--- - branch: pkgsrc-2013Q3 date: Mon Dec 16 17:35:05 UTC 2013 files: - new: 1.1.2.1 old: '1.1' path: pkgsrc/www/typo3_61/Makefile pathrev: pkgsrc/www/typo3_61/Makefile@1.1.2.1 type: modified - new: 1.1.2.1 old: '1.1' path: pkgsrc/www/typo3_61/PLIST pathrev: pkgsrc/www/typo3_61/PLIST@1.1.2.1 type: modified - new: 1.1.2.1 old: '1.1' path: pkgsrc/www/typo3_61/distinfo pathrev: pkgsrc/www/typo3_61/distinfo@1.1.2.1 type: modified id: 20131216T173505Z.d55d853009dc13f421891628ff3bbf2509bd0f9e log: "Pullup ticket #4272 - requested by taca\nwww/typo3_61: security update\n\nRevisions pulled up:\n- www/typo3_61/Makefile 1.2-1.3\n- www/typo3_61/PLIST 1.2\n- www/typo3_61/distinfo \ 1.2-1.3\n\n---\n Module Name:\tpkgsrc\n \ Committed By:\ttaca\n Date:\t\tThu Dec 5 16:45:04 UTC 2013\n\n Modified Files:\n \tpkgsrc/www/typo3_61: Makefile PLIST distinfo\n\n Log Message:\n \ Update typo3_61 to 6.1.6 (TYPO3 6.1.6).\n\n 2013-11-26 3f69433 [RELEASE] Release of TYPO3 6.1.6 (TYPO3 Release Team)\n 2013-11-26 3eda399 #53918 [BUGFIX] t3skin calls addIconSprite for each lang (Michiel Roos)\n 2013-11-24 93ed8d2 \ #51650 [BUGFIX] TS: Allow \"0\" as strPad.padWith (Lars Peipmann)\n \ 2013-11-24 aed6051 #15958 [BUGFIX] Reload list module on clickmenu action (Bernhard Kraft)\n 2013-11-21 7042298 #53802 [BUGFIX] Fix moving/copying files and folders between storages (Frans Saris)\n 2013-11-21 \ b78c694 #53844 [BUGFIX] Fix regression in ResourceCompressor (Markus Klein)\n 2013-11-20 3d3de05 #53243 [BUGFIX] Filemtime / Filesize trigger warning (Tomita Militaru)\n 2013-11-20 6c5d53d #53458 [BUGFIX] Fluid paginate widget wrong number of links (Klaas Johan Kooistra)\n 2013-11-20 \ 52b751e Revert \"[BUGFIX] Page module: Allow to paste in empty columns\" (Markus Klein)\n 2013-11-20 dbcaf93 #44002,#35980, [BUGFIX] Page module: Allow to paste in empty columns (Bernhard Kraft)\n 2013-11-19 023014c \ #38766 [BUGFIX] l10n_mode for \"pages\" table and group fields. (Johannes Feustel)\n 2013-11-19 9d97a70 #53773 [BUGFIX] Fix JS error in lang module (Markus Klein)\n 2013-11-19 170f084 #53750 [BUGFIX] Scheduler extension sql file is invalid (Michiel Roos)\n 2013-11-19 abcd5e9 #34544 [BUGFIX] fix javascript error \"TBE_EDITOR not defined\" in sys_action (Ralf Hettinger)\n \ 2013-11-19 ba82fac #51998 [BUGFIX] ExtDirect StateProvider should store all settings (Johannes Feustel)\n 2013-11-19 571c8c9 #53746 [TASK] Optimization in AbstractViewHelper (Wouter Wolters)\n 2013-11-18 33b0d1b #53707 \ [BUGFIX] Rename hook in VariableFrontend.php (Nicole Cordes)\n 2013-11-18 \ fbd9379 #53711 [BUGFIX] additionalAttributes for be.buttons.icon-VH misses hsc (Markus Klein)\n 2013-11-18 fa87ad9 #53014 [BUGFIX] Check for query failures in admin methods (Thomas Maroschik)\n 2013-11-15 7223b78 \ Revert \"[BUGFIX] EM: Fetch list as html, not as json\" (Helmut Hummel)\n 2013-11-14 62f7e87 #45724 [BUGFIX] FILES.folder does not work (Stefan Froemken)\n 2013-11-14 c65640d #51234 [BUGFIX] Move beuser property mappings to global scope (Philipp Gampe)\n 2013-11-14 35a95b0 \ #17493 [BUGFIX] Fix broken edit icons on cType HTML (Stefan Neufeind)\n \ 2013-11-13 fd66dfc #25157,#45550 [BUGFIX] Distinguish unassigend columns and colPos 0 (Georg Ringer)\n 2013-11-13 0641f4f #51918 [BUGFIX] Native date and datetime values do not consider timezone (Oliver Hader)\n 2013-11-12 \ 9aa1fa2 #52926 [BUGFIX] Compressor resolves dots in filenames correctly (Christian Kuhn)\n 2013-11-12 fa77640 #53115 [BUGFIX] T3editor: Make errors/exceptions show correctly (Stefan Neufeind)\n 2013-11-12 259c64d #22136 \ [BUGFIX] Fix menu popup for all IE versions (Alexander Opitz)\n 2013-11-12 \ ffd8480 #52934 [BUGFIX] dataTables: Avoid sending cookie-data too often (Stefan Neufeind)\n 2013-11-12 c3b0ebc #53399 [BUGFIX] Wrong usage-text for cli_dispatch (Tomita Militaru)\n 2013-11-12 dcdb7bb #52904 \ [BUGFIX] Evaluator in JS fails with namespaces (Stefan Aebischer)\n \ 2013-11-12 cf50919 #53538 [BUGFIX] Make be.buttons.icon-ViewHelper extensible (Stefan Neufeind)\n 2013-11-11 fbb19b4 #52727 [TASK] Hard-coded labels in file collections (Tomita Militaru)\n 2013-11-11 3dd29c3 #37948 [BUGFIX] Correctly append additionalTreelistUpdateFields (Bart Dubelaar)\n 2013-11-11 \ a3153a3 #52488 [BUGFIX] Call to FlashMessageQueue::addMessage() method in extbase (Markus Klein)\n 2013-11-11 b61f34f #53423 [BUGFIX] EM: Fetch list as html, not as json (Stefan Neufeind)\n 2013-11-10 093d7ac #52173 \ [BUGFIX] Correct storage selection (follow-up) (Ernesto Baschny)\n 2013-11-09 \ 7015242 #53477 [TASK] Fix superfluous strlen() on constant strings (Steffen Ritter)\n 2013-11-09 827bf21 #47040 [BUGFIX] Enable treeConfig overriding by Page TSconfig (Stefan Froemken)\n 2013-11-09 0b03e72 #53195 \ [BUGFIX] T3editor: Honour fileDenyPattern on saving included TS (Stefan Neufeind)\n 2013-11-08 6f1625f #29179 [BUGFIX] Escape title, extension, description of scheduler tasks (Tomita Militaru)\n 2013-10-23 d34bde3 #31572 \ [BUGFIX] Exception using cObject FORM in TypoScript (Andreas Bouche)\n \ 2013-10-18 840a3a6 #35073 [BUGFIX] Enable BE search for multiple mountpoints (Georg Ringer)\n 2013-10-17 775a077 #52931 [TASK] Exclude central Modernizr from concatenation (Stefan Neufeind)\n 2013-10-17 0382419 \ #52570 [TASK] Tests for Persistence\\Generic\\Backend::getIdentifierByObject (Stefan Neufeind)\n 2013-10-17 b78dc4e #50548 [BUGFIX] Getting the identifier for a lazy object fails (Marc Bastian Heinrichs)\n 2013-10-16 2f1fb3f \ #52529 [BUGFIX] Suppress empty tag names in output of array2xml (Markus Hoelzle)\n 2013-10-16 b218036 #52823 [BUGFIX] Preserve vendor name in refering request (Thomas Maroschik)\n 2013-10-16 88cc508 [BUGFIX] Follow-Up: Fatal error due to missing use statement (Sascha Egerer)\n 2013-10-15 \ 1761850 #52845 [BUGFIX] Moving folders fails (Oliver Hader)\n 2013-10-15 \ be9b7c7 #50802 [BUGFIX] Only load folder contents if folder is initialised (Frans Saris)\n 2013-10-15 ce693d8 #52824 [BUGFIX] Superfluous usage of ObjectManagerException (Oliver Hader)\n 2013-10-15 8be996a #51707 [FEATURE] Add getValidators to AbstractCompositeValidator (Stefan Froemken)\n 2013-10-15 \ 992e4ef #52771 [BUGFIX] Use callback in preg_replace in RemoveXSS (Jigal van Hemert)\n 2013-10-14 50942c2 #52773 [BUGFIX] Detect unix-styled absolute paths on Windows systems (Nicole Cordes)\n 2013-10-13 2889f13 #52759 \ [BUGFIX] Object passed to date() (Xavier Perseguers)\n 2013-10-12 \ f4f2756 #52731 [TASK] Use 6.1 branch in travis-integration for travis (Christian Kuhn)\n 2013-10-12 d68c114 #52728 [BUGFIX] Use BackendUtility use statement (Anja Leichsenring)\n 2013-10-12 33d4415 #52104 [BUGFIX] Wrong calculation of maximum value for checkbox fields (Nicole Cordes)\n 2013-10-12 \ e3d02ef #52715 [BUGFIX] Prevent empty newline below scheduler-task-name (Stefan Neufeind)\n 2013-10-11 a3f8dfe #52708 [BUGFIX] DataMapFactory::resolveTableName must remove leading backslashes (Alexander Schnitzler)\n 2013-10-11 9b4462b \ #50912 [BUGFIX] BackendUtility::viewOnClick() called with non-integer (Oliver Hader)\n 2013-10-11 d910b2b #51051 [BUGFIX] Clear_cache() must not consider page ids lower than 0 (Oliver Hader)\n 2013-10-11 1483967 \ #37611 [BUGFIX] Select available page when changing WS (Thorsten Kahler)\n \ 2013-10-11 f4e1b0e #52636 [BUGFIX] Copy records to target page before origin page is deleted (Timo Webler)\n 2013-10-11 ed4e368 #17551 [BUGFIX] Create workspace placeholder with processed field content (Sascha Egerer)\n 2013-10-11 \ 6f47aa5 #36573 [BUGFIX] Add workspace overlay for fetched records. (Timo Webler)\n 2013-10-11 d6b57e8 #37209 [BUGFIX] WS preview shows pages changes from all WS (Thorsten Kahler)\n 2013-10-11 fcad15e #52530 [BUGFIX] Delete modified record in WS just deletes WS version (Sascha Egerer)\n 2013-10-11 \ 3ac3429 #37065 [BUGFIX] Don't show duplicates in workspace preview (Timo Webler)\n 2013-10-10 394d12e #52178 [BUGFIX] Cannot upload an extension as zip (Xavier Perseguers)\n 2013-10-07 8f1afaf #49538 [BUGFIX] Fields of type file_reference are not properly indexed (Martin Borer)\n 2013-10-07 \ 98625ae #52546 [BUGFIX] Missing closing tag in ElementBrowser (Philipp Gampe)\n 2013-10-05 dc5b2f1 #52469 [TASK] Use instanceof comparison instead of string comparison (Benjamin Serfhos)\n 2013-09-30 6b2512a #43540 \ [BUGFIX] TS is fetched from cache incorrectly sometimes (Dmitry Dulepov)\n \ 2013-09-28 3a3edf1 #48809,#51730, [BUGFIX] Fix wrong handling of php and TYPO3 dependencies (Susanne Moog)\n 2013-09-28 9535891 #51329 [BUGFIX] Initialize extension name in command requests (Alexander Stehlik)\n 2013-09-27 \ 06723a0 #52045 [BUGFIX] EmConfUtility accesses non-arrays (Markus Klein)\n 2013-09-27 219c381 #51588 [BUGFIX] Clear cached menu by tag (Zbigniew Jacko)\n 2013-09-27 b41847a #50437 [BUGFIX] Fix jumpToUrl()-Usage in Element Browser (Benjamin Pick)\n 2013-09-26 6bdc8ad #52091,#51684 [BUGFIX] Check for string before using strlen (Kilian Hann)\n 2013-09-26 9be6739 #52266 \ [BUGFIX] groupFor-VH does not work with @lazy (Stefan Froemken)\n 2013-09-26 \ d3bf620 #50913 [BUGFIX] Fix PHP warning trigged in getAuthInfoArray() (Christian Finkemeier)\n 2013-09-26 993dd5d #52316 [BUGFIX] Fatal in DefaultConfiguration (Christian Kuhn)\n 2013-09-26 bb94fe0 #52305 [BUGFIX] Configure main extbase caches for unlimited entry lifetime (Christian Kuhn)\n \ 2013-09-26 52ff400 #52295 [TASK] Use SimpleFileBackend for t3lib_l10n cache (Christian Kuhn)\n 2013-09-25 f0fe1c4 #52226 [BUGFIX] EM does not link to docs.typo3.org (Xavier Perseguers)\n 2013-09-25 db5fb24 #51116 \ [BUGFIX] Increase performance of exports for caches (Markus Klein)\n \ 2013-09-25 28ee210 #52243 [BUGFIX] Remove duplicate exception code (Fabien Udriot)\n 2013-09-24 3f53e6b #52173 [BUGFIX] Correct storage selection (common prefixes) (Ernesto Baschny)\n 2013-09-24 1d17a21 #52201 \ [BUGFIX] Fix broken Unit-test for #44825 (Wouter Wolters)\n 2013-09-23 \ ae9b606 #44825 [BUGFIX] Fix page.headerData + USER_INT (Helmut Hummel)\n \ 2013-09-20 7d08d29 #48912 [BUGFIX] Increase length of identifier field in sys_file (Nicole Cordes)\n 2013-09-20 e0600ed #52056 [BUGFIX] Wrong exception on renaming folder (Francois Suter)\n 2013-09-19 9423c2c #49328 \ [BUGFIX] Fix PHP warning when writing to Backend user log (Alexander Stehlik)\n 2013-09-17 fd534b6 #45859 [BUGFIX] Faulty expand/collapse behavior in Element Browser (Oliver Hader)\n 2013-09-17 ce68bcd #19045 [BUGFIX] Fix cropping of transparent gifs with im6. (Stefan Neufeind)\n 2013-09-17 fb5bbbf \ #50907 [BUGFIX] Form Wizard: Adds mouse pointer to docheader icons (Ernesto Baschny)\n 2013-09-13 0fe373b #51981 [BUGFIX] Also consider JPEG files for IM/GM (Markus Klein)\n 2013-09-12 b0c54dc #51803 [TASK] Use a 401 header if login is not successful (Georg Ringer)\n 2013-09-12 7169032 \ #47744 [BUGFIX] Replace SHOW DATABASE by query to schema (Alexander Opitz)\n 2013-09-12 ddf74b0 #51891 [BUGFIX] Call to undefined method setTemplateFile (Wouter Wolters)\n\n---\n Module Name:\tpkgsrc\n Committed By:\ttaca\n Date:\t\tTue Dec 10 15:22:20 UTC 2013\n\n Modified Files:\n \tpkgsrc/www/typo3_61: Makefile distinfo\n\n Log Message:\n Update typo3_61 package to 6.1.7 (TYPO3 6.1.7).\n\n - Fix multiple vulnerabilities in TYPO3 CMS:\n \thttp://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/\n\n \ 2013-12-10 afbadea [RELEASE] Release of TYPO3 6.1.7 (TYPO3 Release Team)\n 2013-12-10 7481971 #31206 [SECURITY] XSS in header link of all content elements (Anja Leichsenring)\n 2013-12-10 cb8db28 #42772 \ [SECURITY] XSS in colorpicker wizard (Marcus Krause)\n 2013-12-10 \ 2d29894 #45043 [SECURITY] Prevent editor controlled hmac content (Franz G. Jahn)\n 2013-12-10 dca9c88 #48691 [SECURITY] XSS in backend user adminstration (Marc Bastian Heinrichs)\n 2013-12-10 450e5d3 #41714 [SECURITY] Information Disclosure in Wizards (Helmut Hummel)\n 2013-12-10 7e7f9e3 #54099 \ [SECURITY] Fix open redirection in openid extension (Helmut Hummel)\n \ 2013-12-10 ad11945 #36768 [SECURITY] XSS in be_layout wizard (Anja Leichsenring)\n 2013-12-10 18e0491 #47086 [SECURITY] XSS in beuser VH (Anja Leichsenring)\n 2013-12-10 cbbeefd #54074 [SECURITY] Remove possible XSS from ActionController Error output (Anja Leichsenring)\n 2013-12-10 \ 163947a #54073 [SECURITY] Unsafe unserialize of GET parameter in Add-Wizard (Steffen Ritter)\n 2013-12-02 d21a628 #54124 [BUGFIX] ClientUtility does not detect Internet Explorer 11 (Stefan Neufeind)\n 2013-12-02 e538020 \ #54117 [BUGFIX] Add missing namespacing for calling GeneralUtility (Stefan Neufeind)\n 2013-11-29 3a66a0e #42651 [BUGFIX] ext:adodb Restrict connection wizard to admins (Christian Kuhn)\n" module: pkgsrc subject: 'CVS commit: [pkgsrc-2013Q3] pkgsrc/www/typo3_61' unixtime: '1387215305' user: tron