Wed Mar 28 12:57:23 2012 UTC ()
Update typo3_45 to 4.5.14.

Fix security problem of https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/.

2012-03-28  c8acf67                  [RELEASE] Release of TYPO3 4.5.14 (TYPO3 v4 Release Team)
2012-03-28  1d769c4  #22748          [SECURITY] Missing escaping for sys_notes (Georg Ringer)
2012-03-28  b128c41  #30969          [SECURITY] XSS for extension meta data in About module (Oliver Klee)
2012-03-28  4dc50cb  #29397          [SECURITY] XSS in show item (Christian Kuhn)
2012-03-28  7b4e3cb  #24474          [SECURITY] Missing escaping in scheduler (Georg Ringer)
2012-03-28  d9065bd  #30940          [SECURITY] XSS in BE file list (Christian Kuhn)
2012-03-28  0b925b6  #30188          [SECURITY] XSS possibility in RemoveXSS (Andreas Wolf)
2012-03-28  e8ceb36  #25246          [!!!][SECURITY] XSS in filelink element (Georg Ringer)
2012-03-28  fa6a103  #29536          [SECURITY] XSS in be_layouts (Georg Ringer)
2012-03-28  784ffda  #29060          [SECURITY] Information disclosure showing DB name (Georg Ringer)
2012-03-28  a4d4c22                  [TASK] Raise submodule pointer (TYPO3 v4 Release Team)
2012-03-28  45472a9  #35260          [BUGFIX] Missing column in t3lib_TCEmain::getPreviousLocalizedRecordUid (Francois Suter)
2012-03-26  7689dca  #35158          [TASK] Clean-up PHPdoc comments in t3lib_PageRenderer (Kai Vogel)
2012-03-26  afdbb20  #35159          [BUGFIX] Instance properties are defined statically (Kai Vogel)
2012-03-25  0c5402a  #34771          [TASK] Add missing sql_free_result in alt_doc.php (Wouter Wolters)
2012-03-25  c828d02  #35176          [BUGFIX] Tooltips for items in groupfields are not moved (Jigal van Hemert)
2012-03-24  0b32e02  #33791          [BUGFIX] Blank page after Save+Close in page settings (Stefan Galinski)
2012-03-23  35153e9  #35160          [TASK] Code clean-up in t3lib_PageRenderer (Oliver Hader)
2012-03-22  c59bd15  #35148          [BUGFIX] Non-static methods in t3lib_cache are called statically (Steffen M将舁ler)
2012-03-22  7059684  #30050          [BUGFIX] t3lib_div should contain only static methods (Jigal van Hemert)
2012-03-18  8ae8604  #32756          Revert "[BUGFIX] showAccessRestrictedPages doesn't replace links to restricted subpages" (Helmut Hummel)
2012-03-17  f25023e  #30847          [BUGFIX] Fix baseurl handling of IE with RTE htmlArea in FE and realurl (Stanislas Rolland)
2012-03-16  56ef45d  #34662          [BUGFIX] Fatal error 't3lib_lock' does not exist (Oliver Hader)


(taca)
diff -r1.7 -r1.8 pkgsrc/www/typo3_45/Makefile
diff -r1.6 -r1.7 pkgsrc/www/typo3_45/distinfo
cvs diff -r1.7 -r1.8 pkgsrc/www/typo3_45/Attic/Makefile (switch to unified diff)

--- pkgsrc/www/typo3_45/Attic/Makefile 2012/03/13 13:13:52 1.7
+++ pkgsrc/www/typo3_45/Attic/Makefile 2012/03/28 12:57:23 1.8
@@ -1,97 +1,97 @@ @@ -1,97 +1,97 @@
1# $NetBSD: Makefile,v 1.7 2012/03/13 13:13:52 taca Exp $ 1# $NetBSD: Makefile,v 1.8 2012/03/28 12:57:23 taca Exp $
2# 2#
3 3
4DISTNAME= ${TYPO3NAME} 4DISTNAME= ${TYPO3NAME}
5PKGNAME= typo3-${VER} 5PKGNAME= typo3-${VER}
6CATEGORIES= www 6CATEGORIES= www
7MASTER_SITES= ${MASTER_SITE_SOURCEFORGE:=typo3/} 7MASTER_SITES= ${MASTER_SITE_SOURCEFORGE:=typo3/}
8DISTFILES= ${TYPO3NAME}${EXTRACT_SUFX} ${SITESRC}${EXTRACT_SUFX} 8DISTFILES= ${TYPO3NAME}${EXTRACT_SUFX} ${SITESRC}${EXTRACT_SUFX}
9 9
10MAINTAINER= taca@NetBSD.org 10MAINTAINER= taca@NetBSD.org
11HOMEPAGE= http://typo3.com/ 11HOMEPAGE= http://typo3.com/
12COMMENT= The TYPO3 content management system LTS release. 12COMMENT= The TYPO3 content management system LTS release.
13LICENSE= gnu-gpl-v2 13LICENSE= gnu-gpl-v2
14 14
15DEPENDS+= ${PHP_PKG_PREFIX}-{mysql,pgsql}>=5.1.0:../../databases/php-mysql 15DEPENDS+= ${PHP_PKG_PREFIX}-{mysql,pgsql}>=5.1.0:../../databases/php-mysql
16DEPENDS+= ${PHP_PKG_PREFIX}-zlib>=5.2.0:../../archivers/php-zlib/ 16DEPENDS+= ${PHP_PKG_PREFIX}-zlib>=5.2.0:../../archivers/php-zlib/
17DEPENDS+= ${PHP_PKG_PREFIX}-json>=5.2.0:../../textproc/php-json 17DEPENDS+= ${PHP_PKG_PREFIX}-json>=5.2.0:../../textproc/php-json
18 18
19PKG_DESTDIR_SUPPORT= user-destdir 19PKG_DESTDIR_SUPPORT= user-destdir
20 20
21VER= 4.5.13 21VER= 4.5.14
22NO_BUILD= yes 22NO_BUILD= yes
23USE_TOOLS= pax 23USE_TOOLS= pax
24 24
25TYPO3NAME= typo3_src-${VER} 25TYPO3NAME= typo3_src-${VER}
26SITESRC= dummy-${VER} 26SITESRC= dummy-${VER}
27WRKSRC= ${WRKDIR}/${DISTNAME} 27WRKSRC= ${WRKDIR}/${DISTNAME}
28 28
29# maybe resides in lang/php/phpversion.mk 29# maybe resides in lang/php/phpversion.mk
30REPLACE_INTERPRETER+= php 30REPLACE_INTERPRETER+= php
31REPLACE.php.old= .*php[^ ]* 31REPLACE.php.old= .*php[^ ]*
32REPLACE.php.new= ${PREFIX}/bin/php 32REPLACE.php.new= ${PREFIX}/bin/php
33REPLACE_FILES.php= typo3/cli_dispatch.phpsh 33REPLACE_FILES.php= typo3/cli_dispatch.phpsh
34 34
35TYPO3DATADIR= fileadmin fileadmin/_temp_ fileadmin/user_upload \ 35TYPO3DATADIR= fileadmin fileadmin/_temp_ fileadmin/user_upload \
36 typo3conf typo3conf/ext typo3conf/l10n typo3temp uploads \ 36 typo3conf typo3conf/ext typo3conf/l10n typo3temp uploads \
37 uploads/media uploads/pics uploads/tf 37 uploads/media uploads/pics uploads/tf
38 38
39BUILD_DEFS+= APACHE_GROUP 39BUILD_DEFS+= APACHE_GROUP
40 40
41FILES_SUBST+= TYPO3DIR=${TYPO3DIR:Q} SITEDIR=${SITEDIR:Q} 41FILES_SUBST+= TYPO3DIR=${TYPO3DIR:Q} SITEDIR=${SITEDIR:Q}
42PLIST_SUBST+= EGDIR=${EGDIR:Q} SITEDIR=${SITEDIR:Q} \ 42PLIST_SUBST+= EGDIR=${EGDIR:Q} SITEDIR=${SITEDIR:Q} \
43 TYPO3DIR=${TYPO3DIR:Q} TYPO3NAME=${TYPO3NAME:Q} 43 TYPO3DIR=${TYPO3DIR:Q} TYPO3NAME=${TYPO3NAME:Q}
44 44
45EGDIR= share/examples/typo3 45EGDIR= share/examples/typo3
46 46
47INSTALLATION_DIRS+= ${EGDIR} ${TYPO3DIR}/${SITEDIR} ${TYPO3DIR}/${TYPO3NAME} 47INSTALLATION_DIRS+= ${EGDIR} ${TYPO3DIR}/${SITEDIR} ${TYPO3DIR}/${TYPO3NAME}
48 48
49CONF_FILES_PERMS+= ${EGDIR}/localconf.php \ 49CONF_FILES_PERMS+= ${EGDIR}/localconf.php \
50 ${TYPO3DIR}/${SITEDIR}/typo3conf/localconf.php \ 50 ${TYPO3DIR}/${SITEDIR}/typo3conf/localconf.php \
51 ${REAL_ROOT_USER} ${APACHE_GROUP} 0660 51 ${REAL_ROOT_USER} ${APACHE_GROUP} 0660
52 52
53.for d in ${TYPO3DATADIR} 53.for d in ${TYPO3DATADIR}
54OWN_DIRS_PERMS+= ${TYPO3DIR}/${SITEDIR}/${d} ${REAL_ROOT_USER} \ 54OWN_DIRS_PERMS+= ${TYPO3DIR}/${SITEDIR}/${d} ${REAL_ROOT_USER} \
55 ${APACHE_GROUP} 0770 55 ${APACHE_GROUP} 0770
56CHECK_PERMS_SKIP+= ${TYPO3DIR}/${SITEDIR}/${d} 56CHECK_PERMS_SKIP+= ${TYPO3DIR}/${SITEDIR}/${d}
57.endfor 57.endfor
58 58
59SUBST_CLASSES+= conf 59SUBST_CLASSES+= conf
60SUBST_FILES.conf+= ${WRKDIR}/README 60SUBST_FILES.conf+= ${WRKDIR}/README
61SUBST_FILES.conf+= ${WRKSRC}/t3lib/config_default.php 61SUBST_FILES.conf+= ${WRKSRC}/t3lib/config_default.php
62SUBST_SED.conf+= -e 's|@PREFIX@|${PREFIX:Q}|g' 62SUBST_SED.conf+= -e 's|@PREFIX@|${PREFIX:Q}|g'
63SUBST_SED.conf+= -e 's|@TYPO3DIR@|${TYPO3DIR:Q}|g' 63SUBST_SED.conf+= -e 's|@TYPO3DIR@|${TYPO3DIR:Q}|g'
64SUBST_SED.conf+= -e 's|@SITEDIR@|${SITEDIR:Q}|g' 64SUBST_SED.conf+= -e 's|@SITEDIR@|${SITEDIR:Q}|g'
65SUBST_STAGE.conf= post-configure 65SUBST_STAGE.conf= post-configure
66 66
67PRINT_PLIST_AWK+= /^${EGDIR:S|/|\\/|g}/ \ 67PRINT_PLIST_AWK+= /^${EGDIR:S|/|\\/|g}/ \
68 { gsub(/${EGDIR:S|/|\\/|g}/, "$${EGDIR}") } 68 { gsub(/${EGDIR:S|/|\\/|g}/, "$${EGDIR}") }
69PRINT_PLIST_AWK+= /^${TYPO3DIR:S|/|\\/|g}\/${TYPO3NAME}/ \ 69PRINT_PLIST_AWK+= /^${TYPO3DIR:S|/|\\/|g}\/${TYPO3NAME}/ \
70 { gsub(/${TYPO3DIR:S|/|\\/|g}\/${TYPO3NAME}/, \ 70 { gsub(/${TYPO3DIR:S|/|\\/|g}\/${TYPO3NAME}/, \
71 "$${TYPO3DIR}/$${TYPO3NAME}") } 71 "$${TYPO3DIR}/$${TYPO3NAME}") }
72PRINT_PLIST_AWK+= /^${TYPO3DIR:S|/|\\/|g}\/${SITEDIR}/ \ 72PRINT_PLIST_AWK+= /^${TYPO3DIR:S|/|\\/|g}\/${SITEDIR}/ \
73 { gsub(/${TYPO3DIR:S|/|\\/|g}\/${SITEDIR}/, \ 73 { gsub(/${TYPO3DIR:S|/|\\/|g}\/${SITEDIR}/, \
74 "$${TYPO3DIR}/$${SITEDIR}") } 74 "$${TYPO3DIR}/$${SITEDIR}") }
75 75
76.include "../../mk/bsd.prefs.mk" 76.include "../../mk/bsd.prefs.mk"
77 77
78SITEDIR?= www 78SITEDIR?= www
79TYPO3DIR?= share/typo3 79TYPO3DIR?= share/typo3
80 80
81post-extract: 81post-extract:
82 ${CP} ${FILESDIR}/README ${WRKDIR} 82 ${CP} ${FILESDIR}/README ${WRKDIR}
83 83
84pre-install: 84pre-install:
85 ${FIND} ${WRKSRC:Q} -name "*.orig*" -exec ${RM} -f {} \; 85 ${FIND} ${WRKSRC:Q} -name "*.orig*" -exec ${RM} -f {} \;
86 86
87do-install: 87do-install:
88 cd ${WRKSRC}; \ 88 cd ${WRKSRC}; \
89 pax -rw . ${DESTDIR}${PREFIX}/${TYPO3DIR}/${TYPO3NAME} 89 pax -rw . ${DESTDIR}${PREFIX}/${TYPO3DIR}/${TYPO3NAME}
90 cd ${WRKDIR}/${SITESRC}; \ 90 cd ${WRKDIR}/${SITESRC}; \
91 pax -rw . ${DESTDIR}${PREFIX}/${TYPO3DIR}/${SITEDIR} 91 pax -rw . ${DESTDIR}${PREFIX}/${TYPO3DIR}/${SITEDIR}
92 ${RM} -f ${DESTDIR}${PREFIX}/${TYPO3DIR}/${SITEDIR}/typo3conf/localconf.php 92 ${RM} -f ${DESTDIR}${PREFIX}/${TYPO3DIR}/${SITEDIR}/typo3conf/localconf.php
93 ${INSTALL_DATA} ${WRKDIR}/${SITESRC}/typo3conf/localconf.php \ 93 ${INSTALL_DATA} ${WRKDIR}/${SITESRC}/typo3conf/localconf.php \
94 ${DESTDIR}${PREFIX}/${EGDIR} 94 ${DESTDIR}${PREFIX}/${EGDIR}
95 95
96.include "../../lang/php/phpversion.mk" 96.include "../../lang/php/phpversion.mk"
97.include "../../mk/bsd.pkg.mk" 97.include "../../mk/bsd.pkg.mk"
cvs diff -r1.6 -r1.7 pkgsrc/www/typo3_45/Attic/distinfo (switch to unified diff)

--- pkgsrc/www/typo3_45/Attic/distinfo 2012/03/13 13:13:52 1.6
+++ pkgsrc/www/typo3_45/Attic/distinfo 2012/03/28 12:57:23 1.7
@@ -1,9 +1,9 @@ @@ -1,9 +1,9 @@
1$NetBSD: distinfo,v 1.6 2012/03/13 13:13:52 taca Exp $ 1$NetBSD: distinfo,v 1.7 2012/03/28 12:57:23 taca Exp $
2 2
3SHA1 (dummy-4.5.13.tar.gz) = fa03918815a3f1a30a9630b914547903be0a136c 3SHA1 (dummy-4.5.14.tar.gz) = a9dd9e7a5377db281784c03ce8ba37f76b5a1950
4RMD160 (dummy-4.5.13.tar.gz) = 49199e3bee7ea86f7fcc6d56432e6c82128dda1c 4RMD160 (dummy-4.5.14.tar.gz) = 345c6da68adb18bc7344164dbf4e07ac79fa3309
5Size (dummy-4.5.13.tar.gz) = 9860 bytes 5Size (dummy-4.5.14.tar.gz) = 9856 bytes
6SHA1 (typo3_src-4.5.13.tar.gz) = 692d59fdc6ca658cde9d6e6e305ba3c55121e4b4 6SHA1 (typo3_src-4.5.14.tar.gz) = a055fb7d857e8251b57e93d2379870d31b000930
7RMD160 (typo3_src-4.5.13.tar.gz) = 2fdd17fc5dfc71fec868e0ba6d6a2f3d5e2bcf8e 7RMD160 (typo3_src-4.5.14.tar.gz) = 172ec6ad9e74e9267d7cc57e8f1e6ddafef03883
8Size (typo3_src-4.5.13.tar.gz) = 20535750 bytes 8Size (typo3_src-4.5.14.tar.gz) = 20539776 bytes
9SHA1 (patch-aa) = dd0847334b30215a822bcdcd9231862d7eab68a6 9SHA1 (patch-aa) = dd0847334b30215a822bcdcd9231862d7eab68a6