Pullup ticket #4522 - requested by taca
www/drupal7: security update

Revisions pulled up:
- www/drupal7/Makefile                                          1.29
- www/drupal7/distinfo                                          1.22

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Oct 16 03:08:11 UTC 2014

   Modified Files:
   	pkgsrc/www/drupal7: Makefile distinfo

   Log Message:
   Update drupal7 to 7.32, including security fix and drupal6 is not affected.

   Drupal 7.32, 2014-10-15
   ----------------------
   - Fixed security issues (SQL injection). See SA-CORE-2014-005.
Pullup ticket #4522.
Pullup ticket #4523 - requested by agc
sysutils/libvirt: security update

Revisions pulled up:
- sysutils/libvirt/Makefile                                     1.26
- sysutils/libvirt/PLIST                                        1.10
- sysutils/libvirt/distinfo                                     1.7

---
   Module Name:	pkgsrc
   Committed By:	agc
   Date:		Sun Oct 19 08:48:07 UTC 2014

   Modified Files:
   	pkgsrc/sysutils/libvirt: Makefile PLIST distinfo

   Log Message:
   Update to libvirt-1.2.9 from 1.2.6

   A vast number of features, portability changes, and bug fixes
   were introduced, including fixes for two vulnerabilities:

   CVE-2014-3633: qemu: blkiotune: Use correct definition when looking up disk (Peter Krempa),
   CVE-2014-3657: domain_conf: fix domain deadlock (Pavel Hrdina)

   as well as

   spec: Update polkit dependencies for CVE-2013-4311 (Jiri Denemark)
Pullup ticket #4523.
Pullup ticket #4524 - requested by taca
lang/php55: security update

Revisions pulled up:
- lang/php/phpversion.mk                                        1.74
- lang/php55/distinfo                                           1.30

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sat Oct 18 14:27:30 UTC 2014

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php55: distinfo

   Log Message:
   Update php55 to 5.5.18.

   16 Oct 2014, PHP 5.5.18

   - Core:
     . Fixed bug #67985 (Incorrect last used array index copied to new array after
       unset). (Tjerk)
     . Fixed bug #67739 (Windows 8.1/Server 2012 R2 OS build number reported
       as 6.2 (instead of 6.3)). (Christian Wenz)
     . Fixed bug #67633 (A foreach on an array returned from a function not doing
       copy-on-write). (Nikita)
     . Fixed bug #51800 (proc_open on Windows hangs forever). (Anatol)
     . Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)).
       (CVE-2014-3669) (Stas)

   - cURL:
     . Fixed bug #68089 (NULL byte injection - cURL lib). (Stas)

   - EXIF:
     . Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670)
       (Stas)

   - FPM:
     . Fixed bug #65641 (PHP-FPM incorrectly defines the SCRIPT_NAME variable
       when using Apache, mod_proxy-fcgi and ProxyPass). (Remi)

   - OpenSSL:
     . Revert regression introduced by fix of bug #41631

   - Reflection:
     . Fixed bug #68103 (Duplicate entry in Reflection for class alias). (Remi)

   - Session:
     . Fixed bug #67972 (SessionHandler Invalid memory read create_sid()). (Adam)

   - XMLRPC:
     . Fixed bug #68027 (Global buffer overflow in mkgmtime() function).
       (CVE-2014-3668) (Stas)
Pullup ticket #4525 - requested by taca
lang/php54: security update

Revisions pulled up:
- lang/php/phpversion.mk                                        1.75
- lang/php54/distinfo                                           1.48

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sat Oct 18 14:29:04 UTC 2014

   Modified Files:
   	pkgsrc/lang/php: phpversion.mk
   	pkgsrc/lang/php54: distinfo

   Log Message:
   Update to php54 5.4.34.

   16 Oct 2014, PHP 5.4.34

   - Fileinfo:
     . Fixed bug #66242 (libmagic: don't assume char is signed). (ArdB)

   - Core:
     . Fixed bug #67985 (Incorrect last used array index copied to new array after
       unset). (Tjerk)
     . Fixed bug #68044 (Integer overflow in unserialize() (32-bits only)).
       (CVE-2014-3669) (Stas)

   - cURL:
     . Fixed bug #68089 (NULL byte injection - cURL lib). (Stas)

   - EXIF:
     . Fixed bug #68113 (Heap corruption in exif_thumbnail()). (CVE-2014-3670)
       (Stas)

   - OpenSSL:
     . Reverted fixes for bug #41631, due to regressions. (Stas)

   - XMLRPC:
     . Fixed bug #68027 (Global buffer overflow in mkgmtime() function).
       (CVE-2014-3668) (Stas)
Pullup ticket #4526 - requested by taca
graphics/php-exif: security patch
lang/php53: security patch
net/php-xmlrpc: security patch

Revisions pulled up:
- graphics/php-exif/Makefile                                    1.13
- lang/php53/Makefile                                           1.50
- lang/php53/distinfo                                           1.77
- lang/php53/patches/patch-ext_exif_exif.c                      1.3
- lang/php53/patches/patch-ext_standard_var__unserializer.c     1.1
- lang/php53/patches/patch-ext_standard_var__unserializer.re    1.1
- lang/php53/patches/patch-ext_xmlrpc_libxmlrpc_xmlrpc.c        1.1
- net/php-xmlrpc/Makefile                                       1.17

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Oct 23 16:18:48 UTC 2014

   Modified Files:
   	pkgsrc/lang/php53: Makefile distinfo
   Added Files:
   	pkgsrc/lang/php53/patches: patch-ext_exif_exif.c
   	    patch-ext_standard_var__unserializer.c
   	    patch-ext_standard_var__unserializer.re
   	    patch-ext_xmlrpc_libxmlrpc_xmlrpc.c

   Log Message:
   Add patch for CVE-2014-3668, CVE-2014-3669 and CVE-2014-3670.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Oct 23 16:20:04 UTC 2014

   Modified Files:
   	pkgsrc/graphics/php-exif: Makefile

   Log Message:
   Bump PKGREVISION for php53-exif update.  It also bump php54-exif and
   php55-exit as a side effect.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Oct 23 16:20:38 UTC 2014

   Modified Files:
   	pkgsrc/net/php-xmlrpc: Makefile

   Log Message:
   Bump PKGREVISION for php53-xmlrpc update.  It also bump php54-xmlrpc and
   php55-xmlrpc as a side effect.
Pullup ticket #4527 - requested by taca
www/typo3_45: security update

Revisions pulled up:
- www/typo3_45/Makefile                                         1.32
- www/typo3_45/PLIST                                            1.15
- www/typo3_45/distinfo                                         1.27

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Oct 22 15:03:10 UTC 2014

   Modified Files:
   	pkgsrc/www/typo3_45: Makefile PLIST distinfo

   Log Message:
   Update typo3_45 pacakge to 4.5.37 (TYPO3 4.5.37).

   2014-10-22  01fee1f                  [RELEASE] Release of TYPO3 4.5.37 (TYPO3 Release Team)
   2014-10-22  da32b50  #62357          [SECURITY] Fix DoS in openid (Markus Klein)
   2014-10-22  dbdd9f2  #59573          [SECURITY] Fix RCE in swiftmailer (Helmut Hummel)
   2014-10-14  5c8081a  #53682          [TASK] Optimize speed for instantiating class with arguments (Helmut Hummel)

   2014-09-23  95c2cc4                  [RELEASE] Release of TYPO3 4.5.36 (TYPO3 Release Team)
   2014-09-20  ad8c5c4  #37946          [BUGFIX] Check if TER dump exists before modify time check (Jigal van Hemert)
   2014-09-20  b2597fd  #55457          [BUGFIX] RTE on first new IRRE record keeps loading in IE (Stanislas Rolland)
   2014-08-23  3f3c45e  #60199          [BUGFIX] Collect correct information on elements in page (Jigal van Hemert)
Pullup ticket #4528 - requested by taca
www/typo3_47: security update

Revisions pulled up:
- www/typo3_47/Makefile                                         1.22
- www/typo3_47/PLIST                                            1.12
- www/typo3_47/distinfo                                         1.17

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Oct 22 15:07:52 UTC 2014

   Modified Files:
   	pkgsrc/www/typo3_47: Makefile PLIST distinfo

   Log Message:
   Update typo3_47 package to 4.7.20 (TYPO3 4.7.20).

   2014-10-22  6b61880                  [RELEASE] Release of TYPO3 4.7.20 (TYPO3 Release Team)
   2014-10-22  727258f  #62357          [SECURITY] Fix DoS in openid (Markus Klein)
   2014-10-22  313c4bb  #59573          [SECURITY] Fix RCE in swiftmailer (Helmut Hummel)
   2014-08-23  aec409c  #60199          [BUGFIX] Collect correct information on elements in page (Jigal van Hemert)
   2014-07-08  c409513  #48939,#49055   [BUGFIX] Movements pollute colPos value of content elements (Nicole Cordes)
   2014-06-29  b0033d1                  [TASK] Improve travis notifications to channels (Helmut Hummel)
   2014-06-05  f731fc3  #59059          [BUGFIX] New content elements are always stored on pid 0 (Markus Klein)
   2014-06-03  d9d2dd1  #59034          [BUGFIX] Fix double ? in eID url for encryption key (Markus Klein)
Pullup ticket #4529 - requested by take
www/typo3_61: security update

Revisions pulled up:
- www/typo3_61/Makefile                                         1.7
- www/typo3_61/PLIST                                            1.4
- www/typo3_61/distinfo                                         1.6

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Oct 22 15:13:04 UTC 2014

   Modified Files:
   	pkgsrc/www/typo3_61: Makefile PLIST distinfo

   Log Message:
   Update typo3_61 to 6.1.12 (TYPO3 6.1.12).

   2014-10-22  e116bb1                  [RELEASE] Release of TYPO3 6.1.12 (TYPO3 Release Team)
   2014-10-22  e92c1d6  #62357          [SECURITY] Fix DoS in openid (Markus Klein)
   2014-10-22  6af3757  #59573          [SECURITY] Fix RCE in swiftmailer (Helmut Hummel)
   2014-10-15  fb5445e  #61749          [BUGFIX] Allow lower case for drive letters on Windows in CLI scripts (Alexander Bohndorf)
   2014-10-07  8ef0e3d  #47188          [BUGFIX] Fluid tries to render folders as templates partials and layouts (Krzysztof Adamczyk)
   2014-10-01  6ad3e2b  #26172          [BUGFIX] Search word markup for UTF8 characters in summary (Ralf Hettinger)
   2014-09-30  5cb8ac8  #61982          [BUGFIX] Fix search mode switcher of indexed_search (Markus Klein)

   2014-09-23  63ef9fc                  [RELEASE] Release of TYPO3 6.1.11 (TYPO3 Release Team)
   2014-09-20  c72e901  #36822          [BUGFIX] Invalid shortcut target on translated pages (Oliver Hader)
   2014-09-18  ca5de2e  #45834          [BUGFIX] Transfer curlProxyServer to new HTTP settings (Ernesto Baschny)
   2014-09-11  65b0018  #50396          [BUGFIX] RootlineUtility wrongly handles group-type fields (Francois Suter)
   2014-09-05  4bd9c6d  #61135          [BUGFIX] indexed_search: in some cases indexing does not work (Samir Rachidi)
   2014-08-25  571b782  #55707          [TASK] Missing stdWrap for select.recursive TypoScript property (Matthias Kappenberg)
   2014-08-23  30630b1  #60199          [BUGFIX] Collect correct information on elements in page (Jigal van Hemert)
   2014-08-13  6234622  #51572          [BUGFIX] Prevent uninstall of an extension during update (Nicole Cordes)
   2014-08-06  acb06c1  #60613          [BUGFIX] Fix Extbase language fallback in query parser (Helmut Hummel)
   2014-07-29  c517f74  #44795          [BUGFIX] Avoid superfluous IRRE child record duplication (Alexander Stehlik)
   2014-07-26  4f7a0f3  #60595          [BUGFIX] Add use-statement for GeneralUtility (Stefan Neufeind)
   2014-07-25  250b03b  #50566          [BUGFIX] Menu-links generate two empty spaces at closing anchor (Stefan Neufeind)
   2014-07-08  66d2354  #59587          [BUGFIX] Followup to CacheBackend patch (Markus Klein)
   2014-07-08  072f355  #59587          [BUGFIX] Too many tags by identifier in CacheBackends (Alexander Opitz)
Pullup tickets #4524, #4524, #4525, #4526, #4527, #4528 and #4529.
Pullup ticket #4531 - requested by he
security/libgpg-error: bug fix patch

Revisions pulled up:
- security/libgpg-error/Makefile                                1.44 via patch
- security/libgpg-error/distinfo                                1.21 via patch
- security/libgpg-error/patches/patch-src_estream.c             1.1

---
   Module Name:	pkgsrc
   Committed By:	he
   Date:		Wed Oct 29 12:28:50 UTC 2014

   Modified Files:
   	pkgsrc/security/libgpg-error: Makefile distinfo
   Added Files:
   	pkgsrc/security/libgpg-error/patches: patch-src_estream.c

   Log Message:
   Use __attribute__((destructor)) instead of atexit(), so that the
   library wind-down function is both called on dlclose() and exit().
   Should avoid segfault when trying to call the atexit function after
   dlclose() which unmaps the library.  Fixes PR pkg/49333, thanks to
   joerg@ for the suggested fix.

   Also, the IRIX and NetBSD tool name to get at nawk is just "awk",
   flagged by pkglint.

   Bump PKGREVISION.
Pullup ticket #4531.
Pullup ticket #4534 - requested by taca
lang/ruby200-base: bug fix update

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.126 via patch
- lang/ruby200-base/Makefile                                    1.14
- lang/ruby200-base/distinfo                                    1.16-1.17
- lang/ruby200-base/patches/patch-pack.c                        1.2

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Oct  2 08:59:26 UTC 2014

   Modified Files:
   	pkgsrc/lang/ruby200-base: distinfo
   	pkgsrc/lang/ruby200-base/patches: patch-pack.c

   Log Message:
   Fix typo in comment in a patch file.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Oct 27 16:20:16 UTC 2014

   Modified Files:
   	pkgsrc/lang/ruby: rubyversion.mk
   	pkgsrc/lang/ruby200-base: Makefile distinfo

   Log Message:
   Update ruby200-base and related packages to 2.0.0-p594 (Ruby 2.0.0-p594).

   Ruby 2.0.0-p594 Released

   We are pleased to announce the release of Ruby 2.0.0-p594.

   This release includes a security fix for DoS vulnerability of REXML.

   * CVE-2014-8080: Denial Of Service XML Expansion

   This release also includes the change of default settings of
   ext/openssl. Insecure SSL/TLS options are now turn off by default.

   * Changed default settings of ext/openssl

   And, many bug fixes are also included. See tickets and ChangeLog for details.

   Ruby 2.0.0-p576 Released

   We are pleased to announce the release of Ruby 2.0.0-p576, to celebrate the
   holding of RubyKaigi2014 in Japan now.

   This release includes many bugfixes, such as:

   * many fixes of memory leaks and using extra memory.
   * many fixes of platform-specific issues (especially in build process).
   * many document fixes.

   See tickets and ChangeLog for details.
Pullup ticket #4532 - requested by taca
x11/ruby-tk: bug fix patch

Revisions pulled up:
- x11/ruby-tk/Makefile                                          1.44

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Oct 27 13:22:51 UTC 2014

   Modified Files:
   	pkgsrc/x11/ruby-tk: Makefile

   Log Message:
   Add a simple work around to link correctly xlib on X11_TYPE is "native"
   case.
Pullup tickets #4532 and #4534.
Pullup ticket #4533 - requested by taca
lang/ruby193-base: security update

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.125
- lang/ruby193-base/Makefile                                    1.46-1.47
- lang/ruby193-base/distinfo                                    1.36-1.37
- lang/ruby193-base/patches/patch-pack.c                        1.2

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Oct  2 08:50:12 UTC 2014

   Modified Files:
   	pkgsrc/lang/ruby193-base: distinfo
   	pkgsrc/lang/ruby193-base/patches: patch-pack.c

   Log Message:
   Fix typo in comment in a patch file.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Oct 27 16:11:18 UTC 2014

   Modified Files:
   	pkgsrc/lang/ruby: rubyversion.mk
   	pkgsrc/lang/ruby193-base: Makefile distinfo

   Log Message:
   Update ruby193-base and related packages to 1.9.3p550 (Ruby 1.9.3-p550).

   Ruby 1.9.3-p550 Released

   We are pleased to announce the release of Ruby 1.9.3-p550.

   This release includes a security fix for DoS vulnerability of REXML.

       * CVE-2014-8080: Denial Of Service XML Expansion

   This release also includes the change of default settings of
   ext/openssl. Insecure SSL/TLS options are now turn off by default.

       * Changed default settings of ext/openssl

   And, in addition, bandled jQuery for darkfish template of RDoc is also
   updated.

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Tue Oct 28 07:48:19 UTC 2014

   Modified Files:
   	pkgsrc/lang/ruby193-base: Makefile

   Log Message:
   Not MAKE_JOBS_SAFE (two tries with MAKE_JOBS=8 failed for me in a row).
Pullup ticket #4535 - requested by taca
lang/ruby21-base: security update

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.127
- lang/ruby21-base/Makefile                                     1.8
- lang/ruby21-base/PLIST                                        1.3
- lang/ruby21-base/distinfo                                     1.8-1.9
- lang/ruby21-base/patches/patch-ext_dl_extconf.rb              deleted
- lang/ruby21-base/patches/patch-pack.c                         deleted

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Oct  2 08:59:52 UTC 2014

   Modified Files:
   	pkgsrc/lang/ruby21-base: distinfo
   	pkgsrc/lang/ruby21-base/patches: patch-pack.c

   Log Message:
   Fix typo in comment in a patch file.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Oct 27 16:29:57 UTC 2014

   Modified Files:
   	pkgsrc/lang/ruby: rubyversion.mk
   	pkgsrc/lang/ruby21-base: Makefile PLIST distinfo
   Removed Files:
   	pkgsrc/lang/ruby21-base/patches: patch-ext_dl_extconf.rb patch-pack.c

   Log Message:
   Update ruby21/ruby21-base package to 2.1.4.

   Ruby 2.1.4 is released

   Ruby 2.1.4 has been released.

   This release includes security fixes for the following vulnerabilities:

       * CVE-2014-8080: Denial Of Service XML Expansion
       * Changed default settings of ext/openssl related to CVE-2014-3566

   And there are some bug-fixes.

   See tickets and ChangeLog for details.

   Ruby 2.1.3 Released

   We are pleased to announce the release of Ruby 2.1.3. This is a patchlevel
   release of the stable 2.1 series.

   This release contains a change of full GC timing to reduce memory consumption
   (see Bug #9607), and many bugfixes.

   See tickets and ChangeLog for details.
Pullup tickets #4533 and #4535.
Pullup ticket #4530 - requested by tron
databases/phpmyadmin: security update

Revisions pulled up:
- databases/phpmyadmin/Makefile                                 1.136-1.137
- databases/phpmyadmin/distinfo                                 1.93-1.94

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Sun Oct 19 10:43:12 UTC 2014

   Modified Files:
   	pkgsrc/databases/phpmyadmin: Makefile distinfo

   Log Message:
   Update "phpmyadmin" package to version 4.2.10.

   The following bugs have been fixed since version 4.2.9.1:
   - bug #4361 Can't change font size (when config.inc.php not present)
   - bug #4542 Tab key in column name not shown
   - bug       PDF export: title not present in PDF
   - bug #4543 Changing column name can break saved "order by" clause
   - bug #4545 trying to favorite table while browser localStorage is disabled
               throws JS error
   - bug #4259 reCaptcha sound session expired problem
   - bug #4548 Inline editing a field converts tab to spaces
   - bug #4252 Database-level permission bug for db names containing underscor=
   es
   - bug #3120 Events are not exported when using xml
   - bug #4554 Grid-editing timestamp column forces datepicker
   - bug #4556 Fast filters for tables, views etc. should be governed by
               NavigationTreeDisplayItemFilterMinimum


   To generate a diff of this commit:
   cvs rdiff -u -r1.135 -r1.136 pkgsrc/databases/phpmyadmin/Makefile
   cvs rdiff -u -r1.92 -r1.93 pkgsrc/databases/phpmyadmin/distinfo

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Sun Oct 26 07:31:38 UTC 2014

   Modified Files:
   	pkgsrc/databases/phpmyadmin: Makefile distinfo

   Log Message:
   Update "phpmyadmin" package to version 4.2.10.1.

   The following bugs have been fixed since version 4.2.10:
   - bug #4562 [security] XSS in debug SQL output
   - bug #4563 [security] XSS in monitor query analyzer


   To generate a diff of this commit:
   cvs rdiff -u -r1.136 -r1.137 pkgsrc/databases/phpmyadmin/Makefile
   cvs rdiff -u -r1.93 -r1.94 pkgsrc/databases/phpmyadmin/distinfo