Security update

Security update for bugfix by cwgordon7

Security update for bugfix by cwgordon7

Security update for DRUPAL-SA-CONTRIB-2009-014

IMPORTANT:
This release fixes a security issue (XSS vulnerability) in nodereference and userreference modules.
All sites using CCK for Drupal 6 are strongly encouraged to upgrade to CCK 2.2.
Note that the Drupal 5 versions are not affected.
See the Security Annoucement on http://drupal.org/node/406520 for more informations.

Features:
- #361311 Add poll settings forms to Manage fields screen.
- Add book form to Manage fields screen.
- #131953 by markus_petrux - Views integration: expose additional db columns.
- #349987 by Michelle - Panels integration for fieldgroups.
- #362216 by markus_petrux - sort the admin/content/types/fields overview by field name.
- #242583 by jmiccolis - Number: Push maximum 'scale' setting up to 10 for decimal fields.
- Correct RTL display.
- #405452 - Views integration: Update to Views 2.3 API ('link to node'), with 2.2 compatibility preserved.

Bugfixes:
- #392476 Make sure CCK textarea fields in a View don't have a span wrapped around a block-level element.
- Fix devel_generate for decimal and float values.
- #358700 Can't use array_slice() on assoc array in PHP4.
- #196421 Prefixed tables weren't getting queried correctly.
- Don't assume display_settings[$context] always exists, newly enabled modules may add new contexts that weren't there when the field was last edited.

Changes since DRUPAL-6--1-3:

• SA-CONTRIB-2009-012: Print module can be used as a spam relay
• by Zoltan Balogh: Updated Hungarian translation
• Better fix for #371388: handle tbody tags with attributes
  Fix #375892: Don't validate mail send form when pressing cancel
  Improved Turkish translation by drupalhizmetleri
  Document print_[format].tpl better in the README.txt
• Fix #371455: Convert all links in the PDF to absolute
• Fix #384294 by ron_s: use padding instead of margin in icons
  Fix #381586 by Fleshgrinder: add space at the end of the reset button in the send mail form
  Fix #372250: Add page title to send mail form and the ability to use the !title token
  Improvements to the API index.php
  Updated slovak translation by etki
• Fix #388008: implement CCK's hook_content_extra_fields to manage the order of the per-content type settings
• Fix #303506 partly by joostvdl: remove the country code from paths to private image files used in generating PDFs
  Simpler fix to #388008: Use a 'heavier' weight even in the absense of the CCK module
• Coder fixes
• Make tests successful again
• SA-CONTRIB-2009-012 Print module can be used as a spam relay

Changes since DRUPAL-5--4-3: