Add a file to track changes on the pkgsrc-2009Q3 branch.
Pullup ticket #2911 - requested by joerg
py-django: bug-fix update

Revisions pulled up:
- www/py-django/Makefile		1.20
- www/py-django/distinfo		1.11
---
Module Name:	pkgsrc
Committed By:	joerg
Date:		Tue Oct 13 18:19:24 UTC 2009

Modified Files:
	pkgsrc/www/py-django: Makefile distinfo

Log Message:
Django 1.0.4:
Fix a regular expression used by the form validation code to not trigger
pathologoical performance cases for certain inputs.
Pullup ticket #2912 - requested by hasso
perl5: portability patch

Revisions pulled up:
- lang/perl5/distinfo			1.61
- lang/perl5/patches/patch-db		1.1
---
Module Name:    pkgsrc
Committed By:   hasso
Date:           Tue Oct 13 10:38:31 UTC 2009

Modified Files:
        pkgsrc/lang/perl5: distinfo
Added Files:
        pkgsrc/lang/perl5/patches: patch-db

Log Message:
Fix thread library detection on DragonFly. From corecode via PR 42170.
Pullup tickets #2911 and #2912.
Pullup ticket #2913 - requested by tez
xpdf: security patch

Revisions pulled up:
- print/xpdf/Makefile			1.68
- print/xpdf/distinfo			1.35
---
Module Name:    pkgsrc
Committed By:   tez
Date:           Fri Oct 16 19:36:29 UTC 2009

Modified Files:
        pkgsrc/print/xpdf: Makefile distinfo

Log Message:
update to xpdf-3.02pl4 to fix CVE-2009-3603, CVE-2009-3604, CVE-2009-3606,
CVE-2009-3608 & CVE-2009-3609
Pullup ticket #2914 - requested by joerg
unbound: security update

Revisions pulled up:
- net/unbound/Makefile			1.5
- net/unbound/distinfo			1.5
---
Module Name:	pkgsrc
Committed By:	joerg
Date:		Mon Oct 19 17:03:33 UTC 2009

Modified Files:
	pkgsrc/net/unbound: Makefile distinfo

Log Message:
Update to unbound-1.3.4:
- Fixed bug where NSEC3 signature was not checked. This meant that
  a DS could be spoofed away by a carefully crafted packet.
  A downgrade attack on existing secure delegations.
- updated iana port list.
Pullup tickets #2913 and #2914.
Pullup ticket #2915 - requested by sborrill
xlockmore: build fix
xlockmore-lite: build fix

Revisions pulled up:
- x11/xlockmore-lite/Makefile			1.12
- x11/xlockmore/Makefile			1.80
- x11/xlockmore/Makefile.common			1.55
---
Module Name:	pkgsrc
Committed By:	sborrill
Date:		Tue Oct 20 13:15:29 UTC 2009

Modified Files:
	pkgsrc/x11/xlockmore: Makefile Makefile.common
	pkgsrc/x11/xlockmore-lite: Makefile

Log Message:
Set app-defaults folder so it is in  (previously tried to install
in /usr/lib).
Bump PKGREVISION
Pullup ticket #2915.
Pullup ticket #2917 - requested by joerg
nbpatch: portability fix

Revisions pulled up:
- devel/nbpatch/Makefile		1.4
- devel/nbpatch/files/inp.c		1.6
---
Module Name:	pkgsrc
Committed By:	joerg
Date:		Wed Oct 21 17:17:04 UTC 2009

Modified Files:
	pkgsrc/devel/nbpatch: Makefile
	pkgsrc/devel/nbpatch/files: inp.c

Log Message:
nbpatch-20091021:
Do not try to mmap a zero length file. This can fail e.g. on Solaris.
Pullup ticket #2917.
Pullup ticket #2916 - requested by he
parrot: build fix

Revisions pulled up:
- lang/parrot/Makefile				1.23
- lang/parrot/PLIST.Darwin			1.1
- lang/parrot/PLIST.shared			1.1
- lang/parrot/distinfo				1.17-1.18
- lang/parrot/patches/patch-af			1.3
- lang/parrot/patches/patch-ag			1.3
- lang/parrot/patches/patch-ai			1.1
- lang/parrot/patches/patch-aj			1.1
---
Module Name:	pkgsrc
Committed By:	he
Date:		Wed Oct 21 14:23:14 UTC 2009

Modified Files:
	pkgsrc/lang/parrot: Makefile distinfo
Added Files:
	pkgsrc/lang/parrot/patches: patch-af patch-ag patch-ai patch-aj

Log Message:
Update parrot from version 1.6.0 to 1.6.0nb1.

Pkgsrc changes:
 o Enable shared libraries for NetBSD, and deal with the resulting
   fallout: tests which are written in C need to point their run-path
   to the build version of the shared libraries.
 o The default is shared libs with .so, except for on Darwin, where
   shared libs are named differently.  The Darwin part is untested.
---
Module Name:	pkgsrc
Committed By:	he
Date:		Thu Oct 22 11:31:44 UTC 2009

Modified Files:
	pkgsrc/lang/parrot: distinfo

Log Message:
I'm terribly sorry, patch-ai had the incorrect checksum.
This update fixes it.
---
Module Name:	pkgsrc
Committed By:	he
Date:		Thu Oct 22 12:59:58 UTC 2009

Added Files:
	pkgsrc/lang/parrot: PLIST.Darwin PLIST.shared

Log Message:
Sorry once again, these two files should have been committed
as part of the 1.6.0nb1 update.
Pullup ticket #2916.
Pullup ticket #2918 - requested by taca:
php-gd: security patch

Revisions pulled up:
- graphics/php-gd/Makefile			1.20
- lang/php5/distinfo				1.68
- lang/php5/patches/patch-ay			1.1
---
Module Name:	pkgsrc
Committed By:	taca
Date:		Thu Oct 22 14:37:47 UTC 2009

Modified Files:
	pkgsrc/graphics/php-gd: Makefile
	pkgsrc/lang/php5: distinfo
Added Files:
	pkgsrc/lang/php5/patches: patch-ay

Log Message:
Add a patch from PHP's SVN repositry to fix gd library security problem.

	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546>
Pullup ticket #2919 - requested by taca
gd: security patch

Revisions pulled up:
- graphics/gd/Makefile				1.81
- graphics/gd/distinfo				1.30-1.31
- graphics/gd/patches/patch-ad			1.1
---
Module Name:	pkgsrc
Committed By:	taca
Date:		Thu Oct 22 14:39:55 UTC 2009

Modified Files:
	pkgsrc/graphics/gd: Makefile distinfo
Added Files:
	pkgsrc/graphics/gd/patches: patch-ad

Log Message:
Fix gd library security problem refering PHP's SVN repositry.

	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546

Bump PKGREVISION.
(This fix is for php5 only and I don't know about php4.)
---
Module Name:	pkgsrc
Committed By:	taca
Date:		Thu Oct 22 15:20:53 UTC 2009

Modified Files:
	pkgsrc/graphics/gd: distinfo

Log Message:
Oops, update distinfo.
Pullup tickets #2918 and #2919.
Pullup ticket #2920 - requested by taca
typo3: security update

Revisions pulled up:
- www/typo3/Makefile			1.16
- www/typo3/PLIST			1.8
- www/typo3/distinfo			1.10
---
Module Name:	pkgsrc
Committed By:	taca
Date:		Thu Oct 22 14:53:09 UTC 2009

Modified Files:
	pkgsrc/www/typo3: Makefile PLIST distinfo

Log Message:
Update www/typo3 package to 4.2.10.  It fixes multiple security issues
found in TYPO3 core.

      http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/

2009-10-22  Oliver Hader  <oliver@typo3.org>

	* Release of TYPO3 4.2.10

2009-10-22  Ernesto Baschny <ernst@cron-it.de>

	* Security Issue #11664: Updated RemoveXSS code to the latest knowledge in this area (thanks to Jigal van Hemert)
	* Fixed bug #11586: Potential SQL injection in frontend editing (thanks to Oliver Klee)
	* Fixed bug #12309: It was possible to gain access to the Install Tool by only knowing the md5 hash of the password.
	* Fixed bug #12310: Encryption key can be recalculated when using normal mailform when [FE][strictFormmail] == 0 (thanks to Oliver Klee)
	* Fixed bug #12090: Filenames should be escaped with escapeshellarg before passing them to imagemagick (thanks to Oliver Klee)
	* Fixed bug #12303: XSS vulnerability due to not proper sanitizing in function t3lib_div::quoteJSvalue (thanks to Oliver Klee)
	* Fixed bug #12304: Frame inclusion in the backend through alt_mod_frameset (thanks to Oliver Klee)
	* Fixed bug #12305: XSS vulnerability in view_help.php / tfID parameter (thanks to Oliver Klee)
	* Fixed bug #12306: XSS vulnerability in module dispatcher
	* Fixed bug #12307: XSS vulnerability in alt_palette (thanks to Oliver Klee)
	* Fixed bug #12308: XSS vulnerability in "DB > Full search" functionality
	* Fixed bug #10501: XSS vulnerability in the install tool (thanks to Oliver Klee)

2009-10-21  Rupert Germann  <rupi@gmx.li>

	* Fixed bug #12280: Error Message while creating empty Folders (thanks to Daniel Schmitzer)
	* Fixed bug #12300 (Follow-up to 11995): Output compression breaks prompt for keyboard input in CLI scripts

2009-10-21  Steffen Kamper  <info@sk-typo3.de>

	* Fixed bug #12272: Steps disregarded in t3lib_lock (thanks to Dan Osipov)

2009-10-15  Rupert Germann  <rupi@gmx.li>

 	* Fixed bug #8728: PHP Warning, if SQL error occurs in class t3lib_db in functions which depend on an existing resultset (thanks to Felix Oertel)

2009-10-11  Rupert Germann  <rupi@gmx.li>

	* Fixed bug #10971: Fatal error in impexp module: Call to a member function includeLLFile() on a non-object (thanks to Andre Steiling)

2009-10-10  Rupert Germann  <rupi@gmx.li>

	* Fixed bug #12129 (follow-up to bug #11986): Translation update broken with activated output compression (thanks to Steffen Gebert)

2009-09-29  Oliver Hader  <oliver@typo3.org>

	* Fixed bug #11433: touch(): Utime failed in install tool (thanks to Steffen Gebert)
Pullup tickets #2920 and #2921.
Pullup ticket #2921 - requested by joerg
pkg_install: bug fix

Revisions pulled up:
- pkgtools/pkg_install/files/lib/pkgdb.c	1.36
- pkgtools/pkg_install/files/lib/version.h	1.142
---
Module Name:	pkgsrc
Committed By:	joerg
Date:		Thu Oct 22 22:51:29 UTC 2009

Modified Files:
	pkgsrc/pkgtools/pkg_install/files/lib: pkgdb.c version.h

Log Message:
pkg_install-20091009:
Do not overwrite a string with itself using snprintf. This breaks
setting the pkgdb directory internally on Linux. Explicitly check
if the string is the same and otherwise just use xstrdup.
Pullup ticket #2923 - requested by tnn
xulrunner: security update
firefox: security update

Revisions pulled up:
- devel/xulrunner/Makefile			1.24-1.25
- devel/xulrunner/PLIST				1.17-1.18
- devel/xulrunner/distinfo			1.13-1.14
- devel/xulrunner/mozilla-common.mk		1.2
- devel/xulrunner/patches/patch-aa		1.2
- devel/xulrunner/patches/patch-aq		1.3
- devel/xulrunner/patches/patch-ay		1.1
- devel/xulrunner/patches/patch-mf		1.2
- devel/xulrunner/patches/patch-mn		1.2
- devel/xulrunner/patches/patch-nb		delete
- devel/xulrunner/patches/patch-nc		delete
- devel/xulrunner/patches/patch-pd		1.2
- devel/xulrunner/patches/patch-ra		1.1
- devel/xulrunner/patches/patch-rb		1.1
- devel/xulrunner/patches/patch-rc		1.1
- www/firefox/Makefile				1.60-1.61
- www/firefox/PLIST				1.39
- www/firefox/distinfo				delete
- www/firefox/patches/patch-aa			delete
- www/firefox/patches/patch-ao			delete
- www/firefox/patches/patch-ma			delete
- www/firefox/patches/patch-mi			delete
- www/firefox/patches/patch-mk			delete
- www/firefox/patches/patch-mm			delete
- www/firefox/patches/patch-ra			delete
- www/firefox/patches/patch-rb			delete
- www/firefox/patches/patch-rc			delete
---
Module Name:	pkgsrc
Committed By:	tnn
Date:		Sun Oct 11 10:49:57 UTC 2009

Modified Files:
	pkgsrc/devel/xulrunner: Makefile PLIST distinfo
	pkgsrc/devel/xulrunner/patches: patch-aa
	pkgsrc/www/firefox: Makefile
Added Files:
	pkgsrc/devel/xulrunner/patches: patch-ay patch-ra patch-rb
patch-rc Removed Files:
	pkgsrc/www/firefox: distinfo
	pkgsrc/www/firefox/patches: patch-aa patch-ao patch-ma patch-mi
	    patch-mk patch-mm patch-ra patch-rb patch-rc

Log Message:
- allow firefox and xulrunner to share some infrastructure
- install headers for plugin and liveconnect (needed by openjdk7-icedtea-plugin)
- bump revision for both packages
---
Module Name:	pkgsrc
Committed By:	tnn
Date:		Wed Oct 28 11:36:36 UTC 2009

Modified Files:
	pkgsrc/devel/xulrunner: Makefile PLIST distinfo
mozilla-common.mk pkgsrc/devel/xulrunner/patches: patch-aq patch-mf
patch-mn patch-pd pkgsrc/www/firefox: Makefile PLIST
Removed Files:
	pkgsrc/devel/xulrunner/patches: patch-nb patch-nc

Log Message:
Security and bugfix update of firefox (to 3.5.4) and xulrunner (to
1.9.1.4) Also fix broken DESTDIR support.

Fixes the following security issues:
MFSA 2009-64 Crashes with evidence of memory corruption (rv:1.9.1.4/
1.9.0.15) MFSA 2009-63 Upgrade media libraries to fix memory safety bugs
MFSA 2009-62 Download filename spoofing with RTL override
MFSA 2009-61 Cross-origin data theft through document.getSelection()
MFSA 2009-59 Heap buffer overflow in string to number conversion
MFSA 2009-57 Chrome privilege escalation in XPCVariant::VariantDataToJS
() MFSA 2009-56 Heap buffer overflow in GIF color map parser
MFSA 2009-55 Crash in proxy auto-configuration regexp parsing
MFSA 2009-54 Crash with recursive web-worker calls
MFSA 2009-53 Local downloaded file tampering
MFSA 2009-52 Form history vulnerable to stealing