Add CHANGES file for the pkgsrc-2007Q2 branch.
Pullup ticket 2126 - requested by tnn
build fix for ncurses

- pkgsrc/devel/ncurses/Makefile.common			1.6

   Module Name:	pkgsrc
   Committed By:	tnn
   Date:		Mon Jul  2 02:08:20 UTC 2007

   Modified Files:
	   pkgsrc/devel/ncurses: Makefile.common

   Log Message:
   On platforms that have neither a builtin groff nor builtin curses
   we can end up with a circular dependency:

   ncurses -> groff -> netpbm -> flex -> bison -> gtexinfo -> ncurses

   ncurses may depend on groff because of USE_TOOLS+=tbl.
   Break the circular dependency by using --without-manpage-tbl
   if there is no tbl(1) available and we're unable to build
   groff because of missing curses.
Pullup ticket 2127 - requested by tnn
build fix for bootstrap

- pkgsrc/bootstrap/bootstrap				1.99
- pkgsrc/pkgtools/bootstrap-extras/Makefile		1.3
- pkgsrc/pkgtools/bootstrap-extras/PLIST		1.2
- pkgsrc/pkgtools/bootstrap-extras/files/xargs-sh	1.1

   Module Name:	pkgsrc
   Committed By:	tnn
   Date:		Sun Jul  1 23:27:43 UTC 2007

   Modified Files:
	   pkgsrc/bootstrap: bootstrap
	   pkgsrc/pkgtools/bootstrap-extras: Makefile PLIST
   Added Files:
	   pkgsrc/pkgtools/bootstrap-extras/files: xargs-sh

   Log Message:
   xargs(1) on Interix is broken. It executes the utility on the command
   line even if standard input is the empty string. Install a wrapper
   script bundled with pkgtools/bootstrap-extras to deal with this. This
   is an attempt at a permanent workaround for the problem described in PR
   pkg/25777 which has regressed since it was initially fixed.

   We can now bootstrap again on Interix 3.5.
Pullup ticket 2128 - requested by joerg
build fix for p5-GTop

- pkgsrc/sysutils/p5-GTop/Makefile			1.2

Module Name:	pkgsrc
Committed By:	joerg
Date:		Mon Jul  2 06:14:15 UTC 2007

Modified Files:
	pkgsrc/sysutils/p5-GTop: Makefile

Log Message:
Needs pkg-config.
Pullup ticket 2130 - requested by martti
bugfix update for vim

- pkgsrc/editors/vim-lang/Makefile			1.12
- pkgsrc/editors/vim-share/Makefile.common		1.86
- pkgsrc/editors/vim-share/distinfo			1.76
- pkgsrc/editors/vim-share/version.mk			1.33

   Modified Files:
	   pkgsrc/editors/vim-lang: Makefile
	   pkgsrc/editors/vim-share: Makefile.common distinfo version.mk

   Log Message:
   Updated editors/vim-share to 7.1.18

      1529  7.1.003  (extra) Win32: menu entries end up in message history
      2481  7.1.004  crash when editing a directory
      3841  7.1.005  "cit" used on <foo></foo> deletes <foo>
      2941  7.1.006  when reading from stdin 'modified' can't be reset in autocmd
      6458  7.1.007  (extra) Mac: context menu does not work, scrollbars not dimmed
      2631  7.1.008  getfsize() returns an invalid number for very big files
      1881  7.1.009  diff mode: tab to spaces change not highlighted correctly
      2796  7.1.010  Gnome: tab pages are not included in the saved session
      1934  7.1.011  buffer overflow when $VIMRUNTIME is very long
      1904  7.1.012  ":let &tw = 'asdf'" does not give an error message
      2139  7.1.013  ":syn include" only loads the first file
      1479  7.1.014  crash in C-indenting
      3743  7.1.015  MzScheme interface doesn't build on Mac; init problem
      2368  7.1.016  (after 7.1.012) error message when using ":cwindow"
      6729  7.1.017  ":confirm w" does not give a prompt when file is read-only
      1771  7.1.018  "p" at end of line doesn't work right when 've' is set
Tickets #2126, 2127, 2128, 2130.
Pullup ticket 2131 - requested by lkundrak
security update for flac123

- pkgsrc/audio/flac123/Makefile				1.8
- pkgsrc/audio/flac123/distinfo				1.5

   Module Name:        pkgsrc
   Committed By: lkundrak
   Date:         Mon Jul  2 13:20:19 UTC 2007

   Modified Files:
	   pkgsrc/audio/flac123: Makefile distinfo

   Log Message:
   Updating to 0.0.10.  Just changes about 5 lines to prevent a stack
   overflow by the long comment string.
Pullup ticket 2133 - requested by lkundrak
security update for gaim-encryption

- pkgsrc/chat/gaim-encryption/Makefile			1.15
- pkgsrc/chat/gaim-encryption/distinfo			1.4

   Module Name:        pkgsrc
   Committed By: lkundrak
   Date:         Tue Jul  3 10:35:40 UTC 2007

   Modified Files:
         pkgsrc/chat/gaim-encryption: Makefile distinfo

   Log Message:
   Imported a new version with two subtle bugs, yet with security
   implications were fixed.

        2.39    Bugfix for invalid key messages
                Memory leaks fixed (Max Kellermann and Stu Tomlinson)
Pullup ticket 2134 - requested by lkundrak
security fix for gdb

- pkgsrc/devel/gdb6/Makefile				1.21
- pkgsrc/devel/gdb6/distinfo				1.11
- pkgsrc/devel/gdb6/patches/patch-bo			1.1
- pkgsrc/devel/gdb6/patches/patch-bp			1.1

   Module Name:    pkgsrc
   Committed By: lkundrak
   Date:         Tue Jul  3 12:32:28 UTC 2007

   Modified Files:
	   pkgsrc/devel/gdb6: Makefile distinfo
   Added Files:
	   pkgsrc/devel/gdb6/patches: patch-bo patch-bp

   Log Message:
   Backported fixes for CAN-2005-1704 and CAN-2005-1705.
Pullup ticket 2135 - requested by tron
security update for phpmyadmin

- pkgsrc/databases/phpmyadmin/Makefile			1.60
- pkgsrc/databases/phpmyadmin/distinfo			1.29

   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Tue Jul  3 14:18:14 UTC 2007

   Modified Files:
	   pkgsrc/databases/phpmyadmin: Makefile distinfo

   Log Message:
   Update "phpmyadmin" package to version 2.10.2.
   The new version fixes several bugs and addresses the security
   vulerability reported in PMASA-2007-4.
Pullup ticket 2138 - requested by taca
security update for p5-Net-DNS

- pkgsrc/net/p5-Net-DNS/Makefile			1.35
- pkgsrc/net/p5-Net-DNS/distinfo			1.18

   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jul  3 14:53:21 UTC 2007

   Modified Files:
	   pkgsrc/net/p5-Net-DNS: Makefile distinfo

   Log Message:
   Update p5-Net-DNS package to 0.60.

   Changes are more than 100 lines, but it fixes these security problem.

	   http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3377
	   http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3409
Pullup ticket 2139 - requested by martti
bugfix update for proftpd

- pkgsrc/net/proftpd/Makefile				1.42
- pkgsrc/net/proftpd/PLIST				1.13
- pkgsrc/net/proftpd/distinfo				1.24
- pkgsrc/net/proftpd/patches/patch-ab			1.7
- pkgsrc/net/proftpd/patches/patch-ac			1.9
- pkgsrc/net/proftpd/patches/patch-ad			removed
- pkgsrc/net/proftpd/patches/patch-ae			removed
- pkgsrc/net/proftpd/patches/patch-af			removed

   Module Name:	pkgsrc
   Committed By:	martti
   Date:		Fri Jul  6 11:04:41 UTC 2007

   Modified Files:
	   pkgsrc/net/proftpd: Makefile PLIST distinfo
	   pkgsrc/net/proftpd/patches: patch-ab patch-ac
   Removed Files:
	   pkgsrc/net/proftpd/patches: patch-ad patch-ae patch-af

   Log Message:
   Updated net/proftpd to 1.3.1rc3

   Hello, ProFTPD community. The ProFTPD Project team is pleased to announce
   that the third release candidate for ProFTPD 1.3.1 is now available
   for public consumption.

   The 1.3.1rc3 release includes a number of minor bugfixes, including
   segfaults when handling the NLST command, dealing assigning IPv6 addresses
   for the EPSV command, and better handling of Display files in chrooted
   sessions.

   Please read the included NEWS and ChangeLog files for the full details.
Pullup ticket 2142 - requested by joerg
remove PKG_TOOLS_PREFIX handling from bootstrap tools

Revisions pulled up:
- pkgsrc/pkgtools/mtree/Makefile				1.22
- pkgsrc/pkgtools/mtree/Makefile.common				1.3
- pkgsrc/pkgtools/pax/Makefile					1.15
- pkgsrc/pkgtools/pkg_install/Makefile				1.131
- pkgsrc/pkgtools/pkg_install/files/lib/version.h		1.65
- pkgsrc/pkgtools/tnftp/Makefile				1.3

   Module Name:		pkgsrc
   Committed By:	joerg
   Date:		Tue Jul 10 15:19:18 UTC 2007

   Modified Files:
   	pkgsrc/pkgtools/mtree: Makefile Makefile.common
   	pkgsrc/pkgtools/pax: Makefile
   	pkgsrc/pkgtools/pkg_install: Makefile
   	pkgsrc/pkgtools/pkg_install/files/lib: version.h
   	pkgsrc/pkgtools/tnftp: Makefile

   Log Message:
   Remove PKG_TOOLS_PREFIX handling for mtree, pax, pkg_install and
   tnftp. Modifying files and possibly removing them from the base system
   is doing more harm than use. Bump revision or version of each
   package.
#2142
Older tickets: #2131, 2133, 2134, 2135, 2138.
Pullup ticket 2144 - requested by lkundrak
security fix for libarchive

- pkgsrc/archivers/libarchive/Makefile			1.17
- pkgsrc/archivers/libarchive/distinfo			1.14
- pkgsrc/archivers/libarchive/patches/patch-ad		1.1

   Module Name:	pkgsrc
   Committed By:	lkundrak
   Date:		Fri Jul 13 09:26:32 UTC 2007

   Modified Files:
	   pkgsrc/archivers/libarchive: Makefile distinfo
   Added Files:
	   pkgsrc/archivers/libarchive/patches: patch-ad

   Log Message:
   Fix for FreeBSD-SA-07:05.libarchive CVE-2007-3641, CVE-2007-3644 and
   CVE-2007-3645.  PKGREVISION bump.
Pullup ticket 2151 - requested by joerg
security update for lighttpd

- pkgsrc/www/lighttpd/Makefile				1.15
- pkgsrc/www/lighttpd/distinfo				1.10

   Module Name:	pkgsrc
   Committed By:	joerg
   Date:		Wed Jul 25 10:26:05 UTC 2007

   Modified Files:
	   pkgsrc/www/lighttpd: Makefile distinfo

   Log Message:
   Update to lighttpd 1.4.16. This fixes a number of security issues:
   - various possible NULL pointer references
   - two cases were uninitialised memory is used or memory could be
   corrupted. This might be exploitable to execute arbitrary code.
   - possible mod_access by-pass by appending /
   - a local DOS by broken FastCGI handlers
Pullup ticket 2147 - requested by martti
latest update for clamav

- pkgsrc/mail/clamav/Makefile				1.77-1.79
- pkgsrc/mail/clamav/buildlink3.mk			1.14
- pkgsrc/mail/clamav/distinfo				1.45-1.47
- pkgsrc/mail/clamav/options.mk				1.3
- pkgsrc/mail/clamav/patches/patch-aa			1.16
- pkgsrc/mail/clamav/patches/patch-ah			1.10

   Module Name:	pkgsrc
   Committed By:	xtraeme
   Date:		Wed Jul 11 17:44:22 UTC 2007

   Modified Files:
	   pkgsrc/mail/clamav: Makefile distinfo options.mk

   Log Message:
   Update to 0.91:

   ClamAV 0.91 is the first release to enable the anti-phishing technology
   in default builds. This technology combines heuristics with special
   signatures and provides effective protection against phishing threats.
   Other important changes and add-ons in this version include:

   - unpacker for NSIS (Nullsoft Scriptable Install System) self-extracting
      archives
   - unpacker for ASPack 2.12
   - new implementation of the Aho-Corasick pattern matcher providing
      better detection for wildcard enabled signatures
   - support for nibble matching and floating offsets
   - improved handling of .mdb files (fixes long startup times)
   - extraction of PE files embedded into other executables
   - better handling of PE & UPX
   - removed dependency on libcurl (improves stability)
   - libclamav.dll available under Windows
   - IPv6 support in clamav-milter
   - many other improvements and bugfixes
---
   Module Name:	pkgsrc
   Committed By:	martti
   Date:		Tue Jul 17 06:54:31 UTC 2007

   Modified Files:
	   pkgsrc/mail/clamav: Makefile buildlink3.mk distinfo
	   pkgsrc/mail/clamav/patches: patch-ah

   Log Message:
   Updated mail/clamav to 0.91.1

        - libclamav/others.c: bump f-level
        - libclamav/unrar/unrarvm.c: fix another occurrence of bb#555, thanks to
          Ludwig Nussel <ludwig.nussel*suse.de>
        - sigtool/sigtool.c: increase MAX_DEL_LOOKAHEAD, requested by Sven
        - libclamav/scanner.c: don't search for embedded PEs in zip files larger
          than 1 MB (bb#573)
        - clamav-milter: Fix memory leak when load balancing
        - clamav-milter: Chroot handling no longer marked as experimental
        - libclamav/nsis: fix macro collision on AIX - bb#570
        - libclamav/phishcheck.c: fix (null) FOUND
        - libclamav: rename x86 macroes due to collisions on HPUX
        - libclamav: Fix warnings on HP-UX
---
   Module Name:	pkgsrc
   Committed By:	martti
   Date:		Wed Jul 18 06:57:59 UTC 2007

   Modified Files:
	   pkgsrc/mail/clamav: Makefile distinfo
   Added Files:
	   pkgsrc/mail/clamav/patches: patch-aa

   Log Message:
   Updated mail/clamav to 0.91.1nb1

   Fix for https://wwws.clamav.net/bugzilla/show_bug.cgi?id=580
Tickets #2144, 2147, 2151.
Pullup ticket 2146 - requested by tron
security update for mysql5

- pkgsrc/databases/mysql5-client/Makefile.common	1.25
- pkgsrc/databases/mysql5-client/PLIST			1.7
- pkgsrc/databases/mysql5-client/distinfo		1.19
- pkgsrc/databases/mysql5-client/patches/patch-ac	removed
- pkgsrc/databases/mysql5-client/patches/patch-ad	1.6
- pkgsrc/databases/mysql5-client/patches/patch-ae	1.9
- pkgsrc/databases/mysql5-client/patches/patch-bg	removed
- pkgsrc/databases/mysql5-server/PLIST			1.11
- pkgsrc/databases/mysql5-server/distinfo		1.16
- pkgsrc/databases/mysql5-server/patches/patch-aa	1.5
- pkgsrc/databases/mysql5-server/patches/patch-ac	removed
- pkgsrc/databases/mysql5-server/patches/patch-ah	1.6
- pkgsrc/databases/mysql5-server/patches/patch-ao	removed

   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Sun Jul 15 19:22:07 UTC 2007

   Modified Files:
	   pkgsrc/databases/mysql5-client: Makefile.common PLIST distinfo
	   pkgsrc/databases/mysql5-client/patches: patch-ad patch-ae
	   pkgsrc/databases/mysql5-server: PLIST distinfo
	   pkgsrc/databases/mysql5-server/patches: patch-aa patch-ah
   Removed Files:
	   pkgsrc/databases/mysql5-client/patches: patch-ac patch-bg
	   pkgsrc/databases/mysql5-server/patches: patch-ac patch-ao

   Log Message:
   Update "mysql5-client" and "mysql5-server" packages to version 5.0.45.
   Change since version 5.0.41:
   - Functionality added or changed:
     - A new status variable, Com_call_procedure, indicates the number of calls
       to stored procedures. (Bug#27994)
     - NDB Cluster: The server source tree now includes scripts to simplify
       building MySQL with SCI support. For more information about SCI
       interconnects and these build scripts, see Section 15.9.1,
       Configuring MySQL Cluster to use SCI Sockets. (Bug#25470)
     - Prior to this release, when DATE values were compared with DATETIME values
       the time portion of the DATETIME value was ignored. Now a DATE value is
       coerced to the DATETIME type by adding the time portion as 00:00:00. To
       mimic the old behavior use the CAST() function in the following way:
       SELECT date_field = CAST(NOW() as DATE);. (Bug#28929)
   - A large number of bugs including these security problems have been fixed:
     - A malformed password packet in the
       connection protocol could cause the server to crash. Thanks for Dormando
       for reporting this bug and providing details and a proof of concept.
       (Bug#28984)
     - CREATE TABLE LIKE did not require any privileges on the source table. Now
       it requires the SELECT privilege. (Bug#25578)
     - In addition, CREATE TABLE LIKE was not isolated from alteration by other
       connections, which resulted in various errors and incorrect binary log
       order when trying to execute concurrently a CREATE TABLE LIKE statement
       and either DDL statements on the source table or DML or DDL statements on
       the target table. (Bug#23667)