Pullup ticket #3702 - requested by taca
security/openssl: security update

Revisions pulled up:
- security/openssl/Makefile                                     1.163
- security/openssl/distinfo                                     1.86
- security/openssl/patches/patch-asn_mime.c                     deleted

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Mar 13 03:11:32 UTC 2012

   Modified Files:
   	pkgsrc/security/openssl: Makefile distinfo
   Removed Files:
   	pkgsrc/security/openssl/patches: patch-asn_mime.c

   Log Message:
   Update openssl pacakge to 0.9.8u.

    Changes between 0.9.8t and 0.9.8u [12 Mar 2012]

     *) Fix MMA (Bleichenbacher's attack on PKCS #1 v1.5 RSA padding) weakness
        in CMS and PKCS7 code. When RSA decryption fails use a random key for
        content decryption and always return the same error. Note: this attack
        needs on average 2^20 messages so it only affects automated senders. The
        old behaviour can be reenabled in the CMS code by setting the
        CMS_DEBUG_DECRYPT flag: this is useful for debugging and testing where
        an MMA defence is not necessary.
        Thanks to Ivan Nestlerode <inestlerode@us.ibm.com> for discovering
        this issue. (CVE-2012-0884)
        [Steve Henson]

     *) Fix CVE-2011-4619: make sure we really are receiving a
        client hello before rejecting multiple SGC restarts. Thanks to
        Ivan Nestlerode <inestlerode@us.ibm.com> for discovering this bug.
        [Steve Henson]
Pullup ticket #3703 - requested by taca
www/contao29: security patch

Revisions pulled up:
- www/contao29/Makefile                                         1.20
- www/contao29/distinfo                                         1.12
- www/contao29/patches/patch-system_initialize.php              1.1

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Mar 13 03:16:30 UTC 2012

   Modified Files:
   	pkgsrc/www/contao29: Makefile distinfo
   Added Files:
   	pkgsrc/www/contao29/patches: patch-system_initialize.php

   Log Message:
   Add a little experimental fix to prevent CSRF.

   Bump PKGREVISION.
Pullup tickets #3702 and 3703.
Update libmemcached to 1.0.4.

pkgsrc changes:
* Fix build on SunOS
* Add proper libtool support

Upstream changes:

1.0.4
* Fix for memcached_dump().
* Additional testing for memcached_stat_execute().

1.0.3
* Increased size of sort buffer used during Ketama.
* Added support for new behavior to handle dead servers.
* Overall haul of UDP IO.
* Fixed C compile issue with memcached_exist()
* Numerous bug fixes.
* Clang support for OSX.
* All commands now using vector send support.

1.0.2
* Dropped libmemcached/memcached_util.h (undocumented header file)
* Added memcached_touch() and memcached_touch_by_key()
* UDP support restructured to toggle on a complete memcached_st structure.
Before using ABI, make sure include bsd.prefs.mk and check whether it is defined.
Import ruby18-kgio-2.7.2 as devel/ruby-kgio.

kgio provides non-blocking I/O methods for Ruby without raising exceptions on
EAGAIN and EINPROGRESS. It is intended for use with the Unicorn and Rainbows!
Rack servers, but may be used by other applications.
Import ruby18-yajl-ruby-1.1.0 as textproc/ruby-yajl.

This gem is a C binding to the excellent YAJL JSON parsing and generation
library.
Import ruby18-raindrops-0.8.0 as www/ruby-raindrops.

Raindrops is a real-time stats toolkit to show statistics for Rack HTTP
servers. It is designed for preforking servers such as Rainbows! and
Unicorn, but should support any Rack HTTP server under Ruby 1.9, 1.8
and Rubinius on platforms supporting POSIX shared memory. It may also
be used as a generic scoreboard for sharing atomic counters across
multiple processes.
Remove a quirky -march=i486 workaround.
Import ruby18-unicorn-4.2.0 as www/ruby-unicorn.

Unicorn is an HTTP server for Rack applications designed to only serve
fast clients on low-latency, high-bandwidth connections and take
advantage of features in Unix/Unix-like kernels.  Slow clients should
only be served by placing a reverse proxy capable of fully buffering
both the the request and response in between Unicorn and slow clients.
Update erlang to R14B04

This release is mainly a stabilization of the R14B03 release (but as
usual there are some new functionality as well).

One pkgsrc change: add flex to USE_TOOLS, so that megaco_flex_scanner_drv
gets built on all SunOS flavors.

Read full announcement at
http://www.erlang.org/download/otp_src_R14B04.readme
Initial 2011Q4 patch set.

Most of the patches included have been already committed upstream
to pkgsrc (to be included in the vanilla 2012Q1 release).