Update to 10.0.5

Changelog:
* Security fixes can be found here
MFSA 2012-40 Buffer overflow and use-after-free issues found using Address Sanitizer
MFSA 2012-39 NSS parsing errors with zero length items
MFSA 2012-38 Use-after-free while replacing/inserting a node in a document
MFSA 2012-37 Information disclosure though Windows file shares and shortcut files
MFSA 2012-36 Content Security Policy inline-script bypass
MFSA 2012-34 Miscellaneous memory safety hazards
* The MAPIResolveName API has been added to Simple MAPI
  interfaces which should improve interoperability (244222)
Update to 10.0.5

Sync with thunderbird10
Updated mail/thunderbird10 to 10.0.5
Updated mail/thunderbird10-l10n to 10.0.5
Ignore SunPRO -errwarn flags to prevent it from being recognized as a entry
point option for `ld'.
Fix building with DTrace support by adding a missing DTrace probe.
regen patches with mkpatches(1).
Make sure initial directories are created and have proper permissions.
Create own directories with proper permissions
Remove /usr/xpg4/bin from $PATH on Solaris, it causes weird issues in the
bmake test suite, and is unnecessary.  Instead, ensure we use the xpg4 id.

Tested on Solaris 9 and SmartOS.  Fixes PR#45444.
Fix build on SunOS when optimization of -O2 or greater is used.
Add readline support
Add support for the ucd-snmp/diskio module on SunOS
Fix ncurses/ncursesw build on SunOS and GCC>=4.6
Redo netbsd/ctype_base.h patch to not pollute the namespace as much with
sys/param.h.
Don't install the (binary only) SolarisRBAC cruft.
Typo, whitespace edits.
Use PKGNAME_NOREV to match the PLIST.
Unbound 1.4.17

Features:

* unbound-control forward_add, forward_remove, stub_add, stub_remove can modify stubs and forwards for running unbound they can also add and remove domain-insecure for the zone. This is to support reconfiguration of a DNSSEC validator on a computer that changes networks and has to enable new network config for the new location.
* new approach to NS fetches for DS lookup that works with cornercases, and is more robust and considers forwarders.
* contrib/validation-reporter follows rotated log file
* Applied patch for rrset-roundrobin and minimal-responses features (new options, enable in unbound.conf to use).
* ECDSA support (RFC 6605) by default. Use --disable-ecdsa for older openssl.
* Patch for access to full DNS packet data in unbound python module
* forward-first option. Tries without forward if a query fails. Also stub-first option that is similar.

Bug Fixes:

* Fix possible uninitialised variable in windows pipe implementation.
* Fix alignment problem in util/random on sparc64/freebsd.
* Fix for accept spinning reported by OpenBSD.
* Fix validation of nodata for DS query in NSEC zones
* [bugzilla: 444 ] Fix that setusercontext was called too late
* [bugzilla: 443 ] Fix --with-chroot-dir not honoured by configure.
* [bugzilla: 442 ] Fix that Makefile depends on pythonmod headers even using --without-pythonmodule.
* Fix to locate nameservers for DS lookup with NS fetches.
* Applied line-buffer patch from Augie Schwer to validation.reporter.sh.
* flush_infra cleans timeouted servers from the cache too.
* Fix from code review, if EINPROGRESS not defined chain if statement differently.
* [bugzilla: 434 ] Fix windows port to check registry for config file location for unbound-control.exe, and unbound-checkconf.exe.
* Fix to squelch 'network unreachable' errors from tcp connect in logs, high verbosity will show them.
* Fix prefetch and sticky NS ghost domain. It picks nameservers that 'would be valid in the future', and if this makes the NS timeout, it updates that NS by asking delegation from the parent again. If child NS has longer TTL, that TTL does not get refreshed from the lookup to the child nameserver.
* RT#2955 Fix for cygwin compilation.
* Slightly smaller critical region in one case in infra cache.
* Fix timeouts to keep track of query type, A, AAAA and other, if another has caused timeout blacklist, different type can still probe.
unit test fix for nomem_cnametopos.rpl race condition.
* fix memory leak in errorcase for DSA signatures.
* workaround for openssl 0.9.8 ecdsa sha2 and evp problem.
* fix for windows, rename() is not posix compliant on windows.
* iana portlist updated
Updated net/unbound to 1.4.17
validns 0.5

        Parallelize signature verification (-n option)