Pullup ticket #4256 - requested by spz
lang/python26: security update

Revisions pulled up:
- lang/python26/Makefile                                        1.56
- lang/python26/PLIST.common                                    1.15
- lang/python26/buildlink3.mk                                   1.6
- lang/python26/dist.mk                                         1.4
- lang/python26/distinfo                                        1.52
- lang/python26/patches/patch-CVE-2013-4238                     deleted
- lang/python26/patches/patch-al                                1.12

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Wed Nov  6 07:25:49 UTC 2013

   Modified Files:
   	pkgsrc/lang/python26: Makefile PLIST.common buildlink3.mk dist.mk
   	    distinfo
   	pkgsrc/lang/python26/patches: patch-al
   Removed Files:
   	pkgsrc/lang/python26/patches: patch-CVE-2013-4238

   Log Message:
   Python 2.6.9 is a security-fix source-only release for Python 2.6.8, fixing several reported security issues: issue 16037, issue 16038, issue 16039, issue 16040, issue 16041, and issue 16042 (CVE-2013-1752, long lines consuming too much memory), as well as issue 14984 (security enforcement on $HOME/.netrc files), issue 16248 (code execution vulnerability in tkinter), and issue 18709 (CVE-2013-4238, SSL module handling of NULL bytes inside subjectAltName).
Pullup ticket #4256.
Pullup ticket #4257 - requested by taca
www/drupal6: security update

Revisions pulled up:
- www/drupal6/Makefile                                          1.44
- www/drupal6/distinfo                                          1.28

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Nov 21 15:13:09 UTC 2013

   Modified Files:
   	pkgsrc/www/drupal6: Makefile distinfo

   Log Message:
   Update drupal6 to 6.29 (Drupal 6.29).

   Drupal 6.29, 2013-11-20
   ----------------------
   - Fixed security issues (multiple vulnerabilities), see SA-CORE-2013-003.
Pullup ticket #4258 - requested by taca
www/drupal7: security update

Revisions pulled up:
- www/drupal7/Makefile                                          1.22
- www/drupal7/distinfo                                          1.15

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Nov 21 15:14:11 UTC 2013

   Modified Files:
   	pkgsrc/www/drupal7: Makefile distinfo

   Log Message:
   Update drupal7 to 7.24 (Drupal 7.24).

   Drupal 7.24, 2013-11-20
   ----------------------
   - Fixed security issues (multiple vulnerabilities), see SA-CORE-2013-003.
Pullup tickets #4257 and #4258.
Pullup ticket #4259 - requested by taca
databases/ruby-dm-serializer: dependency fix
databases/ruby-dm-types/Makefile: dependency fix
net/ruby-tw/Makefile: dependency fix

Revisions pulled up:
- databases/ruby-dm-serializer/Makefile                         1.7
- databases/ruby-dm-types/Makefile                              1.10
- lang/ruby/json.mk                                             1.3
- net/ruby-tw/Makefile                                          1.7

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Nov 24 14:05:08 UTC 2013

   Modified Files:
   	pkgsrc/lang/ruby: json.mk

   Log Message:
   Correct versions of json as bundled with Ruby.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Nov 24 14:07:50 UTC 2013

   Modified Files:
   	pkgsrc/databases/ruby-dm-serializer: Makefile
   	pkgsrc/databases/ruby-dm-types: Makefile
   	pkgsrc/net/ruby-tw: Makefile

   Log Message:
   Bump PKGREVISION for json version handling change.
Pullup ticket #4260 - requested by taca
lang/ruby193-base: security update

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.105
- lang/ruby193-base/Makefile                                    1.36
- lang/ruby193-base/distinfo                                    1.28 via patch
- lang/ruby193-base/patches/patch-configure                     1.11
- lang/ruby193-base/patches/patch-configure.in                  1.10
- lang/ruby193-base/patches/patch-ext_tk_extconf.rb             deleted

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Nov 24 14:17:19 UTC 2013

   Modified Files:
   	pkgsrc/lang/ruby: rubyversion.mk
   	pkgsrc/lang/ruby193-base: Makefile distinfo
   	pkgsrc/lang/ruby193-base/patches: patch-configure patch-configure.in
   Removed Files:
   	pkgsrc/lang/ruby193-base/patches: patch-ext_tk_extconf.rb

   Log Message:
   Update ruby193-base (and related packages to 1.9.3-p484).

   Ruby 1.9.3-p484 is released

   Now Ruby 1.9.3-p484 is released.

   This release includes a security fix about ruby interpreter core:

       Heap Overflow in Floating Point Parsing (CVE-2013-4164)

   And some bugfixes are also included. See tickets and ChangeLog for details.
Pullup ticket #4261 - requested by taca
lang/ruby200-base: security update

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.106
- lang/ruby200-base/Makefile                                    1.5
- lang/ruby200-base/PLIST                                       1.2
- lang/ruby200-base/distinfo                                    1.7
- lang/ruby200-base/patches/patch-configure                     1.4
- lang/ruby200-base/patches/patch-ext_tk_extconf.rb             deleted
- lang/ruby200-base/patches/patch-lib_rubygems.rb               1.2
- lang/ruby200-base/patches/patch-lib_rubygems_commands_setup__command.rb 1.2
- lang/ruby200-base/patches/patch-lib_rubygems_config__file.rb  1.2
- lang/ruby200-base/patches/patch-lib_rubygems_dependency__installer.rb 1.2
- lang/ruby200-base/patches/patch-lib_rubygems_ext_ext__conf__builder.rb deleted
- lang/ruby200-base/patches/patch-lib_rubygems_installer.rb     1.2
- lang/ruby200-base/patches/patch-lib_rubygems_specification.rb 1.2
- lang/ruby200-base/patches/patch-lib_rubygems_version.rb       deleted
- lang/ruby200-base/patches/patch-man_ri.1                      1.2
- lang/ruby200-base/patches/patch-tool_rbinstall.rb             1.2

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Nov 24 14:22:03 UTC 2013

   Modified Files:
   	pkgsrc/lang/ruby: rubyversion.mk
   	pkgsrc/lang/ruby200-base: Makefile PLIST distinfo
   	pkgsrc/lang/ruby200-base/patches: patch-configure patch-lib_rubygems.rb
   	    patch-lib_rubygems_commands_setup__command.rb
   	    patch-lib_rubygems_config__file.rb
   	    patch-lib_rubygems_dependency__installer.rb
   	    patch-lib_rubygems_installer.rb patch-lib_rubygems_specification.rb
   	    patch-man_ri.1 patch-tool_rbinstall.rb
   Removed Files:
   	pkgsrc/lang/ruby200-base/patches: patch-ext_tk_extconf.rb
   	    patch-lib_rubygems_ext_ext__conf__builder.rb
   	    patch-lib_rubygems_version.rb

   Log Message:
   Update ruby200-base, ruby200 and ruby-mode package to 2.00-p353.

   Ruby 2.0.0-p353 is released

   Now Ruby 2.0.0-p353 is released.

   This release includes a security fix about floating point parsing.

       Heap Overflow in Floating Point Parsing (CVE-2013-4164)

   And some bugfixes are also included. See tickets and ChangeLog for details.
Pullup tickets #4259, #4260 and #4261.