Pullup ticket #4610 - requested by taca
www/contao34: security update

Revisions pulled up:
- www/contao/Makefile.common                                    patch
- www/contao34/Makefile                                        1.3-1.4
- www/contao34/distinfo                                        1.2-1.4

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Fri Jan 23 16:16:23 UTC 2015

  Modified Files:
  pkgsrc/www/contao: Makefile.common
  pkgsrc/www/contao34: Makefile distinfo

  Log Message:
  Update to contao34 to 3.4.2.

  Version 3.4.2 (2015-01-22)
  --------------------------

  ### Fixed
  Fix an infinite recursion problem in the `FilesModel` class (see #7588).

  Version 3.4.1 (2015-01-22)
  --------------------------

  ### Fixed
  Fix the position of the input field hints (see #7561).

  ### Fixed
  Do not apply the GDlib maximum dimensions to SVG images (see #7435).

  ### Fixed
  Do not show the diff icon if a record has been deleted (see #7429).

  ### Fixed
  Remove a left-over headline from the `ce_text.xhtml` template (see #7502).

  ### Fixed
  Preserve comments when exporting CSS files (see #7482).

  ### Fixed
  Fix the LESS import path in the Combiner (see #7533).

  ### Fixed
  Hide the width and height attributes if there is a sizes attribute (see #7500).

  ### Fixed
  Remove the hardcoded figcaption width (see #7549).

  ### Fixed
  Only load the model in the file/page picker if the class exists (see #7490).

  ### Fixed
  Romanize style sheet names (see #7526).

  ### Fixed
  Add the username to the "account has been locked" log entry (see #7551).

  ### Fixed
  Consider the suhosin.memory_limit when raising the PHP limits (see #7035).

  ### Fixed
  Added two missing `exclude` flags in the `tl_page` data container (see #7522).

  ### Fixed
  Send an UTF-8 charset header in the `die_nicely()` function (see #7519).

  ### Fixed
  Correctly validate dates in the `Widget` class (see #7498).

  ### Fixed
  Back port the fixes from #7475 and #7473.

  ### Fixed
  Send the same cache headers for cached and uncached pages (see #7455).

  ### Fixed
  Fix the `current() expects parameter 1 to be array` issue (see #6739).

  ### Fixed
  Correctly replace the `*_teaser` insert tags (see #7488).

  ### Fixed
  Adjust the last and previous login labels (see #7426).

  ### Fixed
  Unset the `postUnsafeRaw` cache in `Input::setPost()` (see #7481).

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Sun Feb  1 04:51:34 UTC 2015

  Modified Files:
  pkgsrc/www/contao: Makefile.common
  pkgsrc/www/contao34: Makefile distinfo

  Log Message:
  Update contao34 to 3.4.3 (Contao 3.4.3).

  * pkgsrc change: change config directory's permission.

  Version 3.4.3 (2015-01-30)
  --------------------------

  ### Fixed
  Consider the error reporting level in the install tool (see #7593).

  ### Fixed
  Handle variables and functions when importing style sheets (see #7448).

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Fri Feb 13 03:03:57 UTC 2015

  Modified Files:
  pkgsrc/www/contao: Makefile.common
  pkgsrc/www/contao34: distinfo

  Log Message:
  Update contao34 package to 3.4.4 (Contao 3.4.4).

  Version 3.4.4 (2015-02-12)
  --------------------------

  ### Fixed
  Fixed a directory traversal vulnerability discovered by Arnaud Buchoux. See
  CVE-2015-0269 for more information.

(tron)