Add file to keep track of changes to the pkgsrc-2005Q1 branch.

XXX agc: please fill in the branch creation date
Pullup ticket 378 - requested by Matthias Scheler
security fix for mozilla-bin

Revisions pulled up:
- pkgsrc/www/mozilla-bin/Makefile	1.21
- pkgsrc/www/mozilla-bin/distinfo	1.13


    Module Name:	pkgsrc
    Committed By:	tron
    Date:		Tue Mar 22 09:57:55 UTC 2005

    Modified Files:
            pkgsrc/www/mozilla-bin: Makefile distinfo

    Log Message:
    Update "mozilla-bin" package to version 1.7.6. Besides various bug fixes
    the following security issuses were fixed:

    MFSA 2005-29 Internationalized Domain Name (IDN) homograph spoofing
    MFSA 2005-28 Unsafe /tmp/plugtmp directory exploitable to erase user's files
    MFSA 2005-27 Plugins can be used to load privileged content
    MFSA 2005-26 Cross-site scripting by dropping javascript: link on tab
    MFSA 2005-25 Image drag and drop executable spoofing
    MFSA 2005-24 HTTP auth prompt tab spoofing
    MFSA 2005-23 Download dialog source spoofing
    MFSA 2005-21 Overwrite arbitrary files downloading .lnk twice
    MFSA 2005-20 XSLT can include stylesheets from arbitrary hosts
    MFSA 2005-18 Memory overwrite in string library
    MFSA 2005-17 Install source spoofing with user:pass@host
    MFSA 2005-16 Spoofing download and security dialogs with overlapping windows
    MFSA 2005-15 Heap overflow possible in UTF8 to Unicode conversion
    MFSA 2005-14 SSL "secure site" indicator spoofing
    MFSA 2005-13 Window Injection Spoofing

    Support for Solaris SPARC and x86 is not available due to lack of a
    precompiled binary at this point of time.
378
Pullup ticket 379 - requested by Matthias Scheler
security fix for firefox-gtk2-bin

Revisions pulled up:
- pkgsrc/www/firefox-gtk2-bin/Makefile	1.7
- pkgsrc/www/firefox-gtk2-bin/distinfo	1.8


    Module Name:	pkgsrc
    Committed By:	tron
    Date:		Tue Mar 22 10:17:50 UTC 2005

    Modified Files:
            pkgsrc/www/firefox-gtk2-bin: Makefile distinfo

    Log Message:
    Update "firefox-gtk2-bin" package to version 1.0.1. Besides various bug
    fixes the following security issuses were fixed:

    MFSA 2005-29 Internationalized Domain Name (IDN) homograph spoofing
    MFSA 2005-28 Unsafe /tmp/plugtmp directory exploitable to erase user's files
    MFSA 2005-27 Plugins can be used to load privileged content
    MFSA 2005-26 Cross-site scripting by dropping javascript: link on tab
    MFSA 2005-25 Image drag and drop executable spoofing
    MFSA 2005-24 HTTP auth prompt tab spoofing
    MFSA 2005-23 Download dialog source spoofing
    MFSA 2005-22 Download dialog spoofing using Content-Disposition header
    MFSA 2005-21 Overwrite arbitrary files downloading .lnk twice
    MFSA 2005-20 XSLT can include stylesheets from arbitrary hosts
    MFSA 2005-19 Autocomplete data leak
    MFSA 2005-18 Memory overwrite in string library
    MFSA 2005-17 Install source spoofing with user:pass@host
    MFSA 2005-16 Spoofing download and security dialogs with overlapping windows
    MFSA 2005-15 Heap overflow possible in UTF8 to Unicode conversion
    MFSA 2005-14 SSL "secure site" indicator spoofing
    MFSA 2005-13 Window Injection Spoofing
379
Fill in the time of the pkgsrc-2005Q1 branch creation.
Pullup ticket 382 - requested by Julio M. Merino Vidal
threading fix for libopendaap

Revisions pulled up:
- pkgsrc/audio/libopendaap/Makefile		1.4
- pkgsrc/audio/libopendaap/distinfo		1.8
- pkgsrc/audio/libopendaap/patches/patch-aa	1.3

   Module Name:		pkgsrc
   Committed By:	jmmv
   Date:		Wed Mar 23 10:52:54 UTC 2005

   Modified Files:
   	pkgsrc/audio/libopendaap: Makefile distinfo
   Added Files:
   	pkgsrc/audio/libopendaap/patches: patch-aa

   Log Message:
   Fix a threading problem (mutexattr used after it's destroyed).
   Patch was in PR pkg/29644 by Antoine Reilles, but I overlooked it.
   Bump PKGREVISION to 1.
#382
Pullup ticket 383 - requested by Juan Romero Pardines
clamsmtp update

Revisions pulled up:
- pkgsrc/mail/clamsmtp/Makefile		1.17
- pkgsrc/mail/clamsmtp/distinfo		1.14

   Module Name:    pkgsrc
   Committed By:   xtraeme
   Date:           Thu Mar 24 08:08:56 UTC 2005

   Modified Files:
           pkgsrc/mail/clamsmtp: Makefile distinfo

   Log Message:
   Update to 1.4

   Changes:

     - Documentation fixes [Sean Franklin]
     - Don't leak file descriptors when clamsmtpd can't connect to outgoing
           SMTP server [Chris Mason]
     - Now accepts special format arguments on 'Header' line
           [Olivier Beyssac]
#383
Pullup ticket 384 - requested by Matthias Scheler
security fix for firefox-gtk2-bin

Revisions pulled up:
- pkgsrc/www/firefox-gtk2-bin/Makefile	1.8
- pkgsrc/www/firefox-gtk2-bin/distinfo	1.9


    Module Name:	pkgsrc
    Committed By:	tron
    Date:		Thu Mar 24 08:53:25 UTC 2005

    Modified Files:
            pkgsrc/www/firefox-gtk2-bin: Makefile distinfo

    Log Message:
    Update "firefox-gtk2-bin" package to version 1.0.2. The new version fixes
    the following security issues:

    MFSA 2005-32 Drag and drop loading of privileged XUL
    MFSA 2005-31 Arbitrary code execution from Firefox sidebar panel
    MFSA 2005-30 GIF heap overflow parsing Netscape extension 2
384
Pullup ticket 387 - requested by Chris Gilbert
security fix for sylpheed

Revisions pulled up:
- pkgsrc/mail/sylpheed/Makefile	1.73
- pkgsrc/mail/sylpheed/distinfo	1.39


Module Name:    pkgsrc
Committed By:   chris
Date:           Fri Mar 25 02:10:52 UTC 2005

Modified Files:
        pkgsrc/mail/sylpheed: Makefile distinfo

Log Message:
Update sylpheed to 1.0.4 for another security fix.  Changes are:

    * A buffer overflow which occurred when displaying a message with
      attachments which have MIME-encoded filenames was fixed.
    * A possible crash on re-edit of messages was fixed.
387
Pullup ticket 388 - requested by Min Sik Kim
portability fix for arj

Revisions pulled up:
- pkgsrc/archivers/arj/distinfo		1.9
- pkgsrc/archivers/arj/patches/patch-aa	1.6
- pkgsrc/archivers/arj/patches/patch-ab	1.6
- pkgsrc/archivers/arj/patches/patch-ac	1.3
- pkgsrc/archivers/arj/patches/patch-ad	1.1
- pkgsrc/archivers/arj/patches/patch-ae	1.1


    Module Name:  pkgsrc
    Committed By: minskim
    Date:         Tue Mar 22 16:24:13 UTC 2005

    Modified Files:
          pkgsrc/archivers/arj: distinfo
          pkgsrc/archivers/arj/patches: patch-aa patch-ab patch-ac
    Added Files:
          pkgsrc/archivers/arj/patches: patch-ad patch-ae

    Log Message:
    Make this package build on Darwin.
      - Include mount.h to use statfs.
      - Use chown(2) if lchown(2) is unavailable.  (Can be problematic,
        but no easy solution.)
      - Pass -bundle to gcc to build a Mach-o bundle format file.
388
Pullup ticket 385 - requested by Shin'ichiro TAYA
security fix for firefox

Revisions pulled up:
- pkgsrc/www/firefox/Makefile-firefox.common	1.12
- pkgsrc/www/firefox/buildlink3.mk		1.3-1.4
- pkgsrc/www/firefox/distinfo			1.26
- pkgsrc/www/firefox-gtk1/buildlink3.mk		1.2-1.3

   Module Name:    pkgsrc
   Committed By:   taya
   Date:           Thu Mar 24 15:36:53 UTC 2005

   Modified Files:
           pkgsrc/www/firefox: Makefile-firefox.common buildlink3.mk distinfo
           pkgsrc/www/firefox-gtk1: buildlink3.mk

   Log Message:
   Update firefox & firefox-gtk1 to 1.0.2

   Firefox 1.0.2 is a security and stability update.
   Followings bugs are fixed in this release.

   MFSA 2005-32  Drag and drop loading of privileged XUL
   MFSA 2005-31 Arbitrary code execution from Firefox sidebar panel
   MFSA 2005-30 GIF heap overflow parsing Netscape extension 2
---
   Module Name:    pkgsrc
   Committed By:   salo
   Date:           Fri Mar 25 08:23:46 UTC 2005

   Modified Files:
           pkgsrc/www/firefox: buildlink3.mk
           pkgsrc/www/firefox-gtk1: buildlink3.mk

   Log Message:
   Bump BUILDLINK_RECOMMENDED, not BUIDLINK_DEPENDS for security fixes.
#385
Pullup ticket 389 - requested by Chris Gilbert
security fix for sylpheed-claws

Revisions pulled up:
- pkgsrc/mail/sylpheed-claws/Makefile.common	1.12
- pkgsrc/mail/sylpheed-claws/distinfo		1.21

   Module Name:    pkgsrc
   Committed By:   chris
   Date:           Fri Mar 25 11:52:30 UTC 2005

   Modified Files:
           pkgsrc/mail/sylpheed-claws: Makefile.common distinfo

   Log Message:
   Update sylpheed-claws (and plugins) to 1.0.4.  This includes the security
   fixes from sylpheed 1.0.4.

   Other changes:
   new Sylpheed-Claws logo by Jesper Schultz

   tools/acroread2sylpheed.pl
    script to send pdfs as attachments from Adobe Reader 7
    see tools/README for details

   Bug fixes, including the following:
    neglect Reply-To header if empty
    don't load a plugin twice
    don't leave hook registered when spamassassin plugin init failed
#389