Pullup ticket #4305 - requested by obache
inputmethod/ibus-chewing: security update

Revisions pulled up:
- inputmethod/ibus-chewing/Makefile                             1.34
- inputmethod/ibus-chewing/PLIST                                1.4
- inputmethod/ibus-chewing/distinfo                             1.14
- inputmethod/ibus-chewing/patches/patch-po_zh__CN.po           1.2

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Thu Jan 16 11:14:51 UTC 2014

   Modified Files:
   	pkgsrc/inputmethod/ibus-chewing: Makefile PLIST distinfo
   	pkgsrc/inputmethod/ibus-chewing/patches: patch-po_zh__CN.po

   Log Message:
   Update ibus-chewing to 1.4.5.

   * Thu Jan 16 2014 Ding-Yi Chen <dchen at redhat.com> - 1.4.5
   - Resolves Bug 1013977 - ibus-chewing needs to have ibus write-cache --system in %post and %postun
   - Resolves Bug 1027031 - CVE-2013-4509 ibus-chewing: ibus: visible password entry flaw [rhel-7.0]
   - Resolves Bug 1028911 - [zh_TW]'Chinese<->English' switch does not work when clicking on the Chewing menu list.
   - Resolves Bug 1045868 - ibus-chewing *again* not built with $RPM_OPT_FLAGS
   - Option "Sync between caps lock and IM":
      + Default of  is changed to "disable",  because the previous default
        "keyboard" cause bug 1028911 for GNOME Shell.
      + Now Sync from "input method" can control Caps LED in GNOME shell.
   - Translation added: de_DE, es_ES, it_IT, pt_BR, uk_UA
Pullup ticket #4305.
Pullup ticket #4306 - requested by obache
emulators/suse131_openssl: security update

Revisions pulled up:
- emulators/suse131_openssl/Makefile                            1.3
- emulators/suse131_openssl/distinfo                            1.3

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Mon Jan 20 12:18:12 UTC 2014

   Modified Files:
   	pkgsrc/emulators/suse131_openssl: Makefile distinfo

   Log Message:
   Update rpm to libopenssl1_0_0-1.0.1e-11.14.1 for CVE-2013-4353.

   Bump PKGREVISION.
Pullup ticket #4307 - requested by obache
emulators/suse131_libpng: security update

Revisions pulled up:
- emulators/suse131_libpng/Makefile                             1.2
- emulators/suse131_libpng/distinfo                             1.2

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Mon Jan 20 12:21:31 UTC 2014

   Modified Files:
   	pkgsrc/emulators/suse131_libpng: Makefile distinfo

   Log Message:
   Update rpm to libpng16-16-1.6.6-8.1 for CVE-2013-6954.

   Bump PKGREVISION.
Pullup tickets #4306 and #4307.
Pullup ticket #4299 - requested by tron
Build fix for "ngrep" for GNU make 4.0.

Revisions pulled up:
- net/ngrep/distinfo                                            1.15
- net/ngrep/patches/patch-ab                                    1.7

---
   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Tue Jan 14 22:43:20 UTC 2014

   Modified Files:
   	pkgsrc/net/ngrep: distinfo
   	pkgsrc/net/ngrep/patches: patch-ab

   Log Message:
   Fix build with GNU Make 4.0 and newer.
Pullup ticket #4299
Pullup ticket #4308 - requested by schnoebe
print/hplip: security update

Revisions pulled up:
- print/hplip/Makefile                                          1.30
- print/hplip/PLIST.base                                        1.12
- print/hplip/distinfo                                          1.12

---
   Module Name:	pkgsrc
   Committed By:	schnoebe
   Date:		Thu Jan 23 14:58:28 UTC 2014

   Modified Files:
   	pkgsrc/print/hplip: Makefile PLIST.base distinfo

   Log Message:
   Update to 3.14.1

   Significant Changes:
       Added digital signature validation in HPLIP upgrade feature

   Issues fixed:
       CVE-2013-6427: hplip: insecure auto update feature
       CVE-2013-6402: hplip: insecure temporary file handling in pkit.py
Pullup ticket #4308.
Pullup ticket #4309 - requested by obache
emulators/suse131_qt4: security update

Revisions pulled up:
- emulators/suse131_qt4/Makefile                                1.2
- emulators/suse131_qt4/distinfo                                1.2

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Sat Jan 25 05:06:38 UTC 2014

   Modified Files:
   	pkgsrc/emulators/suse131_qt4: Makefile distinfo

   Log Message:
   Update libqt4 RPMs to 4.8.5-5.9.2 for CVE-2013-4549.

   Bump PKGREVISION.
Pullup ticket #4309.
Pullup ticket #4310 - requested by taca
www/drupal6: security update

Revisions pulled up:
- www/drupal6/Makefile                                          1.45
- www/drupal6/distinfo                                          1.29

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jan 16 15:54:32 UTC 2014

   Modified Files:
   	pkgsrc/www/drupal6: Makefile distinfo

   Log Message:
   Update drupal6 to 6.30.

   Drupal 6.30, 2014-01-15
   ----------------------
   - Fixed security issues (multiple vulnerabilities), see SA-CORE-2014-001.
Pullup ticket #4311 - requested by taca
www/drupal7: security update

Revisions pulled up:
- www/drupal7/Makefile                                          1.23-1.24
- www/drupal7/PLIST                                             1.8
- www/drupal7/distinfo                                          1.16-1.17

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sat Jan 11 17:06:37 UTC 2014

   Modified Files:
   	pkgsrc/www/drupal7: Makefile PLIST distinfo

   Log Message:
   Update drupal7 to 7.25.

   Drupal 7.25, 2014-01-02
   -----------------------
   - Fixed a bug in node_save() which prevented the saved node from being updated
     in hook_node_insert() and other similar hooks.
   - Added a meta tag to install.php to prevent it from being indexed by search
     engines even when Drupal is installed in a subfolder (minor markup change).
   - Fixed a bug in the database API that caused frequent deadlock errors when
     running merge queries on some servers.
   - Performance improvement: Prevented block rehashing from writing blocks to the
     database on every cache clear and cron run when the blocks have not changed.
     This fix results in an extra 'saved' key which is added and set to TRUE for
     each block returned by _block_rehash() that actually is saved to the database
     (data structure change).
   - Added an optional 'skip on cron' parameter to hook_cron_queue_info() to allow
     queues to avoid being automatically processed on cron runs (API addition).
   - Fixed a bug which caused hook_block_view_MODULE_DELTA_alter() to never be
     invoked if the block delta had a hyphen in it. To implement the hook when the
     block delta has a hyphen, modules should now replace hyphens with underscores
     when constructing the function name for the hook implementation.
   - Fixed a bug which caused cached pages to sometimes be sent to the browser
     with incorrect compression. The fix adds a new 'page_compressed' key to the
     $cache->data array returned by drupal_page_get_cache() (minor data structure
     change).
   - Fixed broken tests on PHP 5.5.
   - Made the File and Image modules more robust when saving entities that have
     deleted files attached. The code in file_field_presave() will now remove the
     record of the deleted file from the entity before saving (minor data
     structure change).
   - Standardized menu callback functions throughout Drupal core to return
     MENU_NOT_FOUND and MENU_ACCESS_DENIED rather than printing their own "page
     not found" or "access denied" pages (minor API change in the return value of
     these functions under some circumstances).
   - Fixed a bug in which caches were not properly cleared when a node was deleted
     via the administrative interface.
   - Changed the Bartik theme to render content contained in <pre>, <code> and
     similar tags in a larger font size, so it is easier to read.
   - Fixed a bug in the Search module that caused exceptions to be thrown during
     searches if the server was not configured to represent decimal points as a
     period.
   - Fixed a regression in the Image module that made image_style_url() not work
     when a relative path (rather than a complete file URI) was passed to it.
   - Added an optional feature to the Statistics module to allow node views to be
     tracked by Ajax requests rather than during the server-side generation of the
     page. This allows the node counter to work on sites that use external page
     caches (string change and new administrative option:
     https://drupal.org/node/2164069).
   - Added a link to the drupal.org documentation page for cron to the Cron
     settings page (string change).
   - Added a 'drupal_anonymous_user_object' variable to allow the anonymous user
     object returned by drupal_anonymous_user() to be overridden with a classed
     object (API addition).
   - Changed the database API to allow inserts based on a SELECT * query to work
     correctly.
   - Changed the database schema of the {file_managed} table to allow Drupal to
     manage files larger than 4 GB.
   - Changed the File module's hook_field_load() implementation to prevent file
     entity properties which have the same name as file or image field properties
     from overwriting the field properties (minor API change).
   - Numerous small bug fixes.
   - Numerous API documentation improvements.
   - Additional automated test coverage.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jan 16 15:55:14 UTC 2014

   Modified Files:
   	pkgsrc/www/drupal7: Makefile distinfo

   Log Message:
   Update drupal7 to 7.26.

   Drupal 7.26, 2014-01-15
   ----------------------
   - Fixed security issues (multiple vulnerabilities). See SA-CORE-2014-001.

   Drupal 7.25, 2014-01-02
   -----------------------
   - Fixed a bug in node_save() which prevented the saved node from being updated
     in hook_node_insert() and other similar hooks.
   - Added a meta tag to install.php to prevent it from being indexed by search
     engines even when Drupal is installed in a subfolder (minor markup change).
   - Fixed a bug in the database API that caused frequent deadlock errors when
     running merge queries on some servers.
   - Performance improvement: Prevented block rehashing from writing blocks to the
     database on every cache clear and cron run when the blocks have not changed.
     This fix results in an extra 'saved' key which is added and set to TRUE for
     each block returned by _block_rehash() that actually is saved to the database
     (data structure change).
   - Added an optional 'skip on cron' parameter to hook_cron_queue_info() to allow
     queues to avoid being automatically processed on cron runs (API addition).
   - Fixed a bug which caused hook_block_view_MODULE_DELTA_alter() to never be
     invoked if the block delta had a hyphen in it. To implement the hook when the
     block delta has a hyphen, modules should now replace hyphens with underscores
     when constructing the function name for the hook implementation.
   - Fixed a bug which caused cached pages to sometimes be sent to the browser
     with incorrect compression. The fix adds a new 'page_compressed' key to the
     $cache->data array returned by drupal_page_get_cache() (minor data structure
     change).
   - Fixed broken tests on PHP 5.5.
   - Made the File and Image modules more robust when saving entities that have
     deleted files attached. The code in file_field_presave() will now remove the
     record of the deleted file from the entity before saving (minor data
     structure change).
   - Standardized menu callback functions throughout Drupal core to return
     MENU_NOT_FOUND and MENU_ACCESS_DENIED rather than printing their own "page
     not found" or "access denied" pages (minor API change in the return value of
     these functions under some circumstances).
   - Fixed a bug in which caches were not properly cleared when a node was deleted
     via the administrative interface.
   - Changed the Bartik theme to render content contained in <pre>, <code> and
     similar tags in a larger font size, so it is easier to read.
   - Fixed a bug in the Search module that caused exceptions to be thrown during
     searches if the server was not configured to represent decimal points as a
     period.
   - Fixed a regression in the Image module that made image_style_url() not work
     when a relative path (rather than a complete file URI) was passed to it.
   - Added an optional feature to the Statistics module to allow node views to be
     tracked by Ajax requests rather than during the server-side generation of the
     page. This allows the node counter to work on sites that use external page
     caches (string change and new administrative option:
     https://drupal.org/node/2164069).
   - Added a link to the drupal.org documentation page for cron to the Cron
     settings page (string change).
   - Added a 'drupal_anonymous_user_object' variable to allow the anonymous user
     object returned by drupal_anonymous_user() to be overridden with a classed
     object (API addition).
   - Changed the database API to allow inserts based on a SELECT * query to work
     correctly.
   - Changed the database schema of the {file_managed} table to allow Drupal to
     manage files larger than 4 GB.
   - Changed the File module's hook_field_load() implementation to prevent file
     entity properties which have the same name as file or image field properties
     from overwriting the field properties (minor API change).
   - Numerous small bug fixes.
   - Numerous API documentation improvements.
   - Additional automated test coverage.
Pullup ticket #4312 - requested by taca
www/contao211: security update
www/contao32: security update

Revisions pulled up:
- www/contao/Makefile.common                                    1.54-1.57
- www/contao211/distinfo                                        1.19
- www/contao32/PLIST                                            1.4
- www/contao32/distinfo                                         1.5-1.6

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jan 21 16:20:09 UTC 2014

   Modified Files:
   	pkgsrc/www/contao: Makefile.common
   	pkgsrc/www/contao32: PLIST distinfo

   Log Message:
   Update contao32 to 3.2.4.

   Version 3.2.4 (2014-01-20)
   --------------------------

   ### Fixed
   Updated the Russian translation of the TinyMCE "typolinks" plugins (see #6224).

   ### Fixed
   Do not create multiple stylect layers upon Ajax changes.

   ### Fixed
   Some DCAs were missing the "rem" unit (see #6634).

   ### Fixed
   Correctly trim the SQL statements in the `Database` class (see #6623).

   ### Fixed
   Fix some broken back end icons (see #6214).

   ### Fixed
   Show a hint in the news archive menu if there are no items (see #5888).

   ### Fixed
   Prevent the back end tool tips from exceeding the screen width (see #6639).

   ### Fixed
   Support the Google+ vanity name in addition to the numeric ID (see #6454).

   ### Fixed
   Correctly detect Android tablets in the `Environment` class (see #5869).

   ### Fixed
   Correctly resolve the module dependencies (see #6606).

   ### Fixed
   Correctly unset the PHP session cookie depending on its parameters.

   ### Fixed
   Fixed the XHTML variant of the comments form (see #5675).

   ### Fixed
   Correctly assign articles to columns (see #6595).

   ### Fixed
   Correctly merge the CSS classes in the `Hybrid` class (see #6601).

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Mon Jan 27 18:41:15 UTC 2014

   Modified Files:
   	pkgsrc/audio/chromaprint: Makefile
   	pkgsrc/converters/py-simplejson: Makefile
   	pkgsrc/cross/nios2: Makefile.common
   	pkgsrc/databases/ocaml-sqlite3: Makefile
   	pkgsrc/devel/bzr: Makefile
   	pkgsrc/devel/delta: Makefile
   	pkgsrc/devel/gearmand: Makefile
   	pkgsrc/devel/gitolite: Makefile
   	pkgsrc/devel/javacc: Makefile
   	pkgsrc/devel/jq: Makefile
   	pkgsrc/devel/libdbusmenu-qt: Makefile
   	pkgsrc/devel/liblangtag: Makefile
   	pkgsrc/devel/lua-gi: Makefile
   	pkgsrc/devel/lua-lrexlib: Makefile.common
   	pkgsrc/devel/lua-posix: Makefile
   	pkgsrc/devel/magit: Makefile
   	pkgsrc/devel/opengrok: Makefile
   	pkgsrc/devel/py-greenlet: Makefile
   	pkgsrc/devel/py-pip: Makefile
   	pkgsrc/devel/py-virtualenv: Makefile
   	pkgsrc/devel/sparse: Makefile
   	pkgsrc/filesystems/cloudfuse: Makefile
   	pkgsrc/filesystems/fs-utils: Makefile
   	pkgsrc/filesystems/tahoe-lafs: Makefile
   	pkgsrc/fonts/kanjistrokeorders-ttf: Makefile
   	pkgsrc/fonts/liberation-ttf: Makefile
   	pkgsrc/fonts/ricty-ttf: Makefile
   	pkgsrc/games/wargames: Makefile
   	pkgsrc/graphics/camlimages: Makefile
   	pkgsrc/graphics/openimageio: Makefile
   	pkgsrc/graphics/py-matplotlib-tk: Makefile
   	pkgsrc/mail/imapfilter: Makefile
   	pkgsrc/mail/imapsync: Makefile
   	pkgsrc/math/cgal: Makefile
   	pkgsrc/math/eigen2: Makefile
   	pkgsrc/math/eigen3: Makefile
   	pkgsrc/math/fityk: Makefile
   	pkgsrc/misc/libcarddav: Makefile
   	pkgsrc/misc/libreoffice: Makefile
   	pkgsrc/multimedia/transcode: Makefile
   	pkgsrc/net/dnscheck: Makefile
   	pkgsrc/net/fpdns: Makefile
   	pkgsrc/net/get-flash-videos: Makefile
   	pkgsrc/net/knot: Makefile
   	pkgsrc/net/lua-socket: Makefile
   	pkgsrc/net/netcat-openbsd: Makefile
   	pkgsrc/net/py-amqp: Makefile
   	pkgsrc/net/rabbitmq-c: Makefile
   	pkgsrc/net/ruby-stompserver: Makefile
   	pkgsrc/net/tor: Makefile
   	pkgsrc/pkgtools/pkgin: Makefile
   	pkgsrc/print/qpdfview: Makefile
   	pkgsrc/security/libssh: Makefile
   	pkgsrc/security/lua-sec: Makefile
   	pkgsrc/security/pkcs11-helper: Makefile
   	pkgsrc/security/py-ecdsa: Makefile
   	pkgsrc/security/py-paramiko: Makefile
   	pkgsrc/sysutils/dc-tools: Makefile
   	pkgsrc/sysutils/fabric: Makefile
   	pkgsrc/sysutils/k4dirstat: Makefile
   	pkgsrc/sysutils/logrotate: Makefile
   	pkgsrc/sysutils/salt: Makefile
   	pkgsrc/textproc/xmlto: Makefile
   	pkgsrc/time/ical: Makefile
   	pkgsrc/wm/pekwm: Makefile
   	pkgsrc/www/contao: Makefile.common
   	pkgsrc/www/contao211-translations: Makefile
   	pkgsrc/www/php-tt-rss: Makefile
   	pkgsrc/www/py-flask-bootstrap: Makefile
   	pkgsrc/www/py-flask-wtf: Makefile
   	pkgsrc/www/py-http-parser: Makefile
   	pkgsrc/x11/appmenu-qt: Makefile
   	pkgsrc/x11/elementary-icon-theme: Makefile
   	pkgsrc/x11/razor-qt: Makefile

   Log Message:
   Do not set FETCH_USING, should not be set in a package Makefile.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Feb  3 15:20:39 UTC 2014

   Modified Files:
   	pkgsrc/www/contao: Makefile.common
   	pkgsrc/www/contao211: distinfo

   Log Message:
   Update contao211 package to 2.11.14, fix for CVE-2014-1860.

   Version 2.11.14 (2014-02-03)
   ----------------------------

   ### Fixed
   Do not pass POST data to the `deserialize()` function, so it is not vulnerable
   to PHP object injection. Thanks to Pedro Ribeiro for his input (see #6695).

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Feb  3 15:23:22 UTC 2014

   Modified Files:
   	pkgsrc/www/contao: Makefile.common
   	pkgsrc/www/contao32: distinfo

   Log Message:
   Update contao32 to 3.2.5, including fix for CVE-2014-1860.

   * pkgsrc change: remove obsolete lines for contao31.

   Version 3.2.5 (2014-02-03)
   --------------------------

   ### Fixed
   Correctly load the parent pages in the navigation modules (see #6696).

   ### Fixed
   Correctly encode URLs with GET parameters in the syndication links (see #6683).

   ### Fixed
   Do not pass POST data to the `deserialize()` function, so it is not vulnerable
   to PHP object injection. Thanks to Pedro Ribeiro for his input (see #6695).

   ### Fixed
   Allow any character in passwords, especially the less-than symbol (see #6447).

   ### Fixed
   Purge the image cache if a file is being renamed (see #6641).

   ### Fixed
   Preserve tags in custom CSS definitions (see #6667).

   ### Fixed
   Make the swipe CSS selectors more specific (see #6666).

   ### Fixed
   Correctly optimize floating-point numbers in style sheets (see #6674).
Pullup ticket #4313 - requested by pettai
net/bind98: build fix

Revisions pulled up:
- net/bind98/distinfo                                           1.27
- net/bind98/options.mk                                         1.9

---
   Module Name:	pkgsrc
   Committed By:	pettai
   Date:		Mon Jan 27 21:25:21 UTC 2014

   Modified Files:
   	pkgsrc/net/bind98: distinfo options.mk

   Log Message:
   Fetch the correct rl-9.8.6.patch file

   Log Message:
   Update distfile to reflect the new rrl patch
Pullup tickets #4310, #4311, #4312 and #4313.
Pullup ticket #4314 - requested by obache
graphics/cogl: bug fix patch

Revisions pulled up:
- graphics/cogl/options.mk                                      1.3

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Sun Jan 26 08:43:29 UTC 2014

   Modified Files:
   	pkgsrc/graphics/cogl: options.mk

   Log Message:
   specify gl-libname without extension and shlib major version.
   default ligGL.so.1 match to pkgsrc one with ELF, but not for builtin one.
Pullup ticket #4314.
Pullup ticket #4315 - requested by obache
emulators/dosbox: build fix

Revisions pulled up:
- emulators/dosbox/Makefile                                     1.38

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Wed Feb  5 08:40:11 UTC 2014

   Modified Files:
   	pkgsrc/emulators/dosbox: Makefile

   Log Message:
   Restrict CPPFLAGS=-fPIC to clang only, as changed reason.

   At least, It break build on NetBSD-i386 with buitin gcc, PR pkg/48538.
   No build failure on NetBSD-amd64 with builtin gcc.
Pullup ticket #4315.