket #4183 - requested by taca
lang/php53: security update

Revisions pulled up:
- lang/php/phpversion.mk                                        1.36
- lang/php53/Makefile.common                                    1.27
- lang/php53/Makefile.php                                       1.35
- lang/php53/distinfo                                           1.66
- lang/php53/patches/patch-aa                                   1.3
- lang/php53/patches/patch-ab                                   1.7
- lang/php53/patches/patch-ac                                   1.6
- lang/php53/patches/patch-ad                                   1.2
- lang/php53/patches/patch-ae                                   1.2
- lang/php53/patches/patch-af                                   1.4
- lang/php53/patches/patch-ag                                   1.3
- lang/php53/patches/patch-ah                                   1.2
- lang/php53/patches/patch-ai                                   1.2
- lang/php53/patches/patch-aj                                   1.3
- lang/php53/patches/patch-al                                   1.2
- lang/php53/patches/patch-ext_standard_basic__functions.c      1.2
- lang/php53/patches/patch-main_streams_cast.c                  1.2
- lang/php53/patches/patch-php__mssql.c                         1.2
- lang/php53/patches/patch-sapi_fpm_php-fpm.conf.in             1.2

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Jul 12 00:07:04 UTC 2013

   Modified Files:
   	pkgsrc/lang/php53: Makefile.common Makefile.php distinfo
   	pkgsrc/lang/php53/patches: patch-aa patch-ab patch-ac patch-ad patch-ae
   	    patch-af patch-ag patch-ah patch-ai patch-aj patch-al
   	    patch-ext_standard_basic__functions.c patch-main_streams_cast.c
   	    patch-php__mssql.c patch-sapi_fpm_php-fpm.conf.in

   Log Message:
   Update php53 to 5.3.27 (PHP 5.3.27).

   11-Jul-2013

   Core:

   * Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
   * Fixed bug #64960 (Segfault in gc_zval_possible_root).
   * Fixed bug #64934 (Apache2 TS crash with get_browser()).
   * Fixed bug #63186 (compile failure on netbsd).

   DateTime:

   * Fixed bug #53437 (Crash when using unserialized DatePeriod instance).

   PDO_firebird:

   * Fixed bug #64037 (Firebird return wrong value for numeric field).
   * Fixed bug #62024 (Cannot insert second row with null using parametrized
     query).

   PDO_pgsql:

   * Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).

   pgsql:

   * Fixed bug #64609 (pg_convert enum type support).

   SPL:

   * Fixed bug #64997 (Segfault while using RecursiveIteratorIterator on 64-bits
     systems).

   XML:

   * Fixed bug #65236 (heap corruption in xml parser).

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Jul 12 00:09:14 UTC 2013

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk

   Log Message:
   Update PHP53_VERSION to 5.3.27.
Pullup tickets #4177, #4178, #4182 and #4183.