Add the CHANGES file for the pkgsrc-2008Q2 branch
Pullup ticket #2450 - requested by ghen
Security update for seamonkey
Security update for seamonkey-bin

Revisions pulled up:
- www/seamonkey-bin/Makefile			1.24
- www/seamonkey-bin/distinfo			1.20
- www/seamonkey/Makefile-seamonkey.common	1.19
- www/seamonkey/distinfo			1.33
---
Module Name:	pkgsrc
Committed By:	ghen
Date:		Wed Jul 16 15:44:19 UTC 2008

Modified Files:
	pkgsrc/www/seamonkey: Makefile-seamonkey.common distinfo
	pkgsrc/www/seamonkey-bin: Makefile distinfo

Log Message:
Update seamonkey, seamonkey-bin and seamonkey-gtk1 to Seamonkey 1.1.11.

Security fixes in this version:

MFSA 2008-34 Remote code execution by overflowing CSS reference counter

For more info, see http://www.seamonkey-project.org/releases/seamonkey1.1.11/
Pullup ticket #2450.
pullup ticket 2449 requested by ghen
firefox, firefox-bin: update for security fixes

revisions pulled up:
pkgsrc/www/firefox/Makefile-firefox.common	1.59
pkgsrc/www/firefox/PLIST			1.30
pkgsrc/www/firefox/distinfo			1.80
pkgsrc/www/firefox-bin/Makefile			1.44
pkgsrc/www/firefox-bin/distinfo			1.44

   Module Name:	pkgsrc
   Committed By:	ghen
   Date:		Wed Jul 16 09:52:56 UTC 2008

   Modified Files:
   	pkgsrc/www/firefox: Makefile-firefox.common PLIST distinfo
   	pkgsrc/www/firefox-bin: Makefile distinfo

   Log Message:
   Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.16.

   Security fixes in this version:

   MFSA 2008-35 Command-line URLs launch multiple tabs when Firefox not running
   MFSA 2008-34 Remote code execution by overflowing CSS reference counter

   For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.16/releasenotes/
ticket #2449
pullup ticket #2451 requested by tron
phpmyadmin: package update for bug and security fixes

revisions pulled up:
pkgsrc/databases/phpmyadmin/Makefile	1.73
pkgsrc/databases/phpmyadmin/distinfo	1.36

Module Name:	pkgsrc
Committed By:	tron
Date:		Thu Jul 17 15:55:16 UTC 2008

   Modified Files:
   	pkgsrc/databases/phpmyadmin: Makefile distinfo

   Log Message:
   Updatep "phpmyadmin" package to version 2.11.7.1. Changes since 2.11.7:
   - bug #1908719 [interface] New field cannot be auto-increment and
     primary key
   - [dbi] Incorrect interpretation for some mysqli field flags
   - bug #1910621 [display] part 1: do not display a TEXT utf8_bin
     as BLOB (fixed for mysqli extension only)
   - [interface] sanitize the after_field parameter,
     thanks to Norman Hippert
   - [structure] do not remove the BINARY attribute in drop-down
   - bug #1955386 [session] Overriding session.hash_bits_per_character
   - [interface] sanitize the table comments in table print view,
     thanks to Norman Hippert
   - bug #1939031 Auto_Increment selected for TimeStamp by Default
   - patch #1957998 [display] No tilde for InnoDB row counter when
     we know it for sure, thanks to Vladyslav Bakayev - dandy76
   - bug #1955572 [display] alt text causes duplicated strings
   - bug #1762029 [interface] Cannot upload BLOB into existing row
   - bug #1981043 [export] HTML in exports getting corrupted,
     thanks to Jason Judge - jasonjudge
   - bug #1936761 [interface] BINARY not treated as BLOB:
     update/delete issues
   - protection against XSS when register_globals is on and .htaccess
     has no effect, thanks to Tim Starling
   - bug #1996943 [export] Firefox 3 and .sql.gz (corrupted);
     detect Gecko 1.9, thanks to Juergen Wind
   - (2.11.7.1)  [security] XSRF/CSRF by manipulating the db,
     convcharset and collation_connection parameters,
     thanks to YGN Ethical Hacker Group

   This update fixes the security vulnerability reported in PMASA-2008-5.
ticket #2451
pullup ticket #2452 requested by tnn
firefox3: update for security / stability fixes

revisions pulled up:
pkgsrc/www/firefox3/Makefile	1.4
pkgsrc/www/firefox3/distinfo	1.2

   Module Name:	pkgsrc
   Committed By:	tnn
   Date:		Thu Jul 17 20:08:46 UTC 2008

   Modified Files:
   	pkgsrc/www/firefox3: Makefile distinfo

   Log Message:
   Update to firefox3-3.0.1. Changes:
   * Fixed several security issues.
   * Fixed several stability issues.
   * Fixed an issue where the phishing and malware database did not update
   on first launch.
   * Under certain circumstances, Firefox 3.0 did not properly save the
   SSL certificate exceptions list.
   * Updated the internal Public Suffix list.
   * In certain cases, installing Firefox 2 in the same directory in which
   Firefox 3 has been installed resulted in Firefox 2 being unstable. This
   issue was fixed as part of Firefox 2.0.0.15.
   * Fixed an issue where, when printing a selected region of content from
   the middle of a page, some of the output was missing (bug 433373).
   * Fixed a Linux issues where, for users on a PPP connection (dialup or
   DSL) Firefox always started in "Offline" mode (bug 424626).
ticket #2452
pullup ticket #2453 requested by tron
x11-links: update for build breakage under xcode/macosx

revisions pulled up:
pkgsrc/pkgtools/x11-links/Makefile		1.92
pkgsrc/pkgtools/x11-links/buildlink3.mk		1.13
pkgsrc/pkgtools/x11-links/files/xorg		1.6
pkgsrc/pkgtools/x11-links/files/xorg.libXrand	1.2

   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Fri Jul 18 12:08:53 UTC 2008

   Modified Files:
   	pkgsrc/pkgtools/x11-links: Makefile buildlink3.mk
   	pkgsrc/pkgtools/x11-links/files: xorg xorg.libXrandr

   Log Message:
   Update to version 0.36:
   Add newer libraries included in Xcode 3.1 for Mac OS X Leopard.
ticket #2453
pullup ticket #2454 requested by rhaen
icon-naming-utils: update master sites

revisions pulled up:
pkgsrc/graphics/icon-naming-utils/Makefile	1.7

   Module Name:	pkgsrc
   Committed By:	rhaen
   Date:		Sun Jul 20 09:41:24 UTC 2008

   Modified Files:
   	pkgsrc/graphics/icon-naming-utils: Makefile

   Log Message:
   - Changing the MASTER_SITES as they are outdated, this has been reported in
   PR pkg/39172
ticket #2454
pullup ticket #2455 requested by drochner
mercurial: fix for path check on patch import

revisions pulled up:
pkgsrc/devel/mercurial/Makefile		1.19
pkgsrc/devel/mercurial/distinfo		1.13
pkgsrc/devel/mercurial/patches/patch-ab	1.1

   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Sat Jul 19 13:36:51 UTC 2008

   Modified Files:
           pkgsrc/devel/mercurial: Makefile distinfo
   Added Files:
           pkgsrc/devel/mercurial/patches: patch-ab

   Log Message:
   add patch from upstream CVS to fix path checking on git style patch
   import (CVE-2008-2942), bump PKGREVISION
ticket #2455
pullup ticket #2458 requested by joerg
py-moin: update package cross-site scripting fix

revisions pulled up:
pkgsrc/www/py-moin/Makefile	1.9, 1.10
pkgsrc/www/py-moin/PLIST	1.4
pkgsrc/www/py-moin/distinfo	1.4

   Module Name:	pkgsrc
   Committed By:	tnn
   Date:		Tue Jul 22 20:17:24 UTC 2008

   Modified Files:
   	pkgsrc/www/py-moin: Makefile

   Log Message:
   Mention MoinMoin in the COMMENT to make the package easier to find, given
   the non-obvious PKGNAME.

   ------------------------------------------------------------------------

   Module Name:	pkgsrc
   Committed By:	joerg
   Date:		Thu Jul 24 08:38:04 UTC 2008

   Modified Files:
   	pkgsrc/www/py-moin: Makefile PLIST distinfo

   Log Message:
   Update MoinMoin to 1.7.1:
   - Fix a Cross Site Scripting attack
   - changes in caching API

   Changes in 1.7.0:
   - new event/notification/authentication/session framework
   - OpenID support
   - improvements for LDAP auth, attachment performance, logging etc
ticket #2458
pullup ticket #2457 requested by tonnerre
asterisk: update package fixes for DoS vulnerabilities

revisions pulled up:
pkgsrc/comms/asterisk/Makefile	1.57
pkgsrc/comms/asterisk/distinfo	1.36

   Module Name:	pkgsrc
   Committed By:	tonnerre
   Date:		Thu Jul 24 00:10:50 UTC 2008

   Modified Files:
   	pkgsrc/comms/asterisk: Makefile distinfo

   Log Message:
   Update Asterisk to version 1.2.30, fixing two Denial of Service
   vulnerabilities (CVE-2008-3263 and CVE-2008-3264).
ticket #2457
pullup ticket #2456 requested by tonnerre
dnsmasq: update package for fixes and CVE

revisions pulled up:
pkgsrc/net/dnsmasq/Makefile		1.5
pkgsrc/net/dnsmasq/distinfo		1.4
pkgsrc/net/dnsmasq/patches/patch-aa	1.3

   Module Name:	pkgsrc
   Committed By:	tonnerre
   Date:		Wed Jul 23 23:46:08 UTC 2008

   Modified Files:
   	pkgsrc/net/dnsmasq: Makefile distinfo
   	pkgsrc/net/dnsmasq/patches: patch-aa

   Log Message:
   Update dnsmasq to version 2.45 in order to fix CVE-2008-1447.

   Changes since version 2.38:
    - Names ending in a dot now work.
    - Whitespaces arround commata in config files are now ignored.
    - Asynchronous logging.
    - New --log-dhcp flag was added.
    - RFC3046 relay agent data matching.
    - RFC3993 subscriber ID relay agent data matching.
    - RFC 5107 server-id-override DHCP relay agent option.
    - Option for interface names added.
    - SIGUSR2 now closes and reopens the log files.
    - DNS LOC record support.
    - Allow disabling the DNS functionality by setting the port to 0.
    - DNSMASQ_INTERFACE is now part of the environment of the lease change
   script.
    - PMTUd disabled on DHCP and TFTP sockets.
    - --dhcp-bridge now works on all BSD variants.
    - Now including a Solaris 10 SMF.
    - Random source ports for DNS queries (CVE-2008-1447).