Pullup ticket #4310 - requested by taca
www/drupal6: security update

Revisions pulled up:
- www/drupal6/Makefile                                          1.45
- www/drupal6/distinfo                                          1.29

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jan 16 15:54:32 UTC 2014

   Modified Files:
   	pkgsrc/www/drupal6: Makefile distinfo

   Log Message:
   Update drupal6 to 6.30.

   Drupal 6.30, 2014-01-15
   ----------------------
   - Fixed security issues (multiple vulnerabilities), see SA-CORE-2014-001.
Pullup ticket #4311 - requested by taca
www/drupal7: security update

Revisions pulled up:
- www/drupal7/Makefile                                          1.23-1.24
- www/drupal7/PLIST                                             1.8
- www/drupal7/distinfo                                          1.16-1.17

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sat Jan 11 17:06:37 UTC 2014

   Modified Files:
   	pkgsrc/www/drupal7: Makefile PLIST distinfo

   Log Message:
   Update drupal7 to 7.25.

   Drupal 7.25, 2014-01-02
   -----------------------
   - Fixed a bug in node_save() which prevented the saved node from being updated
     in hook_node_insert() and other similar hooks.
   - Added a meta tag to install.php to prevent it from being indexed by search
     engines even when Drupal is installed in a subfolder (minor markup change).
   - Fixed a bug in the database API that caused frequent deadlock errors when
     running merge queries on some servers.
   - Performance improvement: Prevented block rehashing from writing blocks to the
     database on every cache clear and cron run when the blocks have not changed.
     This fix results in an extra 'saved' key which is added and set to TRUE for
     each block returned by _block_rehash() that actually is saved to the database
     (data structure change).
   - Added an optional 'skip on cron' parameter to hook_cron_queue_info() to allow
     queues to avoid being automatically processed on cron runs (API addition).
   - Fixed a bug which caused hook_block_view_MODULE_DELTA_alter() to never be
     invoked if the block delta had a hyphen in it. To implement the hook when the
     block delta has a hyphen, modules should now replace hyphens with underscores
     when constructing the function name for the hook implementation.
   - Fixed a bug which caused cached pages to sometimes be sent to the browser
     with incorrect compression. The fix adds a new 'page_compressed' key to the
     $cache->data array returned by drupal_page_get_cache() (minor data structure
     change).
   - Fixed broken tests on PHP 5.5.
   - Made the File and Image modules more robust when saving entities that have
     deleted files attached. The code in file_field_presave() will now remove the
     record of the deleted file from the entity before saving (minor data
     structure change).
   - Standardized menu callback functions throughout Drupal core to return
     MENU_NOT_FOUND and MENU_ACCESS_DENIED rather than printing their own "page
     not found" or "access denied" pages (minor API change in the return value of
     these functions under some circumstances).
   - Fixed a bug in which caches were not properly cleared when a node was deleted
     via the administrative interface.
   - Changed the Bartik theme to render content contained in <pre>, <code> and
     similar tags in a larger font size, so it is easier to read.
   - Fixed a bug in the Search module that caused exceptions to be thrown during
     searches if the server was not configured to represent decimal points as a
     period.
   - Fixed a regression in the Image module that made image_style_url() not work
     when a relative path (rather than a complete file URI) was passed to it.
   - Added an optional feature to the Statistics module to allow node views to be
     tracked by Ajax requests rather than during the server-side generation of the
     page. This allows the node counter to work on sites that use external page
     caches (string change and new administrative option:
     https://drupal.org/node/2164069).
   - Added a link to the drupal.org documentation page for cron to the Cron
     settings page (string change).
   - Added a 'drupal_anonymous_user_object' variable to allow the anonymous user
     object returned by drupal_anonymous_user() to be overridden with a classed
     object (API addition).
   - Changed the database API to allow inserts based on a SELECT * query to work
     correctly.
   - Changed the database schema of the {file_managed} table to allow Drupal to
     manage files larger than 4 GB.
   - Changed the File module's hook_field_load() implementation to prevent file
     entity properties which have the same name as file or image field properties
     from overwriting the field properties (minor API change).
   - Numerous small bug fixes.
   - Numerous API documentation improvements.
   - Additional automated test coverage.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jan 16 15:55:14 UTC 2014

   Modified Files:
   	pkgsrc/www/drupal7: Makefile distinfo

   Log Message:
   Update drupal7 to 7.26.

   Drupal 7.26, 2014-01-15
   ----------------------
   - Fixed security issues (multiple vulnerabilities). See SA-CORE-2014-001.

   Drupal 7.25, 2014-01-02
   -----------------------
   - Fixed a bug in node_save() which prevented the saved node from being updated
     in hook_node_insert() and other similar hooks.
   - Added a meta tag to install.php to prevent it from being indexed by search
     engines even when Drupal is installed in a subfolder (minor markup change).
   - Fixed a bug in the database API that caused frequent deadlock errors when
     running merge queries on some servers.
   - Performance improvement: Prevented block rehashing from writing blocks to the
     database on every cache clear and cron run when the blocks have not changed.
     This fix results in an extra 'saved' key which is added and set to TRUE for
     each block returned by _block_rehash() that actually is saved to the database
     (data structure change).
   - Added an optional 'skip on cron' parameter to hook_cron_queue_info() to allow
     queues to avoid being automatically processed on cron runs (API addition).
   - Fixed a bug which caused hook_block_view_MODULE_DELTA_alter() to never be
     invoked if the block delta had a hyphen in it. To implement the hook when the
     block delta has a hyphen, modules should now replace hyphens with underscores
     when constructing the function name for the hook implementation.
   - Fixed a bug which caused cached pages to sometimes be sent to the browser
     with incorrect compression. The fix adds a new 'page_compressed' key to the
     $cache->data array returned by drupal_page_get_cache() (minor data structure
     change).
   - Fixed broken tests on PHP 5.5.
   - Made the File and Image modules more robust when saving entities that have
     deleted files attached. The code in file_field_presave() will now remove the
     record of the deleted file from the entity before saving (minor data
     structure change).
   - Standardized menu callback functions throughout Drupal core to return
     MENU_NOT_FOUND and MENU_ACCESS_DENIED rather than printing their own "page
     not found" or "access denied" pages (minor API change in the return value of
     these functions under some circumstances).
   - Fixed a bug in which caches were not properly cleared when a node was deleted
     via the administrative interface.
   - Changed the Bartik theme to render content contained in <pre>, <code> and
     similar tags in a larger font size, so it is easier to read.
   - Fixed a bug in the Search module that caused exceptions to be thrown during
     searches if the server was not configured to represent decimal points as a
     period.
   - Fixed a regression in the Image module that made image_style_url() not work
     when a relative path (rather than a complete file URI) was passed to it.
   - Added an optional feature to the Statistics module to allow node views to be
     tracked by Ajax requests rather than during the server-side generation of the
     page. This allows the node counter to work on sites that use external page
     caches (string change and new administrative option:
     https://drupal.org/node/2164069).
   - Added a link to the drupal.org documentation page for cron to the Cron
     settings page (string change).
   - Added a 'drupal_anonymous_user_object' variable to allow the anonymous user
     object returned by drupal_anonymous_user() to be overridden with a classed
     object (API addition).
   - Changed the database API to allow inserts based on a SELECT * query to work
     correctly.
   - Changed the database schema of the {file_managed} table to allow Drupal to
     manage files larger than 4 GB.
   - Changed the File module's hook_field_load() implementation to prevent file
     entity properties which have the same name as file or image field properties
     from overwriting the field properties (minor API change).
   - Numerous small bug fixes.
   - Numerous API documentation improvements.
   - Additional automated test coverage.
Pullup ticket #4312 - requested by taca
www/contao211: security update
www/contao32: security update

Revisions pulled up:
- www/contao/Makefile.common                                    1.54-1.57
- www/contao211/distinfo                                        1.19
- www/contao32/PLIST                                            1.4
- www/contao32/distinfo                                         1.5-1.6

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Jan 21 16:20:09 UTC 2014

   Modified Files:
   	pkgsrc/www/contao: Makefile.common
   	pkgsrc/www/contao32: PLIST distinfo

   Log Message:
   Update contao32 to 3.2.4.

   Version 3.2.4 (2014-01-20)
   --------------------------

   ### Fixed
   Updated the Russian translation of the TinyMCE "typolinks" plugins (see #6224).

   ### Fixed
   Do not create multiple stylect layers upon Ajax changes.

   ### Fixed
   Some DCAs were missing the "rem" unit (see #6634).

   ### Fixed
   Correctly trim the SQL statements in the `Database` class (see #6623).

   ### Fixed
   Fix some broken back end icons (see #6214).

   ### Fixed
   Show a hint in the news archive menu if there are no items (see #5888).

   ### Fixed
   Prevent the back end tool tips from exceeding the screen width (see #6639).

   ### Fixed
   Support the Google+ vanity name in addition to the numeric ID (see #6454).

   ### Fixed
   Correctly detect Android tablets in the `Environment` class (see #5869).

   ### Fixed
   Correctly resolve the module dependencies (see #6606).

   ### Fixed
   Correctly unset the PHP session cookie depending on its parameters.

   ### Fixed
   Fixed the XHTML variant of the comments form (see #5675).

   ### Fixed
   Correctly assign articles to columns (see #6595).

   ### Fixed
   Correctly merge the CSS classes in the `Hybrid` class (see #6601).

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Mon Jan 27 18:41:15 UTC 2014

   Modified Files:
   	pkgsrc/audio/chromaprint: Makefile
   	pkgsrc/converters/py-simplejson: Makefile
   	pkgsrc/cross/nios2: Makefile.common
   	pkgsrc/databases/ocaml-sqlite3: Makefile
   	pkgsrc/devel/bzr: Makefile
   	pkgsrc/devel/delta: Makefile
   	pkgsrc/devel/gearmand: Makefile
   	pkgsrc/devel/gitolite: Makefile
   	pkgsrc/devel/javacc: Makefile
   	pkgsrc/devel/jq: Makefile
   	pkgsrc/devel/libdbusmenu-qt: Makefile
   	pkgsrc/devel/liblangtag: Makefile
   	pkgsrc/devel/lua-gi: Makefile
   	pkgsrc/devel/lua-lrexlib: Makefile.common
   	pkgsrc/devel/lua-posix: Makefile
   	pkgsrc/devel/magit: Makefile
   	pkgsrc/devel/opengrok: Makefile
   	pkgsrc/devel/py-greenlet: Makefile
   	pkgsrc/devel/py-pip: Makefile
   	pkgsrc/devel/py-virtualenv: Makefile
   	pkgsrc/devel/sparse: Makefile
   	pkgsrc/filesystems/cloudfuse: Makefile
   	pkgsrc/filesystems/fs-utils: Makefile
   	pkgsrc/filesystems/tahoe-lafs: Makefile
   	pkgsrc/fonts/kanjistrokeorders-ttf: Makefile
   	pkgsrc/fonts/liberation-ttf: Makefile
   	pkgsrc/fonts/ricty-ttf: Makefile
   	pkgsrc/games/wargames: Makefile
   	pkgsrc/graphics/camlimages: Makefile
   	pkgsrc/graphics/openimageio: Makefile
   	pkgsrc/graphics/py-matplotlib-tk: Makefile
   	pkgsrc/mail/imapfilter: Makefile
   	pkgsrc/mail/imapsync: Makefile
   	pkgsrc/math/cgal: Makefile
   	pkgsrc/math/eigen2: Makefile
   	pkgsrc/math/eigen3: Makefile
   	pkgsrc/math/fityk: Makefile
   	pkgsrc/misc/libcarddav: Makefile
   	pkgsrc/misc/libreoffice: Makefile
   	pkgsrc/multimedia/transcode: Makefile
   	pkgsrc/net/dnscheck: Makefile
   	pkgsrc/net/fpdns: Makefile
   	pkgsrc/net/get-flash-videos: Makefile
   	pkgsrc/net/knot: Makefile
   	pkgsrc/net/lua-socket: Makefile
   	pkgsrc/net/netcat-openbsd: Makefile
   	pkgsrc/net/py-amqp: Makefile
   	pkgsrc/net/rabbitmq-c: Makefile
   	pkgsrc/net/ruby-stompserver: Makefile
   	pkgsrc/net/tor: Makefile
   	pkgsrc/pkgtools/pkgin: Makefile
   	pkgsrc/print/qpdfview: Makefile
   	pkgsrc/security/libssh: Makefile
   	pkgsrc/security/lua-sec: Makefile
   	pkgsrc/security/pkcs11-helper: Makefile
   	pkgsrc/security/py-ecdsa: Makefile
   	pkgsrc/security/py-paramiko: Makefile
   	pkgsrc/sysutils/dc-tools: Makefile
   	pkgsrc/sysutils/fabric: Makefile
   	pkgsrc/sysutils/k4dirstat: Makefile
   	pkgsrc/sysutils/logrotate: Makefile
   	pkgsrc/sysutils/salt: Makefile
   	pkgsrc/textproc/xmlto: Makefile
   	pkgsrc/time/ical: Makefile
   	pkgsrc/wm/pekwm: Makefile
   	pkgsrc/www/contao: Makefile.common
   	pkgsrc/www/contao211-translations: Makefile
   	pkgsrc/www/php-tt-rss: Makefile
   	pkgsrc/www/py-flask-bootstrap: Makefile
   	pkgsrc/www/py-flask-wtf: Makefile
   	pkgsrc/www/py-http-parser: Makefile
   	pkgsrc/x11/appmenu-qt: Makefile
   	pkgsrc/x11/elementary-icon-theme: Makefile
   	pkgsrc/x11/razor-qt: Makefile

   Log Message:
   Do not set FETCH_USING, should not be set in a package Makefile.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Feb  3 15:20:39 UTC 2014

   Modified Files:
   	pkgsrc/www/contao: Makefile.common
   	pkgsrc/www/contao211: distinfo

   Log Message:
   Update contao211 package to 2.11.14, fix for CVE-2014-1860.

   Version 2.11.14 (2014-02-03)
   ----------------------------

   ### Fixed
   Do not pass POST data to the `deserialize()` function, so it is not vulnerable
   to PHP object injection. Thanks to Pedro Ribeiro for his input (see #6695).

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Feb  3 15:23:22 UTC 2014

   Modified Files:
   	pkgsrc/www/contao: Makefile.common
   	pkgsrc/www/contao32: distinfo

   Log Message:
   Update contao32 to 3.2.5, including fix for CVE-2014-1860.

   * pkgsrc change: remove obsolete lines for contao31.

   Version 3.2.5 (2014-02-03)
   --------------------------

   ### Fixed
   Correctly load the parent pages in the navigation modules (see #6696).

   ### Fixed
   Correctly encode URLs with GET parameters in the syndication links (see #6683).

   ### Fixed
   Do not pass POST data to the `deserialize()` function, so it is not vulnerable
   to PHP object injection. Thanks to Pedro Ribeiro for his input (see #6695).

   ### Fixed
   Allow any character in passwords, especially the less-than symbol (see #6447).

   ### Fixed
   Purge the image cache if a file is being renamed (see #6641).

   ### Fixed
   Preserve tags in custom CSS definitions (see #6667).

   ### Fixed
   Make the swipe CSS selectors more specific (see #6666).

   ### Fixed
   Correctly optimize floating-point numbers in style sheets (see #6674).
Pullup ticket #4313 - requested by pettai
net/bind98: build fix

Revisions pulled up:
- net/bind98/distinfo                                           1.27
- net/bind98/options.mk                                         1.9

---
   Module Name:	pkgsrc
   Committed By:	pettai
   Date:		Mon Jan 27 21:25:21 UTC 2014

   Modified Files:
   	pkgsrc/net/bind98: distinfo options.mk

   Log Message:
   Fetch the correct rl-9.8.6.patch file

   Log Message:
   Update distfile to reflect the new rrl patch
Pullup tickets #4310, #4311, #4312 and #4313.