Updated salt to 2014.1.1, numerous bug and security fixes

Details:

  * http://docs.saltstack.com/en/latest/topics/releases/0.16.4.html
  * http://docs.saltstack.com/en/latest/topics/releases/0.17.0.html
  * http://docs.saltstack.com/en/latest/topics/releases/0.17.1.html
  * http://docs.saltstack.com/en/latest/topics/releases/0.17.2.html
  * http://docs.saltstack.com/en/latest/topics/releases/0.17.3.html
  * http://docs.saltstack.com/en/latest/topics/releases/0.17.4.html
  * http://docs.saltstack.com/en/latest/topics/releases/0.17.5.html
  * http://docs.saltstack.com/en/latest/topics/releases/2014.1.1.html
Updated sysutils/salt to 2014.1.1
Upstream release notes:

Fixed in 7.36.0 - March 26 2014
Release contains security-related bug fixes

Changes:

    ntlm: Added support for NTLMv2
    tool: Added support for URL specific options
    openssl: add ALPN support
    gtls: add ALPN support
    nss: add ALPN and NPN support
    added CURLOPT_EXPECT_100_TIMEOUT_MS
    tool: add --no-alpn and --no-npn
    added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
    winssl: enable TLSv1.1 and TLSv1.2 by default
    winssl: TLSv1.2 disables certificate signatures using MD5 hash
    winssl: enable hostname verification of IP address using SAN or CN
    darwinssl: Don't omit CN verification when an IP address is used
    http2: build with current nghttp2 version
    polarssl: dropped support for PolarSSL < 1.3.0
    openssl: info message with SSL version used

Bugfixes:

    SECURITY ADVISORY: wrong re-use of connections
    SECURITY ADVISORY: IP address wildcard certificate validation
    SECURITY ADVISORY: not verifying certs for TLS to IP address / Darwinssl
    SECURITY ADVISORY: not verifying certs for TLS to IP address / Winssl
    nss: allow to use ECC ciphers if NSS implements them
    netrc: Fixed a memory leak in an OOM condition
    ftp: fixed a memory leak on wildcard error path
    pipeline: Fixed a NULL pointer dereference on OOM
    nss: prefer highest available TLS version
    100-continue: fix timeout condition
    ssh: Fixed a NULL pointer dereference on OOM condition
    formpost: use semicolon in multipart/mixaed
    --help: add missing --tlsv1.x options
    formdata: Fixed memory leak on OOM condition
    ConnectionExists: reusing possible HTTP+NTLM connections better
    mingw32: fix compilation
    chunked decoder: track overflows correctly
    curl_easy_setopt.3: add CURL_HTTP_VERSION_2_0
    dict: fix memory leak in OOM exit path
    valgrind: added suppression on optimized code
    curl: output protocol headers using binary mode
    tool: Added URL index to password prompt for multiple operations
    ConnectionExists: re-use non-NTLM connections better
    axtls: call ssl_read repeatedly
    multi: make MAXCONNECTS default 4 x number of easy handles function
    configure: Fix the --disable-crypto-auth option
    multi: ignore SIGPIPE internally
    curl.1: update the description of --tlsv1
    SFTP: skip reading the dir when NOBODY=1
    easy: Fixed a memory leak on OOM condition
    tool: Fixed incorrect return code when setting HTTP request fails
    configure: Tiny fix to honor POSIX
    tool: Do not output libcurl source for the information only parameters
    Rework Open Watcom make files to use standard Wmake features
    x509asn: moved out Curl_verifyhost from NSS builds
    configure: call it GSS-API
    hostcheck: Curl_cert_hostcheck is not used by NSS builds
    multi_runsingle: move timestamp into INIT
    remote_port: allow connect to port 0
    parse_remote_port: error out on illegal port numbers better
    ssh: Pass errors from libssh2_sftp_read up the stack
    docs: remove documentation on setting up krb4 support
    polarssl: build fixes to work with PolarSSL 1.3.x
    polarssl: fix possible handshake timeout issue in multi
    nss: allow to enable/disable cipher-suites better
    ssh: prevent a logic error that could result in an infinite loop
    http2: free resources on disconnect
    polarssl: avoid extra newlines in debug messages
    rtsp: parse "Session:" header properly
    trynextip: don't store 'ai' on failed connects
    Curl_cert_hostcheck: strip trailing dots in host name and wildcard
Update p5-Term-ReadLine to 1.22.  Approved by wiz@ to fix build problem
with readline 6.3.

1.22  2014-03-05
	- make Kwalitee <http://cpants.cpanauthors.org/> friendly
	  - add MakeMaker options for META.yml
	  - add Changelog
	  - fix POD errors
	  - make .pm versions consistent
	  - use "use warnings"
	- Makefile.PL dies on the CPAN Test for OpenBSD temporarily
          (hopefully).

1.21  2014-03-02
	- readline-6.3 support (Gnu Readline Library 6.3 requires this
	  release or newers.)
	    new function
		rl_clear_history
	    new variable
		rl_signal_event_hook
		rl_input_available_hook
		rl_executing_key
		rl_executing_keyseq
		rl_key_sequence_length
		rl_change_environment
		rl_filename_stat_hook
	- readline-6.1 support
	    new function
		rl_free_keymap (enabled)
	    new variable
		rl_filename_rewrite_hook (now implemented)
	- make the following variables read-only.: rl_executing_macro,
          history_length, rl_readline_state, rl_explicit_arg,
	  rl_numeric_arg, rl_editing_mode
	- Improve backward compatiblity variable and function definitions.
	- Fix Term::ReadLine::Gnu::XS::_trp_completion_function not to
	  perform a case-sensitive filter.
	- fix Gnu.xs:rl_initialize to be compiled with Perl 5.8.5 or
          before.
	- update Pod documents

	- t/readline.t, t/history.t: add variable access tests.
	- t/readline.t: consider .svn directory on filename
          completion test and to set the standard tty setting before
          re_initialize() being called.
	- eg/perlsh makes use of the deferred signal (safe signal)
          feature.

	- Maefile.PL checks whether the xmalloc exported by readline
	  is indeed called 'xmalloc' or whether it has been renamed to
	  '_rl_malloc'.
	- Makefile.PL: add -DTRL_READLINE_VERSION to show GNU Readline
          Library version in CPAN Tester Reports.
	- t/00checkver.t: let messages go to stdout.

	- README: add project home page URL and remove out-of-date
          descriptions.
	- INSTALL: add a section "Install on Mac OS X"
Note update of devel/p5-Term-ReadLine package to 1.22.
+ fontconfig-2.11.1, giflib-5.0.6, gmp-6.0.0a, help2man-1.45.1,
  libxkbcommon-0.4.1, lilypond-2.18.2, pari-2.7.0, py-ldap-2.4.15.
Note update of security/sudo to 1.7.10p8