Pullup ticket #4442 - requested by wiz
sysutils/dbus: security update

Revisions pulled up:
- sysutils/dbus/Makefile                                        1.72
- sysutils/dbus/distinfo                                        1.57

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Sun Jul  6 14:54:32 UTC 2014

   Modified Files:
   	pkgsrc/sysutils/dbus: Makefile distinfo

   Log Message:
   Update to 1.8.6:

   D-Bus 1.8.6 (2014-06-02)
   ==

   Security fixes:

   • On Linux ≥ 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS, silently drop
     the message. This prevents an attack in which a malicious client can
     make dbus-daemon disconnect a system service, which is a local
     denial of service.
     (fd.o #80163, CVE-2014-3532; Alban Crequy)

   • Track remaining Unix file descriptors correctly when more than one
     message in quick succession contains fds. This prevents another attack
     in which a malicious client can make dbus-daemon disconnect a system
     service.
     (fd.o #79694, fd.o #80469, CVE-2014-3533; Alejandro Martínez Suárez,
     Simon McVittie, Alban Crequy)

   Other fixes:

   • When dbus-launch --exit-with-session starts a dbus-daemon but then cannot
     attach to a session, kill the dbus-daemon as intended
     (fd.o #74698, Роман Донченко)
Pullup ticket #4442.
Pullup ticket #4444 - requested by taca
editors/emacs24: security patch
editors/emacs24-nox11: security patch

Revisions pulled up:
- editors/emacs24-nox11/Makefile                                1.6
- editors/emacs24/Makefile                                      1.28
- editors/emacs24/distinfo                                      1.13
- editors/emacs24/patches/patch-lisp_emacs-lisp_find-gc.el      1.1
- editors/emacs24/patches/patch-lisp_gnus_gnus-fun.el           1.1
- editors/emacs24/patches/patch-lisp_net_tramp-sh.el            1.1

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Jul  2 09:08:36 UTC 2014

   Modified Files:
   	pkgsrc/editors/emacs24: Makefile distinfo
   Added Files:
   	pkgsrc/editors/emacs24/patches: patch-lisp_emacs-lisp_find-gc.el
   	    patch-lisp_gnus_gnus-fun.el patch-lisp_net_tramp-sh.el

   Log Message:
   Add fix for CVE-2014-3421, CVE-2014-3422 and CVE-2014-3424.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Jul  9 01:50:44 UTC 2014

   Modified Files:
   	pkgsrc/editors/emacs24-nox11: Makefile

   Log Message:
   Bump PKGREVISION with adding security patches to emacs24.
Pullup ticket #4443 - requested by dholland
converters/ack: build fix

Revisions pulled up:
- converters/ack/distinfo                                       1.4
- converters/ack/patches/patch-fileio.c                         1.2

---
   Module Name:	pkgsrc
   Committed By:	dholland
   Date:		Sun Jul  6 18:50:20 UTC 2014

   Modified Files:
   	pkgsrc/converters/ack: distinfo
   	pkgsrc/converters/ack/patches: patch-fileio.c

   Log Message:
   Include sys/time.h for utimes(). From PR 48965 by SUNAGAWA Keiki.
   Also include sys/types.h first as a general precaution, and don't
   use <utime.h> any more.
Pullup tickets #4443 and #4444.
Pullup ticket #4446 - requested by taca
www/contao33: installation fix

Revisions pulled up:
- www/contao33/INSTALL                                          1.1
- www/contao33/Makefile                                         1.4

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Jul  2 09:10:26 UTC 2014

   Modified Files:
   	pkgsrc/www/contao33: Makefile
   Added Files:
   	pkgsrc/www/contao33: INSTALL

   Log Message:
   INSTALL was missing from this package when I first imported it to pkgsrc.

   Bump PKGREVISION.
Pullup ticket #4447 - requested by taca
www/php-sugarcrm: security update

Revisions pulled up:
- www/php-sugarcrm/Makefile                                     1.8
- www/php-sugarcrm/distinfo                                     1.4

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Jul  2 09:13:02 UTC 2014

   Modified Files:
   	pkgsrc/www/php-sugarcrm: Makefile

   Log Message:
   Update php-sugarcrm to 6.5.17, security release.

   Quote from http://www.providentcrm.com/news/sugarcrm-6-5-17-patch-list/.

   1. Module scanner now blocks two additional functions:
      simplexml_load_file and simplexml_load_string
   2. JS Security Fix in Emails --  changing AJAX call from GET to POST.
   3. XML Handling -- Additional error handling and libxml_disable_entity_loader
      is now set to true.
   4. Users module -- Additional checking on un-authorised access to other users
      profile, plus Bugfix for password field.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jul  3 01:32:50 UTC 2014

   Modified Files:
   	pkgsrc/www/php-sugarcrm: distinfo

   Log Message:
   Forgot to commit distinfo.
Pullup ticket #4448 - requested by taca
databases/ruby-activerecord32: security update
devel/ruby-activemodel32: security update
devel/ruby-activesupport32: security update
devel/ruby-railties32: security update
mail/ruby-actionmailer32: security update
www/ruby-actionpack32: security update
www/ruby-activeresource32: security update

Revisions pulled up:
- databases/ruby-activerecord32/distinfo                        1.17
- devel/ruby-activemodel32/distinfo                             1.17
- devel/ruby-activesupport32/distinfo                           1.17
- devel/ruby-railties32/distinfo                                1.17
- lang/ruby/rails.mk                                            1.49
- mail/ruby-actionmailer32/distinfo                             1.17
- www/ruby-actionpack32/distinfo                                1.17
- www/ruby-activeresource32/distinfo                            1.17
- www/ruby-rails32/distinfo                                     1.17

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Jul  6 07:36:35 UTC 2014

   Modified Files:
   	pkgsrc/lang/ruby: rails.mk

   Log Message:
   Start update of Ruby on Rails to 3.2.19.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Jul  6 07:38:16 UTC 2014

   Modified Files:
   	pkgsrc/devel/ruby-activesupport32: distinfo

   Log Message:
   Update ruby-activesupport32 to 3.2.19.

   ## Rails 3.2.19 (Jul 2, 2014) ##

   *   Make sure Active Support configurations are applied correctly.

       Before this change configuration set using `config.active_support`
       would not be set.

       *Rafael Mendon=E7a Fran=E7a*

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Jul  6 07:38:50 UTC 2014

   Modified Files:
   	pkgsrc/devel/ruby-activemodel32: distinfo

   Log Message:
   Update ruby-activemodel32 to 3.2.19.

   ## Rails 3.2.19 (Jul 2, 2014) ##

   * No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Jul  6 07:40:52 UTC 2014

   Modified Files:
   	pkgsrc/www/ruby-activeresource32: distinfo

   Log Message:
   Update ruby-activeresource32 to 3.2.19.

   ## Rails 3.2.19 (Jul 2, 2014) ##

   * No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Jul  6 07:41:43 UTC 2014

   Modified Files:
   	pkgsrc/www/ruby-actionpack32: distinfo

   Log Message:
   Update ruby-actionpack32 to 3.2.19.

   ## Rails 3.2.19 (Jul 2, 2014) ##

   *   Fix regression when using `ActionView::Helpers::TranslationHelper#t=
   ranslate` with
       `options[:raise]`.

       This regression was introduced at ec16ba75a5493b9da972eea08bae630eb=
   a35b62f.

       *Shota Fukumori (sora_h)*

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Jul  6 07:42:15 UTC 2014

   Modified Files:
   	pkgsrc/mail/ruby-actionmailer32: distinfo

   Log Message:
   Update ruby-actionmailer32 to 3.2.19.

   ## Rails 3.2.19 (Jul 2, 2014) ##

   * No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Jul  6 07:42:48 UTC 2014

   Modified Files:
   	pkgsrc/devel/ruby-railties32: distinfo

   Log Message:
   Update ruby-railties32 to 3.2.19.

   ## Rails 3.2.19 (Jul 2, 2014) ##

   * No changes.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Jul  6 07:43:50 UTC 2014

   Modified Files:
   	pkgsrc/www/ruby-rails32: distinfo

   Log Message:
   Update ruby-rails32 to 3.2.19.

   This is meta package like ruby gem.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Jul  6 07:40:12 UTC 2014

   Modified Files:
   	pkgsrc/databases/ruby-activerecord32: distinfo

   Log Message:
   Update ruby-activerecord32 to 3.2.19, security fix.

   ## Rails 3.2.19 (Jul 2, 2014) ##

   *   Fix SQL Injection Vulnerability in 'bitstring' quoting.

       Fixes CVE-2014-3482.

       *Rafael Mendoná¸‹®a Franá¸‹®a*
Pullup ticket #4449 - requested by obache
multimedia/adobe-flash-plugin11: security update

Revisions pulled up:
- multimedia/adobe-flash-plugin11/Makefile                      1.31
- multimedia/adobe-flash-plugin11/distinfo                      1.29

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Wed Jul  9 04:57:28 UTC 2014

   Modified Files:
   	pkgsrc/multimedia/adobe-flash-plugin11: Makefile distinfo

   Log Message:
   Update adobe-flash-plugin11 to 11.2.202.394 for APSB14-17.
Pullup tickets #4446, #4447, #4448 and #4449.
Pullup ticket #4445 - requested by taca
editors/emacs23: security patch
editors/emacs23-nox11: security patch

Revisions pulled up:
- editors/emacs23-nox11/Makefile                                1.3
- editors/emacs23/Makefile                                      1.16
- editors/emacs23/distinfo                                      1.4-1.5
- editors/emacs23/patches/patch-aa                              1.2
- editors/emacs23/patches/patch-lisp_emacs-lisp_find-gc.el      1.1
- editors/emacs23/patches/patch-lisp_gnus_gnus-fun.el           1.1
- editors/emacs23/patches/patch-lisp_net_tramp.el               1.1-1.2
- editors/emacs23/patches/patch-src_config.in                   1.2
- editors/emacs23/patches/patch-src_m_amdx86-64.h               1.2

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Jul  9 03:18:44 UTC 2014

   Modified Files:
   	pkgsrc/editors/emacs23: Makefile distinfo
   	pkgsrc/editors/emacs23/patches: patch-aa patch-src_config.in
   	    patch-src_m_amdx86-64.h
   Added Files:
   	pkgsrc/editors/emacs23/patches: patch-lisp_emacs-lisp_find-gc.el
   	    patch-lisp_gnus_gnus-fun.el patch-lisp_net_tramp.el

   Log Message:
   * Add fix for CVE-2014-3421, CVE-2014-3422 and CVE-2014-3424 as emacs24.
   * Add comments to some of patch files.

   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Jul  9 03:19:46 UTC 2014

   Modified Files:
   	pkgsrc/editors/emacs23-nox11: Makefile

   Log Message:
   Bump PKGREVISION with some changes to emacs23.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jul 10 02:25:10 UTC 2014

   Modified Files:
   	pkgsrc/editors/emacs23: distinfo
   	pkgsrc/editors/emacs23/patches: patch-lisp_net_tramp.el

   Log Message:
   Fix broken patch file in previous commit.

   No PKGREVISION bump since it was broken.
Pullup ticket #4445.
Pullup ticket #4450 - requested by wiz
net/transmission: security update

Revisions pulled up:
- net/transmission/Makefile.common                              1.5
- net/transmission/distinfo                                     1.7

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Fri Jul 11 10:10:10 UTC 2014

   Modified Files:
   	pkgsrc/net/transmission: Makefile.common distinfo

   Log Message:
   Update to 2.84:

     * Fix peer communication vulnerability (no known exploits) reported
     by Ben Hawkes
Pullup ticket #4450.