* Restrict the available functions in DocumentTemplate.sequence to public API's of zope.sequencesort.
* Turn UndoSupport.get_request_var_or_attr helper into a private API.
* Provide security declarations for BTreeFolder2Base class, instead of only for BTreeFolder2 via the OFS.Folder mix-in.
* LP #902068: Fixed missing security declaration for ObjectManager class.
* Fixed serious authentication vulnerability in stock configuration.

Except by ambiguous decision (ie.: full text catalog), there is no need to install to decribe all depedencies  on this list, because Template Tool in this case already install depedencies automatically.

oqgraph will be automatically built when libboost is available. In order to
follow separation from operating system avoid to building this not needed engine
and thus do not depend on operating system's library.

I updated the dropbear url because it wasn't uploaded to network cache.
I kept an old version because :
 * our patches don't work anymore with the latest version.
 * the latest version (at the date of this commit, doesn't have an
   interesting changelog).
 * by laziness.

Yet Another Revert And Hopefully The Last One

This reverts commit 7b3f3d01.