Please welcome the pkgsrc-2010Q4 branch.
Pullup ticket #3320 - requested by tron
net/wireshark security update

Revisions pulled up:
- net/wireshark/Makefile		1.57
- net/wireshark/distinfo		1.39
- net/wireshark/patches/patch-SA42767	deleted

-------------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Wed Jan 12 00:16:31 UTC 2011

   Modified Files:
   	pkgsrc/net/wireshark: Makefile distinfo
   Removed Files:
   	pkgsrc/net/wireshark/patches: patch-SA42767

   Log Message:
   Update "wireshark" package to version 1.4.3. Changes since 1.4.2:
   - Bug Fixes
     The following vulnerabilities have been fixed. See the security
     advisory for details and a workaround.
     - FRAsse discovered that the MAC-LTE dissector could overflow a
       buffer. (Bug 5530)
       Versions affected: 1.2.0 to 1.2.13 and 1.4.0 to 1.4.2.
     - FRAsse discovered that the ENTTEC dissector could overflow a
       buffer. (Bug 5539)
       Versions affected: 1.2.0 to 1.2.13 and 1.4.0 to 1.4.2.
       CVE-2010-4538
     - The ASN.1 BER dissector could assert and make Wireshark exit
       prematurely. (Bug 5537)
       Versions affected: 1.4.0 to 1.4.2.
     The following bugs have been fixed:
     - AMQP failed assertion. (Bug 4048)
     - Reassemble.c leaks memory for GLIB > 2.8. (Bug 4141)
     - Fuzz testing reports possible dissector bug: TCP. (Bug 4211)
     - Wrong length calculation in new_octet_aligned_subset_bits()
       (PER dissector). (Bug 5393)
     - Function dissect_per_bit_string_display might read more bytes
       than available (PER dissector). (Bug 5394)
     - Cannot load wpcap.dll & packet.dll from Wireshark program
       directory. (Bug 5420)
     - Wireshark crashes with Copy -> Description on date/time
       fields. (Bug 5421)
     - DHCPv6 OPTION_CLIENT_FQDN parse error. (Bug 5426)
     - Information element Error for supported channels. (Bug 5430)
     - Assert when using ASN.1 dissector with loading a 'type table'.
       (Bug 5447)
     - Bug with RWH parsing in Infiniband dissector. (Bug 5444)
     - Help->About Wireshark mis-reports OS. (Bug 5453)
     - Delegated-IPv6-Prefix(123) is shown incorrect as
       X-Ascend-Call-Attempt-Limit(123). (Bug 5455)
     - "tshark -r file -T fields" is truncating exported data. (Bug 5463)
     - gsm_a_dtap: incorrect "Extraneous Data" when decoding Packet
       Flow Identifier. (Bug 5475)
     - Improper decode of TLS 1.2 packet containing both
       CertificateRequest and ServerHelloDone messages. (Bug 5485)
     - LTE-PDCP UL and DL problem. (Bug 5505)
     - CIGI 3.2/3.3 support broken. (Bug 5510)
     - Prepare Filter in RTP Streams dialog does not work correctly.
       (Bug 5513)
     - Wrong decode at ethernet OAM Y.1731 ETH-CC. (Bug 5517)
     - WPS: RF bands decryption. (Bug 5523)
     - Incorrect LTP SDNV value handling. (Bug 5521)
     - LTP bug found by randpkt. (Bug 5323)
     - Buffer overflow in SNMP EngineID preferences. (Bug 5530)
   - Updated Protocol Support
     AMQP, ASN.1 BER, ASN.1 PER, CFM, CIGI, DHCPv6, Diameter, ENTTEC,
     GSM A GM, IEEE 802.11, InfiniBand, LTE-PDCP, LTP, MAC-LTE, MP2T,
     RADIUS, SAMR, SCCP, SIP, SNMP, TCP, TLS, TN3270, UNISTIM, WPS
   - New and Updated Capture File Support
     Endace ERF, Microsoft Network Monitor, VMS TCPtrace.
Pullup ticket #3320
Pullup ticket #3323 - requested by jym
sysutils/xentools3: improve NetBSD support
sysutils/xentools33: improve NetBSD support

Revisions pulled up:
- sysutils/xentools3/Makefile			1.23
- sysutils/xentools3/PLIST			1.4
- sysutils/xentools3/files/vif-bridge-nbsd	1.2
- sysutils/xentools3/files/vif-ip-nbsd		1.2
- sysutils/xentools3/files/xen-subr-nbsd	1.1
- sysutils/xentools33/Makefile			1.23
- sysutils/xentools33/PLIST			1.10
- sysutils/xentools33/files/vif-bridge-nbsd	1.2
- sysutils/xentools33/files/vif-ip-nbsd		1.2
- sysutils/xentools33/files/xen-subr-nbsd	1.1
---
Module Name:	pkgsrc
Committed By:	jym
Date:		Wed Jan 12 00:11:20 UTC 2011

Modified Files:
	pkgsrc/sysutils/xentools3: Makefile PLIST
	pkgsrc/sysutils/xentools3/files: vif-bridge-nbsd vif-ip-nbsd
Added Files:
	pkgsrc/sysutils/xentools3/files: xen-subr-nbsd

Log Message:
Add support for "vifname" keys inside XenStore. Its value is the
interface name for the vif, e.g. xvif(4) for dom0, and xennet(4)
for domU.

This allows querying the XenStore for the vif names, rather than
hardcoding their syntax in vif-* scripts.

Add a xen-subr shell script that can contain customized functions, and
include it in the vif-ip/vif-bridge scripts.
Introduce xenstore_read_default that returns the value of a specific
key from XenStore, or the default specified value when key is absent.

Bump revision.

ok bouyer@.

See http://mail-index.netbsd.org/port-xen/2011/01/11/msg006405.html
---
Module Name:	pkgsrc
Committed By:	jym
Date:		Wed Jan 12 00:12:14 UTC 2011

Modified Files:
	pkgsrc/sysutils/xentools33: Makefile PLIST
	pkgsrc/sysutils/xentools33/files: vif-bridge-nbsd vif-ip-nbsd
Added Files:
	pkgsrc/sysutils/xentools33/files: xen-subr-nbsd

Log Message:
Add support for "vifname" keys inside XenStore. Its value is the
interface name for the vif, e.g. xvif(4) for dom0, and xennet(4)
for domU.

This allows querying the XenStore for the vif names, rather than
hardcoding their syntax in vif-* scripts.

Add a xen-subr shell script that can contain customized functions, and
include it in the vif-ip/vif-bridge scripts.
Introduce xenstore_read_default that returns the value of a specific
key from XenStore, or the default specified value when key is absent.

Bump revision.

ok bouyer@.

See http://mail-index.netbsd.org/port-xen/2011/01/11/msg006405.html
Pullup tickets #3321 and #3323.
Pullup ticket #3321 - requested by obache
graphics/goocanvasmm: build fix

Revisions pulled up:
- graphics/goocanvasmm/Makefile			1.11
- graphics/goocanvasmm/distinfo			1.5
- graphics/goocanvasmm/patches/patch-aa		1.1
- graphics/goocanvasmm/patches/patch-ab		1.1
- graphics/goocanvasmm/patches/patch-ac		1.1
- graphics/goocanvasmm/patches/patch-ad		1.1
---
Module Name:	pkgsrc
Committed By:	obache
Date:		Wed Jan 12 11:57:27 UTC 2011

Modified Files:
	pkgsrc/graphics/goocanvasmm: Makefile distinfo
Added Files:
	pkgsrc/graphics/goocanvasmm/patches: patch-aa patch-ab patch-ac
	    patch-ad

Log Message:
Fix the build with the latest cairomm.
* goocanvas/src/enums.[hg|ccg]: Remove the (unused) Value<Cairo::Pattern>
   specialization. Pattern should always (and is always) used via RefPtr
   anyway.
http://git.gnome.org/browse/goocanvasmm/commit/?h=goocanvasmm-1.0&id=30edcb72c89c0f97d11d9f88c6da82f6ae78d4bf

Installed header file is changed, so bump PKGREVISION.
Add a file containing summary information (to be filled in) relating to the
pkgsrc-2010Q4 branch.
add some easily looked up values
I'm not exactly active for pkgsrc-security, so take my name from the list.
add and populate EOL packages section
note scope of secteam work
add headline versions of packages in the branch
Add a list of platforms supported by pkgsrc
Fill in packages which were removed, a selection of new packages, and a note
sayiong there were no infrastructure changes.
get the package directories correct for the mysql client and server packages
include older postgresql versions too, and get the name of the postgresql-9.0
package correct
compress the vertical space taken by the pkgsrc platforms section
combine the removed packages and the EOL package - the net effect is that
the postgresql82 package has been removed from pkgsrc. Note the reason for
removal (EOL) when we mention it.
Pullup ticket 3325 - requested by taca
security update

Revisions pulled up:
- pkgsrc/security/sudo/Makefile		1.127
- pkgsrc/security/sudo/distinfo		1.67

-------------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   taca
   Date:           Thu Jan 13 12:22:40 UTC 2011

   Modified Files:
           pkgsrc/security/sudo: Makefile distinfo

   Log Message:
   Update sudo package to 1.7.4p5.

   What's new in Sudo 1.7.4p5?

    * A bug has been fixed that would allow a command to be run without the
      user entering a password when sudo's -g flag is used without the -u flag.

    * If user has no supplementary groups, sudo will now fall back on checking
      the group file explicitly, which restores historic sudo behavior.

    * A crash has been fixed when sudo's -g flag is used without the -u flag
      and the sudoers file contains an entry with no runas user or group listed.

    * A bug has been fixed in the I/O logging support that could cause
      visual artifacts in full-screen programs such as text editors,.

    * A crash has been fixed when the Solaris project support is enabled
      and sudo's -g flag is used without the -u flag.

    * Sudo no longer exits with an error when support for auditing is
      compiled in but auditing is not enabled.

    * Fixed a bug introduced in sudo 1.7.3 where the ticket file was not
      being honored when the "targetpw" sudoers Defaults option was enabled.

    * The LOG_INPUT and LOG_OUTPUT tags in sudoers are now parsed correctly.

    * A crash has been fixed in "sudo -l" when sudo is built with auditing
      support and the user is not allowed to run any commands on the host.


   To generate a diff of this commit:
   cvs rdiff -u -r1.126 -r1.127 pkgsrc/security/sudo/Makefile
   cvs rdiff -u -r1.66 -r1.67 pkgsrc/security/sudo/distinfo
pullup 3325
Pullup ticket #3324 - requested by obache
archivers/star: build fix

Revision pulled up:
- archivers/star/Makefile		1.24
---
Module Name:	pkgsrc
Committed By:	obache
Date:		Thu Jan 13 08:56:19 UTC 2011

Modified Files:
	pkgsrc/archivers/star: Makefile

Log Message:
Honor PKGMANDIR, per PR#44380.