Received: from mail.netbsd.org (mail.netbsd.org [149.20.53.66]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "mail.NetBSD.org", Issuer "Postmaster NetBSD.org" (verified OK)) by mollari.NetBSD.org (Postfix) with ESMTPS id 2043F7119D for ; Tue, 10 Sep 2013 10:56:23 +0000 (UTC) Received: by mail.netbsd.org (Postfix, from userid 605) id 7DE3514A1C7; Tue, 10 Sep 2013 10:56:22 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 66AF514A1C5 for ; Tue, 10 Sep 2013 10:56:14 +0000 (UTC) X-Virus-Scanned: amavisd-new at NetBSD.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.NetBSD.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id Qab5g7q5eWy9 for ; Tue, 10 Sep 2013 10:56:13 +0000 (UTC) Received: from cvs.netbsd.org (cvs.NetBSD.org [IPv6:2001:4f8:3:7:2e0:81ff:fe30:95bd]) by mail.netbsd.org (Postfix) with ESMTP id 0A34614A1C4 for ; Tue, 10 Sep 2013 10:56:13 +0000 (UTC) Received: by cvs.netbsd.org (Postfix, from userid 500) id 0945696; Tue, 10 Sep 2013 10:56:13 +0000 (UTC) Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" MIME-Version: 1.0 Date: Tue, 10 Sep 2013 10:56:13 +0000 From: "Matthias Scheler" Subject: CVS commit: [pkgsrc-2013Q2] pkgsrc/www/typo3_60 To: pkgsrc-changes@NetBSD.org Reply-To: tron@netbsd.org X-Mailer: log_accum Message-Id: <20130910105613.0945696@cvs.netbsd.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk Module Name: pkgsrc Committed By: tron Date: Tue Sep 10 10:56:12 UTC 2013 Modified Files: pkgsrc/www/typo3_60 [pkgsrc-2013Q2]: Makefile PLIST distinfo Log Message: Pullup ticket #4230 - requested by taca www/typo3_60: security update Revisions pulled up: - www/typo3_60/Makefile 1.4 - www/typo3_60/PLIST 1.4 - www/typo3_60/distinfo 1.4 --- Module Name: pkgsrc Committed By: taca Date: Fri Sep 6 14:16:46 UTC 2013 Modified Files: pkgsrc/www/typo3_60: Makefile PLIST distinfo Log Message: Update typo3-60 package to 6.0.9. This release contains a security fix, please refer TYPO3 Security Bulle= tin TYPO3-CORE-SA-2013-003: TYPO3-CORE-SA-2013-003: Incomplete Access Manag= ement and Remote Code Execution Vulnerability in TYPO3 Core. http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-cor= e-sa-2013-003/ 2013-09-04 8506ff6 [RELEASE] Release of TYPO3 6.0.9 (= TYPO3 Release Team) 2013-09-04 952974b #50886 [SECURITY] Prohibit accessing stor= age 0 from backend UI (Steffen Ritter) 2013-09-04 1e710fb #50883 [SECURITY] Identifiers may refer t= o resources outside the storage (Steffen Ritter) 2013-09-04 6073618 #51495 [SECURITY] Deny arbitrary code exe= cution possibility for editors (Helmut Hummel) 2013-09-04 b3e53a0 #51327 [SECURITY] Refactor and fix FAL us= er permission handling (Helmut Hummel) 2013-09-04 31d5b88 #51326 [SECURITY] Add possibility to en-/= disable file permission checks (Helmut Hummel) 2013-09-04 02aa25d #51079 [SECURITY] Check permissions in al= l actions of ResourceStorage (Steffen Ritter) 2013-09-03 77701ad [TASK] CGL Cleanup of ResourceStor= age (Helmut Hummel) 2013-09-03 ec0a99c #49842 [BUGFIX] Storage is offline but is= still used (Frans Saris) 2013-09-03 1cf9d3c #51672 [BUGFIX] Fix fatal error in Extend= edFileUtility (Helmut Hummel) 2013-09-01 55724fb #31998 [BUGFIX] Faulty check for missing = SMTP port (Tomita Militaru) 2013-08-31 c73e4fe #50424 [BUGFIX] Backend Layout Grid Wizar= d not fully visible in Mac Firefox 22 (Roland Schenke) 2013-08-30 0547211 #51585 [BUGIFX] Missing argument in EM Li= st view VH (Francois Suter) 2013-08-29 2b86070 #51328 [BUGFIX] Only log file/directory a= ctions which were done (Helmut Hummel) 2013-08-29 dc01b69 #51544 [BUGFIX] Sprite manager cache impr= ovement (Christian Kuhn) 2013-08-29 01acc60 #50707 [BUGFIX] TCA 'group' selectedListS= tyle with 'width' breaking layout (Ernesto Baschny) 2013-08-29 2727a6a #51460 [BUGFIX] Database integrity check = fatal error (Stefan F=FCrst) 2013-08-29 1a04377 #51474 [BUGFIX] Cast autoload and classAl= iasMap to Array (Michel Georgy) 2013-08-29 f1ab499 #51509 [BUGFIX] Add missing API method Fi= leInterface::getNameWithoutExtension (Ernesto Baschny) 2013-08-28 2c8a999 #36244 [BUGFIX] Exclude empty passwords f= rom password hashing check (Nicole Cordes) 2013-08-27 05fccd0 #50234 [TASK] Make the extension titles l= ink to the configuration (Nicole Cordes) 2013-08-27 774a1e0 #51304 [BUGFIX] Hide translations in cate= gories selector (Francois Suter) 2013-08-27 ed32255 #50870 [BUGFIX] Tests in Localization\Par= ser\LocallangXmlParserTest fail (Nicole Cordes) 2013-08-27 f7e4a7e #50760 [BUGFIX] Escape title tag of image= links (Alexander Stehlik) 2013-08-27 7bd1009 #25327,#37026 [BUGFIX] Page tree filtering broke= n in IE7 & IE8 (Aske Ertmann) 2013-08-25 a735101 #51209 [BUGFIX] Ignore permission checks = for processed files (Helmut Hummel) 2013-08-20 910d820 #37892 [BUGFIX] No version overlay should= be done for sys_language (Lienhart Woitok) 2013-08-20 19a811d #46989 [BUGFIX] Files with unclean path i= ndexed multiple times (Stefan Neufeind) 2013-08-18 fb7b686 #50614 [TASK] FilesContentObject::stdWrap= Value(): only execute stdWrap once (Stefan Neufeind) 2013-08-18 d368497 #43428 [BUGFIX] Language-module icons nee= d to display in correct size (Stefan Neufeind) 2013-08-17 fbbad86 #30636 [BUGFIX] TCA: subtypes_addlist not= processed (Benjamin Mack) 2013-08-17 f39a79d #47844 [BUGFIX] Query parameters of exter= nal link may get altered (Stanislas Rolland) 2013-08-16 a09dc5f #51115 [TASK] Disable scheduler-tests if = EXT:scheduler not loaded (Anja Leichsenring) 2013-08-16 8dfaf9c #51004 [BUGFIX] Fix file permission metho= ds in BackendUserAuthentication (Helmut Hummel) 2013-08-16 db51023 #51007 [BUGFIX] Fix inconsistencies in ge= tTSConfig in BackenuserAuth (Helmut Hummel) 2013-08-16 221a435 Revert "[BUGFIX] Fix inconsistenci= es in getTSConfig in BackenuserAuth" (Helmut Hummel) 2013-08-16 8b33a0d Revert "[BUGFIX] Fix file permissi= on methods in BackendUserAuthentication" (Helmut Hummel) 2013-08-15 d3b7851 #51007 [BUGFIX] Fix inconsistencies in ge= tTSConfig in BackenuserAuth (Helmut Hummel) 2013-08-15 329645c #51004 [BUGFIX] Fix file permission metho= ds in BackendUserAuthentication (Helmut Hummel) 2013-08-14 61506bb #46094 [BUGFIX] Avoid usage of subheader = in mailform (Francois Suter) 2013-08-12 d7ef5a9 #47806 [BUGFIX] Typing after abbr or acro= nym tag is difficult (Stanislas Rolland) 2013-08-12 c8a83e7 #50193 [BUGFIX] FAL: Image Processing doe= sn't respect GFX "thumbnails_png" (Benjamin Mack) 2013-08-12 7b16232 #51010 [BUGFIX] Allow reading files if st= orage is not browsable (Helmut Hummel) 2013-08-11 f92dbbd #51005 [BUGFIX] Take into account all fil= e and folder permissions (Helmut Hummel) 2013-08-11 4943a8f #50844 [BUGFIX] Failing tests in Resource= \Driver\LocalDriverTest on Windows (Nicole Cordes) 2013-08-11 ac39140 #51012 [BUGFIX] Missing \TYPO3\CMS\Core\U= tility\ in ResourceFactory (Wouter Wolters) 2013-08-11 55446c5 #51011 [TASK] Add signal in ResourceFacto= ry for storage creation (Helmut Hummel) 2013-08-11 271e801 #44910 [BUGFIX] LocalDriver: Recursive fi= le listing is broken (Andreas Wolf) 2013-08-11 4978ea7 #50502 [BUGFIX] rtehtmlarea acronym error= with static_info_tables 6.0+ (Stanislas Rolland) 2013-08-08 150e458 #48523 [BUGFIX] Reports module tries to l= oad not-installed extension (Wouter Wolters) 2013-08-08 8ed8066 #50868 [BUGFIX] number_format() expects p= arameter 1 to be double (Wouter Wolters) 2013-08-07 98bc16b #50568 [BUGFIX] Ignore case in file exten= sion filter (Alexander Stehlik) 2013-08-07 20df928 #50872 [BUGFIX] Correctly set user storag= e permissions (Helmut Hummel) 2013-08-07 c941199 #50867 [TASK] Introduce AbstractHierarchi= calFilesystemDriver (Steffen Ritter) 2013-08-07 f3f221d #50843 [BUGFIX] Failing Resource\FactoryT= est on Windows systems (Nicole Cordes) 2013-08-07 c75eefb #47106 [BUGFIX] Indexing of external file= s does not work in indexed_search (Wouter Wolters) 2013-08-07 80aeb3a #50562 [BUGFIX] Callback in CrawlerHook o= f indexed_search sysext buggy (Marius B=FCscher) 2013-08-07 647d075 #50812 [BUGFIX] Backup singletons in unit= tests prior to other setUp operations (Nicole Cordes) 2013-08-06 5250c54 #50628 [BUGFIX] Fix EmConfUtility::fixEmC= onf conflicts generation (Sascha Egerer) 2013-08-06 e3d9d7b #50125 [BUGFIX] Incorrect check for empty= folder (Philipp Gampe) 2013-08-06 0f2a29d #50615 [TASK] Use magic __CLASS__ in getI= nstance()-methods (Stefan Neufeind) 2013-08-06 ad9328c #50751 [BUGFIX] Fix empty href parameter = (Anja Leichsenring) 2013-08-06 9e407f0 #50809 [BUGFIX] Fix failing test in Stora= geRepositoryTest (Anja Leichsenring) 2013-08-06 449dc72 #50803 [BUGFIX] Fatal error: "enableField= s on non-object" in extension manager (Ernesto Baschny) 2013-08-04 3cd1045 #50466 [BUGFIX] MySQL: Use ENGINE (not TY= PE) for storage-engine (Stefan Neufeind) 2013-08-01 db1c38b #43893 [BUGFIX] selected =3D 1 doesn't wo= rk in FormContentObject (Wouter Wolters) 2013-08-01 f827fc9 #47123 [BUGFIX] Suppress double page entr= y in temporary mounted pagetree (Frank Frewer) 2013-07-31 2feccc5 #36031 [TASK] Provide information about i= mport action in TCEmain to hooks (Stefan Galinski) 2013-07-31 07f3578 #43631 [BUGFIX] RTE wizard can't "save do= cument and view page" (Stanislas Rolland) To generate a diff of this commit: cvs rdiff -u -r1.2.2.1 -r1.2.2.2 pkgsrc/www/typo3_60/Makefile \ pkgsrc/www/typo3_60/PLIST pkgsrc/www/typo3_60/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.