Create the pkgsrc-2007Q3 branch changes file.
Pullup ticket 2209 - requested by adrianp
security fix for openssl

- pkgsrc/security/openssl/Makefile			1.128
- pkgsrc/security/openssl/distinfo			1.56
- pkgsrc/security/openssl/patches/patch-ao		1.2

   Module Name:	pkgsrc
   Committed By:	adrianp
   Date:		Sun Oct 21 17:52:53 UTC 2007

   Modified Files:
	   pkgsrc/security/openssl: Makefile distinfo
	   pkgsrc/security/openssl/patches: patch-ao

   Log Message:
   Full and proper fix for CVE-2007-5135
   PKGREVISION++
Ticket #2209.
Pullup ticket 2200 - requested by hauke
security fix for gdm

- pkgsrc/x11/gdm/Makefile				1.133
- pkgsrc/x11/gdm/distinfo				1.51
- pkgsrc/x11/gdm/patches/patch-am			1.3
- pkgsrc/x11/gdm/patches/patch-an			1.1

   Module Name:	pkgsrc
   Committed By:	hauke
   Date:		Thu Oct 11 09:35:11 UTC 2007

   Added Files:
	   pkgsrc/x11/gdm/patches: patch-am patch-an

   Log Message:
   The code to verify user and password provided in
   daemon/verify-{crypt,shadow}.c prints out the user name in various
   places, where daemon/verify-pam.c code does not. Get out of sync with
   the login dialog, and you'll have your password logged.

   Adapt patches from the gdm 2.20 branch for
   (1) not logging the user name in any sy slog error messages
   (2) not localizing the log messages.

   Fixes PR 31417.
Ticket #2200.
Pullup ticket 2210 - requested by marrti
bugfix update for postfix

- pkgsrc/mail/postfix/Makefile				1.208
- pkgsrc/mail/postfix/distinfo				1.114

   Module Name:	pkgsrc
   Committed By:	martti
   Date:		Mon Oct 22 06:15:20 UTC 2007

   Modified Files:
	   pkgsrc/mail/postfix: Makefile distinfo

   Log Message:
   Updated mail/postfix to 2.4.6

   - A remote SMTP client TLS certificate with an unparsable canonical
      name triggered a panic error in the Postfix SMTP server (attempt
      to allocate zero-length memory) while sending a request to an
      SMTPD policy server.

   - On backup MX servers where the queue file system is mounted with
      "atime" (file read/execute access time) updates disabled, the
      flush daemon would trigger mail delivery attempts once every 1000
      seconds, thus rendering the maximal_backoff_time setting useless
      for backup MX service.
Ticket #2210.
Pullup ticket 2207 - requested by adrianp
bugfix for "make readme"

- pkgsrc/mk/bsd.pkg.readme.mk				1.15
- pkgsrc/mk/scritps/genreadme.awk			1.29
- pkgsrc/mk/scritps/mkreadme				1.20

   Module Name:	pkgsrc
   Committed By:	adrianp
   Date:		Sat Oct 20 13:35:12 UTC 2007

   Modified Files:
	   pkgsrc/mk: bsd.pkg.readme.mk
	   pkgsrc/mk/scripts: genreadme.awk mkreadme

   Log Message:
   Rename PKGTOOLS_VER to PKGTOOLS_VERSION and use that everywhere
   Export PKGTOOLS_VERSION so that genreadme.awk can use it
   This will sync the output between './mkreadme' and 'make readme'
Pullup ticket 2203 - requested by adrianp
security update for drupal

- pkgsrc/www/drupal/Makefile				1.24
- pkgsrc/www/drupal/distinfo				1.17

   Module Name:	pkgsrc
   Committed By:	adrianp
   Date:		Thu Oct 18 13:01:36 UTC 2007

   Modified Files:
	   pkgsrc/www/drupal: Makefile distinfo

   Log Message:
   Update to 5.3

   Fix a number of security issues:
   SA-2007-024 - Drupal Core - HTTP response splitting
   SA-2007-025 - Drupal Core - Arbitrary code execution via installer.
   SA-2007-026 - Drupal Core - Cross site scripting via uploads
   SA-2007-029 - Drupal Core - User deletion cross site request forgery
   SA-2007-030 - Drupal Core - API handling of unpublished comment

   Bugs:
   Redirect to home page after user registration requiring admin approval.
   More correct wording since some modules will actually work despite warning.
   variable search_cron_limit was not removed on search uninstall
   Append to instead of overwrite #suffix.
   hide administration pages links on module help pages if there are no
   admin links for the module

   See http://drupal.org/node/184395 for all the details
Tickets #2203, 2207.
Pullup ticket 2203 - requested by ghen
security update for firefox

Revisions pulled up:
- pkgsrc/www/firefox/Makefile-firefox.common		1.49
- pkgsrc/www/firefox/distinfo				1.70
- pkgsrc/www/firefox/patches/patch-ac			1.10
- pkgsrc/www/firefox-bin/Makefile			1.35
- pkgsrc/www/firefox-bin/distinfo			1.33, 1.34, 1.35

   Module Name:		pkgsrc
   Committed By:	ghen
   Date:		Fri Oct 19 08:59:56 UTC 2007

   Modified Files:
   	pkgsrc/www/firefox: Makefile-firefox.common distinfo
   	pkgsrc/www/firefox-bin: Makefile distinfo
   	pkgsrc/www/firefox/patches: patch-ac

   Log Message:
   Update firefox, firefox-bin and firefox-gtk1 to 2.0.0.8.

   Security fixes in this version:

   MFSA 2007-36 URIs with invalid %-encoding mishandled by Windows
   MFSA 2007-35 XPCNativeWrapper pollution using Script object
   MFSA 2007-34 Possible file stealing through sftp protocol
   MFSA 2007-33 XUL pages can hide the window titlebar
   MFSA 2007-32 File input focus stealing vulnerability
   MFSA 2007-31 Browser digest authentication request splitting
   MFSA 2007-30 onUnload Tailgating
   MFSA 2007-29 Crashes with evidence of memory corruption (rv:1.8.1.8)

   For more info, see http://www.mozilla.com/en-US/firefox/2.0.0.8/releasenotes/
---
   Module Name:		pkgsrc
   Committed By:	ghen
   Date:		Fri Oct 19 19:47:43 UTC 2007

   Modified Files:
   	pkgsrc/www/firefox-bin: distinfo

   Log Message:
   Add distinfo entries for Solaris {8,10}/{i386,sparc} as well.
   Noted by dmcmahill.
---
   Module Name:		pkgsrc
   Committed By:	ghen
   Date:		Sat Oct 20 10:42:37 UTC 2007

   Modified Files:
   	pkgsrc/www/firefox-bin: distinfo

   Log Message:
   Remove empty lines to get rid of warnings in weekly pkgsrc checks on babylon5.
   Suggested by veego.
#2203
Pullup ticket 2215 - requested by tnn
removal of ion3-devel

- pkgsrc/wm/Makefile					1.99
- pkgsrc/wm/ion3-devel/DESCR				removed
- pkgsrc/wm/ion3-devel/Makefile				removed
- pkgsrc/wm/ion3-devel/PLIST				removed
- pkgsrc/wm/ion3-devel/distinfo				removed
- pkgsrc/wm/ion3-devel/patches/patch-aa			removed
- pkgsrc/wm/ion3-devel/patches/patch-ab			removed
- pkgsrc/wm/ion3-devel/patches/patch-ac			removed
- pkgsrc/wm/ion3-devel/patches/patch-ae			removed
- pkgsrc/wm/ion3-devel/patches/patch-ag			removed
- pkgsrc/wm/ion3-devel/patches/patch-ah			removed
- pkgsrc/wm/ion3-devel/patches/patch-aj			removed
- pkgsrc/wm/ion3-devel/patches/patch-ak			removed
- pkgsrc/wm/ion3-devel/patches/patch-al			removed
- pkgsrc/wm/ion3-devel/patches/patch-am			removed

   Module Name:	pkgsrc
   Committed By:	tnn
   Date:		Sun Oct 28 12:31:57 UTC 2007

   Modified Files:
	   pkgsrc/wm: Makefile
   Removed Files:
	   pkgsrc/wm/ion3-devel: DESCR Makefile PLIST distinfo
	   pkgsrc/wm/ion3-devel/patches: patch-aa patch-ab patch-ac
   patch-ae patch-ag patch-ah patch-aj patch-ak patch-al patch-am

   Log Message:
   Remove ion3-devel.
   The holder of the Ion3(tm) trademark and copyright demands that
   this package must be kept up-to-date at all times. We cannot comply
   with such demands, especially considering that pkgsrc has
   "stable branches".

   (If anyone cares about this package, I suggest we maintain it in
   pkgsrc-wip instead.)
Ticket #2215.
Pullup ticket 2211 - requested by ghen
security update for seamonkey

Revisions pulled up:
- pkgsrc/www/seamonkey/Makefile				1.24
- pkgsrc/www/seamonkey/Makefile-seamonkey.common	1.13
- pkgsrc/www/seamonkey/distinfo				1.25
- pkgsrc/www/seamonkey/patches/patch-ac			1.4
- pkgsrc/www/seamonkey-gtk1/Makefile			1.17
- pkgsrc/www/seamonkey-bin/Makefile			1.17
- pkgsrc/www/seamonkey-bin/distinfo			1.14

   Module Name:		pkgsrc
   Committed By:	ghen
   Date:		Mon Oct 22 08:04:08 UTC 2007

   Modified Files:
   	pkgsrc/www/seamonkey: Makefile Makefile-seamonkey.common distinfo
   	pkgsrc/www/seamonkey-bin: Makefile distinfo
   	pkgsrc/www/seamonkey-gtk1: Makefile
   	pkgsrc/www/seamonkey/patches: patch-ac

   Log Message:
   Update seamonkey, seamonkey-bin and seamonkey-gtk1 to SeaMonkey 1.1.5.

   Security fixes in this version:

   MFSA 2007-36 URIs with invalid %-encoding mishandled by Windows
   MFSA 2007-35 XPCNativeWrapper pollution using Script object
   MFSA 2007-34 Possible file stealing through sftp protocol
   MFSA 2007-33 XUL pages can hide the window titlebar
   MFSA 2007-32 File input focus stealing vulnerability
   MFSA 2007-31 Browser digest authentication request splitting
   MFSA 2007-30 onUnload Tailgating
   MFSA 2007-29 Crashes with evidence of memory corruption (rv:1.8.1.8)
   MFSA 2007-28 Code execution via QuickTime Media-link files

   For more info, see http://www.mozilla.org/projects/seamonkey/releases/seamonkey1.1.5/
#2211
Make the memsup port program compile, so that the PLIST ist correct on
NetBSD-4 (at least). Else pkg_sync and pkg_tarup won't work.
Revert last change - wrong branch.
Pullup ticket 2218 - requested by joerg
build fix for shared-mime-info

- pkgsrc/databases/shared-mime-info/distinfo		patch
- pkgsrc/databases/shared-mime-info/patches/patch-ab	1.3 via patch
- pkgsrc/databases/shared-mime-info/patches/patch-ac	1.1 via patch

   Module Name:	pkgsrc
   Committed By:	joerg
   Date:		Sat Nov  3 16:37:44 UTC 2007

   Modified Files:
	   pkgsrc/databases/shared-mime-info: distinfo
   Added Files:
	   pkgsrc/databases/shared-mime-info/patches: patch-ab patch-ac

   Log Message:
   Remove INCOMPAT_GETTEXT and the automatic rebuilding of the PO files.
   This fixes the build on older NetBSD systems in a clean way.
Ticket #2218.