Add the CHANGES-pkgsrc-2008Q1 file to note changes to the pkgsrc-2008Q1
branch.
Pullup ticket 2324 - requested by joerg
fix stray 1 preventing package do-install

Revisions pulled up:
- pkgsrc/benchmarks/forkbomb/Makefile	1.5

   Module Name: pkgsrc
   Committed By:        joerg
   Date:                Mon Apr  7 17:09:03 UTC 2008

   Modified Files:
   	pkgsrc/benchmarks/forkbomb: Makefile

   Log Message:
   Fix stray 1.
Tickets #2324
Pullup ticket 2325 - requested by taca
fix build when hpn-patch enabled

Revisions pulled up:
- pkgsrc/security/openssh/distinfo		1.68
- pkgsrc/security/openssh/patches/patch-ao	1.11

   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Apr  8 06:36:47 UTC 2008

   Modified Files:
   	pkgsrc/security/openssh: distinfo
   	pkgsrc/security/openssh/patches: patch-ao

   Log Message:
   Fix build problem with hpn-patch option enabled.
ticket #2325
Pullup ticket 2325 - requested by tron
update to version fixes security vulnerability CVE-2007-6019

Revisions pulled up:
- pkgsrc/www/firefox-bin-flash/Makefile.common	1.22
- pkgsrc/www/firefox-bin-flash/distinfo		1.11

   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Wed Apr  9 08:39:24 UTC 2008

   Modified Files:
   	pkgsrc/www/firefox-bin-flash: Makefile.common distinfo

   Log Message:
   Update "firefox-bin-flash" package to 9.0.124. The new version fixes
   the security vulnerability report in CVE-2007-6019.
ticket #2327
Pullup ticket 2330 - requested by tron
update fixes security vulnerability CVE-2007-6019

Revisions pulled up:
- pkgsrc/multimedia/ns-flash/Makefile	1.29
- pkgsrc/multimedia/ns-flash/distinfo	1.15

   Module Name:	pkgsrc
   Committed By:	ghen
   Date:		Wed Apr  9 19:13:56 UTC 2008

   Modified Files:
   	pkgsrc/multimedia/ns-flash: Makefile distinfo

   Log Message:
   Update to Adobe Flashplayer version 9.0.124.  Fixes CVE-2007-6019.
ticket #2330
Pullup ticket 2326 - requested by joerg
fixed PLIST and version bump

Revisions pulled up:
- pkgsrc/mail/claws-mail-notification/Makefile	1.7
- pkgsrc/mail/claws-mail-notification/PLIST	1.3

   Module Name:	pkgsrc
   Committed By:	joerg
   Date:		Mon Apr  7 16:50:04 UTC 2008

   Modified Files:
   	pkgsrc/mail/claws-mail-notification: Makefile PLIST

   Log Message:
   Sort and fix PLIST. Bump revision.
ticket #2326
Pullup ticket 2331 - requested by wiz
security update for m4

Revisions pulled up:
- pkgsrc/devel/m4/Makefile            1.53
- pkgsrc/devel/m4/PLIST               1.10
- pkgsrc/devel/m4/distinfo            1.21
- pkgsrc/devel/m4/patches/patch-aa    removed
- pkgsrc/devel/m4/patches/patch-ab    removed
- pkgsrc/devel/m4/patches/patch-ac    removed

   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Fri Apr 11 06:08:43 UTC 2008

   Modified Files:
   	pkgsrc/devel/m4: Makefile PLIST distinfo
   Removed Files:
   	pkgsrc/devel/m4/patches: patch-aa patch-ab patch-ac

   Log Message:
   Update to 1.4.11:

   * Noteworthy changes in Version 1.4.11 (2008-04-02) [stable]
     Released by Eric Blake, based on git version 1.4.10a

   ** Security fixes for the -F option, for bugs present since -F was
      introduced in 1.3: Avoid core dump with 'm4 -F file -t undefined', and
      avoid arbitrary code execution with certain file names.

   ** Fix regression introduced in 1.4.9b in the `divert' builtin when more
      than 512 kibibytes are saved in diversions on platforms like NetBSD
      or darwin where fopen(name,"a+") seeks to the end of the file.

   ** The output of the `maketemp' and `mkstemp' builtins is now quoted if a
      file was created.  This is a minor security fix, because it was possible
      (although rather unlikely) that an unquoted string could match an
      existing macro name, such that use of the `mkstemp' output would trigger
      inadvertent macro expansion and operate on the wrong file name.

   ** Enhance the `defn' builtin to support concatenation of multiple text
      arguments, as required by POSIX.  However, at this time, it is not
      possible to concatenate a builtin macro with anything else; a warning is
      now issued if this is attempted, although a future version of M4 may
      lift this restriction to match other implementations.

   ** Enhance the `format' builtin to parse all C99 floating point numbers,
      even on platforms where strtod(3) is buggy, although the replacement
      function does have the known issue of rounding errors when parsing
      some decimal floating point values.  This fixes testsuite failures
      introduced in 1.4.9b.

   ** Enhance the `index' builtin to guarantee linear behavior, in spite of
      the surprisingly large number of systems with a brain-dead quadratic
      strstr(3).

   ** A number of portability improvements inherited from gnulib.
ticket #2331
Pullup ticket 2332 - requested by joerg
security fix for mplayer

- pkgsrc/multimedia/mplayer-share/patches/patch-ak	1.5
- pkgsrc/multimedia/mplayer-share/distinfo		1.49
- pkgsrc/multimedia/mplayer/Makefile			1.55

   Module Name:	pkgsrc
   Committed By:	joerg
   Date:		Mon Apr 14 06:55:48 UTC 2008

   Modified Files:
	   pkgsrc/multimedia/mplayer: Makefile
	   pkgsrc/multimedia/mplayer-share: distinfo
   Added Files:
	   pkgsrc/multimedia/mplayer-share/patches: patch-ak

   Log Message:
   Add fix for a crash / stack corruption with ASS. Bump revision.
Pullup ticket 2333 - requested by martti
latest update for clamav

- pkgsrc/mail/clamav/Makefile				1.83
- pkgsrc/mail/clamav/distinfo				1.51
- pkgsrc/mail/clamav/patches/patch-ad			1.14
- pkgsrc/mail/clamav/patches/patch-af			1.5
- pkgsrc/mail/clamav/patches/patch-ah			1.14
- pkgsrc/mail/clamav/patches/patch-ba			1.2

   Module Name:	pkgsrc
   Committed By:	martti
   Date:		Tue Apr 15 07:56:06 UTC 2008

   Modified Files:
	   pkgsrc/mail/clamav: Makefile distinfo
	   pkgsrc/mail/clamav/patches: patch-ad patch-af patch-ah patch-ba

   Log Message:
   Updated mail/clamav to 0.93

   http://secunia.com/secunia_research/2008-11/advisory/
   http://www.frsirt.com/english/advisories/2008/1218

   Changes since 0.92.1

   This release introduces many new features and engine enhancements, please
   see the notes below for the list of major changes. The most visible one
   is the new logic in scan limits which affects some command line and config
   options of clamscan and clamd. Please see clamscan(1) and clamd.conf(5)
   and the example config file for more information on the new options.

   Most important changes include:

      * libclamav:
        - New logic in scan limits: provides much more efficient protection against
          DoS attacks but also results in different command line and config options
          to clamscan and clamd (see below)
        - New/improved modules: unzip, SIS, cabinet, CHM, SZDD, text normalisator,
          entity converter
        - Improved filetype detection; filetype definitions can be remotely updated
        - Support for .cld containers (which replace .inc directories)
        - Improved pattern matcher and signature formats
        - More efficient scanning of HTML files
        - Many other improvements

      * clamd:
        - NEW CONFIG FILE OPTIONS: MaxScanSize, MaxFileSize, MaxRecursion, MaxFiles
        - ** THE FOLLOWING OPTIONS ARE NO LONGER SUPPORTED **: MailMaxRecursion,
          ArchiveMaxFileSize, ArchiveMaxRecursion, ArchiveMaxFiles,
          ArchiveMaxCompressionRatio, ArchiveBlockMax

      * clamscan:
        - NEW CMDLINE OPTIONS: --max-filesize, --max-scansize
        - REMOVED OPTIONS: --block-max, --max-space, --max-ratio

      * freshclam:
        - NEW CONFIG OPTION CompressLocalDatabase
        - NEW CMDLINE SWITCH --no-warnings
        - main.inc and daily.inc directories are no longer used by ClamAV; please
          remove them manually from your database directory
Pullup ticket 2335 - requested by wiz
security update for png

- pkgsrc/graphics/png/Makefile				1.102, 1.103
- pkgsrc/graphics/png/distinfo				1.46, 1.47

   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Sun Apr 13 20:25:15 UTC 2008

   Modified Files:
	   pkgsrc/graphics/png: Makefile distinfo

   Log Message:
   Update to 1.2.26:

   version 1.2.26beta01 [February 21, 2008]
     Added missing "(" in pngmem.c.  Bug introduced in libpng-1.2.2/1.0.13

   version 1.2.26beta02 [March 12, 2008]
     Refined error message returned from deflateInit2 in pngwutil.c
     Check IHDR length in png_push_read_chunk() before saving it.

   version 1.2.26beta03 [March 16, 2008]
     Revised contrib/gregbook to handle premature end-of-file and file
       read errors correctly.

   version 1.2.26beta04 [March 18, 2008]
     Free png_ptr->big_row_buf and png_ptr->prev_row before allocating
       new copies in png_read_start_row().  Bug introduced in libpng-1.2.22.

   version 1.2.26beta05 [March 19, 2008]
     Removed extra png_free() added in libpng-1.2.26beta04.

   version 1.2.26beta06 [March 19, 2008]
     Avoid reallocating big_row_buf and prev_row when the size does not increase.

   version 1.2.26rc01 [April 2, 2008]
     Ifdef out some code that is unused when interlacing is not supported.
---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Tue Apr 15 13:26:14 UTC 2008

   Modified Files:
	   pkgsrc/graphics/png: Makefile distinfo

   Log Message:
   Update to 1.2.27beta3, fixing a possible application security problem.
   See http://libpng.sourceforge.net/Advisory-1.2.26.txt for details.

   Changes since 1.2.26:
   version 1.2.27beta01 [April 12, 2008]
     Fixed bug (introduced in libpng-1.0.5h) with handling zero-length
       unknown chunks.
     Added more information about png_set_keep_unknown_chunks() to the
       documetation.
     Reject tRNS chunk with out-of-range samples instead of masking off
       the invalid high bits as done in since libpng-1.2.19beta5.

   version 1.2.27beta02 [April 13, 2008]
     Revised documentation about unknown chunk and user chunk handling.
     Keep tRNS chunk with out-of-range samples and issue a png_warning().

   version 1.2.27beta03 [April 14, 2008]
     Added check for NULL ptr in TURBOC version of png_free_default().
     Removed several unnecessary checks for NULL before calling png_free().
     Revised png_set_tRNS() so that calling it twice removes and invalidates
       the previous call.
     Revised pngtest to check for out-of-range tRNS samples.
Tickets #2332, 2333, 2335.
pullup ticket 2329 - requested by tron@
fix package build on macosx/ppc machines

Revisions pulled up:
- pkgsrc/multimedia/x264-devel/Makefile		1.12
- pkgsrc/multimedia/x264-devel/distinfo		1.10
- pkgsrc/multimedia/x264-devel/patches/patch-aa	1.5
- pkgsrc/multimedia/x264-devel/patches/patch-ab	1.7

   Module Name:	pkgsrc
   Committed By:	tron
   Date:		Wed Apr  9 18:33:37 UTC 2008

   Modified Files:
   	pkgsrc/multimedia/x264-devel: Makefile distinfo
   	pkgsrc/multimedia/x264-devel/patches: patch-aa patch-ab

   Log Message:
   Try harder to disable AltiVec support under Mac OS X PPC (because it cannot
   be used in a shared library). Applications linked against "libx264" can now
   actually be started without crashing immediately because the symbol
   "_x264_deblock_h_luma_altivec" couldn't be found.

   Bump package revision because of this fix.
ticket #2329
pullup ticket 2338 - requested by joerg
LP64 platform fixes

Revisions pulled up:
- pkgsrc/textproc/urlview/Makefile		1.17
- pkgsrc/textproc/urlview/distinfo		1.5
- pkgsrc/textproc/urlview/patches/patch-ab	1.1

   Module Name:	pkgsrc
   Committed By:	joerg
   Date:		Thu Apr 17 08:42:39 UTC 2008

   Modified Files:
   	pkgsrc/textproc/urlview: Makefile distinfo
   Added Files:
   	pkgsrc/textproc/urlview/patches: patch-ab

   Log Message:
   Fix urlview for LP64 platforms. Bump revision.