security update for RT3, fixing:

    CVE-2013-3368
    CVE-2013-3369
    CVE-2013-3370
    CVE-2013-3371
    CVE-2013-3372
    CVE-2013-3373
    CVE-2013-3374

It also includes a database upgrade, so please make sure to run `make
upgrade-database`.

Changes in detail are:
3.8.15->3.8.16:
ruz 	stop RT from locking on "large" mails
ruz 	make sure data is recorded (tests)
alexmv 	Remove bogus argument to ->get(), which fail on HTTP::Message >= 5.05
alexmv 	Ensure that tickets are destroyed before global destruction, in more
alexmv 	Work around a bug in perl < 5.13.10 with open($fh, ">:raw", \$string)
sunnavy destroy more tickets and objects before global destruction for modern
tsibley Remove the "signature" paragraph from the README's explanation of RT

3.8.16->3.8.17:
alexmv 	Ensure that filenames in inline image attributes are HTML-escaped
alexmv 	Deny direct access to callbacks
alexmv 	Protect calls to $m->comp with user input in ColumnMap
alexmv 	Ensure that subjects cannot contain embedded newlines
alexmv 	Remove filename= suggesions from Content-Disposition lines
alexmv 	Ensure consistent escaping of filenames in attachment URIs
alexmv 	Ensure that URLs placed in HTML attributes are escaped correctly, to
	prevent XSS injection
alexmv 	Ensure that the default replacement does not pass through unescaped
	content
alexmv 	Use File::Temp for non-predictable temporary filenames
Update misc/rump to 20130525
The distfile is now built with the tarup.sh script to avoid depending on CVS
for building this package.
Update filesystems/fs-utils to 20130519
- add fsu_df command
Updated misc/rump to 20130525 and filesystems/fs-utils to 20130519
+ ImageMagick-6.8.5.7, calibre-0.9.32, cdialog-1.2.20130523,
  chromium-bsu-0.9.15.1, cmake-2.8.11, dialog-1.2.20130523, glpk-4.50,
  glu-9.1.3, harfbuzz-0.9.17, libogg-1.3.1, p5-PerlMagick-6.8.5.7,
  phpmyadmin-4.0.2, py-distribute-0.6.43, python33-3.3.2, typo3-6.1.1,
  wine-devel-1.5.31 [wait until NetBSD gains OSS 4 [kern/46611] or
  bring OSS 3 support back], x264-devel-20130525.
Update to 4.41.0. From the changelog:

- messages retrieved with POP could have a blank trailing line
  removed when delivered; fixed. Thanks: Christoph Mitterer, Krzysztof
  Warzecha.

- fix an ImportError when IMAP retriever used with getmail under
  Python 2.4.
Updated mail/getmail to 4.41.0
Update to 3.3.2:

3.3.2

This release fixes a few regressions found in Python 3.3.1.
Complete list at
http://docs.python.org/release/3.3.2/whatsnew/changelog.html

3.3.1

This is a 3.3 series bugfix release. It includes hundreds of bugfixes
over 3.3.0.

Complete list at
http://docs.python.org/release/3.3.1/whatsnew/changelog.html
Updated lang/python33 to 3.3.2
Update to 1.3.1:

Version 1.3.1 (2013 May 12)

* Guard against very large packets.
* Respect the configure --docdir override.
* Documentation fixes.
* More Windows build fixes.
Updated multimedia/libogg to 1.3.1
Update to 1.2.20130523:

2013/05/23
	+ modify ifdef in arrows.c to work around packages which use the
	  wide-character ncursesw headers with the ncurses library (report
	  by Aleksey Cheusov).
	+ correct workaround for xterm alternate-screen to work with/without
	  the fix made in ncurses that makes putp() always write to the
	  standard output (Debian #708829).
	+ improve limit-checks for checklist, in case the dialog is resized
	  (report by Ilya A Arkhipov).
	+ add --last-key option (adapted from patch by Jordi Pujol, Debian
	  #697607).

2013/03/15
	+ update zh_TW.po, add an.po from
		http://translationproject.org/latest/dialog/
Updated misc/dialog to 1.2.20130523
Update to 0.6.43:

------
0.6.43
------

* Issue #378: Restore support for Python 2.4 Syntax (regression in 0.6.42).

------
0.6.42
------

* External links finder no longer yields duplicate links.
* Issue #337: Moved site.py to setuptools/site-patch.py (graft of very old
  patch from setuptools trunk which inspired PR #31).

------
0.6.41
------

* Issue #27: Use public api for loading resources from zip files rather than
  the private method `_zip_directory_cache`.
* Added a new function ``easy_install.get_win_launcher`` which may be used by
  third-party libraries such as buildout to get a suitable script launcher.
Updated devel/py-distribute to 0.6.43
Update to 0.9.17:

Overview of changes leading to 0.9.17
Monday, May 20, 2013
=====================================

- Build fixes.
- Fix bug in hb_set_get_min().
- Fix regression with Arabic mark positioning / width-zeroing.
Updated fonts/harfbuzz to 0.9.17
Update to 1.6.10:

D-Bus 1.6.10 (2013-04-24)
==

The “little-known facts about bananas” release.

• Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
  U+FDD0..U+FDEF are allowed in UTF-8 strings again.
  (fd.o #63072, Simon McVittie)

• Diagnose incorrect use of dbus_connection_get_data() with negative slot
  (i.e. before allocating the slot) rather than returning junk
  (fd.o #63127, Dan Williams)

• In the activation helper, when compiled for tests, do not reset the system
  bus address, fixing the regression tests. (fd.o #52202, Simon)

• Fix building with Valgrind 3.8, at the cost of causing harmless warnings
  with Valgrind 3.6 on some compilers (fd.o #55932, Arun Raghavan)

• Don't leak temporary fds pointing to /dev/null (fd.o #56927, Michel HERMIER)

• Create session.d, system.d directories under CMake (fd.o #41319,
  Ralf Habacker)

• Unix-specific:
  · Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fd.o #63071, Dagobert Michelsen)
Updated sysutils/dbus to 1.6.10
rillig clarified:
"u" means "use at runtime", i.e. the variable may not be available
during preprocessing.
"t" wasn't used at all (my error -- wiz)

Bump version.