+ dante-1.4.0, gupnp-av-0.12.4, imp-6.1.6, jabberd2-2.3.0,
  rdesktop-1.8.1, reposurgeon-2.42, samba-4.0.12, vala-0.22.1,
  veusz-1.19, wine-1.6.1 [wait until NetBSD gains OSS 4 [kern/46611]
  or bring OSS 3 support back], worker-3.2.0.
Update drupal6 to 6.29 (Drupal 6.29).

Drupal 6.29, 2013-11-20
----------------------
- Fixed security issues (multiple vulnerabilities), see SA-CORE-2013-003.
Update drupal7 to 7.24 (Drupal 7.24).

Drupal 7.24, 2013-11-20
----------------------
- Fixed security issues (multiple vulnerabilities), see SA-CORE-2013-003.
Note update of drupal packages:

	www/drupal6	6.29
	www/drupal7	7.24
Update to 4.10.2

Changelog:
NSPR 4.10.2 has the following bug fixes:
* Bug 770534: Possible pointer overflow in PL_ArenaAllocate().
  Fixed by Pascal Cuoq and Kamil Dudka.
* Bug 888546: ptio.c:PR_ImportUDPSocket doesn't work. Fixed by
  Miloslav Trmac
* Bug 915522: VS2013 support for NSPR. Fixed by Makoto Kato.
* Bug 927687: (CVE-2013-5607) Avoid unsigned integer wrapping in
  PL_ArenaAllocate.
Updated devel/nspr to 4.10.2
Update to 3.15.3

Changelog:
Security Advisories

The following security-relevant bugs have been resolved in NSS 3.15.3. Users are encouraged to upgrade immediately.

    Bug 925100 - (CVE-2013-1741) Ensure a size is <= half of the maximum PRUint32 value
    Bug 934016 - (CVE-2013-5605) Handle invalid handshake packets
    Bug 910438 - (CVE-2013-5606) Return the correct result in CERT_VerifyCert on failure, if a verifyLog isn't used

New in NSS 3.15.3
New Functionality

No new major functionality is introduced in this release. This release is a patch release to address CVE-2013-1741, CVE-2013-5605 and CVE-2013-5606.
Bugs fixed in NSS 3.15.3

    Bug 850478 - List RC4_128 cipher suites after AES_128 cipher suites
    Bug 919677 - Don't advertise TLS 1.2-only ciphersuites in a TLS 1.1 ClientHello

A complete list of all bugs resolved in this release can be obtained at
https://bugzilla.mozilla.org/buglist.cgi?resolution=FIXED&classification=Components&query_format=advanced&target_milestone=3.15.3&product=NSS


Compatibility

NSS 3.15.3 shared libraries are backward compatible with all older NSS 3.x
shared libraries. A program linked with older NSS 3.x shared libraries will
work with NSS 3.15.3 shared libraries without recompiling or relinking.
Furthermore, applications that restrict their use of NSS APIs to the
functions listed in NSS Public Functions will remain compatible with future
versions of the NSS shared libraries.
Updated devel/nss to 3.15.3
Update to 25.0.1

Changelog:
FIXED
25.0.1: New security fixes can be found here
FIXED
25.0.1: Pages sometimes wouldn't load without first moving the cursor

Fixed in Firefox 25.0.1
MFSA 2013-103 Miscellaneous Network Security Services (NSS) vulnerabilities
Updated www/firefox to 25.0.1
Update to 24.1.1

Changelog:
FIXED
Update branches that use 4.10 RTM to 4.10.2 RTM (see 935568)
FIXED
Update Mozilla to NSS 3.15.3 (new alternative NSS branch) to pick up a few fixes (see 935959)
FIXED
Some UI strings in Firefox 24.1.0 ESR l10n builds are in English (see 932310)
Reset PKGREVISION
Updated www/firefox24 to 24.1.1
Update to 25.0.1

* Sync with firefox 25.0.1
Updated www/firefox-l10n to 25.0.1
Update to 24.1.1

* Sync with firefox 24.1.1
Updated www/firefox24-l10n to 24.1.1
Add version for Contao 3.2.0.
Add contao32 package version 3.2.0, new LTS (Long Term Support) release of
Contao Open Source CMS.

Contao is an Open Source Content Management Framework developed by Leo Feyer
and distributed under the LGPL license (see GPL.txt and LGPL.txt for more
information).  It was formerly known as TYPOlight Open Source CMS.

Its open architecture allows everybody to extend the system to fit his
needs. Contao specializes in accessible websites and is accessbile
itself (front end and back end), rendering valid HTML5 or XHTML pages.
Add contao32-example package version 3.2.0, demo site data for contao32.