Add CHANGES file for 2012Q3 branch.
Pullup ticket #3924 - requested by dholland
games/flightgear-data: update to match "flightgear" package

Revisions pulled up:
- games/flightgear-data/Makefile                                1.3
- games/flightgear-data/distinfo                                1.2

---
   Module Name:	pkgsrc
   Committed By:	dholland
   Date:		Sun Sep 30 21:37:31 UTC 2012

   Modified Files:
   	pkgsrc/games/flightgear-data: Makefile distinfo

   Log Message:
   Update to 2.8.0. No separate changelog, see games/flightgear.
   Caution: distfile has more than doubled in size to nearly 700MB.
Pullup ticket #3924.
Pullup ticket #3925 - requested by he
security/p5-Crypt-OpenSSL-DSA: security patch

Revisions pulled up:
- security/p5-Crypt-OpenSSL-DSA/Makefile                        1.16
- security/p5-Crypt-OpenSSL-DSA/distinfo                        1.4
- security/p5-Crypt-OpenSSL-DSA/patches/patch-DSA.xs            1.1
- security/p5-Crypt-OpenSSL-DSA/patches/patch-lib_Crypt_OpenSSL_DSA.pm 1.1

---
   Module Name:	pkgsrc
   Committed By:	he
   Date:		Tue Oct  2 07:58:00 UTC 2012

   Modified Files:
   	pkgsrc/security/p5-Crypt-OpenSSL-DSA: Makefile distinfo
   Added Files:
   	pkgsrc/security/p5-Crypt-OpenSSL-DSA/patches: patch-DSA.xs
   	    patch-lib_Crypt_OpenSSL_DSA.pm

   Log Message:
   Apply a fix for CVE-2009-0129, taken from Debian's problem report.
   Also reported upstream, ref.
     https://rt.cpan.org/Public/Bug/Display.html?id=79958
   Bump PKGREVISION.
Pullup ticket #3926 - requested by mrg
net/youtube-dl: compatibility update

Revisions pulled up:
- net/youtube-dl/Makefile                                       1.35
- net/youtube-dl/distinfo                                       1.27

---
   Module Name:    pkgsrc
   Committed By:   mrg
   Date:           Tue Oct  2 09:03:25 UTC 2012

   Modified Files:
           pkgsrc/net/youtube-dl: Makefile distinfo

   Log Message:
   update youtube-dl to 2012.09.27 version.

   .. and is now able to work again.
Pullup tickets #3925 and #3926.
Pullup ticket #4072 - requested by taca
databases/ruby-activerecord32: security update
devel/ruby-activemodel32: security update
devel/ruby-activesupport32: security update
devel/ruby-railties32: security update
mail/ruby-actionmailer32: security update
www/ruby-actionpack32: security update
www/ruby-activeresource32: security update
www/ruby-rails32: security update

Revisions pulled up:
- databases/ruby-activerecord32/distinfo                        1.10
- devel/ruby-activemodel32/distinfo                             1.10
- devel/ruby-activesupport32/distinfo                           1.10
- devel/ruby-railties32/Makefile                                1.4
- devel/ruby-railties32/distinfo                                1.10
- lang/ruby/rails.mk                                            1.40
- mail/ruby-actionmailer32/distinfo                             1.10
- www/ruby-actionpack32/distinfo                                1.10
- www/ruby-activeresource32/distinfo                            1.10
- www/ruby-rails32/distinfo                                     1.10

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:28:10 UTC 2013

   Modified Files:
   	pkgsrc/lang/ruby: rails.mk

   Log Message:
   Start update of Ruby on Rails 3.2.12.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:28:59 UTC 2013

   Modified Files:
   	pkgsrc/devel/ruby-activesupport32: distinfo

   Log Message:
   Update ruby-activesupport32 to 3.2.12.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:29:48 UTC 2013

   Modified Files:
   	pkgsrc/devel/ruby-activemodel32: distinfo

   Log Message:
   Update ruby-activemodel32 to 3.2.12.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:30:48 UTC 2013

   Modified Files:
   	pkgsrc/www/ruby-activeresource32: distinfo

   Log Message:
   Update ruby-activeresource32 to 3.2.12.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:31:19 UTC 2013

   Modified Files:
   	pkgsrc/databases/ruby-activerecord32: distinfo

   Log Message:
   Update ruby-activerecord32 to 3.2.12.

   ## Rails 3.2.12 (unreleased) ##

   *   Quote numeric values being compared to non-numeric columns. Otherwise,
       in some database, the string column values will be coerced to a numeric
       allowing 0, 0.0 or false to match any string starting with a non-digit.

       Example:

           App.where(apikey: 0) # => SELECT * FROM users WHERE apikey = '0'

       *Dylan Smith*

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:31:52 UTC 2013

   Modified Files:
   	pkgsrc/www/ruby-actionpack32: distinfo

   Log Message:
   Update ruby-actionpack32 to 3.2.12.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:32:32 UTC 2013

   Modified Files:
   	pkgsrc/mail/ruby-actionmailer32: distinfo

   Log Message:
   Update of ruby-actionmailer32 to 3.2.12.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:33:08 UTC 2013

   Modified Files:
   	pkgsrc/devel/ruby-railties32: Makefile distinfo

   Log Message:
   Update ruby-railties32 to 3.2.12.

   Change of version only.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 14:33:42 UTC 2013

   Modified Files:
   	pkgsrc/www/ruby-rails32: distinfo

   Log Message:
   Update ruby-rails32 to 3.2.12.

   Change of version only.
Pullup ticket #4073 - requested by taca
databases/ruby-activerecord3: security patch
devel/ruby-activemodel: security patch

Revisions pulled up:
- databases/ruby-activerecord3/Makefile                         1.9
- databases/ruby-activerecord3/distinfo                         1.19-1.20
- databases/ruby-activerecord3/patches/patch-lib_active__record_attribute__methods_write.rb 1.1-1.2
- devel/ruby-activemodel/Makefile                               1.12
- devel/ruby-activemodel/distinfo                               1.19-1.20
- devel/ruby-activemodel/patches/patch-lib_active__model_attribute__methods.rb 1.1-1.2

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 13:23:20 UTC 2013

   Modified Files:
   	pkgsrc/databases/ruby-activerecord3: Makefile distinfo
   Added Files:
   	pkgsrc/databases/ruby-activerecord3/patches:
   	    patch-lib_active__record_attribute__methods_write.rb

   Log Message:
   Add fix for Fix for CVE-2013-0277.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Feb 13 14:08:07 UTC 2013

   Modified Files:
   	pkgsrc/databases/ruby-activerecord3: distinfo
   	pkgsrc/databases/ruby-activerecord3/patches:
   	    patch-lib_active__record_attribute__methods_write.rb

   Log Message:
   Correct comment in a patch file.

   This change dosen't fix CVE-2013-0276 but give workaround for it.

   No PKGREVISION bump.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Feb 12 15:30:42 UTC 2013

   Modified Files:
   	pkgsrc/devel/ruby-activemodel: Makefile distinfo
   Added Files:
   	pkgsrc/devel/ruby-activemodel/patches:
   	    patch-lib_active__model_attribute__methods.rb

   Log Message:
   Add fix for CVE-2013-0276.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Feb 13 14:07:31 UTC 2013

   Modified Files:
   	pkgsrc/devel/ruby-activemodel: distinfo
   	pkgsrc/devel/ruby-activemodel/patches:
   	    patch-lib_active__model_attribute__methods.rb

   Log Message:
   Correct comment in a patch file.

   This change dosen't fix CVE-2013-0276 but give workaround for it.

   No PKGREVISION bump.
Pullup ticket #4074 - requested by drochner
security/gnutls: security update

Revisions pulled up:
- security/gnutls/Makefile                                      1.123-1.124
- security/gnutls/distinfo                                      1.92

---
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Tue Jan 15 11:29:21 UTC 2013

   Modified Files:
           pkgsrc/security/gnutls: Makefile

   Log Message:
   wants to use pkg-config

---
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Tue Feb 12 13:16:25 UTC 2013

   Modified Files:
           pkgsrc/security/gnutls: Makefile distinfo

   Log Message:
   update to 3.0.28
   changes: bugfixes

   This prevents the recent TLS CBC padding timing attack (CVE-2013-1619).
Pullup tickets #4071, #4072, #4073 and #4074.
Pullup ticket #4075 - requested by ryoon
devel/jenkins: security update

Revisions pulled up:
- devel/jenkins/Makefile                                        1.12
- devel/jenkins/PLIST                                           1.9
- devel/jenkins/distinfo                                        1.10

---
   Module Name:	pkgsrc
   Committed By:	ryoon
   Date:		Tue Feb 19 18:21:41 UTC 2013

   Modified Files:
   	pkgsrc/devel/jenkins: Makefile PLIST distinfo

   Log Message:
   Update to 1.480.3

   * Fix https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16

   Changelog:
   What's new in 1.480.3 (2013/02/15)

       "Remember me on this computer" does not work, cookie is not accepted in new session (issue 16278)
       Slow/hung web UI in 1.483+ (stuck in parseURI) (issue 16474)
       Failure to delete old config files during rekeying on Windows (issue 16319)
       NoClassDefFoundError on Base64 when launching an headless slave with -jnlpCredential option (issue 9679)
       Loading asynchPeople calls (synch) People constructor (issue 16397)
       Jenkins briefly displays build queue and then it disappears until the page is reloaded (issue 15335)
       View.hasPeople too slow to use in sidepanel.jelly (issue 16244)
       XSS (SECURITY-46)
       File parameter causing data lost after Jenkins restart (issue 13536)
Pullup ticket #4075.
Pullup ticket #4076 - requested by obache
print/acroread9: security update

Revisions pulled up:
- print/acroread9/Makefile                                      1.9
- print/acroread9/distinfo                                      1.8

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Sat Feb 23 12:56:16 UTC 2013

   Modified Files:
   	pkgsrc/print/acroread9: Makefile distinfo

   Log Message:
   Update acroread9 to 9.5.4 for APSA13-02.
Pullup ticket #4077 - requested by markd
net/netatalk: build fix

Revisions pulled up:
- net/netatalk/distinfo                                         1.48
- net/netatalk/patches/patch-etc_uams_uams_gss.c                1.1

---
   Module Name:	pkgsrc
   Committed By:	markd
   Date:		Fri Feb 22 22:41:32 UTC 2013

   Modified Files:
   	pkgsrc/net/netatalk: distinfo
   Added Files:
   	pkgsrc/net/netatalk/patches: patch-etc_uams_uams_gss.c

   Log Message:
   Dont override the value of GSS_C_NT_HOSTBASED_SERVICE that recent
   Heimdal's set.
Pullup tickets #4076 and #4077.
Pullup ticket #4078 - requested by taca
www/drupal7: security update

Revisions pulled up:
- www/drupal7/Makefile                                          1.17
- www/drupal7/distinfo                                          1.11

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Feb 21 12:59:19 UTC 2013

   Modified Files:
   	pkgsrc/www/drupal7: Makefile distinfo

   Log Message:
   Update drupal7 to 7.20.

   Drupal 7.20, 2013-02-20
   -----------------------
   - Fixed security issues (denial of service). See SA-CORE-2013-002.
Pullup ticket #4079 - requested by taca
www/geeklog: security update

Revisions pulled up:
- www/geeklog/Makefile                                          1.37
- www/geeklog/distinfo                                          1.21

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Feb 21 13:01:24 UTC 2013

   Modified Files:
   	pkgsrc/www/geeklog: Makefile distinfo

   Log Message:
   Update geeklog to 1.8.2.1 (Geeklog 1.8.2sr1).

   Geeklog History/Changes:

   Feb 19, 2013 (1.8.2sr1)
   ------------

   This release addresses the following security issues:
   - High-Tech Bridge Security Research Lab reported an XSS in the calendar_type
     parameter in the Calendar plugin (HTB23143).
   - Trustwave Spiderlabs reported XSS in the install script, the Configuration,
     as well as in the Admin interfaces for the Polls plugin and the Topic editor
     (TWSL2013-001).

   Not security-related:
   - Fixed Twitter OAuth login by switching to version 1.1 of the Twitter API
     (feature request #0001506).
Pullup ticket #4080 - requested by taca
lang/ruby193-base: security update

Revisions pulled up:
- lang/ruby/rubyversion.mk                                      1.95
- lang/ruby193-base/Makefile                                    1.26
- lang/ruby193-base/distinfo                                    1.18
- lang/ruby193-base/patches/patch-ext_json_lib_json_add_core.rb deleted
- lang/ruby193-base/patches/patch-ext_json_lib_json_common.rb   deleted
- lang/ruby193-base/patches/patch-ext_json_lib_json_version.rb  deleted
- lang/ruby193-base/patches/patch-ext_json_parser_parser.c      deleted
- lang/ruby193-base/patches/patch-ext_json_parser_parser.rl     deleted
- lang/ruby193-base/patches/patch-test_json_test__json.rb       deleted
- lang/ruby193-base/patches/patch-test_json_test__json__addition.rb deleted
- lang/ruby193-base/patches/patch-test_json_test__json__string__matching.rb deleted

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Feb 22 16:20:48 UTC 2013

   Modified Files:
   	pkgsrc/lang/ruby: rubyversion.mk
   	pkgsrc/lang/ruby193-base: Makefile distinfo
   Removed Files:
   	pkgsrc/lang/ruby193-base/patches: patch-ext_json_lib_json_add_core.rb
   	    patch-ext_json_lib_json_common.rb
   	    patch-ext_json_lib_json_version.rb patch-ext_json_parser_parser.c
   	    patch-ext_json_parser_parser.rl patch-test_json_test__json.rb
   	    patch-test_json_test__json__addition.rb
   	    patch-test_json_test__json__string__matching.rb

   Log Message:
   Update ruby193-base package (and related) to 1.9.3-p392.
   Security problem of CVE-2013-0269 was already handled but REXML security
   problem is fixed by this package.

   Now Ruby 1.9.3-p392 is released. I apologize for updating too frequently.

   This release includes security fixes about bundled JSON and REXML.

   * Denial of Service and Unsafe Object Creation Vulnerability in JSON
     (CVE-2013-0269)
   * Entity expansion DoS vulnerability in REXML (XML bomb)

   And some small bugfixes are also included.
Pullup tickets #4078, #4079 and #4080.
Pullup ticket #4081 - requested by ryoon
www/apache24: security update

Revisions pulled up:
- www/apache24/Makefile                                         1.15 via patch
- www/apache24/PLIST                                            1.9
- www/apache24/distinfo                                         1.7
- www/apache24/patches/patch-ad                                 1.2
- www/apache24/patches/patch-ag                                 1.2
- www/apache24/patches/patch-modules_ssl_ssl__private.h         1.3

---
   Module Name:	pkgsrc
   Committed By:	ryoon
   Date:		Mon Feb 25 21:16:38 UTC 2013

   Modified Files:
   	pkgsrc/www/apache24: Makefile PLIST distinfo
   	pkgsrc/www/apache24/patches: patch-ad patch-ag
   	    patch-modules_ssl_ssl__private.h

   Log Message:
   Update to 2.4.4

   Changelog:
   Fix the following security bugs.
       SECURITY: CVE-2012-3499 (cve.mitre.org) Various XSS flaws due to unescaped hostnames and URIs HTML output in mod_info, mod_status, mod_imagemap, mod_ldap, and mod_proxy_ftp.
       SECURITY: CVE-2012-4558 (cve.mitre.org) XSS in mod_proxy_balancer manager interface.