Add a file to document changes to the pkgsrc-2010Q1 branch.
Pullup ticket #3074 - requested by taca
typo3: security update

Revisions pulled up:
- www/typo3/Makefile			1.21
- www/typo3/PLIST				1.12
- www/typo3/distinfo			1.14
---
Module Name:	pkgsrc
Committed By:	taca
Date:		Fri Apr  9 10:15:24 UTC 2010

Modified Files:
	pkgsrc/www/typo3: Makefile PLIST distinfo

Log Message:
Update typo3 package to 4.3.3.

I coudn't access release note with the URL in release announce but
I could with http://wiki.typo3.org/index.php/TYPO3_4.3.3 at this
moment.

Quote from release announce:

TYPO3 version 4.3.3 is ready for download. It is a maintenance release
of version 4.3 and therefore contains only bugfixes and security fixes.

IMPORTANT: This version includes an important security fix
to the TYPO3 core. A security announcement has just been
released:
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-008/

For details about the release, see:
http://wiki.typo3.org/TYPO3_4.3.3
Pullup ticket #3074.
Pullup ticket #3078 - requested by sborrill:
net/samba: build fix and bug fix
net/samba33: build fix and bug fix

Revisions pulled up:
- net/samba/Makefile				1.199-1.200
- net/samba/files/winbindd.sh			1.5
- net/samba33/Makefile				1.8-1.9
---
Module Name:    pkgsrc
Committed By:   sborrill
Date:           Wed Apr 14 14:51:01 UTC 2010

Modified Files:
         pkgsrc/net/samba: Makefile
         pkgsrc/net/samba33: Makefile

Log Message:
Add openssl bl3.mk file so that we play nicely with PREFER_PKGSRC+=openssl
---
Module Name:    pkgsrc
Committed By:   sborrill
Date:           Thu Apr 15 09:36:50 UTC 2010

Modified Files:
         pkgsrc/net/samba/files: winbindd.sh

Log Message:
winbindd does not have a -B flag. As far as I can see, it never did have
(It was added to this rc.d script as part of the upgrade to 3.0.20b, but
winbindd in 3.0.20b does not have a -B flag).
---
Module Name:    pkgsrc
Committed By:   sborrill
Date:           Thu Apr 15 09:38:09 UTC 2010

Modified Files:
         pkgsrc/net/samba: Makefile
         pkgsrc/net/samba33: Makefile

Log Message:
Bump PKGREVISION due to removing -B flag from winbindd rc.d script
Pullup ticket #3078.
Pullup ticket 3079 - requested by taca
security update

Revisions pulled up:
- pkgsrc/security/sudo/Makefile		1.120
- pkgsrc/security/sudo/distinfo		1.62
- pkgsrc/security/sudo/patches/patch-aa	1.23

   --------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   taca
   Date:           Fri Apr 16 15:33:52 UTC 2010

   Modified Files:
           pkgsrc/security/sudo: Makefile distinfo
           pkgsrc/security/sudo/patches: patch-aa

   Log Message:
   Update sudo package from sudo-1.7.2p4 to sudo-1.7.2p6.

   Sudo versions 1.7.2p6 and 1.6.9p22 are now available.  These releases
   fix a privilege escalation bug in the sudoedit functionality.

   Summary:
       A flaw exists in sudo's -e option (aka sudoedit) in sudo versions
       1.6.8 through 1.7.2p5 that may give a user with permission to
       run sudoedit the ability to run arbitrary commands.  This bug
       is related to, but distinct from, CVE 2010-0426.

   Sudo versions affected:
       1.6.8 through 1.7.2p5 inclusive.


   To generate a diff of this commit:
   cvs rdiff -u -r1.119 -r1.120 pkgsrc/security/sudo/Makefile
   cvs rdiff -u -r1.61 -r1.62 pkgsrc/security/sudo/distinfo
   cvs rdiff -u -r1.22 -r1.23 pkgsrc/security/sudo/patches/patch-aa
pullup 3079
Pullup ticket #3080 - requested by tez
lang/erlang: security patch

Revisions pulled up:
- lang/erlang/Makefile				1.45
- lang/erlang/distinfo				1.22
- lang/erlang/patches/patch-ax			1.1
---
Module Name:    pkgsrc
Committed By:   tez
Date:           Sat Apr 17 20:10:16 UTC 2010

Modified Files:
        pkgsrc/lang/erlang: Makefile distinfo
Added Files:
        pkgsrc/lang/erlang/patches: patch-ax

Log Message:
CVE-2008-2371 pcro buffer overflow fix based on:
http://vcs.pcre.org/viewvc/code/trunk/pcre_compile.c?r1=504&r2=505&view=patch
Pullup ticket #3081 - requested by tez
editors/nano: security update

Revisions pulled up:
- editors/nano/Makefile			1.38
- editors/nano/PLIST			1.15
- editors/nano/distinfo			1.17
---
Module Name:    pkgsrc
Committed By:   tez
Date:           Sun Apr 18 17:21:34 UTC 2010

Modified Files:
        pkgsrc/editors/nano: Makefile PLIST distinfo

Log Message:
update to 2.2.4 to resolve CVE-2010-1160 & CVE-2010-1161
Pullup tickets #3080 and #3081.
Pullup ticket #3082 - requested by tez
mail/spamass-milter: security patch

Revisions pulled up:
- mail/spamass-milter/Makefile			1.27
- mail/spamass-milter/distinfo			1.7
- mail/spamass-milter/patches/patch-aa		1.3
- mail/spamass-milter/patches/patch-ab		1.1
---
Module Name:    pkgsrc
Committed By:   tez
Date:           Sat Apr 17 21:11:18 UTC 2010

Modified Files:
        pkgsrc/mail/spamass-milter: Makefile distinfo
        pkgsrc/mail/spamass-milter/patches: patch-aa
Added Files:
        pkgsrc/mail/spamass-milter/patches: patch-ab

Log Message:
Added CVE-2010-1132 patch from:
 https://bugzilla.redhat.com/attachment.cgi?id=401011
Pullup ticket #3082.
Pullup ticket #3083 - requested by tez
irssi: security update
irssi-icb: security update

Revisions pulled up:
- chat/irssi-icb/distinfo			1.15
- chat/irssi/Makefile.common			1.11
- chat/irssi/distinfo				1.31
---
Module Name:    pkgsrc
Committed By:   spz
Date:           Sun Apr 18 06:29:16 UTC 2010

Modified Files:
        pkgsrc/chat/irssi: Makefile.common distinfo
        pkgsrc/chat/irssi-icb: distinfo

Log Message:
updating irssi to next version (0.8.15). Changelog:
Features:

    * Add active_window_ignore_refnum option With active_window_ignore_refnum
ON, the current behavior for the active_window key (meta-a by default) is
preserved: it switches to the window with the highest activity level that was
last activated. With active_window_ignore_refnum OFF, the old behavior is used:
it switches to the window with the highest activity level with the lowest
refnum. (by Matt Sparks, bug #667)
    * Show new Charybdis +q list in channel windows (numerics 728 and 729).
    * Allow servers to belong to multiple networks.
    * Improve paste detection. Irssi now detects a paste if it reads at least
three bytes in a single read; subsequent reads are associated to the same paste
if they happen before 'paste_detect_time' time since the last read. If no read
occurs after 'paste_detect_time' time the paste buffer is flushed; if there is
at least one complete line its content is sent as a paste, otherwise it is
processed normally.
    * Show "target changing too fast" messages in the channel/query window.
    * Use default trusted CAs if nothing is specified. This allows useful use
of -ssl_verify without -ssl_cafile/-ssl_capath, using OpenSSL's default trusted
CAs.
    * Show why an SSL certificate failed validation.
    * Make own nick and actions use default colour instead of white (by Tim
Retout).

Bugfixes:

    * Change some characters illegal in Windows filenames to underscores in logs
    * Fix disconnects when sending large amounts of data over SSL
    * Show all nicks instead of just the first in an /accept * listing (Bug
#704)
    * Make several signals without parameters available to perl again. In
particular, this includes the "beep" signal (by Matt Sparks, bug #674)
    * Close the config file fd after saving (by Sven Wegener)
    * Check if an SSL certificate matches the hostname of the server we are
connecting to.
    * Fix bash'isms, use command -v instead of which and use bc -l in /CALC.
    * Fix a crash with handling the DCC queue.
    * Fix crash when checking for fuzzy nick match when not on the channel.
Reported by Aurelien Delaitre (SATE 2009).
Pullup ticket #3084 - requested by minskim
print/dvipsk: security patch

Revisions pulled up:
- print/dvipsk/Makefile				1.5
- print/dvipsk/distinfo				1.4
- print/dvipsk/patches/patch-ab			1.3
---
Module Name:    pkgsrc
Committed By:   minskim
Date:           Tue Apr 20 17:07:28 UTC 2010

Modified Files:
        pkgsrc/print/dvipsk: Makefile distinfo
Added Files:
        pkgsrc/print/dvipsk/patches: patch-ab

Log Message:
Avoid integer overflow (CVE-2010-0739).

Patch from TeX Live repository (Revision 17559).
Pullup ticket #3085 - requested by minskim
print/abcm2ps: security update

Revisions pulled up:
- print/abcm2ps/Makefile			1.6
- print/abcm2ps/PLIST			1.5
- print/abcm2ps/distinfo			1.6
---
Module Name:    pkgsrc
Committed By:   minskim
Date:           Tue Apr 20 17:40:47 UTC 2010

Modified Files:
        pkgsrc/print/abcm2ps: Makefile PLIST distinfo

Log Message:
Update abcm2ps to 5.9.13.

This version fixes several security vulnerabilities including Secunia
Advisory SA39345.  For other changes, see share/doc/abcm2ps/Changes.
Pullup tickets #3083, #3084 and #3085.
Pullup ticket 3086 - requested by taca
security update

Revisions pulled up:
- pkgsrc/databases/mysql51-client/Makefile		1.4
- pkgsrc/databases/mysql51-client/Makefile.common	1.5
- pkgsrc/databases/mysql51-client/distinfo		1.2
- pkgsrc/databases/mysql51-server/Makefile		1.4
- pkgsrc/databases/mysql51-server/PLIST			1.3
- pkgsrc/databases/mysql51-server/distinfo		1.3

Files added:
pkgsrc/databases/mysql51-server/patches/patch-av

   --------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   taca
   Date:           Tue Apr 20 22:58:10 UTC 2010

   Modified Files:
           pkgsrc/databases/mysql51-client: Makefile Makefile.common distinfo
           pkgsrc/databases/mysql51-server: Makefile PLIST distinfo
   Added Files:
           pkgsrc/databases/mysql51-server/patches: patch-av

   Log Message:
   Update mysql51-client/mysql51-server package to 5.1.45.
   This is maintainous release and please refer for full changes:

           http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html

   Added a patch for recent security problem to mysql51-server, too.

           http://secunia.com/advisories/39454


   To generate a diff of this commit:
   cvs rdiff -u -r1.3 -r1.4 pkgsrc/databases/mysql51-client/Makefile
   cvs rdiff -u -r1.4 -r1.5 pkgsrc/databases/mysql51-client/Makefile.common
   cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/databases/mysql51-client/distinfo
   cvs rdiff -u -r1.3 -r1.4 pkgsrc/databases/mysql51-server/Makefile
   cvs rdiff -u -r1.2 -r1.3 pkgsrc/databases/mysql51-server/PLIST \
       pkgsrc/databases
pullup #3086
Pullup ticket #3088 - requested by tnn
multimedia/mplayer-plugin: build fix

Revisions pulled up;
- multimedia/mplayer-plugin/distinfo		1.2
- multimedia/mplayer-plugin/patches/patch-aa	1.2
- multimedia/mplayer-plugin/patches/patch-ab	delete
- multimedia/mplayer-plugin/patches/patch-ad	delete
- multimedia/mplayer-plugin/patches/patch-ag	1.2
---
Module Name:	pkgsrc
Committed By:	tnn
Date:		Wed Apr 21 15:58:03 UTC 2010

Modified Files:
	pkgsrc/multimedia/mplayer-plugin: distinfo
	pkgsrc/multimedia/mplayer-plugin/patches: patch-aa patch-ag
Removed Files:
	pkgsrc/multimedia/mplayer-plugin/patches: patch-ab patch-ad

Log Message:
fix xulrunner-1.9.2.x build breakage reported on pkgsrc-users@
Pullup ticket #3089 - requested by joerg
pkgtools/pkg_install: bootstrap fix

Revisions pulled up:
- net/libfetch/files/fetch.cat3			1.14
---
Module Name:	pkgsrc
Committed By:	joerg
Date:		Thu Apr 22 14:11:16 UTC 2010

Modified Files:
	pkgsrc/net/libfetch/files: fetch.cat3

Log Message:
Regen.