Note the creation of the pkgsrc-2010Q3 branch
Pullup ticket #3247 - requested by kefren
graphics/libgdiplus: security patch

Revisions pulled up:
- graphics/libgdiplus/Makefile				patch
- graphics/libgdiplus/distinfo				patch
- graphics/libgdiplus/patches/patch-aa			new file
- graphics/libgdiplus/patches/patch-ab			new file
- graphics/libgdiplus/patches/patch-ac			new file
---
Apply patch to fix the security vulnerability reported in CVE-2010-1526
(execution of code via crafted TIFF, JPEG or BMP files.)
Pullup ticket #3247.
Pullup ticket 3246 - requested by tron
build fix

Revisions pulled up:
- pkgsrc/mail/pear-Mail_Mime/Makefile		1.15

-------------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   tron
   Date:           Sun Oct 17 01:06:14 UTC 2010

   Modified Files:
           pkgsrc/mail/pear-Mail_Mime: Makefile

   Log Message:
   Fix incomplete installation by patching "scripts/phail.php" after the
   installation which otherwise fails due to an MD5 checksum of the
   above file. Bump package revision as the binary package changed.


   To generate a diff of this commit:
   cvs rdiff -u -r1.14 -r1.15 pkgsrc/mail/pear-Mail_Mime/Makefile
pullup #3246
Pullup ticket #3250 - requested by obache
editors/emacs: build fix

Revisions pulled up:
- editors/emacs/Makefile			1.132
- editors/emacs/distinfo			1.47
- editors/emacs/patches/patch-bf		1.8
---
Module Name:	pkgsrc
Committed By:	obache
Date:		Thu Oct 21 12:05:49 UTC 2010

Modified Files:
	pkgsrc/editors/emacs: Makefile distinfo
Added Files:
	pkgsrc/editors/emacs/patches: patch-bf

Log Message:
Fixes build on NetBSD with X11_TYPE=native.
* honor PREFIX
* reorder rpath so that additional libraries will be prefered than builtin X.
Pullup ticket #3250.
Pullup ticket #3253 - requested by obache
lang/sun-jdk6: security update
lang/sun-jre6: security update

Revisions pulled up:
- lang/sun-jdk6/Makefile			1.20
- lang/sun-jdk6/PLIST				1.10
- lang/sun-jdk6/distinfo			1.11
- lang/sun-jdk6/files/common			1.2
- lang/sun-jre6/Makefile			1.26-1.27
- lang/sun-jre6/Makefile.common			1.14
- lang/sun-jre6/PLIST.linux-i386		1.19-1.20
- lang/sun-jre6/distinfo			1.14
- lang/sun-jre6/sfiles-i386.mk			1.3
---
Module Name:	pkgsrc
Committed By:	obache
Date:		Sat Oct 16 04:41:19 UTC 2010

Modified Files:
	pkgsrc/lang/sun-jdk6: Makefile PLIST distinfo
	pkgsrc/lang/sun-jdk6/files: common
	pkgsrc/lang/sun-jre6: Makefile Makefile.common PLIST.linux-i386
	    distinfo sfiles-i386.mk

Log Message:
Update Sun Java SE 6 to 1.6.0_22, a.k.a. 6.0.22.

[Changes in 1.6.0_22 (6u22)]
http://www.oracle.com/technetwork/java/javase/6u22releasenotes-176121.html

* OlsonData 2010l

* Root Certificates

   Added new Entrust Root CA-G2 and updated Entrust.net CA (2048) root
   certificates. (Refer to 6959911.)

* Bug Fixes
   This release contains fixes for security vulnerabilities. For more
   information, please see Oracle Java SE and Java for Business Critical Patch
   Update advisory.
   http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html

[Changes in 1.6.0_21 (6u21)]
http://www.oracle.com/technetwork/java/javase/6u21-156341.html
* OlsonData 2010i
---
Module Name:	pkgsrc
Committed By:	obache
Date:		Sat Oct 23 12:26:33 UTC 2010

Modified Files:
	pkgsrc/lang/sun-jre6: Makefile PLIST.linux-i386

Log Message:
Remove a file from PLIST, it will be regenerated in POST-INSTALL.

Bump PKGREVISION.
Pullup ticket #3253.
Pullup ticket #3255 - requested by tnn
devel/xulrunner: security update
www/firefox: security update

Revisions pulled up:
- devel/xulrunner/Makefile			1.42
- devel/xulrunner/dist.mk			1.15
- devel/xulrunner/distinfo			1.37
- devel/xulrunner/patches/patch-be		1.2
- devel/xulrunner/patches/patch-mc		delete
- www/firefox/Makefile				1.77
---
Module Name:	pkgsrc
Committed By:	tnn
Date:		Thu Oct 21 10:27:21 UTC 2010

Modified Files:
	pkgsrc/devel/xulrunner: Makefile dist.mk distinfo
	pkgsrc/devel/xulrunner/patches: patch-be
	pkgsrc/www/firefox: Makefile
Removed Files:
	pkgsrc/devel/xulrunner/patches: patch-mc

Log Message:
Security & stability update to firefox-3.6.11 (xulrunner-1.9.2.11)

MFSA 2010-72 Insecure Diffie-Hellman key exchange
MFSA 2010-71 Unsafe library loading vulnerabilities
MFSA 2010-70 SSL wildcard certificate matching IP addresses
MFSA 2010-69 Cross-site information disclosure via modal calls
MFSA 2010-68 XSS in gopher parser when parsing hrefs
MFSA 2010-67 Dangling pointer vulnerability in LookupGetterOrSetter
MFSA 2010-66 Use-after-free error in nsBarProp
MFSA 2010-65 Buffer overflow and memory corruption using document.write
MFSA 2010-64 Miscellaneous memory safety hazards (rv:1.9.2.11/ 1.9.1.14)
Pullup ticket #3255.
Pullup ticket #3256 - requested by tnn
devel/nss: security update

Revisions pulled up:
- devel/nss/Makefile				1.39
---
Module Name:	pkgsrc
Committed By:	tnn
Date:		Thu Oct 21 10:31:00 UTC 2010

Modified Files:
	pkgsrc/devel/nss: Makefile

Log Message:
Update to nss-3.12.8 (catch up w/ firefox)

Various bug fixes, including a security fix:
578697: (CVE-2010-3170) Browser Wildcard Certificate Validation Issue
Pullup ticket #3257 - requested by tnn

Revisions pulled up:
- mail/thunderbird/Makefile			1.60
- mail/thunderbird/PLIST			1.32
- mail/thunderbird/distinfo			1.75
- mail/thunderbird/patches/patch-mc		delete
---
odule Name:	pkgsrc
Committed By:	tnn
Date:		Thu Oct 21 16:02:37 UTC 2010

Modified Files:
	pkgsrc/mail/thunderbird: Makefile PLIST distinfo
Removed Files:
	pkgsrc/mail/thunderbird/patches: patch-mc

Log Message:
Update to thunderbird-3.1.5.
* Several fixes to improve stability and security
* Several fixes to the user interface.

MFSA 2010-72 Insecure Diffie-Hellman key exchange
MFSA 2010-71 Unsafe library loading vulnerabilities
MFSA 2010-70 SSL wildcard certificate matching IP addresses
MFSA 2010-69 Cross-site information disclosure via modal calls
MFSA 2010-67 Dangling pointer vulnerability in LookupGetterOrSetter
MFSA 2010-66 Use-after-free error in nsBarProp
MFSA 2010-65 Buffer overflow and memory corruption using document.write
MFSA 2010-64 Miscellaneous memory safety hazards (rv:1.9.2.11/ 1.9.1.14)
Pullup ticket #3258 - requested by tnn
www/seamonkey: security update

Revisions pulled up:
- www/seamonkey/Makefile			1.41
- www/seamonkey/distinfo			1.56
- www/seamonkey/patches/patch-ag		1.4
- www/seamonkey/patches/patch-al		delete
- www/seamonkey/patches/patch-mn		1.2
---
Module Name:	pkgsrc
Committed By:	tnn
Date:		Fri Oct 22 10:08:15 UTC 2010

Modified Files:
	pkgsrc/www/seamonkey: Makefile distinfo
	pkgsrc/www/seamonkey/patches: patch-ag patch-mn
Removed Files:
	pkgsrc/www/seamonkey/patches: patch-al

Log Message:
Security and stability update of seamonkey to 2.0.9.

MFSA 2010-72 Insecure Diffie-Hellman key exchange
MFSA 2010-71 Unsafe library loading vulnerabilities
MFSA 2010-70 SSL wildcard certificate matching IP addresses
MFSA 2010-69 Cross-site information disclosure via modal calls
MFSA 2010-68 XSS in gopher parser when parsing hrefs
MFSA 2010-67 Dangling pointer vulnerability in LookupGetterOrSetter
MFSA 2010-66 Use-after-free error in nsBarProp
MFSA 2010-65 Buffer overflow and memory corruption using document.write
MFSA 2010-64 Miscellaneous memory safety hazards (rv:1.9.2.11/ 1.9.1.14)
Pullup tickets #3256, #3257 and #3258.
Pullup ticket #3259 - requested by markd
graphics/kdegraphics3: security patch

Revisions pulled up:
- graphics/kdegraphics3/Makefile			1.88
- graphics/kdegraphics3/distinfo			1.52
- graphics/kdegraphics3/patches/patch-ad		1.8
- graphics/kdegraphics3/patches/patch-ae		1.3
---

Module Name:	pkgsrc
Committed By:	markd
Date:		Mon Oct 25 19:30:05 UTC 2010

Modified Files:
	pkgsrc/graphics/kdegraphics3: Makefile distinfo
Added Files:
	pkgsrc/graphics/kdegraphics3/patches: patch-ad patch-ae

Log Message:
Fixes for CVE-2010-3702 and CVE-2010-3704 via the patches for xpdf.
Pullup ticket #3259.
Pullup ticket #3260 - requested by gls
audio/mpg123: security update

Revisions pulled up:
- audio/mpg123/Makefile.common		1.35
- audio/mpg123/distinfo			1.32
---
Module Name:	pkgsrc
Committed By:	zafer
Date:		Tue Oct 26 21:06:44 UTC 2010

Modified Files:
	pkgsrc/audio/mpg123: Makefile.common distinfo

Log Message:
Update mpg123 to 1.12.5

Changelog:
Version 1.12.5:
This release fixes a buffer overflow issue in the mpg123 frontend
application when printing ID3 data in non-UTF-8 environments. It has
been introduced in version 1.12.4 and Jakub Bogusz was so kind to bump
my head into this. Please upgrade. Thanks.

Version 1.12.4:
This is a little bugfix release that improves printout of metadata (ID3)
in UTF-8 terminals, fixing one of those distro bug reports that I am
getting aware of late... Get it from the usual places.

Version 1.12.3:
The newest release fixes bug 3022850, a long-standing bug that managed
to break http streaming with ICY metadata in a non-obvious manner. It's
a little change with big impact... for those who listen to web radio,
that is.

Version 1.12.2:
The fresh maintenance release mainly fixes bug 2996045, invalid memory
access prompted by addresses in the upper half of the address space. I
introduced that one with a bad alignment algorithm, sorry.

Along with this go several other fixes/improvements:

    * Various build and portability fixes (including making some exotic
configure switches work (again)).
    * Add dump_seekindex example
    * Sync mpg123_clr (.NET wrapper) to 1.12 feature set, patch provided
by Malcolm Boczek -- and actually include it in release tarball!
    * Rework mpg123.h logic for large file stuff a bit, clients can
control it by defining MPG123_NO_LARGENAME or MPG123_LARGESUFFIX.
    * Include dumb wrappers to provide names suffixed with _64 on 64 bit
machines and _32 on 32 bit machines, respectively, to help clients that
insist on defining _FILE_OFFSET_BITS where it is not needed (or with a
non-large value).
    * Tuning of the internal buffer code for feeder mode to minimize its
performance impact (works in 4K blocks now).
    * Workaround for compiler bugs in Open64/PathScale/SunStudio (bug
3004396, suggestion by Doug Gilmore).
      Note that Sun Studio is still a tricky fellow, at least when it
comes to our preprocessed assembly (generic build works). Also,
x86-Open64 recently produced another segfault in layer3.c on my box...
GNU and intel compilers are what one can use as something stable.
    * Make mpg123_getformat() return more error codes (like
MPG123_NEED_MORE).
    * Fix handle I/O for clients with small file offset (32 bit when
libmpg123 has 64 bit).
    * Fix 3DNow(Ext) standalone builds.
Pullup ticket #3260.
Pullup ticket #3261 - requested by bouyer
mail/clamav: bug fix

Revisions pulled up:
- mail/clamav/Makefile				1.107
- mail/clamav/distinfo				1.69
- mail/clamav/patches/patch-ah			1.19
---
Module Name:	pkgsrc
Committed By:	bouyer
Date:		Thu Oct 28 20:11:18 UTC 2010

Modified Files:
	pkgsrc/mail/clamav: Makefile distinfo
Added Files:
	pkgsrc/mail/clamav/patches: patch-ah

Log Message:
backport 2 fixes from the git repository. Without it, clamav would
fail to parse some PDF files. Bump PKGREVISION.