Pullup ticket #4478 - requested by wiz
x11/gnome-desktop3: build fix

Revisions pulled up:
- x11/gnome-desktop3/distinfo                                   1.6
- x11/gnome-desktop3/patches/patch-libgnome-desktop_libgsystem_gsystem-file-utils.c 1.1

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Thu Aug 21 10:37:48 UTC 2014

   Modified Files:
   	pkgsrc/x11/gnome-desktop3: distinfo
   Added Files:
   	pkgsrc/x11/gnome-desktop3/patches:
   	    patch-libgnome-desktop_libgsystem_gsystem-file-utils.c

   Log Message:
   Add fcntl.h for openat(). Might help build on NetBSD-6.
Pullup ticket #4479 - requested by wiz
security/gpgme: security update

Revisions pulled up:
- security/gpgme/Makefile                                       1.73
- security/gpgme/distinfo                                       1.32

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Thu Aug 21 20:40:58 UTC 2014

   Modified Files:
   	pkgsrc/security/gpgme: Makefile distinfo

   Log Message:
   Update to 1.4.4. Remove obsolete configure args.

   Noteworthy changes in version 1.4.4 (2014-07-30) [C22/A11/R1]
   -------------------------------------------------------------

    Backported from 1.5.1:

    * Fixed possible overflow in gpgsm and uiserver engines.
      [CVE-2014-3564]

    * Fixed possibled segv in gpgme_op_card_edit.

    * Fixed minor memleaks and possible zombie processes.

    * Fixed prototype inconsistencies and void pointer arithmetic.

   Noteworthy changes in version 1.4.3 (2013-08-12) [C22/A11/R0]
   -------------------------------------------------------------

    * The default engine names are now taken from the output of gpgconf.
      If gpgconf is not found the use of gpg 1 is assumed.

    * Under Windows the default engines names are first searched in the
      installation directory of the gpgme DLL.

    * New function gpgme_data_identify to detect the type of a message.

    * Interface changes relative to the 1.4.2 release:
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    gpgme_signers_count            NEW.
    gpgme_data_type_t              NEW.
    gpgme_data_identify            NEW.

   Noteworthy changes in version 1.4.2 (2013-05-28)
   ------------------------------------------------

    * Allow symmetric encryption with gpgme_op_encrypt_sign.

    * Fixed mismatching off_t definitions on Windows.

    * Interface changes relative to the 1.4.1 release:
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    gpgme_off_t                    NEW.
    gpgme_size_t                   NEW.
    GPGME_PROTOCOL_OPENPGP         NEW alias.
Pullup ticket #4480 - requested by obache
graphics/py-Pillow: security update

Revisions pulled up:
- graphics/py-Pillow/Makefile                                   1.10-1.13
- graphics/py-Pillow/PLIST                                      1.5
- graphics/py-Pillow/distinfo                                   1.6-1.8
- graphics/py-Pillow/patches/patch-setup.py                     1.3

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Sun Jul  6 12:15:53 UTC 2014

   Modified Files:
   	pkgsrc/graphics/py-Pillow: Makefile PLIST distinfo
   	pkgsrc/graphics/py-Pillow/patches: patch-setup.py

   Log Message:
   Update Pillow to 2.5.0.

   2.5.0 (2014-07-01)
   ------------------

   - Imagedraw rewrite
     [terseus, wiredfool]

   - Add support for multithreaded test execution
     [wiredfool]

   - Prevent shell injection #748
     [mbrown1413, wiredfool]

   - Support for Resolution in BMP files #734
     [gcq]

   - Fix error in setup.py for Python 3
     [matthew-brett]

   - Pyroma fix and add Python 3.4 to setup metadata #742
     [wirefool]

   - Top level flake8 fixes #741
     [aclark]

   - Remove obsolete Animated Raster Graphics (ARG) support
     [hugovk]

   - Fix test_imagedraw failures #727
     [cgohlke]

   - Fix AttributeError: class Image has no attribute 'DEBUG' #726
     [cgohlke]

   - Fix msvc warning: 'inline' : macro redefinition #725
     [cgohlke]

   - Cleanup #654
     [dvska, hugovk, wiredfool]

   - 16-bit monochrome support for JPEG2000
     [videan42]

   - Fixed ImagePalette.save
     [brightpisces]

   - Support JPEG qtables
     [csinchok]

   - Add binary morphology addon
     [dov, wiredfool]

   - Decompression bomb protection
     [hugovk]

   - Put images in a single directory
     [hugovk]

   - Support OpenJpeg 2.1
     [al45tair]

   - Remove unistd.h #include for all platforms
     [wiredfool]

   - Use unittest for tests
     [hugovk]

   - ImageCms fixes
     [hugovk]

   - Added more ImageDraw tests
     [hugovk]

   - Added tests for Spider files
     [hugovk]

   - Use libtiff to write any compressed tiff files
     [wiredfool]

   - Support for pickling Image objects
     [hugovk]

   - Fixed resolution handling for EPS thumbnails
     [eliempje]

   - Fixed rendering of some binary EPS files (Issue #302)
     [eliempje]

   - Rename variables not to use built-in function names
     [hugovk]

   - Ignore junk JPEG markers
     [hugovk]

   - Change default interpolation for Image.thumbnail to Image.ANTIALIAS
     [hugovk]

   - Add tests and fixes for saving PDFs
     [hugovk]

   - Remove transparency resource after P->RGBA conversion
     [hugovk]

   - Clean up preprocessor cruft for Windows
     [CounterPillow]

   - Adjust Homebrew freetype detection logic
     [jacknagel]

   - Added Image.close, context manager support.
     [wiredfool]

   - Added support for 16 bit PGM files.
     [wiredfool]

   - Updated OleFileIO to version 0.30 from upstream
     [hugovk]

   - Added support for additional TIFF floating point format
     [Hijackal]

   - Have the tempfile use a suffix with a dot
     [wiredfool]

   - Fix variable name used for transparency manipulations
     [nijel]

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Sun Jul  6 12:18:39 UTC 2014

   Modified Files:
   	pkgsrc/graphics/py-Pillow: Makefile

   Log Message:
   Update HOMEPAGE url.

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Fri Aug  8 12:09:28 UTC 2014

   Modified Files:
   	pkgsrc/graphics/py-Pillow: Makefile distinfo

   Log Message:
   Update Pillow to 2.5.1.

   2.5.1 (2014-07-10)
   ------------------

   - Fixed install issue if Multiprocessing.Pool is not available
     [wiredfool]

   - 32bit mult overflow fix #782
     [wiredfool]

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Thu Aug 21 10:00:32 UTC 2014

   Modified Files:
   	pkgsrc/graphics/py-Pillow: Makefile distinfo

   Log Message:
   Update Pillow to 2.5.3.

   2.5.3 (2014-08-18)
   ------------------

   - Fixed CVE-2014-3598, a DOS in the Jpeg2KImagePlugin
     [Andrew Drake]

   2.5.2 (2014-08-13)
   ------------------

   - Fixed CVE-2014-3589, a DOS in the IcnsImagePlugin
     [Andrew Drake]
Pullup ticket #4481 - requested by obache
emulators/suse131_openssl: security update

Revisions pulled up:
- emulators/suse131_openssl/Makefile                            1.10
- emulators/suse131_openssl/distinfo                            1.10

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Fri Aug 22 08:43:09 UTC 2014

   Modified Files:
   	pkgsrc/emulators/suse131_openssl: Makefile distinfo

   Log Message:
      openSUSE Security Update: update for openssl
   ___________________________________________________________________________
   ___

   Announcement ID:    openSUSE-SU-2014:1052-1
   Rating:             moderate
   References:         #890764 #890765 #890766 #890767 #890768 #890769
                       #890770 #890771 #890772
   Cross-References:   CVE-2014-3505 CVE-2014-3506 CVE-2014-3507
                       CVE-2014-3508 CVE-2014-3509 CVE-2014-3510
                       CVE-2014-3511 CVE-2014-3512 CVE-2014-5139

   Affected Products:
                       openSUSE 13.1
                       openSUSE 12.3
   ___________________________________________________________________________
   ___

      An update that fixes 9 vulnerabilities is now available.

   Description:

      This openssl update fixes the following security issues:

      - openssl 1.0.1i
      * Information leak in pretty printing functions (CVE-2014-3508)
      * Crash with SRP ciphersuite in Server Hello message (CVE-2014-5139)
      * Race condition in ssl_parse_serverhello_tlsext (CVE-2014-3509)
      * Double Free when processing DTLS packets (CVE-2014-3505)
      * DTLS memory exhaustion (CVE-2014-3506)
      * DTLS memory leak from zero-length fragments (CVE-2014-3507)
      * OpenSSL DTLS anonymous EC(DH) denial of service (CVE-2014-3510)
      * OpenSSL TLS protocol downgrade attack (CVE-2014-3511)
      * SRP buffer overrun (CVE-2014-3512)
Pullup ticket #4482 - requested by obache
multimedia/adobe-flash-plugin11: security update

Revisions pulled up:
- multimedia/adobe-flash-plugin11/Makefile                      1.32
- multimedia/adobe-flash-plugin11/distinfo                      1.30

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Fri Aug 22 08:46:10 UTC 2014

   Modified Files:
   	pkgsrc/multimedia/adobe-flash-plugin11: Makefile distinfo

   Log Message:
   Update adoble-flash-plugin11 to 11.2.202.400 for APSB14-18.
Pullup ticket #4483 - requested by obache
emulators/suse131_libtiff: security update

Revisions pulled up:
- emulators/suse131_libtiff/Makefile                            1.2
- emulators/suse131_libtiff/distinfo                            1.2

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Fri Aug 22 08:54:08 UTC 2014

   Modified Files:
   	pkgsrc/emulators/suse131_libtiff: Makefile distinfo

   Log Message:
      openSUSE Security Update: update for jbigkit
   ___________________________________________________________________________
   ___

   Announcement ID:    openSUSE-SU-2014:0978-1
   Rating:             moderate
   References:         #870855
   Cross-References:   CVE-2013-6369
   Affected Products:
                       openSUSE 13.1
                       openSUSE 12.3
   ___________________________________________________________________________
   ___

      An update that fixes one vulnerability is now available.

   Description:

          The following security issue is fixed in this update
      - [bnc#870855] - CVE-2013-6369: jbigkit buffer overflow
Pullup ticket #4484 - requested by obache
emulators/suse131_krb5: security update

Revisions pulled up:
- emulators/suse131_krb5/Makefile                               1.2
- emulators/suse131_krb5/distinfo                               1.2

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Fri Aug 22 09:01:56 UTC 2014

   Modified Files:
   	pkgsrc/emulators/suse131_krb5: Makefile distinfo

   Log Message:
      openSUSE Security Update: krb5
   ___________________________________________________________________________
   ___

   Announcement ID:    openSUSE-SU-2014:0977-1
   Rating:             low
   References:         #886016 #888697
   Cross-References:   CVE-2014-4341 CVE-2014-4342 CVE-2014-4343
                       CVE-2014-4344
   Affected Products:
                       openSUSE 13.1
                       openSUSE 12.3
   ___________________________________________________________________________
   ___

      An update that fixes four vulnerabilities is now available.

   Description:

      The following security isses are fixed in this update:

      CVE-2014-4341 CVE-2014-4342: denial of service flaws when handling RFC
      1964 tokens (bnc#886016)

      CVE-2014-4343 CVE-2014-4344: multiple flaws in SPNEGO (bnc#888697)
Pullup tickets #4478, #4479, #4480, #4481, #4482, #4483 and #4484.