Add a file to record changes on the pkgsrc-2004Q3 branch
Pullup ticket 114, requested by Matthias Scheler.

Security fix for apache

	Modified Files:
		pkgsrc/www/apache: Makefile distinfo
	Added Files:
		pkgsrc/www/apache/patches: patch-ap

	Log Message:
	Apply fix for security vulnerability in proxy module reported in
	CAN-2004-0492. Bump package revision package of this.
Pullup ticket 115, requested by Lubomir Sedlacik.

	Modified Files:
		pkgsrc/net/lftp: Makefile distinfo

	Log Message:
	Updated to version 3.0.9.

	Changes:
	- fixed a hang up when filtering output via an external command
	  (the bug appeared in 3.0.8).
	- don't use ftp:port-ipv4 in FXP mode.
Pullup ticket 116 - requested by Eric Gillespie
security fix for subversion

	Modified Files:
		pkgsrc/devel/subversion: Makefile.version distinfo

	Log Message:
	Version 1.0.8
	(22 September 2004, from /branches/1.0.8)
	http://svn.collab.net/repos/svn/tags/1.0.8

	 User-visible-changes:
	 * fixed: mod_authz_svn path and log-message metadata leaks.
		  See CAN-2004-0749, and descriptive advisory at
		  http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt
Pullup ticket 121 - requested by Quentin Garnier
security fix for sox

	Modified Files:
		pkgsrc/audio/sox: Makefile distinfo
	Added Files:
		pkgsrc/audio/sox/patches: patch-aa
	Removed Files:
		pkgsrc/audio/sox/patches: patch-ab

	Log Message:
	Update to version 12.17.6.  Note that this version fixes some
	buffer overflows in the WAV parser that could lead to arbitrary
	code execution.

	sox-12.17.6
	-----------
	  o Changed comment code to always use copies of strings to
	    fix bug in WAV handlering freeing argv[] memory.
	  o Use calloc() to create ft_t structures so that all
	    memory is initialized before being referenced.
	  o Fixed VOC EOF bug were it thought there was an extra
	    block when there wasn't.
	  o Restructured directory layout so that source code is in
	    a seperate directory.
	  o Modified SoX to accept multiple input files.  Concatenates
	    files together in this case.
	  o Removed map effect so that loops and instr could be removed
	    from effects structures.  This makes effects engine stand
	    alone from the rest of the sox package.
	  o Benedikt Zeyen found a bug in synth effect when generating
	    brown noise that could cause clipping.
	  o David Leverton sent another patch to prevent crashes on
	    amd64's when resampling.
	  o Fixed a bug were MP3 files with large ID3v2 tags could
	    cause SoX to stick in a loop forever.  Now, it will
	    abort on IDv3 tags larger then 100k.  Could still be
	    improved to handle any size.
	  o Changed volume option (-v) so that it tracks the file
	    it was specified.  This means that when specified with
	    the input file, it changes volume before effects engine
	    and when specified with output file, its done after effects
	    engine.
	  o Added crossfade_cat.sh script that will concatenate to
	    audio files and do a crossfade between them.
	  o Fixed bug in fade effect were it was impossible to do a
	    fadeout starting from the beginning of the audio file.
	  o Removed rounding error when changing volume of audio with
	    "-v" option.  This error caused doing a "-v -1.0" twice
	    to not result in the original file.
	  o Fixed a possible overflow in lots of effects were MIN
	    value was treated as -MAX instead of -MAX-1.
	  o Modifed sox so its OK for effects to not process any
	    input or output bytes as long as they return ST_EOF.
	  o When effects output data and reported ST_EOF at the
	    same time, that buffer was discarded as well as
	    data from any chained effect.
	  o Added patch from Eric Benson that attempts to do a seek()
	    if the first effect is trim.  This greatly speeds up
	    processing large files.
	  o Daniel Pouzzner implemented a multi-band compander (using
	    the butterworth filters to split the audio into bands).
	  o Donnie Smith updated the silence effect so that its possible
	    to remove silence from the middle of a sound file by
	    using a negative value for stop_periods.
	  o Changed float routines to only work with normalized values
	    from -1:1.
	  o Modifed .au handler to be able to read and write 32-bit
	    and 64-bit float data.  Only tested reading so far.
	  o WAV with GSM data now always pads data to even number of bytes.
	  o Added support for writing 32-bit audio to AIFF.

	sox-12.17.5
	-----------
	  o Thomas Klausner sent in patches to compile audio drivers under
	    NetBSD.
	  o Rahul Powar pointed out a memory leak in the WAV file handler.
	    It wasn't calling the correct close() function when closing
	    input files.
	  o Modified play.1 man page to not use multiple name lines.  This
	    appears to confuse some conversion programs.  Updated sox.1
	    man page for typo in reverb option.
	  o Andrew Church fixed problem with header of stereo 8SVX files.
	  o Jimen Ching added support to scan over garbage data at the
	    beginning of MP3 files to find valid frames.  This is useful
	    to play WAV and AIFF files that have MP3 data in them until
	    those handlers support it directly.  To play those, force
	    sox to use the mp3 handler with the "-t mp3" option.
	  o Added patch from Ulf Harnhammar to wav handler to prevent
	    buffer overflows.
	  o Added patch from Redhat to allow resample to work on certain 64-bit
	    machines (Sam Varshavchik)
	  o Tony Seebregts added a file handler for headerless Dialogic/OKI ADPCM
	    files (VOX files).
	  o Jan Paul Schmidt added a repeat effect to do loops the brute force way.
	    This is also good for file format that don't support loops as well.
	  o Fix for OSS driver in rate tolerance calcs that were off because
	    of type conversion problems.  Guenter Geiger.
	  o Allow reading sphere files with headers greater then 256 bytes.  Jimen
	    Ching.
	  o Fix for vorbis were comments are displayed in KEY=value format always.
	    Stop printing some info to stdout in case output is a pipe. Guenter
	    Geiger.
	  o J Robert Ray submitted fix for AIFF handler to ignore lowercase
	    chunks that are unknown.
	  o Bugfix for 8-bit voc files.  Jimen Ching
	  o General warning cleanups (cbagwell)
	  o Memory leaks in reading WAV files (Ufuk Kayserilioglu)
	  o Rearrange link order of ogg vorbis libraries so that they
	    can be compiled as static. (Christian Weisgerbr)
Pullup ticket 122 - requested by Matthias Scheler
security fix for tiff

	Modified Files:
		pkgsrc/graphics/tiff: Makefile

	Log Message:
	Derive "PKGNAME" from "DISTNAME" instead of defining it manually.

	Modified Files:
		pkgsrc/graphics/tiff: Makefile

	Log Message:
	Add mirror on "ftp.fu-berlin.de" to master site list.

	Modified Files:
		pkgsrc/graphics/tiff: Makefile distinfo
		pkgsrc/graphics/tiff/patches: patch-ag
	Added Files:
		pkgsrc/graphics/tiff/patches: patch-ai patch-aj patch-ak patch-al
		    patch-am patch-an patch-ao patch-ap patch-aq patch-ar patch-as
		    patch-at patch-au patch-av patch-aw patch-ax

	Log Message:
	Add various bug fixes taken from Debian's unstable distribution which
	include fixes for CESA-2004-006. Bump package revision.
Pullup ticket 118 - requested by Adrian Portelli
build and security fixes for freeradius

Based on patches provided by Adrian.
Pullup ticket 120 - requested by Todd Vierling
security fix for gzip

	Modified Files:
		pkgsrc/mk: bsd.pkg.mk

	Log Message:
	Automatic inclusion of gzip-base needs a version number in the BUILD_DEPENDS.

	Modified Files:
		pkgsrc/mk: bsd.pkg.mk

	Log Message:
	Bump gzip-base to 1.2.4b for security fix.

	Modified Files:
		pkgsrc/archivers/gzip: Makefile
		pkgsrc/archivers/gzip-base: Makefile distinfo
	Added Files:
		pkgsrc/archivers/gzip-base/patches: patch-ab

	Log Message:
	Update gzip to 1.2.4b, fixing a filename buffer overflow.
Pullup ticket 120 - requested by Todd Vierling
security fix for gzip

	Modified Files:
		pkgsrc/mk: bsd.pkg.mk

	Log Message:
	Automatic inclusion of gzip-base needs a version number in the BUILD_DEPENDS.

	Modified Files:
		pkgsrc/mk: bsd.pkg.mk

	Log Message:
	Bump gzip-base to 1.2.4b for security fix.

	Modified Files:
		pkgsrc/archivers/gzip: Makefile
		pkgsrc/archivers/gzip-base: Makefile distinfo
	Added Files:
		pkgsrc/archivers/gzip-base/patches: patch-ab

	Log Message:
	Update gzip to 1.2.4b, fixing a filename buffer overflow.
Pullup ticket 120 - requested by Todd Vierling
security fix for gzip

	Modified Files:
		pkgsrc/mk: bsd.pkg.mk

	Log Message:
	Automatic inclusion of gzip-base needs a version number in the BUILD_DEPENDS.

	Modified Files:
		pkgsrc/mk: bsd.pkg.mk

	Log Message:
	Bump gzip-base to 1.2.4b for security fix.

	Modified Files:
		pkgsrc/archivers/gzip: Makefile
		pkgsrc/archivers/gzip-base: Makefile distinfo
	Added Files:
		pkgsrc/archivers/gzip-base/patches: patch-ab

	Log Message:
	Update gzip to 1.2.4b, fixing a filename buffer overflow.
sync with HEAD
sync [all but bsd.pkg.mk] with HEAD