Update postfix to 2.11.1.

Bugfixes (fixed in Postfix 2.11 and Postfix 2.12):

  * With connection caching enabled (the default), recipients could
    be given to the wrong mail server. The root cause was an incorrect
    predicate. Due to this, the Postfix SMTP client could under
    rare conditions save and restore plaintext connections that
    should not be cached, under a fixed lookup key that did not
    distinguish by destination.  Problem reported by Sahil Tandon.

  * Enforce TLS when TLSA records exist, but all are unusable.

  * Don't leak memory when TLSA records exist, but all are unusable.

Workarounds:

  * Prepend "-I. -I../../include" to the compiler command-line
    options, to avoid name clashes with non-Postfix header files.

Documentation cleanup:

  * Corrected postconf(1) manpage for missing version attribution
    and incorrect "author" formatting.

  * The documentation for Postfix > 2.8 TLS activity logging was
    incorrect. Loglevel 0 produces no logging. Instead, information
    is logged only with loglevel 1 or higher.

Logging cleanup:

  * The TLS client logged that an "Untrusted" TLS connection was
    established instead of "Anonymous".

  * For consistency, TLS policy lookup errors are now logged as
    warnings.
Note update of mail/postfix package to 2.11.1.
Update sylpheed to 3.4.1.

* 3.4.1 (stable)

    * Fixed Bug #193: Lose mails when mailbox is inaccessible.

* 3.4.0 (stable)
* 3.4.0rc (release candidate)

    * SSL wildcard certificate is also validated now (#167).
    * The compile error with OpenSSL disabled was fixed.

* 3.4.0beta8 (development)

    * Mac OS X support was improved.
    * SSL certificate hostname is validated now (#167).
    * The Japanese manual was modified so that IE correctly detect its
      character encoding.
    * The rightmost column of folder view and summary view became easier to
      resize.
    * Appropriate columns of folder view, summary view, etc. are
      auto-expanded by window resize when using GTK+ 2.14 or later.
    * The initial setup dialog is now resizabe.
    * PGP encrypt-to-self feature was added.
    * The display period of notification window became configurable.

* 3.4.0beta7 (development)

    * Win32: the tray icon is recreated when explorer.exe crashes now.
    * The bug that 'File - Folder - Move folder...' menu didn't work was
      fixed.
    * The bug that MIME nest level restriction was not working was fixed.
    * Many defects discovered by Coverity Scan were fixed:
      - FILE handle resource leaks
      - memory leaks
      - possible buffer overrun
      - strict error checks
      - correct null pointer checks

* 3.4.0beta6 (development)

    * Icon theme feature was added.
    * HTML mail is distinguished from other messages with attachments now.
    * 'Last 30 days' was added to the quick search menu.
    * Attached images are rotated based on Exif orientation tag.
    * Config.guess and config.sub included in the tarball were updated to the
      latest version.

* 3.4.0beta5 (development)

    * Basque translation was added.
    * Escaped special characters in HTML links are now properly unescaped
      (#120).
    * IMAP: parsing of folder names that contain brackets was fixed.
    * Config.guess and config.sub included in the tarball were updated.
    * The order of templates became stable.

* 3.4.0beta4 (development)

    * The feature to save message as plain text was added.
    * Printing now prints all texts in messages, not only the first one.
    * The HTML parser now supports <blockquote> tag.
    * An option to prefer HTML part in multipart/alternative was added
      (default: off).
    * Compose window is raised when the external editor exits.
    * Bugfixes of HTML display were made.

* 3.4.0beta3 (development)

    * Rebuilding of folder tree which was broken at 3.4.0beta1 was fixed
      (#103).
    * The bug that double-quote (") and backslash (\) in
      folder/username/password were not escaped and could not be used on IMAP4
      was fixed.
    * Quotation of forwarded messages is enabled for template now.
    * When marking a message as junk and moving it to a junk folder, proper
      junk folder is selected instead of default one.
    * When applying a template for a new message, current date is inserted
      with '%d'.

* 3.4.0beta2 (development)

    * New message notification window was added.
    * An option to the junk filter setting was added:
      'Do not classify message as junk if sender is in the address book'.
    * Some non-standard Date header patterns are handled now.
    * Win32: start menu shortcuts are translated.

* 3.4.0beta1 (development)

    * Safe mode (which does not load plug-ins) was added (--safe-mode).
    * The existence of destination folders are checked when creating a filter
      rule.
    * The recursion level is restricted up to 64 when scanning local mailbox
      (prevents infinite loop with symlink. Note: Linux automatically limits
      the symlink loop up to 40)
    * The labels used in POP3 remote mailbox dialog was modified.
    * POP3: do not disconnect immediately but send QUIT command on normal
      POP3 errors (prevents deleted messages appear again).
    * IMAP: "INBOX" folder became case insensitive as specified in RFC 3501.
    * IMAP: server name for cache directory is escaped now
      (fixes cache creation when using IPv6 address for server name on Windows).
    * Win32: socket timeout setting now works on Windows.
Note update of mail/sylpheed package to 3.4.1.
Update drupal7 to 7.28.

Drupal 7.28, 2014-05-08
-----------------------
- Fixed a regression introduced in Drupal 7.27 that caused JavaScript to break
  on older browsers (such as Internet Explorer 8 and earlier) when Ajax was
  used.
- Increased the timeout used by the Update Manager module when it fetches data
  from drupal.org (from 5 seconds to 30 seconds), to work around a problem
  which causes incomplete information about security updates to be presented to
  site administrators. This fix may lead to a performance slowdown on the
  Update Manager administration pages, when installing Drupal distributions,
  and (for sites that use the automated cron feature) on occasional page loads
  by site visitors.
- Fixed the behavior of the token system's "[node:summary]" token when the body
  field does not have a manual summary.
- Changed the behavior of db_query_temporary() so that it works on SELECT
  queries even when they have leading comments/whitespace. A side effect of
  this fix is that db_query_temporary() will now fail with an error if it is
  ever used on non-SELECT queries.
- Added a "node_admin_filter" tag to the database query used to build the list
  of nodes on the content administration page, to make it easier to alter.
- Made the cron queue system log any exceptions that are thrown while an item
  in the queue is being processed, rather than stopping the entire PHP request.
- Improved screen reader support by adding an aria-live HTML attribute to file
  upload fields when there is an error uploading the file (minor markup
  change).
- Made the pager on the Tracker module listing pages show the same number of
  items as other pagers throughout Drupal core (minor UI change).
- Fixed a bug which caused caches not to be properly cleared when a file entity
  was saved or deleted.
- Added several missing countries to the default list returned by
  country_get_list() (string change).
- Replaced the term "weight" with "influence" in the content ranking settings
  for search, and added help text for administrators (string change).
- Fixed untranslatable text strings in the administrative interface for the
  "Crop" effect provided by the Image module (minor string change).
- Fixed a bug in the Taxonomy module update function introduced in Drupal 7.26
  that caused memory and CPU problems on sites with very large numbers of
  unpublished nodes.
- Numerous small bug fixes.
- Numerous API documentation improvements.
- Additional automated test coverage.
Note update of www/drupal7 package to 7.28.
Start update of Ruby on Rails to 3.2.18.
Update devel/ruby-activesupport32 to 3.2.18.

No change except version number.
Update devel/ruby-activemodel32 to 3.2.18.

No change except version number.
Update databases/ruby-activerecord32 to 3.2.18.

No change except version number.
Update www/ruby-activeresource32 to 3.2.18.

No change except version number.
Update www/ruby-actionpack32 to 3.2.18.

## Rails 3.2.18 (May 6, 2014) ##

*   Only accept actions without File::SEPARATOR in the name.

    This will avoid directory traversal in implicit render.

    Fixes: CVE-2014-0130

    *Rafael Mendon���a Fran���a*
Update mail/ruby-actionmailer32 to 3.2.18.

No change except version number.
Update devel/ruby-railties32 to 3.2.18.

No change except version number.
Update www/ruby-rails32 to 3.2.18.

No change except version number.
+ Mesa-10.1.3, MesaLib-10.1.3, cdrtools-3.01alpha24, clang-3.4.1,
  easytag-2.2.2, glu-10.1.3, lftp-4.4.16, mcabber-0.10.3,
  phpmyadmin-4.2.0, silc-1.1.11, silc-server-1.1.19, typo3-6.2.2.
Note update of Ruby on Rails 3.2.18 related packages.

	devel/ruby-activesupport32
	devel/ruby-activemodel32
	databases/ruby-activerecord32
	www/ruby-activeresource32
	www/ruby-actionpack32
	mail/ruby-actionmailer32
	devel/ruby-railties32
	www/ruby-rails32
sort
some more OpenBSD support (not completed yet).
Apply a patch to fix CVE-2014-2497, taken from
https://bugs.php.net/patch-display.php?bug_id=66901
Bump PKGREVISION for php-gd correspondingly.