Update contao44 to 4.4.1.

### 4.4.1 (2017-07-12)

 * Prevent arbitrary PHP file inclusions in the back end (see CVE-2017-10993).
 * Correctly handle subpalettes in "edit multiple" mode (see #946).
 * Correctly show the DCA picker in the site structure (see #906).
 * Correctly update the style sheets if a format definition is
   enabled/disabled (see #893).
 * Always show the "show from" and "show until" fields (see #908).
 * Correctly set the "overwriteMeta" field during the database update (see
   contao/core-bundle#888).

3 files changed, 94 insertions, 9 deletions

diff --git a/www/contao44/Makefile b/www/contao44/Makefile
index 3bab41554d3..8ffdb893553 100644
--- a/www/contao44/Makefile
+++ b/www/contao44/Makefile
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.1 2017/06/18 16:12:54 taca Exp $
+# $NetBSD: Makefile,v 1.2 2017/07/12 14:52:02 taca Exp $
 #
 
 DISTNAME=	contao-${CT_PKGVER}
@@ -22,7 +22,7 @@ DEPENDS+=	${PHP_PKG_PREFIX}-curl>=5.5.0:../../www/php-curl
 DEPENDS+=	${PHP_PKG_PREFIX}-zlib>=5.5.0:../../archivers/php-zlib
 DEPENDS+=	bash>=4.0:../../shells/bash
 
-CT_VERSION=	4.4.0
+CT_VERSION=	4.4.1
 USE_TOOLS=	bash pax
 NO_BUILD=	yes
 
diff --git a/www/contao44/PLIST b/www/contao44/PLIST
index ae60df68b8f..19926fa311b 100644
--- a/www/contao44/PLIST
+++ b/www/contao44/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.1 2017/06/18 16:12:54 taca Exp $
+@comment $NetBSD: PLIST,v 1.2 2017/07/12 14:52:02 taca Exp $
 ${CT_WEBDIR}/README.md
 ${CT_WEBDIR}/assets/ace/README.md
 ${CT_WEBDIR}/assets/ace/composer.json
@@ -1021,6 +1021,11 @@ ${CT_WEBDIR}/vendor/contao/comments-bundle/src/Resources/contao/languages/lt/mod
 ${CT_WEBDIR}/vendor/contao/comments-bundle/src/Resources/contao/languages/lt/tl_comments.xlf
 ${CT_WEBDIR}/vendor/contao/comments-bundle/src/Resources/contao/languages/lt/tl_content.xlf
 ${CT_WEBDIR}/vendor/contao/comments-bundle/src/Resources/contao/languages/lt/tl_module.xlf
+${CT_WEBDIR}/vendor/contao/comments-bundle/src/Resources/contao/languages/lv/default.xlf
+${CT_WEBDIR}/vendor/contao/comments-bundle/src/Resources/contao/languages/lv/modules.xlf
+${CT_WEBDIR}/vendor/contao/comments-bundle/src/Resources/contao/languages/lv/tl_comments.xlf
+${CT_WEBDIR}/vendor/contao/comments-bundle/src/Resources/contao/languages/lv/tl_content.xlf
+${CT_WEBDIR}/vendor/contao/comments-bundle/src/Resources/contao/languages/lv/tl_module.xlf
 ${CT_WEBDIR}/vendor/contao/comments-bundle/src/Resources/contao/languages/my/default.xlf
 ${CT_WEBDIR}/vendor/contao/comments-bundle/src/Resources/contao/languages/my/modules.xlf
 ${CT_WEBDIR}/vendor/contao/comments-bundle/src/Resources/contao/languages/my/tl_comments.xlf
@@ -1623,6 +1628,34 @@ ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/ja/tl_them
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/ja/tl_undo.xlf
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/ja/tl_user.xlf
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/ja/tl_user_group.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/countries.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/default.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/exception.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/explain.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/languages.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/modules.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_article.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_content.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_files.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_form.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_form_field.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_image_size.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_image_size_item.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_layout.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_log.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_maintenance.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_member.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_member_group.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_module.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_page.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_settings.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_style.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_style_sheet.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_templates.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_theme.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_undo.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_user.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/lv/tl_user_group.xlf
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/nl/countries.xlf
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/nl/default.xlf
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/nl/exception.xlf
@@ -1651,6 +1684,34 @@ ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/nl/tl_them
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/nl/tl_undo.xlf
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/nl/tl_user.xlf
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/nl/tl_user_group.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/countries.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/default.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/exception.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/explain.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/languages.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/modules.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_article.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_content.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_files.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_form.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_form_field.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_image_size.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_image_size_item.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_layout.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_log.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_maintenance.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_member.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_member_group.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_module.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_page.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_settings.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_style.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_style_sheet.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_templates.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_theme.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_undo.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_user.xlf
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/pl/tl_user_group.xlf
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/ru/countries.xlf
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/ru/default.xlf
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/languages/ru/exception.xlf
@@ -2402,6 +2463,7 @@ ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/contao/widgets/Upload.php
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/functions/utf8_bootup.php
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/public/core.js
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/public/core.min.js
+${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/public/favicon.ico
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/public/mootao.js
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/public/mootao.min.js
 ${CT_WEBDIR}/vendor/contao/core-bundle/src/Resources/views/Backend/be_page.html.twig
@@ -2760,6 +2822,7 @@ ${CT_WEBDIR}/vendor/contao/installation-bundle/src/Resources/translations/messag
 ${CT_WEBDIR}/vendor/contao/installation-bundle/src/Resources/translations/messages.ja.xlf
 ${CT_WEBDIR}/vendor/contao/installation-bundle/src/Resources/translations/messages.lv.xlf
 ${CT_WEBDIR}/vendor/contao/installation-bundle/src/Resources/translations/messages.nl.xlf
+${CT_WEBDIR}/vendor/contao/installation-bundle/src/Resources/translations/messages.pl.xlf
 ${CT_WEBDIR}/vendor/contao/installation-bundle/src/Resources/translations/messages.ru.xlf
 ${CT_WEBDIR}/vendor/contao/installation-bundle/src/Resources/translations/messages.sl.xlf
 ${CT_WEBDIR}/vendor/contao/installation-bundle/src/Resources/translations/messages.sr.xlf
@@ -3032,6 +3095,15 @@ ${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/nl/tl_news
 ${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/nl/tl_news_feed.xlf
 ${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/nl/tl_user.xlf
 ${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/nl/tl_user_group.xlf
+${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/pl/default.xlf
+${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/pl/modules.xlf
+${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/pl/tl_layout.xlf
+${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/pl/tl_module.xlf
+${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/pl/tl_news.xlf
+${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/pl/tl_news_archive.xlf
+${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/pl/tl_news_feed.xlf
+${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/pl/tl_user.xlf
+${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/pl/tl_user_group.xlf
 ${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/ru/default.xlf
 ${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/ru/modules.xlf
 ${CT_WEBDIR}/vendor/contao/news-bundle/src/Resources/contao/languages/ru/tl_layout.xlf
@@ -3189,6 +3261,15 @@ ${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/nl/t
 ${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/nl/tl_newsletter_recipients.xlf
 ${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/nl/tl_user.xlf
 ${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/nl/tl_user_group.xlf
+${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/pl/default.xlf
+${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/pl/modules.xlf
+${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/pl/tl_member.xlf
+${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/pl/tl_module.xlf
+${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/pl/tl_newsletter.xlf
+${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/pl/tl_newsletter_channel.xlf
+${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/pl/tl_newsletter_recipients.xlf
+${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/pl/tl_user.xlf
+${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/pl/tl_user_group.xlf
 ${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/ru/default.xlf
 ${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/ru/modules.xlf
 ${CT_WEBDIR}/vendor/contao/newsletter-bundle/src/Resources/contao/languages/ru/tl_member.xlf
@@ -3834,7 +3915,6 @@ ${CT_WEBDIR}/vendor/friendsofsymfony/http-cache/src/UserContext/ContextProvider.
 ${CT_WEBDIR}/vendor/friendsofsymfony/http-cache/src/UserContext/DefaultHashGenerator.php
 ${CT_WEBDIR}/vendor/friendsofsymfony/http-cache/src/UserContext/HashGenerator.php
 ${CT_WEBDIR}/vendor/friendsofsymfony/http-cache/src/UserContext/UserContext.php
-${CT_WEBDIR}/vendor/guzzlehttp/guzzle/.travis.yml
 ${CT_WEBDIR}/vendor/guzzlehttp/guzzle/CHANGELOG.md
 ${CT_WEBDIR}/vendor/guzzlehttp/guzzle/LICENSE
 ${CT_WEBDIR}/vendor/guzzlehttp/guzzle/README.md
@@ -4887,6 +4967,7 @@ ${CT_WEBDIR}/vendor/php-http/message/src/Authentication/Wsse.php
 ${CT_WEBDIR}/vendor/php-http/message/src/Builder/ResponseBuilder.php
 ${CT_WEBDIR}/vendor/php-http/message/src/Cookie.php
 ${CT_WEBDIR}/vendor/php-http/message/src/CookieJar.php
+${CT_WEBDIR}/vendor/php-http/message/src/CookieUtil.php
 ${CT_WEBDIR}/vendor/php-http/message/src/Decorator/MessageDecorator.php
 ${CT_WEBDIR}/vendor/php-http/message/src/Decorator/RequestDecorator.php
 ${CT_WEBDIR}/vendor/php-http/message/src/Decorator/ResponseDecorator.php
@@ -4901,6 +4982,8 @@ ${CT_WEBDIR}/vendor/php-http/message/src/Encoding/FilteredStream.php
 ${CT_WEBDIR}/vendor/php-http/message/src/Encoding/GzipDecodeStream.php
 ${CT_WEBDIR}/vendor/php-http/message/src/Encoding/GzipEncodeStream.php
 ${CT_WEBDIR}/vendor/php-http/message/src/Encoding/InflateStream.php
+${CT_WEBDIR}/vendor/php-http/message/src/Exception.php
+${CT_WEBDIR}/vendor/php-http/message/src/Exception/UnexpectedValueException.php
 ${CT_WEBDIR}/vendor/php-http/message/src/Formatter.php
 ${CT_WEBDIR}/vendor/php-http/message/src/Formatter/CurlCommandFormatter.php
 ${CT_WEBDIR}/vendor/php-http/message/src/Formatter/FullHttpMessageFormatter.php
@@ -9203,6 +9286,7 @@ ${CT_WEBDIR}/vendor/twig/twig/lib/Twig/NodeVisitor/Sandbox.php
 ${CT_WEBDIR}/vendor/twig/twig/lib/Twig/NodeVisitorInterface.php
 ${CT_WEBDIR}/vendor/twig/twig/lib/Twig/Parser.php
 ${CT_WEBDIR}/vendor/twig/twig/lib/Twig/ParserInterface.php
+${CT_WEBDIR}/vendor/twig/twig/lib/Twig/Profiler/Dumper/Base.php
 ${CT_WEBDIR}/vendor/twig/twig/lib/Twig/Profiler/Dumper/Blackfire.php
 ${CT_WEBDIR}/vendor/twig/twig/lib/Twig/Profiler/Dumper/Html.php
 ${CT_WEBDIR}/vendor/twig/twig/lib/Twig/Profiler/Dumper/Text.php
@@ -9374,6 +9458,7 @@ ${CT_WEBDIR}/vendor/twig/twig/src/NodeVisitor/OptimizerNodeVisitor.php
 ${CT_WEBDIR}/vendor/twig/twig/src/NodeVisitor/SafeAnalysisNodeVisitor.php
 ${CT_WEBDIR}/vendor/twig/twig/src/NodeVisitor/SandboxNodeVisitor.php
 ${CT_WEBDIR}/vendor/twig/twig/src/Parser.php
+${CT_WEBDIR}/vendor/twig/twig/src/Profiler/Dumper/BaseDumper.php
 ${CT_WEBDIR}/vendor/twig/twig/src/Profiler/Dumper/BlackfireDumper.php
 ${CT_WEBDIR}/vendor/twig/twig/src/Profiler/Dumper/HtmlDumper.php
 ${CT_WEBDIR}/vendor/twig/twig/src/Profiler/Dumper/TextDumper.php
diff --git a/www/contao44/distinfo b/www/contao44/distinfo
index 63f4930525c..d46918b60e6 100644
--- a/www/contao44/distinfo
+++ b/www/contao44/distinfo
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.1 2017/06/18 16:12:54 taca Exp $
+$NetBSD: distinfo,v 1.2 2017/07/12 14:52:02 taca Exp $
 
-SHA1 (contao-4.4.0.tar.gz) = 8eab05ae677dd3b6e6263aaad0831c3a07267e14
-RMD160 (contao-4.4.0.tar.gz) = 6c5da4736079c0aa8f56b199c65107e0b0bd87e8
-SHA512 (contao-4.4.0.tar.gz) = e5852e1883bf66fddaffad31e0e4ab0d8ddc3a7a57db445ea878c00f2124a8c3f9ce4eeac11d30a1e5f95d224df9fe6af8739ae5460df033fb5829264e9087e4
-Size (contao-4.4.0.tar.gz) = 30456421 bytes
+SHA1 (contao-4.4.1.tar.gz) = ed27d084697ee3b9703db4dfca200ba159f74cad
+RMD160 (contao-4.4.1.tar.gz) = 49d6d1b74a0f99d2420bc6b64bca094431bf9571
+SHA512 (contao-4.4.1.tar.gz) = 7f26245b9686982a3012b64b42b27bc63c4b88b5d5000cf0272bac949f94c6c4c499251eda52976f43b68057a7efe67e3e03cbce7e3127dff88bae55bbf9a2ef
+Size (contao-4.4.1.tar.gz) = 30661587 bytes