Add the file to track changes on the pkgsrc-2009Q4 branch
Delete undead file.
Delete undead files.
Pullup ticket #2958 - requested by obache
libthai: security update

Revisions pulled up:
- devel/libthai/Makefile		1.7
- devel/libthai/distinfo		1.4
---
Module Name:	pkgsrc
Committed By:	obache
Date:		Sat Jan 16 01:21:33 UTC 2010

Modified Files:
	pkgsrc/devel/libthai: Makefile distinfo

Log Message:
Update libthai to 0.1.13.

LibThai 0.1.13 (15 January 2010):
* Fix integer overflow vulnerabilities (CVE-2009-4012).
* Updated word break dictionary.
Pullup ticket #2958.
Pullup ticket 2959 - requested by tron
build fix for Solaris

Revisions pulled up:
- pkgsrc/security/opencdk/Makefile		1.32

   -------------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   tron
   Date:           Sat Jan 16 11:23:04 UTC 2010

   Modified Files:
           pkgsrc/security/opencdk: Makefile

   Log Message:
   Fix build under Solaris.


   To generate a diff of this commit:
   cvs rdiff -u -r1.31 -r1.32 pkgsrc/security/opencdk/Makefile
pullup #2959
Pullup ticket #2960 - requested by tnn
xulrunner: build fix

Revisions pulled up:
- devel/xulrunner/mozilla-common.mk	1.11
---
Module Name:	pkgsrc
Committed By:	tnn
Date:		Mon Jan 18 23:50:42 UTC 2010

Modified Files:
	pkgsrc/devel/xulrunner: mozilla-common.mk

Log Message:
unlimit datasize. Should fix ICE on netbsd-4/amd64 observed in bulk
build.
Ticket #2960.
Pullup ticket #2963 - requested by dholland
hercules: build fix

Revisions pulled up:
- emulators/hercules/Makefile			1.23-1.24
- emulators/hercules/distinfo			1.10
- emulators/hercules/patches/patch-aa		1.8
- emulators/hercules/patches/patch-aj		1.2
- emulators/hercules/patches/patch-an		1.2
- emulators/hercules/patches/patch-ap		1.1
- emulators/hercules/patches/patch-aq		1.1
- emulators/hercules/patches/patch-ar		1.1
- emulators/hercules/patches/patch-as		1.1
- emulators/hercules/patches/patch-at		1.1
- emulators/hercules/patches/patch-au		1.1
- emulators/hercules/patches/patch-av		1.1
- emulators/hercules/patches/patch-aw		1.1
---
Module Name:	pkgsrc
Committed By:	dholland
Date:		Sun Jan 17 08:00:47 UTC 2010

Modified Files:
	pkgsrc/emulators/hercules: Makefile distinfo
	pkgsrc/emulators/hercules/patches: patch-aa patch-aj patch-an
Added Files:
	pkgsrc/emulators/hercules/patches: patch-ap patch-aq patch-ar patch-as
	    patch-at patch-au patch-av patch-aw

Log Message:
Patch out no-longer-supported gcc language extensions, mostly lvalue
casts and lvalue ternary operators. Also make static/non-static decls
consistent. Fixes broken build. While here, add DESTDIR support.
---
Module Name:	pkgsrc
Committed By:	dholland
Date:		Sun Jan 17 08:02:49 UTC 2010

Modified Files:
	pkgsrc/emulators/hercules: Makefile

Log Message:
Update HOMEPAGE and MASTER_SITES.
Pullup ticket #2962 - requested by joerg
mono: build fix

Revisions pulled up:
- mk/buildlink3/scan-libtool		1.5
---
Module Name:	pkgsrc
Committed By:	joerg
Date:		Wed Jan 20 14:29:46 UTC 2010

Modified Files:
	pkgsrc/mk/buildlink3: scan-libtool

Log Message:
Do not second guess the libtool mode if it was explicitly specified.
For --mode=execute, it could result in incorrect dropping of arguments,
which breaks mono.
Pullup ticket #2962 and #2963.
Pullup ticket 2961 - requested by taca
security update

Revisions pulled up:
- pkgsrc/net/bind96/Makefile		1.14
- pkgsrc/net/bind96/PLIST		1.5
- pkgsrc/net/bind96/distinfo		1.8

   -------------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   taca
   Date:           Wed Jan 20 01:01:15 UTC 2010

   Modified Files:
           pkgsrc/net/bind96: Makefile PLIST distinfo

   Log Message:
   Update net/bind96 to 9.6.1pl3 (9.6.1-P3).

           --- 9.6.1-P3 released ---

   2831.   [security]      Do not attempt to validate or cache
                           out-of-bailiwick data returned with a secure
                           answer; it must be re-fetched from its original
                           source and validated in that context. [RT #20819]

   2828.   [security]      Cached CNAME or DNAME RR could be returned to clients
                           without DNSSEC validation. [RT #20737]

   2827.   [security]      Bogus NXDOMAIN could be cached as if valid.
                           [RT #20712]


   To generate a diff of this commit:
   cvs rdiff -u -r1.13 -r1.14 pkgsrc/net/bind96/Makefile
   cvs rdiff -u -r1.4 -r1.5 pkgsrc/net/bind96/PLIST
   cvs rdiff -u -r1.7 -r1.8 pkgsrc/net/bind96/distinfo
pullup #2961
Pullup ticket 2964 - requested by tnn
security update

Revisions pulled up:
- pkgsrc/net/Transmission/Makefile	1.55
- pkgsrc/net/Transmission/PLIST.common	1.9
- pkgsrc/net/Transmission/PLIST.gtk	1.16
- pkgsrc/net/Transmission/distinfo	1.42

   -------------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   tnn
   Date:           Thu Jan 21 10:19:21 UTC 2010

   Modified Files:
           pkgsrc/net/Transmission: Makefile PLIST.common PLIST.gtk
   distinfo

   Log Message:
   Update to 1.80.
   This is a huge listen-to-the-users release -- it uses 103 ideas from
   users, including 44 enhancements, 26 bugfixes and 33 more bugfixes
   during the beta tests.
   Also includes fix for CVE-2010-0012 which allowed overwriting local
   files if a malicious .torrent file was opened.


   To generate a diff of this commit:
   cvs rdiff -u -r1.54 -r1.55 pkgsrc/net/Transmission/Makefile
   cvs rdiff -u -r1.8 -r1.9 pkgsrc/net/Transmission/PLIST.common
   cvs rdiff -u -r1.15 -r1.16 pkgsrc/net/Transmission/PLIST.gtk
   cvs rdiff -u -r1.41 -r1.42 pkgsrc/net/Transmission/distinfo
pullup #2964
Pullup ticket #2965 - requested by spz
bind95: security update

Revisions pulled up:
- net/bind95/Makefile			1.16 via patch
- net/bind95/distinfo			1.12
---
Module Name:	pkgsrc
Committed By:	spz
Date:		Thu Jan 21 19:42:16 UTC 2010

Modified Files:
	pkgsrc/net/bind95: Makefile distinfo

Log Message:
security update:
BIND 9.5.2-P2 is a SECURITY PATCH for BIND 9.5.2.  It addresses two
potential cache poisoning vulnerabilities, both of which could allow
a validating recursive nameserver to cache data which had not been
authenticated or was invalid.

CVE identifiers: CVE-2009-4022, CVE-2010-0097
CERT advisories: VU#418861, VU#360341

Changes since 9.5.2-P1:

2831.	[security]	Do not attempt to validate or cache
			out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]

2828.	[security]	Cached CNAME or DNAME RR could be returned to clients
			without DNSSEC validation. [RT #20737]

2827.	[security]	Bogus NXDOMAIN could be cached as if valid. [RT #20712]
Pullup ticket #2966 - requested by spz
bind9: security update

Revisions pulled up:
- net/bind9/Makefile			1.112 via patch
- net/bind9/distinfo			1.46
---
Module Name:	pkgsrc
Committed By:	spz
Date:		Thu Jan 21 19:54:33 UTC 2010

Modified Files:
	pkgsrc/net/bind9: Makefile distinfo

Log Message:
security update:
BIND 9.4.3-P4 is a SECURITY PATCH for BIND 9.4.3.  It addresses a
potential cache poisoning vulnerability, in which data in the additional
section of a response could be cached without proper DNSSEC validation.

Changes since 9.4.3-P3:

2772.	[security]	When validating, track whether pending data was from
			the additional section or not and only return it if
			validates as secure. [RT #20438]

BIND 9.4.3-P5 is a SECURITY PATCH for BIND 9.4.3.  It addresses two
potential cache poisoning vulnerabilities, both of which could allow
a validating recursive nameserver to cache data which had not been
authenticated or was invalid.

CVE identifiers: CVE-2009-4022, CVE-2010-0097
CERT advisories: VU#418861, VU#360341

Changes since 9.4.3-P4:

2831.	[security]	Do not attempt to validate or cache
			out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]

2828.	[security]	Cached CNAME or DNAME RR could be returned to clients
			without DNSSEC validation. [RT #20737]

2827.	[security]	Bogus NXDOMAIN could be cached as if valid. [RT #20712]
Pullup tickets #2965 and #2966.
Pullup ticket #2967 - requested by taca
openssl: security patch

Revisions pulled up:
- security/openssl/Makefile			1.143
- security/openssl/distinfo			1.71
- security/openssl/patches/patch-bb		1.1
---
Module Name:	pkgsrc
Committed By:	taca
Date:		Fri Jan 22 03:35:10 UTC 2010

Modified Files:
	pkgsrc/security/openssl: Makefile distinfo
Added Files:
	pkgsrc/security/openssl/patches: patch-bb

Log Message:
Add a patch from OpenSSL's repositroy to deal with CVE-2009-4355.

Bump PKGREVISION.