Pullup ticket #4347 - requested by spz
graphics/freetype2: security update

Revisions pulled up:
- graphics/freetype2/Makefile                                   1.92-1.94
- graphics/freetype2/PLIST                                      1.21
- graphics/freetype2/buildlink3.mk                              1.38-1.43
- graphics/freetype2/distinfo                                   1.51
- graphics/freetype2/options.mk                                 1.1-1.2

---
   Module Name:	pkgsrc
   Committed By:	spz
   Date:		Thu Mar 13 23:26:35 UTC 2014

   Modified Files:
   	pkgsrc/graphics/freetype2: Makefile PLIST buildlink3.mk distinfo

   Log Message:
   security update, upstream short changelog ('here' being releasenotes):

   FreeType 2.5.3
   2014-03-08

   FreeType 2.5.3 has been released. All users should upgrade due to fixed
   vulnerability in the CFF driver (CVE-2014-2240).

   Its main new feature is much enhanced support of auto-hinting SFNT fonts
   (i.e., TrueType and CFF fonts) due to the use of the HarfBuzz library.
   A more detailed description of this and other changes can be found here.

   FreeType 2.5.2
   2013-12-08

   FreeType 2.5.2 has been released. It fixes a serious bug introduced
   in version 2.5.1; all users should upgrade.

   A listing of the changes can be found here.

   FreeType 2.5.1
   2013-11-25

   FreeType 2.5.1 has been released, providing three major new features.

      - Support for the WOFF font format, contributed by Behdad Esfahbod.
      - The auto-hinter now supports Hebrew, together with improved support
        for Cyrillic and Greek.
      - The directory layout of the (installed) FreeType header files has
        been simplified.

   Among other changes I want to mention that FreeType's TrueType debugger
   (ttdebug) has been made more versatile. An exhaustive list of changes
   can be found here.

   FreeType 2.5
   2013-06-19

   FreeType 2.5 has been released. A major new feature is support for
   color embedded bitmaps (eg. color emoji), contributed by Behdad Esfahbod
   on behalf of Google. Additionally, Adobe's CFF engine is now the default,
   which makes a good reason to change from the 2.4.x to the 2.5.x series.

   On the technical side, the property API to access FreeType module
   parameters (FT_Property_Set and FT_Property_Get) is now declared as
   stable.

   As usual, see this file for the complete release notes, which give
   more details. And we have again blog entries from Adobe and Google.

   FreeType 2.4.12
   2013-05-08

   FreeType 2.4.12 has been released. A major new feature is a new parsing
   and hinting engine for CFF fonts, contributed by Adobe in collaboration
   with Google. It was my job the last few months to fully adapt the code
   to FreeType, and we are very pleased with the results. You might also
   read the blog entries from Adobe and Google.

   In connection with the new CFF engine, the demo programs, especially
   ftview and ftdiff, have been improved a lot; as usual, more details
   on the changes can be found in the release notes.

---
   Module Name:	pkgsrc
   Committed By:	ryoon
   Date:		Fri Mar 14 13:12:34 UTC 2014

   Modified Files:
   	pkgsrc/graphics/freetype2: buildlink3.mk

   Log Message:
   graphics/png is also needed now

---
   Module Name:	pkgsrc
   Committed By:	ryoon
   Date:		Fri Mar 14 13:38:20 UTC 2014

   Modified Files:
   	pkgsrc/graphics/freetype2: buildlink3.mk

   Log Message:
   graphics/png should be included when non-builtin freetype2.
   Pointed out by obache@, thank you.

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Fri Mar 14 13:43:17 UTC 2014

   Modified Files:
   	pkgsrc/graphics/freetype2: buildlink3.mk

   Log Message:
   To get USE_BUILTIN.freetype2, builtin.mk must be included.

---
   Module Name:	pkgsrc
   Committed By:	ryoon
   Date:		Fri Mar 14 14:54:02 UTC 2014

   Modified Files:
   	pkgsrc/graphics/freetype2: Makefile buildlink3.mk
   Added Files:
   	pkgsrc/graphics/freetype2: options.mk

   Log Message:
   Make png dependency as option, and move option to options.mk
   Revert bump of BUILDLINK_ABI_DEPENDS.freetype2

---
   Module Name:	pkgsrc
   Committed By:	drochner
   Date:		Fri Mar 14 19:39:52 UTC 2014

   Modified Files:
   	pkgsrc/graphics/freetype2: Makefile buildlink3.mk options.mk

   Log Message:
   make the optional-png logics work
Pullup ticket #4347.
Pullup ticket #4348 - requested by taca
net/samba: security update

Revisions pulled up:
- net/samba/Makefile                                            1.242-1.247
- net/samba/distinfo                                            1.97-1.98
- net/samba/patches/patch-ab                                    1.29

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Tue Jan 28 12:16:39 UTC 2014

   Modified Files:
   	pkgsrc/net/samba: Makefile

   Log Message:
   Use GNU_CONFIGURE_LIBDIR for --libdir.

---
   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Wed Feb 12 23:18:57 UTC 2014

   Modified Files:
   	pkgsrc/net/samba: Makefile

   Log Message:
   Recursive PKGREVISION bump for OpenSSL API version bump.

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Mon Mar  3 08:05:07 UTC 2014

   Modified Files:
   	pkgsrc/net/samba: Makefile

   Log Message:
   simplify with SUBST_VARS.

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Mon Mar  3 08:15:10 UTC 2014

   Modified Files:
   	pkgsrc/net/samba: Makefile distinfo
   	pkgsrc/net/samba/patches: patch-ab

   Log Message:
   Replace log dir in the default sample config file correctly.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	jperkin
   Date:		Thu Mar 13 11:08:54 UTC 2014

   Modified Files:
   	pkgsrc/net/samba: Makefile

   Log Message:
   Set USE_GCC_RUNTIME=yes for packages which build shared libraries but do
   not use libtool to do so.  This is required to correctly depend upon a
   gcc runtime package (e.g. gcc47-libs) when using USE_PKGSRC_GCC_RUNTIME.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Mar 17 14:01:57 UTC 2014

   Modified Files:
   	pkgsrc/net/samba: Makefile distinfo

   Log Message:
   Update samba to 3.6.23.

                      ==============================
                      Release Notes for Samba 3.6.23
                              March 11, 2014
                      ==============================

   This is a security release in order to address
   CVE-2013-4496 (Password lockout not enforced for SAMR password changes).

   o  CVE-2013-4496:
      Samba versions 3.4.0 and above allow the administrator to implement
      locking out Samba accounts after a number of bad password attempts.

      However, all released versions of Samba did not implement this check for
      password changes, such as are available over multiple SAMR and RAP
      interfaces, allowing password guessing attacks.
Pullup ticket #4348.
Pullup ticket #4349 - requested by tron
www/apache24: security update

Revisions pulled up:
- www/apache24/Makefile                                         1.26
- www/apache24/PLIST                                            1.15
- www/apache24/distinfo                                         1.13

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Tue Mar 18 20:09:08 UTC 2014

   Modified Files:
   	pkgsrc/www/apache24: Makefile PLIST distinfo

   Log Message:
   Changes 2.4.9:
   *) mod_ssl: Work around a bug in some older versions of OpenSSL that
      would cause a crash in SSL_get_certificate for servers where the
      certificate hadn't been sent.
   *) mod_lua: Add a fixups hook that checks if the original request is intend=
   ed
      for LuaMapHandler. This fixes a bug where FallbackResource invalidates t=
   he
      LuaMapHandler directive in certain cases by changing the URI before the =
   map
      handler code executes

   Changes 2.4.8:
   *) SECURITY: CVE-2014-0098 (cve.mitre.org)
      Clean up cookie logging with fewer redundant string parsing passes.
      Log only cookies with a value assignment. Prevents segfaults when
      logging truncated cookies.
   *) SECURITY: CVE-2013-6438 (cve.mitre.org)
      mod_dav: Keep track of length of cdata properly when removing
      leading spaces. Eliminates a potential denial of service from
      specifically crafted DAV WRITE requests
   *) core: Support named groups and backreferences within the LocationMatch,
      DirectoryMatch, FilesMatch and ProxyMatch directives. (Requires
      non-ancient PCRE library)
   *) core: draft-ietf-httpbis-p1-messaging-23 corrections regarding
      TE/CL conflicts.
   *) mod_dir: Add DirectoryCheckHandler to allow a 2.2-like behavior, skipping
      execution when a handler is already set.
   *) mod_ssl: Do not perform SNI / Host header comparison in case of a
      forward proxy request.
   *) mod_ssl: Remove the hardcoded algorithm-type dependency for the
      SSLCertificateFile and SSLCertificateKeyFile directives, to enable
      future algorithm agility, and deprecate the SSLCertificateChainFile
      directive (obsoleted by SSLCertificateFile).
   *) mod_rewrite: Add RewriteOptions InheritDown, InheritDownBefore,
      and IgnoreInherit to allow RewriteRules to be pushed from parent scopes
      to child scopes without explicitly configuring each child scope.
   *) prefork: Fix long delays when doing a graceful restart.
   *) FreeBSD: Disable IPv4-mapped listening sockets by default for versions
      5+ instead of just for FreeBSD 5.
   *) mod_proxy_wstunnel: Avoid busy loop on client errors, drop message
      IDs 02445, 02446, and 02448 to TRACE1 from DEBUG.
   *) mod_remoteip: Correct the trusted proxy match test.
   *) mod_proxy_fcgi: Fix error message when an unexpected protocol version
      number is received from the application.
   *) mod_remoteip: Use the correct IP addresses to populate the proxy_ips fie=
   ld.
   *) mod_lua: Update r:setcookie() to accept a table of options and add domai=
   n,
      path and httponly to the list of options available to set.
   *) mod_lua: Fix r:setcookie() to add, rather than replace,
      the Set-Cookie header.
   *) mod_lua: Allow for database results to be returned as a hash with
      row-name/value pairs instead of just row-number/value.
   *) mod_rewrite: Add %{CONN_REMOTE_ADDR} as the non-useragent counterpart to
      %{REMOTE_ADDR}.
   *) WinNT MPM: If ap_run_pre_connection() fails or sets c->aborted, don't
      save the socket for reuse by the next worker as if it were an
      APR_SO_DISCONNECTED socket. Restores 2.2 behavior.
   *) mod_dir: Don't search for a DirectoryIndex or DirectorySlash on a URL
      that was just rewritten by mod_rewrite.
   *) mod_session: When we have a session we were unable to decode,
      behave as if there was no session at all.
   *) mod_session: Fix problems interpreting the SessionInclude and
      SessionExclude configuration.
   *) mod_authn_core: Allow <AuthnProviderAlias>'es to be seen from auth
      stanzas under virtual hosts.
   *) mod_proxy_fcgi: Use apr_socket_timeout_get instead of hard-coded
      30 seconds timeout.
   *) mod_proxy: Added support for unix domain sockets as the
      backend server endpoint
   *) build: only search for modules (config*.m4) in known subdirectories, see
      build/config-stubs.
   *) mod_cache_disk: Fix potential hangs on Windows when using mod_cache_disk.
   *) mod_ssl: Add support for OpenSSL configuration commands by introducing
      the SSLOpenSSLConfCmd directive.
   *) mod_proxy: Remove (never documented) <Proxy ~ wildcard-url> syntax which
      is equivalent to <ProxyMatch wildcard-url>.
   *) mod_authz_user, mod_authz_host, mod_authz_groupfile, mod_authz_dbm,
      mod_authz_dbd, mod_authnz_ldap: Support the expression parser within the
      require directives.
   *) mod_proxy_http: Core dumped under high load.
   *) mod_socache_shmcb.c: Remove arbitrary restriction on shared memory size
      previously limited to 64MB.
   *) mod_lua: Use binary copy when dealing with uploads through r:parsebody()
      to prevent truncating files.


   To generate a diff of this commit:
   cvs rdiff -u -r1.25 -r1.26 pkgsrc/www/apache24/Makefile
   cvs rdiff -u -r1.14 -r1.15 pkgsrc/www/apache24/PLIST
   cvs rdiff -u -r1.12 -r1.13 pkgsrc/www/apache24/distinfo
pullup 4349
Pullup ticket #4350 - requested by tron
graphics/freetype2: build fix

Revisions pulled up:
- graphics/freetype2/buildlink3.mk                              1.44

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	jperkin
   Date:		Wed Mar 19 10:16:33 UTC 2014

   Modified Files:
   	pkgsrc/graphics/freetype2: buildlink3.mk

   Log Message:
   Move bzip2 and zlib buildlink3 out of the png PKG_OPTION check, they are
   unconditional dependencies.


   To generate a diff of this commit:
   cvs rdiff -u -r1.43 -r1.44 pkgsrc/graphics/freetype2/buildlink3.mk
pullup 4350