Note the start of the pkgsrc-2011Q4 branch
Pullup ticket #3638 - requested by obache
devel/xulrunner: build fix

Revisions pulled up:
- devel/xulrunner/PLIST                                         1.37

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Sun Jan  8 10:32:08 UTC 2012

   Modified Files:
   	pkgsrc/devel/xulrunner: PLIST

   Log Message:
   Add missing entries for DragonFly support.
Pullup ticket #3638.
Pullup ticket #3639 - requested by dholland
www/amaya build fix

Revisions pulled up:
- www/amaya/distinfo                                            1.24
- www/amaya/hacks.mk                                            1.1
- www/amaya/patches/patch-Amaya_amaya_HTMLedit_c                1.1
- www/amaya/patches/patch-Amaya_thotlib_base_platform_c         1.1

---
   Module Name:	pkgsrc
   Committed By:	dholland
   Date:		Sun Jan  8 22:15:21 UTC 2012

   Modified Files:
   	pkgsrc/www/amaya: distinfo
   Added Files:
   	pkgsrc/www/amaya/patches: patch-Amaya_amaya_HTMLedit_c
   	    patch-Amaya_thotlib_base_platform_c

   Log Message:
   Fix build problems with gcc 4.5. The code makes no sense so I'm not sure
   what I did is going to work... or that the code that was here previously
   ever worked or actually did what anyone upstream intended. C++ is fun
   that way.

---
   Module Name:	pkgsrc
   Committed By:	dholland
   Date:		Sun Jan  8 22:19:03 UTC 2012

   Added Files:
   	pkgsrc/www/amaya: hacks.mk

   Log Message:
   Add a workaround for PR 45266 (krb5-config issue in NetBSD base):
   clear BUILDLINK_INCDIRS.heimdal. Otherwise -I/usr/include/krb5 appears
   in CFLAGS, which breaks the build because the compiler finds krb5's
   base64.h instead of Amaya's. krb5 is pulled in by curl, which is a
   several-times-indirect dependency, and nothing in this package uses
   it, or apparently anything that needs it, directly.
Pullup ticket #3639
Pullup ticket #3641 - requested by taca
archivers/php-bz2: security update
archivers/php-zip: security update
archivers/php-zlib: security update
converters/php-iconv: security update
converters/php-mbstring: security update
databases/php-dba: security update
databases/php-ldap: security update
databases/php-mysql: security update
databases/php-mysqli: security update
databases/php-pdo: security update
databases/php-pdo_dblib: security update
databases/php-pdo_mysql: security update
databases/php-pdo_pgsql: security update
databases/php-pdo_sqlite: security update
databases/php-pgsql: security update
databases/php-sqlite: security update
devel/php-gettext: security update
devel/php-gmp: security update
devel/php-pcntl: security update
devel/php-posix: security update
devel/php-shmop: security update
devel/php-sysvmsg: security update
devel/php-sysvsem: security update
devel/php-sysvshm: security update
graphics/php-exif: security update
graphics/php-gd: security update
mail/php-imap: security update
math/php-bcmath: security update
net/php-ftp: security update
net/php-snmp: security update
net/php-soap: security update
net/php-sockets: security update
net/php-xmlrpc: security update
security/php-mcrypt: security update
textproc/php-dom: security update
textproc/php-json: security update
textproc/php-pspell: security update
textproc/php-wddx: security update
textproc/php-xsl: security update
time/php-calendar: security update
www/php-curl: security update
www/php-tidy: security update

Revisions pulled up:
- lang/php53/Makefile                                           1.20
- lang/php53/Makefile.common                                    1.9
- lang/php53/Makefile.php                                       1.11
- lang/php53/distinfo                                           1.29
- lang/php53/patches/patch-Zend_zend__builtin__functions.c      deleted
- lang/php53/patches/patch-as                                   deleted
- lang/php53/patches/patch-main_main.c                          deleted
- lang/php53/patches/patch-main_php__globals.h                  deleted
- lang/php53/patches/patch-main_php__variables.c                deleted

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Jan 11 14:53:35 UTC 2012

   Modified Files:
   	pkgsrc/lang/php53: Makefile Makefile.common Makefile.php distinfo
   Removed Files:
   	pkgsrc/lang/php53/patches: patch-Zend_zend__builtin__functions.c
   	    patch-as patch-main_main.c patch-main_php__globals.h
   	    patch-main_php__variables.c

   Log Message:
   Update php53 pacakge to 5.3.9; PHP 5.3.9.
   suhosin-patch is provided as modified one; only copyright year.

   PHP 5.3.9 Released!

   [10-Jan-2012] The PHP development team would like to announce the immediate
   availability of PHP 5.3.9. This release focuses on improving the stability of
   the PHP 5.3.x branch with over 90 bug fixes, some of which are security
   related.

   Security Enhancements and Fixes in PHP 5.3.9:

   	* Added max_input_vars directive to prevent attacks based on hash
   	  collisions. (CVE-2011-4885)
   	* Fixed bug #60150 (Integer overflow during the parsing of invalid
             exif header). (CVE-2011-4566)

   Key enhancements in PHP 5.3.9 include:

   	* Fixed bug #55475 (is_a() triggers autoloader, new optional 3rd
             argument to is_a and is_subclass_of).
   	* Fixed bug #55609 (mysqlnd cannot be built shared)
   	* Many changes to the FPM SAPI module

   For a full list of changes in PHP 5.3.9, see the ChangeLog. For source
   downloads please visit our downloads page, Windows binaries can be found on
   windows.php.net/download/.

   All users are strongly encouraged to upgrade to PHP 5.3.9.
Pullup ticket #3642 - requested by drochner
fonts/t1lib: bug fix patch

Revisions pulled up:
- fonts/t1lib/Makefile                                          1.46
- fonts/t1lib/distinfo                                          1.22
- fonts/t1lib/patches/patch-aj                                  1.2
- fonts/t1lib/patches/patch-ak                                  1.2
- fonts/t1lib/patches/patch-al                                  1.1

---
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Tue Jan 10 19:21:16 UTC 2012

   Modified Files:
           pkgsrc/fonts/t1lib: Makefile distinfo
           pkgsrc/fonts/t1lib/patches: patch-aj patch-ak
   Added Files:
           pkgsrc/fonts/t1lib/patches: patch-al

   Log Message:
   update the patch from Redhat bug #692909 to the latest version, fixes
   garbled xdvi output, from Uwe Klaus per PR pkg/45813
   bump PKGREV
Pullup tickets #3641 and #3642.
Pullup ticket #3643 - requested by obache
www/ruby-rack: security update

Revisions pulled up:
- www/ruby-rack/Makefile                                        1.10
- www/ruby-rack/distinfo                                        1.10

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Sun Jan  8 03:09:48 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-rack: Makefile distinfo

   Log Message:
   Update ruby-rack to 1.3.6.

   * December 28th, 2011: Twenty third public release: 1.3.6
      * Security fix. http://www.ocert.org/advisories/ocert-2011-003.html
        Further information here: http://jruby.org/2011/12/27/jruby-1-6-5-1
Pullup ticket #3643.
Pullup ticket #3644 - requested by obache
www/ruby-rack12: security update

Revisions pulled up:
- www/ruby-rack12/Makefile                                      1.2
- www/ruby-rack12/distinfo                                      1.2

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Sun Jan  8 11:04:54 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-rack12: Makefile distinfo

   Log Message:
   Update ruby-rack12 to 1.2.5.

   * December 28th, 2011: Twenty second public release: 1.2.5
      * Security fix. http://www.ocert.org/advisories/ocert-2011-003.html
        Further information here: http://jruby.org/2011/12/27/jruby-1-6-5-1
Pullup ticket #3645 - requested by obache
www/ruby-rack11: security update

Revisions pulled up:
- www/ruby-rack11/Makefile                                      1.3
- www/ruby-rack11/distinfo                                      1.3

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Sun Jan  8 11:08:23 UTC 2012

   Modified Files:
   	pkgsrc/www/ruby-rack11: Makefile distinfo

   Log Message:
   Update ruby-rack11 to 1.1.3.

   * December 28th, 2011: Twenty first public release: 1.1.3.
      * Security fix. http://www.ocert.org/advisories/ocert-2011-003.html
        Further information here: http://jruby.org/2011/12/27/jruby-1-6-5-1
Pullup tickets #3644 and #3645.
Pullup ticket #3641 - requested by taca
databases/php-mssql: security update
meta-pkgs/php53-extensions: security update

Revisions pulled up:
- lang/php53/distinfo                                           1.30
- lang/php53/patches/patch-php__mssql.h                         deleted
- meta-pkgs/php53-extensions/Makefile                           1.5

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jan 12 12:58:47 UTC 2012

   Modified Files:
   	pkgsrc/lang/php53: distinfo
   Removed Files:
   	pkgsrc/lang/php53/patches: patch-php__mssql.h

   Log Message:
   Fix build problem of databases/php-mssql.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jan 12 16:59:54 UTC 2012

   Modified Files:
   	pkgsrc/meta-pkgs/php53-extensions: Makefile

   Log Message:
   Fix build problem along with update of php53; overhaul.

   * Don't specify upper limit version to depend.  Since PHP extensions are
     prefixed with PHP_PKG_PREFIX, it is no need to specify.
   * Relax lower limit version to depend for php extensions which aren't
     bundled in PHP 5.3.9 distribution file; reflecting recent change of
     lang/php/ext.mk

   To be safer, bump PKGREVISION.
Update entry for ticket #3641.
Pullup ticket #3646 - requested by joerg
lang/php: build for PHP extensions

Revisions pulled up:
- lang/php/ext.mk                                               1.24

---
   Module Name:	pkgsrc
   Committed By:	joerg
   Date:		Thu Jan 12 18:25:50 UTC 2012

   Modified Files:
   	pkgsrc/lang/php: ext.mk

   Log Message:
   Catch up with PHP 5.3 base.
Pullup ticket #3647 - requested by gdt
filesystems/tahoe-lafs: security update

Revisions pulled up:
- filesystems/tahoe-lafs/Makefile                               1.10
- filesystems/tahoe-lafs/distinfo                               1.7
- filesystems/tahoe-lafs/patches/patch-aa                       1.2

---
   Module Name:	pkgsrc
   Committed By:	gdt
   Date:		Fri Jan 13 01:14:56 UTC 2012

   Modified Files:
   	pkgsrc/filesystems/tahoe-lafs: Makefile distinfo
   	pkgsrc/filesystems/tahoe-lafs/patches: patch-aa

   Log Message:
   Update to 1.9.1 (security fix):

   Release 1.9.1 (2012-01-12)
   --------------------------

   Security-related Bugfix
   '''''''''''''''''''''''

   - Fix flaw that would allow servers to cause undetected corruption when
     retrieving the contents of mutable files (both SDMF and MDMF). (`#1654`_)

   .. _`#1654`: https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1654
Pullup ticket #3648 - requested by drochner
textproc/libxml2: security patch

Revisions pulled up:
- textproc/libxml2/Makefile                                     1.111
- textproc/libxml2/distinfo                                     1.85
- textproc/libxml2/patches/patch-al                             1.2

---
   Module Name:	pkgsrc
   Committed By:	drochner
   Date:		Thu Jan 12 11:25:10 UTC 2012

   Modified Files:
   	pkgsrc/textproc/libxml2: Makefile distinfo
   	pkgsrc/textproc/libxml2/patches: patch-al

   Log Message:
   add 2 patches from upstream:
   -fix buffer overflow on entity references with long name (CVE-2011-3919)
   -fix error handling on realloc() failure
   bump PKGREV
Pullup ticket #3649 - requested by obache
www/mediawiki: security update

Revisions pulled up:
- www/mediawiki/Makefile                                        1.18
- www/mediawiki/PLIST                                           1.7
- www/mediawiki/distinfo                                        1.11

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Fri Jan 13 11:27:17 UTC 2012

   Modified Files:
   	pkgsrc/www/mediawiki: Makefile PLIST distinfo

   Log Message:
   Update mediawiki to 1.17.2.

   == MediaWiki 1.17.2 ==
   2012-01-11

   This a maintenance and security release of the MediaWiki 1.17 branch.

   === Security changes ===
   * (bug 33117) prop=revisions allows deleted text to be exposed through cache pollution.

   === Changes since 1.17.1 ===
   * (bug 32709) Private Wiki users were always taken to Special:Badtitle on login.

   == MediaWiki 1.17.1 ==

   2011-11-24

   This a maintenance and security release of the MediaWiki 1.17 branch.

   === Security changes ===
   * (bug 32276) Skins were generating output using the internal page title which
      would allow anonymous users to determine wheter a page exists, potentially
      leaking private data. In fact, the curid and oldid request parameters would
      allow page titles to be enumerated even when they are not guessable.
   * (bug 32616) action=ajax requests were dispatched to the relevant internal
      functions without any read permission checks being done. This could lead to
      data leakage on private wikis.
Pullup ticket #3650 - requested by ghen
net/powerdns: security update
net/powerdns-ldap: security update
net/powerdns-mysql: security update
net/powerdns-pgsql: security update
net/powerdns-sqlite: security update

Revisions pulled up:
- net/powerdns-ldap/Makefile                                    1.7
- net/powerdns-mysql/Makefile                                   1.7
- net/powerdns-pgsql/Makefile                                   1.9
- net/powerdns/Makefile.common                                  1.6
- net/powerdns/distinfo                                         1.9
- net/powerdns/patches/patch-aa                                 1.3
- net/powerdns/patches/patch-ac                                 deleted
- net/powerdns/patches/patch-ad                                 deleted
- net/powerdns/patches/patch-ae                                 deleted
- net/powerdns/patches/patch-af                                 deleted
- net/powerdns/patches/patch-ag                                 deleted
- net/powerdns/patches/patch-ah                                 deleted
- net/powerdns/patches/patch-pdns_misc.hh                       deleted

---
   Module Name:	pkgsrc
   Committed By:	ghen
   Date:		Fri Jan 13 12:12:49 UTC 2012

   Modified Files:
   	pkgsrc/net/powerdns: Makefile.common distinfo
   	pkgsrc/net/powerdns-ldap: Makefile
   	pkgsrc/net/powerdns-mysql: Makefile
   	pkgsrc/net/powerdns-pgsql: Makefile
   	pkgsrc/net/powerdns/patches: patch-aa
   Removed Files:
   	pkgsrc/net/powerdns/patches: patch-ac patch-ad patch-ae patch-af
   	    patch-ag patch-ah patch-pdns_misc.hh

   Log Message:
   Upgrade to PowerDNS 2.9.22.5, including a fix for CVE-2012-0206.