Add the CHANGES file for the pkgsrc-2008Q3 branch
Pullup ticket #2544 - requested by martti
vim: use updated distribution archive
vim-gtk: use updated distribution archive
vim-gtk2: use updated distribution archive
vim-lang: use updated distribution archive
vim-motif: use updated distribution archive
vim-share: use updated distribution archive
vim-xaw: use updated distribution archive

Revisions pulled up:
- editors/vim-share/Makefile.common	1.116
- editors/vim-share/distinfo		1.104
---
Module Name:	pkgsrc
Committed By:	martti
Date:		Tue Oct  7 07:40:38 UTC 2008

Modified Files:
	pkgsrc/editors/vim-share: Makefile.common

Log Message:
Move all VIM distfiles to a new subdirectory as the original vim-7.2.tar.bz2
was modified in the master site (yes I agree, this is bad practice).

This appears to be only some permission changes though. If you are really
interested to see what was changed, and you have the original distfile, execute

rm -rf /tmp/vim*
tar xjf vim-7.2.tar.bz2.orig -C /tmp
mv /tmp/vim72 /tmp/vim72.orig
tar xjf vim-7.2.tar.bz2 -C /tmp
cd /tmp
ls -lR vim72.orig | sed 's+vim72.orig+vim72+' > 1
ls -lR vim72 > 2
diff -u 1 2
---
Module Name:	pkgsrc
Committed By:	martti
Date:		Tue Oct  7 12:59:23 UTC 2008

Modified Files:
	pkgsrc/editors/vim-share: distinfo

Log Message:
Regen.
Pullup ticket #2544.
Pullup ticket #2545 - requested by martti
rrdtool: fix crashes

Revisions pulled up:
- databases/rrdtool/Makefile	1.72
- databases/rrdtool/PLIST	1.11
- databases/rrdtool/distinfo	1.33
---
Module Name:	pkgsrc
Committed By:	martti
Date:		Tue Oct  7 07:23:36 UTC 2008

Modified Files:
	pkgsrc/databases/rrdtool: Makefile PLIST distinfo

Log Message:
Updated databases/rrdtool to 1.3.4

* detect short/truncated files on open (rrdtool used to crash later
   on some platforms)

* stop rrd_resize from altering the original file (mmap side
   effect)

* fix VDEF and SHIFT use. Now it returns correct data and does
   not crash anymore.

* fix rrd_xport when used on datasources with different
   resolutions. This has been broken from day 1 of this tools
   exsitance.

* fixed default prefix for ruby install

* added rpath for perl bindings on bsd

* do not [fm]advise past the end of the file since this
   causes crashes on sparc.
Pullup ticket #2546 - requested by sborrill
citrix_ica: fix distribution archive download

Revisions pulled up:
- net/citrix_ica/Makefile       1.38
---
Module Name:    pkgsrc
Committed By:   sborrill
Date:           Tue Oct  7 09:57:58 UTC 2008

Modified Files:
        pkgsrc/net/citrix_ica: Makefile

Log Message:
Fix URL for fetching Linux-i386 ICA client.
Pullup ticket #2542 - requested by joerg
wistumbler2: fix packaging issue

Revisions pulled up:
- net/wistumbler2/patches/patch-af	1.1
---
Module Name:	pkgsrc
Committed By:	joerg
Date:		Mon Oct  6 15:12:08 UTC 2008

Added Files:
	pkgsrc/net/wistumbler2/patches: patch-af

Log Message:
Add a forgotten patch file.
Pullup ticket #2547 - requested by ghen
dovecot: security update

Revisions pulled up:
- mail/dovecot/Makefile		1.121
- mail/dovecot/distinfo		1.86
---
Module Name:	pkgsrc
Committed By:	ghen
Date:		Mon Oct  6 07:08:02 UTC 2008

Modified Files:
	pkgsrc/mail/dovecot: Makefile distinfo

Log Message:
Update to Dovecot 1.1.4.  Changes since 1.1.3:

- SORT: Yet another assert-crashfix when renumbering index sort IDs.
- ACL plugin fixes: Negative rights were actually treated as positive rights.
  'k' right didn't prevent creating parent/child/child mailbox.  ACL groups
  weren't working.
- Maildir++ quota: Fixes to rebuilding when quota limit wasn't specified in
  Dovecot (0 limit or limit read from maildirsize).
- mbox: Several bugfixes causing errors and crashes.
- Several fixes to expire plugin / expire-tool.
- lock_method=3Ddotlock could have deadlocked with itself.
- Many error handling fixes and log message improvements.
Pullup tickets #2545, #2546, #2542 and #2547.
Pullup ticket #2549 - requested by lukem
tnftpd: security update

Revisions pulled up:
- net/tnftpd/Makefile		1.18
- net/tnftpd/PLIST		1.3
- net/tnftpd/distinfo		1.10
- net/tnftpd/options.mk		1.2
- net/tnftpd/patches/patch-aa	delete
---
Module Name:	pkgsrc
Committed By:	lukem
Date:		Thu Oct  9 04:14:29 UTC 2008

Modified Files:
	pkgsrc/net/tnftpd: Makefile PLIST distinfo options.mk
Removed Files:
	pkgsrc/net/tnftpd/patches: patch-aa

Log Message:
Update to tnftpd 20081009.  Notable changes since 20061217:

* Don't split large commands into multiple commands; just fail on them.
  This prevents cross-site request forgery (CSRF)-like attacks,
  when a web browser is used to access an ftp server.
* Enhance -C to support an optional @host ('-C user[@host]'):
  checks whether user as connecting from host would be granted
  access by ftpusers(5).
* Support IPv6 in the host directive of ftpusers(5).
* Implement -n to disable hostname lookups.

* Disable SOCKS support; I don't have the ability to test it,
  and the autoconf checks were very out of date.
* Add configure --with-pam to enable PAM authentication support.
  Defaults to checking for PAM.
* Add configure --with-skey to enable S/Key authentication support.
  Incompatible with --with-pam, defaults to no.
* Fix pathnames in the installed manual pages to contain
  the appropriate $(prefix) substitution.
* Use fcntl(3) locking instead of flock(3) or lockf(3).
* Various other portability improvements.
Pullup ticket #2549.
Pullup ticket #2548 - requested by cegger
xentools33: security patch

Revisions pulled up:
- sysutils/xentools33/Makefile		1.10
- sysutils/xentools33/distinfo		1.13
- sysutils/xentools33/patches/patch-ga	1.1
- sysutils/xentools33/patches/patch-gc	1.1
- sysutils/xentools33/patches/patch-gd	1.1
---
Module Name:	pkgsrc
Committed By:	cegger
Date:		Wed Oct	 8 19:13:41 UTC 2008

Modified Files:
	pkgsrc/sysutils/xentools33: Makefile distinfo
Added Files:
	pkgsrc/sysutils/xentools33/patches: patch-ga patch-gb patch-gc patch-gd

Log Message:
Apply changeset 18434 from upstream xen-3.3-testing tree.
This fixes security issue http://secunia.com/advisories/32064/
Pullup ticket #2550 - requested by sketch
mktemp: security update

Revisions pulled up:
- sysutils/mktemp/Makefile		1.6
- sysutils/mktemp/distinfo		1.5
- sysutils/mktemp/patches/patch-aa	delete
---
Module Name:	pkgsrc
Committed By:	sketch
Date:		Thu Oct  9 12:00:59 UTC 2008

Modified Files:
	pkgsrc/sysutils/mktemp: Makefile distinfo
Removed Files:
	pkgsrc/sysutils/mktemp/patches: patch-aa

Log Message:
Update to 1.6 and take maintainership.  Changes:

  * Temporary file names no longer use the process ID as part of the name
  * Use arc4random_uniform() instead of random() or lrand48()
  * The prngd or egd daemon can now be used on systems without /dev/urandom
  * Added long option support for compatibility with GNU coreutils version
  * Fixed an installation issue on Cygwin
Pullup ticket ticket #2551 - requested by joerg
samba: build fix for user destdir mode

Revisions pulled up:
- net/samba/Makefile	1.185
---
From: Joerg Sonnenberger <joerg@netbsd.org>
Subject: CVS commit: pkgsrc/net/samba
To: pkgsrc-changes@NetBSD.org
Date: Thu,  9 Oct 2008 17:48:01 +0000 (UTC)


Module Name:	pkgsrc
Committed By:	joerg
Date:		Thu Oct  9 17:48:01 UTC 2008

Modified Files:
	pkgsrc/net/samba: Makefile

Log Message:
Don't leak build user in install scripts. Bump revision.
Pullup ticket ticket #2552 - requested by joerg
openldap-server: build fix for user destdir mode

Revisions pulled up:
- databases/openldap-server/Makefile	1.17
---
Module Name:	pkgsrc
Committed By:	joerg
Date:		Thu Oct  9 17:48:45 UTC 2008

Modified Files:
	pkgsrc/databases/openldap-server: Makefile

Log Message:
Don't leak build user in install scripts.
Pullup tickets #2548, #2550, #2551 and #2552.
pullup ticket #2554 - requested by tron
dbus: update package for security fix

revisions pulled up:
pkgsrc/sysutils/dbus/Makefile		1.33, 1.34
pkgsrc/sysutils/dbus/files/dbus.sh	1.9
pkgsrc/sysutils/dbus/distinfo		1.27
pkgsrc/sysutils/dbus/patches/patch-ab	1.14

   Modified Files:
           pkgsrc/sysutils/dbus: Makefile
           pkgsrc/sysutils/dbus/files: dbus.sh

   Log Message:
   When removing a loop, remove both the beginning _and_ the end.
   Bump PKGREVISION.  Noted by Cem Kayali in pkgsrc-users@

   ------------------------------------------------------------------------

   Module Name:    pkgsrc
   Committed By:   tron
   Date:           Sun Oct 12 11:15:22 UTC 2008

   Modified Files:
           pkgsrc/sysutils/dbus: Makefile distinfo
           pkgsrc/sysutils/dbus/patches: patch-ab

   Log Message:
   Update "dbus" package to version 1.2.4. Changes since 1.2.3:
   - Security fix for CVE-2008-3834
   - A small number of compilation and portability fixes
ticket #2554
pullup ticket #2553 - requested by tron
libxml2: security fix

revisions pulled up:
pkgsrc/textproc/libxml2/Makefile		1.95
pkgsrc/textproc/libxml2/distinfo		1.67
pkgsrc/textproc/libxml2/patches/patch-af	1.1

   Module Name:    pkgsrc
   Committed By:   tron
   Date:           Thu Oct  9 15:01:27 UTC 2008

   Modified Files:
           pkgsrc/textproc/libxml2: Makefile distinfo
   Added Files:
           pkgsrc/textproc/libxml2/patches: patch-af

   Log Message:
   Add a fix for CVE-2008-4409 (also known as CVE-2008-4422) from the
   GNOME bugzilla. Bump package revision.
ticket #2553
pullup ticket #2555 - requested by tron
graphviz: add a patch for security vulnerability

revisions pulled up:
pkgsrc/graphics/graphviz/Makefile		1.65
pkgsrc/graphics/graphviz/distinfo		1.29
pkgsrc/graphics/graphviz/patches/patch-au	1.10

   Module Name:    pkgsrc
   Committed By:   tron
   Date:           Sun Oct 12 13:14:39 UTC 2008

   Modified Files:
           pkgsrc/graphics/graphviz: Makefile distinfo
   Added Files:
           pkgsrc/graphics/graphviz/patches: patch-au

   Log Message:
   Add patch for the graphviz 2.20.3 release to fix the security
   vulnerability reported in SA32186.