Add a file to record changes on the pkgsrc-2011Q2 branch
Pullup ticket #3466 - requested by adam
security/clama: bug fix update

Revisions pulled up:
- security/clamav/Makefile                                      1.3
- security/clamav/PLIST                                         1.2
- security/clamav/distinfo                                      1.3
- security/clamav/patches/patch-ad                              1.2
- security/clamav/patches/patch-af                              1.2

---
   Module Name:    pkgsrc
   Committed By:   adam
   Date:           Fri Jul  8 09:28:06 UTC 2011

   Modified Files:
           pkgsrc/security/clamav: Makefile PLIST distinfo
           pkgsrc/security/clamav/patches: patch-ad patch-af

   Log Message:
   Changes 0.97.1:
   This is a bugfix release recommended for all users. Please refer to the
   ChangeLog file for details.
Pullup ticket #3466.
Pullup ticket #3468 - requested by mspo
chat/bitlbee build fix

Revisions pulled up:
- chat/bitlbee/Makefile                                         1.52-1.53
- chat/bitlbee/distinfo                                         1.27

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   mspo
   Date:           Sat Jul  9 11:13:21 UTC 2011

   Modified Files:
           pkgsrc/chat/bitlbee: Makefile distinfo

   Log Message:
   Version 3.0.3:
   - Fixed Twitter compatibility. (The API call used to get the following list
     was deprecated.)
   - Twitter: Enable the show_ids setting to assign a two-digit short ID to
     recent tweets to use for retweets and replies (so you can RT/reply to more
     than just a person's last message).
   - Some other Twitter fixes/improvements.
   - "otr reconnect" command and some other fixes.
   - GnuTLS 2.12 compatibility fix.
   - Include "FLOOD=0/9999" in the 005/ISUPPORT line at login to hint the IRC
     client that rate limiting is not required. (Next step: Get IRC clients to
     parse it.)
   - Other stuff too small to mention.

   Finished 2 Jun 2011

   Version 3.0.2:
   - Fixed MSN login issues with @msn.com accounts.
   - /CTCP support: You can CTCP VERSION Jabber contacts, and CTCP NUDGE MSN
     contacts. More may come later, ideas are welcome.
   - By default, leave Twitter turned on for libpurple builds.
   - Allow using /OPER to identify/register as well. (Password security hack.)
   - Fixed proxy support with libpurple.
   - Some minor changes/fixes.


   To generate a diff of this commit:
   cvs rdiff -u -r1.51 -r1.52 pkgsrc/chat/bitlbee/Makefile
   cvs rdiff -u -r1.26 -r1.27 pkgsrc/chat/bitlbee/distinfo

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Sat Jul  9 13:37:51 UTC 2011

   Modified Files:
           pkgsrc/chat/bitlbee: Makefile

   Log Message:
   depend on libgcrypt explicitely
   (gnutls used to pull it in for us, but this will be cleaned up)


   To generate a diff of this commit:
   cvs rdiff -u -r1.52 -r1.53 pkgsrc/chat/bitlbee/Makefile
pullup #3468
Pullup ticket #3469 - requested by bsiegert
devel/gmake: portability fix

Revisions pulled up:
- devel/gmake/Makefile                                          1.78

---
   Module Name:    pkgsrc
   Committed By:   bsiegert
   Date:           Sat Jul  9 16:25:35 UTC 2011

   Modified Files:
          pkgsrc/devel/gmake: Makefile

   Log Message:
   Do not use strndup on MirBSD, it used to be broken. Fixes lots of
   "mysterious" build failures on MirBSD.

   Reviewed by agc and joerg.
Pullup ticket #3469.
Pullup ticket #3471 - requested by morr
www/wordpress: security update

Revisions pulled up:
- www/wordpress/Makefile                                        1.20
- www/wordpress/PLIST                                           1.9
- www/wordpress/distinfo                                        1.16

---
   Module Name:	pkgsrc
   Committed By:	morr
   Date:		Mon Jul 11 22:53:50 UTC 2011

   Modified Files:
   	pkgsrc/www/wordpress: Makefile PLIST distinfo

   Log Message:
   Update to newest version - 3.2.

   Highlights:

   * Refreshed Administrative UI - Admin redesign
   * New Default Theme "Twenty Eleven" - Uses the latest Theme Features
   * Full Screen Editor - Distraction free writing experience
   * Extended Admin Bar - More useful links to control the site

   * Enhanced Browser Compatibility -
     - Drop Internet Explorer 6 support
     - Start End-of-life (EOL) cycle for Internet Explorer 7
     - Browse Happy notify users of out-of-date browser

   * WordPress is Faster and Lighter -
     - Faster page loads -- We've gone through the most commonly loaded
     pages in WP and done improvements to their load time
     - Faster Upgrades -- The update system now support incremental
     upgrades so after 3.2 you'll find upgrading faster than ever
     - Optimizations to WP_Filesystem -- Updates over FTP are now much
     quicker and less error prone
     - Stream downloads to the filesystem -- Improves update times and
     lowers the memory footprint
     - Performance improvements for wptexturize()
     - Remove PHP4 compatibility including timezone support
     - More efficient term intersection queries
     - Some optimizations in the HTML sanitizer (kses)
     - Speed optimizations for is_serialized_string()
     - Cache the Dashboard RSS Widgets HTML output to reduce unnecessary
     Ajax requests as well as the memory footprint
     - And many other improvements and tweaks

   Contains also security fixes from wordpress 3.1.4.
Pullup ticket #3471.
Pullup ticket #3472 - requested by taca
mail/squirrelmail: security update

Revisions pulled up:
- mail/squirrelmail/MESSAGE                                     1.6
- mail/squirrelmail/Makefile                                    1.117-1.118
- mail/squirrelmail/PLIST                                       1.38
- mail/squirrelmail/distinfo                                    1.61

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Jul 13 01:30:34 UTC 2011

   Modified Files:
   	pkgsrc/mail/squirrelmail: Makefile

   Log Message:
   take MAINTAINER.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Jul 13 12:22:44 UTC 2011

   Modified Files:
   	pkgsrc/mail/squirrelmail: MESSAGE Makefile PLIST distinfo

   Log Message:
   Update squirrelmail package to 1.4.22.

   Version 1.4.22 - 12 July 2011
   -----------------------------
     - Backported default timezone fix from version 1.5.2; helps mitigate
       timezone errors in environments where a default has not been set
       by the administrator.
     - Fixed system lock-ups caused by a combination of certain rare,
       malformed message headers and buggy versions of PHP mbstring
       (#3053349).
     - Now allow multiple plugins to handle (add links for) a single
       attachment MIME type.
     - Now allow administrators to disable all plugins or enable just
       a select few plugins (overriding the active plugins in the normal
       configuration) by setting $temporary_plugins as an empty array
       (all disabled) or an array with one or more plugin directory names
       in config_local.php.
     - Backport fix for call_user_func_array not supporting NULL as empty
       array in PHP 5.3.3
     - Fixed sqauth_read_password() for plugins on the login_verified hook.
     - Added SMTP SASL PLAIN authentication option to configuration tool
       (core support for such is not new).
     - Gmail doens't support standard search commands; removed sort buttons.
     - Forced addition of a file suffix to attachments that lack a filename
       (helps forwarded messages avoid spam filters) (thanks to Petr
       Kletecka) (#3139004).
     - Fixed missing security token in listcommands plugin.
     - Added smtp_auth hook (thanks to Emmanuel Dreyfus).
     - Made speed enhancements to threaded message display (thanks to Siim
       Poder) (#3288123).
     - Allow administrators to configure subfolders of user INBOXes to be
       treated as special folders by adding $subfolders_of_inbox_are_special
       to config_local.php.
     - Fixed incorrect display of INBOX subfolders under some configurations.
       IMPORTANT: You may need to update your configuration so that
       $default_sub_of_inbox is TRUE if it was FALSE (e.g., Courier IMAP users)
       and after updating to this version, your special folders are no longer
       listed at the top of your folder list.  Also, if this change prevents
       users from logging in with an error such as "ERROR: Could not complete
       request.  Query: CREATE "Trash" Reason Given: Invalid mailbox name.",
       you will need to correct the user preference values for the problem
       folders.  You can do so with commands such as the following for file-
       based preferences (adjust the data directory location as needed):
           find /var/lib/squirrelmail/data/ -name *.pref -exec sed --in-place 's/trash_folder=Trash/trash_folder=INBOX.Trash/g' {} \;
           find /var/lib/squirrelmail/data/ -name *.pref -exec sed --in-place 's/trash_folder=Drafts/trash_folder=INBOX.Drafts/g' {} \;
           find /var/lib/squirrelmail/data/ -name *.pref -exec sed --in-place 's/trash_folder=Sent/trash_folder=INBOX.Sent/g' {} \;
       Or, for database-based preferences:
           UPDATE userprefs SET prefval = 'INBOX.Trash' WHERE prefkey = 'trash_folder' AND prefval = 'Trash';
           UPDATE userprefs SET prefval = 'INBOX.Drafts' WHERE prefkey = 'draft_folder' AND prefval = 'Drafts';
           UPDATE userprefs SET prefval = 'INBOX.Sent' WHERE prefkey = 'sent_folder' AND prefval = 'Sent';
       MAKE SURE to back up your user preferences first!
     - Optimized message highlighting rules; faster message list display
       and faster highlight rules management (thanks to C. Bensend for
       extensive effort helping diagnose)
     - New Mail plugin no longer removes normal organization title when
       putting the number of new messages in the browser title
     - Added clickjacking protection (thanks to Asbjorn Thorsen and Geir
       Hansen for bringing this to our attention). [CVE-2010-4554]
     - Fixed XSS holes in generic options inputs, XSS hole in the SquirrelSpell
       plugin, XSS hole in the Index Order page, and added anti-CSRF protection
       to the empty trash feature and the Index Order page (thanks to Nicholas
       Carlini for finding all these issues). [CVE-2010-4555]
     - Fixed XSS problem with unsanitized style tags in messages. [CVE-2011-2023]
Pullup ticket #3472.
Updated package numbers from spz (Thanks, Petra!)
Pullup ticket #3473 - requested by drochner
audio/libsndfile security patch

Revisions pulled up:
- audio/libsndfile/Makefile                                     1.61
- audio/libsndfile/distinfo                                     1.33
- audio/libsndfile/patches/patch-aa                             1.17
- audio/libsndfile/patches/patch-ab                             1.11
- audio/libsndfile/patches/patch-ac                             1.13

-------------------------------------------------------------------
   Module Name:  pkgsrc
   Committed By: drochner
   Date:         Thu Jul 14 09:49:01 UTC 2011
   Modified Files:
         pkgsrc/audio/libsndfile: Makefile distinfo
   Added Files:
         pkgsrc/audio/libsndfile/patches: patch-aa patch-ab patch-ac
   Log Message:
   add patch from upstream to fix crash by invalid PAF files
   (DOS problem, SA45125)
   bump PKGREV
   To generate a diff of this commit:
   cvs rdiff -u -r1.60 -r1.61 pkgsrc/audio/libsndfile/Makefile
   cvs rdiff -u -r1.32 -r1.33 pkgsrc/audio/libsndfile/distinfo
   cvs rdiff -u -r0 -r1.17 pkgsrc/audio/libsndfile/patches/patch-aa
   cvs rdiff -u -r0 -r1.11 pkgsrc/audio/libsndfile/patches/patch-ab
   cvs rdiff -u -r0 -r1.13 pkgsrc/audio/libsndfile/patches/patch-ac
pullup #3473
Pullup ticket #3474 - requested by drochner
print/foomatic4-filters: security patch

Revisions pulled up:
- print/foomatic4-filters/Makefile                              1.10
- print/foomatic4-filters/distinfo                              1.4
- print/foomatic4-filters/patches/patch-ac                      1.2

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Wed Jul 13 19:58:54 UTC 2011

   Modified Files:
           pkgsrc/print/foomatic4-filters: Makefile distinfo
           pkgsrc/print/foomatic4-filters/patches: patch-ac

   Log Message:
   add a patch from Suse bug #698451 (which is said there to originate
   from upstream but I couldn't locate it) to fix possible injection
   of shell commands in print requests which would be executed as
   the "lp" user
   bump PKGREV

   To generate a diff of this commit:
   cvs rdiff -u -r1.9 -r1.10 pkgsrc/print/foomatic4-filters/Makefile
   cvs rdiff -u -r1.3 -r1.4 pkgsrc/print/foomatic4-filters/distinfo
   cvs rdiff -u -r1.1.1.1 -r1.2 pkgsrc/print/foomatic4-filters/patches/patch-ac
pullup #3474
Pullup ticket #3476 - requested by tron
net/wireshark: security update

Revisions pulled up:
- net/wireshark/Makefile                                        1.66
- net/wireshark/distinfo                                        1.46

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Tue Jul 19 21:29:53 UTC 2011

   Modified Files:
   	pkgsrc/net/wireshark: Makefile distinfo

   Log Message:
   Update "wireshark" package to version 1.4.8. Changes since 1.4.7:
   - Bug Fixes
     - The following vulnerabilities have been fixed. See the security
       advisory for details and a workaround.
        o The Lucent/Ascend file parser was susceptible to an infinite
          loop.
          Versions affected: 1.2.0 to 1.2.17, 1.4.0 to 1.4.7, and 1.6.0.
          CVE-2011-2597
        o The ANSI MAP dissector was susceptible to an infinite loop.
          (Bug 6044)
          Versions affected: 1.4.0 to 1.4.7, and 1.6.0.
          CVE-2011-????
     - The following bugs have been fixed:
        o TCP dissector doesn't decode TCP segments of length 1. (Bug
          4716)
        o Wireshark 1.4.0rc1 and python - spurious message. (Bug 4878)
        o Missing LUA function. (Bug 5006)
        o Lua API description about creating a new Tvb from a bytearray
          is not correct in wireshark's user guide. (Bug 5199)
        o sflow decode error for some extended formats. (Bug 5379)
        o White space in protocol field abbreviation causes runtime
          failure while registering Lua dissector. (Bug 5569)
        o "File not found" box uses wrong filename encoding. (Bug 5715)
        o capinfos: #ifdef HAVE_LIBGCRYPT block includes a line too
          many. (Bug 5803)
        o Wireshark crashes if Lua contains "Pref.range()" with missing
          arguments. (Bug 5895)
        o The "range" field in Lua's "Pref.range()" serves as default
          while the "default" field does nothing. (Bug 5896)
        o Wireshark crashes when calling TreeItem:set_len() on TreeItem
          without tvb. (Bug 5941)
        o TvbRange_string(lua_State* L) call a wrong function. (Bug
          5960)
        o VoIP call flow graph displays BICC APM as a BICC ANM. (Bug
          5966)
        o H323 rate multiplier wrong. (Bug 6009)
        o tshark crashes when loading Lua script that contains GUI
          function. (Bug 6018)
        o 802.11 Disassociation Packet's "Reason Code" field is
          imprecisely decoded/described. (Bug 6022)
        o Wireshark crashes when setting custom column's field name with
          conditional. (Bug 6028)
        o GTS Descriptor count limited to 3 instead of 7. (Bug 6055)
        o The SSL dissector can not resemble correctly the frames after
          TCP zero window probe packet. (Bug 6059)
        o Packet parser takes too long for this trace. (Bug 6073)
        o 802.11 Association Response Packet's "Status Code" field is
          imprecisely decoded/described. (Bug 6093)
        o Wireshark 1.6.0 and Python support: installer fails to create
          the wspy_dissectors subdirectory and . (Bug 6110)
        o Wireshark crash during RTP stream analysis. (Bug 6120)
        o Tshark custom columns: Why don't I get an error message? (Bug
          6131)
   - Updated Protocol Support
     ANSI MAP, GIOP, H.323, IEEE 802.11, MSRP, RPCAP, sFlow, TCP,
   - New and Updated Capture File Support
     Lucent/Ascend.


   To generate a diff of this commit:
   cvs rdiff -u -r1.65 -r1.66 pkgsrc/net/wireshark/Makefile
   cvs rdiff -u -r1.45 -r1.46 pkgsrc/net/wireshark/distinfo
pullup #3476
Pullup ticket #3477 - requested by tez
textproc/groff security fix

Revisions pulled up:
- textproc/groff/Makefile                                       1.58
- textproc/groff/distinfo                                       1.15
- textproc/groff/patches/patch-config.guess                     1.1
- textproc/groff/patches/patch-configure                        1.1
- textproc/groff/patches/patch-contrib_eqn2graph_eqn2graph.sh   1.1
- textproc/groff/patches/patch-contrib_gdiffmk_tests_runtests.in 1.1
- textproc/groff/patches/patch-contrib_grap2graph_grap2graph.sh 1.1
- textproc/groff/patches/patch-contrib_groffer_perl_groffer.pl  1.1
- textproc/groff/patches/patch-contrib_groffer_perl_roff2.pl    1.1
- textproc/groff/patches/patch-contrib_pdfmark_pdfroff.man      1.1
- textproc/groff/patches/patch-contrib_pdfmark_pdfroff.sh       1.1
- textproc/groff/patches/patch-contrib_pic2graph_pic2graph.sh   1.1
- textproc/groff/patches/patch-doc_fixinfo.sh                   1.1
- textproc/groff/patches/patch-doc_groff.info-2                 1.1
- textproc/groff/patches/patch-gendef.sh                        1.1
- textproc/groff/patches/patch-src_roff_groff_pipeline.c        1.1

---
   Module Name:    pkgsrc
   Committed By:   tez
   Date:           Tue Jul 19 21:09:40 UTC 2011

   Modified Files:
           pkgsrc/textproc/groff: Makefile distinfo
   Added Files:
           pkgsrc/textproc/groff/patches: patch-config.guess patch-configure
               patch-contrib_eqn2graph_eqn2graph.sh
               patch-contrib_gdiffmk_tests_runtests.in
               patch-contrib_grap2graph_grap2graph.sh
               patch-contrib_groffer_perl_groffer.pl
               patch-contrib_groffer_perl_roff2.pl
               patch-contrib_pdfmark_pdfroff.man patch-contrib_pdfmark_pdfroff.sh
               patch-contrib_pic2graph_pic2graph.sh patch-doc_fixinfo.sh
               patch-doc_groff.info-2 patch-gendef.sh
               patch-src_roff_groff_pipeline.c

   Log Message:
   Fix many temporary file handling issues, including in pdfroff
   (resolves CVE-2009-5044 / SA44999)
   Patches copied from:

   http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/groff/groff-1.20.1-owl-tmp.diff?rev=1.2
   Modified for pkgsrc and excluded a documentaion change to doc/groff.texinfo
   that changes a `makeinfo' is too old warning into a fatal error.

   Added patch to make pdfroff.sh use -dSAFER
   See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538338 for details.
Pullup ticket #3477