Imported Upstream version 2.3.7
Merge tag 'upstream/2.3.7'

Upstream version 2.3.7
Remove patch 0002-fix-sql-injection_show_alias

Fix is included by upstream
Imported Debian patch 2.3.5-2+deb7u1
Merge NMU security upload from Gaudenz