Expand out the list of GNU ld flags we want to remove, rather than applying
a blanket removal of any long options, richard@ is concerned this may affect
packages which use the long options now available in newer SunOS ld.

Whilst here, transform --rpath to -R, used by a few packages.
Changes 3.4.7:
kerberos_ldap_group: Fix 'error during setup of Kerberos credential cache'
Ignore Range headers with unidentifiable byte-range values
Use v3 for fake certificate if we add _any_ certificate extension.
Fix regression in rev.13156
Fix %USER_CA_CERT_* and %CA_CERT_ external_acl formating codes
Enable compile-time override for MAXTCPLISTENPORTS
ntlm_sspi_auth: fix various build errors
negotiate_wrapper: vfork is not portable
Windows: fix iphlpapi.h include case-sensitivity
Windows: correct libsspwin32 API for SSP_LogonUser()
negotiate_sspi_auth: Portability fixes for MinGW
ext_lm_group_acl: portability fixes for MinGW
SourceFormat Enforcement
Bug 4080: worker hangs when client identd is not responding
Bug 3966: Add KeyEncipherment when ssl-bump substitues RSA for EC.
Reduce cache_effective_user was leaking $HOME memory
Updated www/squid3 to 3.4.7
Fix build on SunOS - needs c99 + extensions, and requires zlib.
Update to 1.0.1.3

Changes from https://github.com/haskell/random
1.0.1.3
 - Merge pull request #7 from thomie/T8899
   Fix for ghc ticket #8899: StdGen does not generate 0
 - Merge pull request #8 from thomie/memory-leaks
   Fix for memory leaks (GHC #7936 and #4218)
 - Merge pull request #4 from NovaDenizen/master
   fix for randomIvalInteger, ghc #8898
 - Use GHC.Exts.build in randoms, randomRs to achieve fusion
Updated devel/hs-random to 1.0.1.3
Bump PKGREVISION for hs-random-1.0.1.3
Add fixes for CVE-2014-4341, CVE-2014-4342 (same patch as CVE-2014-4341)
CVE-2014-4343, CVE-2014-4344 & MITKRB5-SA-2014-001 (CVE-2014-4345).
mit-krb5 ->
Add fixes for CVE-2014-4341, CVE-2014-4342 (same patch as CVE-2014-4341)
CVE-2014-4343, CVE-2014-4344 & MITKRB5-SA-2014-001 (CVE-2014-4345).
Make package cross-compiling work through su-target as
well as it does for unprivileged builds.  From riastradh.