Log message:
Pullup ticket #4421 - requested by taca
www/typo3_61: security update

Revisions pulled up:
- www/typo3_61/Makefile                                         1.5
- www/typo3_61/PLIST                                            1.3
- www/typo3_61/distinfo                                         1.4

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue May 27 13:52:14 UTC 2014

   Modified Files:
   	pkgsrc/www/typo3_61: Makefile PLIST distinfo

   Log message:
   Update typo3_61 to 6.1.9 (TYPO3 6.1.9), contains several security fixes=
   .=

   2014-05-22  2bb8360                  [RELEASE] Release of TYPO3 6.1.9 (=
   TYPO3 Release Team)
   2014-05-22  6fafbf7  #30377          [SECURITY] Add trusted HTTP_HOST c=
   onfiguration (Helmut Hummel)
   2014-05-22  2994a1c  #54111,#54113   [SECURITY] XSS in (old) extension =
   manager information function (Nicole Cordes)
   2014-05-22  12741ad  #48695          [SECURITY] XSS in new content elem=
   ent wizard (Marcus Krause)
   2014-05-22  7595ad4  #54109          [SECURITY] XSS in template tools o=
   n root page (Marc Bastian Heinrichs)
   2014-05-22  6965806  #57576          [SECURITY] XSS in Backend Layout W=
   izard (Helmut Hummel)
   2014-05-22  54e4691  #48693          [SECURITY] Encode URL for use in J=
   avaScript (Jigal van Hemert)
   2014-05-22  b6826ff  #56458          [SECURITY] Fix insecure unserializ=
   e in colorpicker (Helmut Hummel)
   2014-05-22  32efb1b  #54526          [SECURITY] Remove charts.swf to ge=
   t rid of XSS vulnerability (Helmut Hummel)
   2014-05-21  6a91a90  #54917          [BUGFIX] Indexer tries to insert N=
   ULL into DB (Markus Klein)
   2014-05-15  3ee99e9  #58842          [BUGFIX] Wrong system requirements=
    link (Markus Klein)
   2014-05-14  f86e016  #58529          [BUGFIX] DependencyUtility does co=
   unt() on an integer (Markus Klein)
   2014-05-08  fb8370d  #58187          [BUGFIX] Solve stackoverflow in pr=
   ototype in IE8 (Jigal van Hemert)
   2014-05-08  3abc703  #58373          [BUGFIX] Default image title in RT=
   E contains the file name (Stanislas Rolland)
   2014-05-05  db90a26  #45183          [BUGFIX] Wrong result on empty str=
   ing globalString condition (Marc Bastian Heinrichs)
   2014-05-04  d422bf6  #58504          [BUGFIX] saltedpasswords: Check rs=
   aauth loading (Nicole Cordes)
   2014-05-04  05ef8fe  #58484          [BUGFIX] SoftReferenceIndex suppor=
   t for more values in class attribute (Marc Bastian Heinrichs)
   2014-05-02  a49ddfd  #58418          [BUGFIX] Retrieving extension fail=
   s with some PHP versions (Sascha Wilking)
   2014-04-29  0150f9c  #58166          [BUGFIX] Wrong comment in ActionMe=
   nuViewHelper (Markus Klein)
   2014-04-25  8cf4f78  #58180          [BUGFIX] Database query error for =
   non-workspaces tables (Oliver Hader)
   2014-04-16  a4f013a                  [TASK] Set TYPO3 version to 6.1.9-=
   dev (TYPO3 Release Team)

   2014-04-16  d94f80d                  [RELEASE] Release of TYPO3 6.1.8 (=
   TYPO3 Release Team)
   2014-04-16  68763fa  #57957          [BUGFIX] DBAL sql_fetch_* must ret=
   urn boolean or array (Jigal van Hemert)
   2014-04-16  65896ee  #24925,#24871   [BUGFIX] Followup: Mandatory for S=
   electbox with TCA not possible (Stefan Neufeind)
   2014-04-15  8e8b020  #24925,#24871   [BUGFIX] Mandatory for Selectbox w=
   ith TCA not possible (Benjamin Mack)
   2014-04-15  d124103  #56580          [BUGFIX] SoftReferenceIndex typoli=
   nk lacks support for title attributes (Marc Bastian Heinrichs)
   2014-04-15  6139c97  #56991          [BUGFIX] Fix refindex for FlexForm=
    fields type group file_reference (Marc Bastian Heinrichs)
   2014-04-15  1dbfe75  #56353,#56352   [BUGFIX] Fields of type group file=
    are not properly indexed (Marc Bastian Heinrichs)
   2014-04-15  b22b39d  #57010          [BUGFIX] Add SoftIndex parser typo=
   link to link in sys_file_reference (Marc Bastian Heinrichs)
   2014-04-15  5dd53b1  #51768          [TASK] Updates prototype and scrip=
   taculous, fixing IE9+ issues (Ernesto Baschny)
   2014-04-12  a60b6dc  #47694          [BUGFIX] Follow up foreign_match_f=
   ields not fully supported (Marc Bastian Heinrichs)
   2014-04-12  b93d9b4  #50378          [BUGFIX] sql_free_result does not =
   work with all allowed types (Wouter Wolters)
   2014-04-07  a896350  #57690          [BUGFIX] User settings do not obey=
    setup.override (Markus Klein)
   2014-04-05  21f0d12  #55683          [BUGFIX] ClickMenu: Visibility-opt=
   ions only if fields allowed (Stefan Neufeind)
   2014-04-04  2b3dd27  #57656          [TASK] Integrate default README.tx=
   t (Oliver Hader)
   2014-04-04  1329a96  #57603          [SECURITY] Prevent XSS in schedule=
   r form (Nicole Cordes)
   2014-04-01  6ae6b40  #57518          [BUGFIX] Make Extbase EnvironmentS=
   ervice a Singleton (Marc Bastian Heinrichs)
   2014-03-31  03ec17a  #57296          [BUGFIX] Test typeof TBE_EDITOR fo=
   r object not function (Alexander Opitz)
   2014-03-26  2b5c50e  #54394          [BUGFIX] Exception if thumbnail do=
   es not exist (Markus Klein)
   2014-03-24  cbdd065  #57238          [BUGFIX] Typo in Extbase localizat=
   ion file (Xavier Perseguers)
   2014-03-23  fc5b7b2  #57179          [BUGFIX] Module Menu throws PHP wa=
   rning for top level menu items (Benjamin Mack)
   2014-03-23  9b36936  #57202          [BUGFIX] Parsetime: config.debug s=
   hould override LocalConfiguration (Stefan Neufeind)
   2014-03-19  819218a  #55340          [BUGFIX] Several typos in Page Bro=
   wsing ViewHelper (Benjamin Rau)
   2014-03-19  f8233c1  #56205          [BUGFIX] Cannot use contain with m=
   ultivalued static enumeration column (Xavier Perseguers)
   2014-03-14  d5160a9  #56150          [BUGFIX] RootlineUtility does not =
   consider disablefield (Christian Reiter)
   2014-03-13  2a80fcd  #56855          [BUGFIX] Extbase tries to overlay =
   pages_language_overlay records (Stanislas Rolland)
   2014-03-13  2ee3509  #56720          [BUGFIX] Alignment of button "add =
   a new element at this place" (Patrick Broens)
   2014-03-13  bed1054  #56830          [BUGFIX] Show thumbnails in list m=
   odule (Markus Klein)
   2014-03-13  3800d8b  #56084          [BUGFIX] Followup: Ajax handler TY=
   PO3_tcefile::process is broken (Frans Saris)
   2014-03-12  d405041  #23864          [BUGFIX] Correctly validate New Co=
   ntent Element entries (Ludwig Rafelsberger)
   2014-03-10  06e5ad9  #52386          [BUGFIX] Allow record insert on ro=
   otlevel (Benjamin Serfhos)
   2014-03-08  2df9cb9  #43885          [BUGFIX] Temporary DB tree mount n=
   otice missing in ElementBrowser (Lorenz Ulrich)
   2014-03-07  472a2f2  #55457          [BUGFIX] RTE on first new IRRE rec=
   ord keeps loading in IE (Stanislas Rolland)
   2014-03-07  e61b2cf  #23552          [BUGFIX] Default size for group-ty=
   pe fields (Christian Plattner)
   2014-03-05  f8c9a77  #46185          [BUGFIX] IdentityProperties were n=
   ot set (Stefan Froemken)
   2014-03-05  e7cf550  #11771          [BUGFIX] Catch all errors while st=
   arting installer (Alexander Opitz)
   2014-03-03  28d25c9  #56262          [BUGFIX] Double escape of title in=
    indexed search (Markus Klein)
   2014-02-28  ded338b  #56378          [BUGFIX] Do not log with severity =
   1320177676 (Christian Weiske)
   2014-02-28  8f0ce1c  #56421          [BUGFIX] @return for TYPO3\CMS\Sv\=
   AuthenticationService::authUser (Christian Weiske)
   2014-02-28  342686b  #41413          [BUGFIX] URL-encoded title in link=
    wizard (Helmut Hummel)
   2014-02-27  5ce3128  #55966          [BUGFIX] Revert "[TASK] Use a 401 =
   header if login is not successful" (Markus Klein)
   2014-02-25  a5d8893  #56184          [BUGFIX] Paginator in TER list not=
    using ajax (Jigal van Hemert)
   2014-02-25  b4a8235  #23984          [BUGFIX] felogin reset password li=
   nks not clickable (Jigal van Hemert)
   2014-02-24  5da89e2  #56242          [BUGFIX] Fix JS concat if first fi=
   le is forced on top (Benjamin Kott)
   2014-02-21  c47d8c5  #54724          [BUGFIX] Use count on storage afte=
   r initialization of LazyObjectStorage (Marc Bastian Heinrichs)
   2014-02-21  6512f65  #49499          [BUGFIX] Fix possible language han=
   dling issue (Markus Klein)
   2014-02-20  b09e7f9  #39048          [BUGFIX] Rendering inline TCEforms=
    without AJAX is broken (Alexander Jahn)
   2014-02-20  c9ae284  #53116,#56019   [BUGFIX] concatenateJs/Css does no=
   t consider forceOnTop (Markus Klein)
   2014-02-20  b8eeb55  #56135          [BUGFIX] DatabaseConnection::listQ=
   uery wrong usage of strpos() (Markus Klein)
   2014-02-19  bd607e2  #55286          [BUGFIX] Suppress EXIF warnings in=
   dexing images (Felix Althaus)
   2014-02-19  45f944c  #56067          [BUGFIX] Various static calls to n=
   on-static functions (Markus Klein)
   2014-02-19  d2ef187  #56057          [BUGFIX] Add missing htmlspecialch=
   ars for thumbnail URL (Wouter Wolters)
   2014-02-18  b7169bb  #52955          [BUGFIX] Show labels of additional=
    doktypes in new page drag area (Caspar Stuebs)
   2014-02-18  7af5ad6  #54304          [BUGFIX] Missing encoding in flexf=
   orms IRRE javascript (Alexey Gafiulov)
   2014-02-17  48eab76  #52527          [BUGFIX] addToAllTCAtypes() doesn'=
   t add new field (Tomita Militaru)
   2014-02-17  6344793  #56037          [BUGFIX] Fix clipboard thumbnail r=
   endering (Frans Saris)
   2014-02-17  dc0ec8a  #55998          [BUGFIX] Usage of undefined variab=
   les in ShortcutToolbarItem (Tim Lochmueller)
   2014-02-17  52c294b  #55362          [BUGFIX] CommandController is not =
   executed at same time (Tom Ruether)
   2014-02-11  c9ffade  #49440          [BUGFIX] Missing label felogin_for=
   gotHash (Karol Lamparski)
   2014-02-11  edbef68  #53028          [BUGFIX] cache_clearAtMidnight con=
   flicts with content start/endtime (Dmitry Dulepov)
   2014-02-10  474380f                  [TASK] Execute lint in parallel (H=
   elmut Hummel)
   2014-02-09  e36633a  #53768,#28745   [BUGFIX] Allow to render the same =
   TS object twice (Markus Klein)
   2014-02-09  9971136  #55821          [BUGFIX] Tests: Remove unstable Ge=
   neralUtilityTest::getUrl* (Christian Kuhn)
   2014-02-09  101be25  #18797          [BUGFIX] "New page" wizard disclos=
   es existence of pages outside DB mount (Nicole Cordes)
   2014-02-09  5f6d783  #53564          [TASK] Add possibility creating ac=
   cessible mock for abstract classes (Marc Bastian Heinrichs)
   2014-02-08  cead255  #16491          [BUGFIX] CSV-Download not working =
   in IE and HTTPS backend (Wouter Wolters)
   2014-02-08  98c8e0a  #55698          [BUGFIX] Fix "action" labels in BE=
    log (Thorsten Kahler)
   2014-02-07  9e79487  #55611          [TASK] Move cursor::pointer to com=
   plete header area in IRRE (Georg Ringer)
   2014-02-06  79d2bac  #54131          [BUGFIX] Followup to #54131 (Frans=
    Saris)
   2014-02-06  ad267f8  #55713          [BUGFIX] Missing namespace in Cont=
   entObjectRenderer (Markus Klein)
   2014-02-05  27c1f61  #54112          [BUGFIX] Set missing markers to em=
   pty string (Bernhard Kraft)
   2014-02-04  4d7947a  #55434          [BUGFIX] Various PHP Warnings with=
    invalid credentials (Xavier Perseguers)
   2014-02-03  1263413  #54467          [BUGFIX] TSFE->altPageTitle can no=
   t be set in extensions (Markus Klein)
   2014-02-03  a070a5c  #54371          [BUGFIX] Add stdWrap on value prop=
   erty of TEXT (Markus Klein)
   2014-02-03  85b3fed  #52048          [BUGFIX] Locker throws exception i=
   f semaphore can not be acquired (Markus Klein)
   2014-02-02  af8f6eb  #54289          [BUGFIX] PropertyMapper does not w=
   ork with class aliasses (Frans Saris)
   2014-01-31  9596d4d  #54131          [BUGFIX] getLabelsFromItemsList() =
   retuns no value when no item found (Frans Saris)
   2014-01-30  3dcc61d  #55475          [BUGFIX] Regression in DataHandler=
    (Wouter Wolters)
   2014-01-30  a5e884f  #55458          [BUGFIX] DocumentTemplate class in=
   serts inDocStyles twice (Stefan Neufeind)
   2014-01-30  084b5a9  #41450          [BUGFIX] Handle empty tags in lang=
   uage pack index files (Alexander Stehlik)
   2014-01-29  b81c5d5  #55407          [BUGFIX] ClickMenu does not show d=
   estination-foldername (Stefan Neufeind)
   2014-01-28  d6803b7  #55350          [BUGFIX] Invalid constant in the d=
   omain redirect function (Tim Lochmueller)
   2014-01-27  91b1db0  #55377          [TASK] Change repository url for i=
   ntroduction package (Philipp Gampe)
   2014-01-27  1af64b0  #55366          [TASK] Change phpunit repository u=
   rl for travis (Philipp Gampe)
   2014-01-24  3cefa40  #53964          [BUGFIX] Better description of [BE=
   ][unzip_path]/[BE][diff_path] (Markus Klein)
   2014-01-24  041780f  #55093          [BUGFIX] Simulate time in TYPO3 ad=
   min panel broken (Peter Niederlag)
   2014-01-23  8f55af7  #53201          [BUGFIX] sys_category table not li=
   sted in allowed excludefields (Tomita Militaru)
   2014-01-23  eec8579  #53665          [BUGFIX] Removing single category =
   item not possible (Francois Suter)
   2014-01-23  57b70f7  #54849          [BUGFIX] CLI context cannot write =
   to backend log (Oliver Hader)
   2014-01-22  b865ad9  #55246          [BUGFIX] Class 'TYPO3\CMS\Recordli=
   st\Browser\GeneralUtility' not found (Oliver Hader)
   2014-01-21  c96321d  #37539          [BUGFIX] Static method cannot be a=
   bstract (Xavier Perseguers)
   2014-01-21  ae54769  #54884          [BUGFIX] RootlineUtility does not =
   consider foreign_sorting (Markus Klein)
   2014-01-16  0965b22  #53712          [BUGFIX] Create valid file referen=
   ce index data (Alexander Stehlik)
   2014-01-16  b7ce3ef  #50266          [BUGFIX] File browser fails on ine=
   xistent expandFolder (Mario Rimann)
   2014-01-15  429e13d  #34631          [BUGFIX] Show correct record title=
    for be_groups and be_users (Markus Klein)
   2014-01-15  5b23142  #54995          [BUGFIX] PHP warnings in ElementBr=
   owser (Markus Klein)
   2014-01-14  0ac8948  #54959          [TASK] Speedup typolink root-line =
   handling (Steffen Ritter)
   2014-01-14  714fca7  #53826          [BUGFIX] Folder tree in popup thro=
   ws JS error (Aske Ertmann)
   2014-01-14  f68832a  #53352          [BUGFIX] Add defaultTypoScript to =
   hierachyInfo (Peter Niederlag)
   2014-01-13  22d3be1  #51805          [BUGFIX] Template dropdown doesn't=
    refresh template title after save (Torben Hansen)
   2014-01-11  72f5d5a  #54909          [BUGFIX] Add missing logger names =
   (Steffen M=FCller)
   2014-01-09  2620cb5  #53975          [BUGFIX] Allow empty values in sta=
   rt/stop filter of belog (Steffen M=FCller)
   2014-01-09  c99a07a  #53862          [BUGFIX] isValidUrl() idna convert=
   s whole URI (Michiel Roos)
   2014-01-09  4e3e3dc  #52554          [TASK] Change list view delete ico=
   n if record is deleted in WS (Sascha Egerer)
   2014-01-09  f378b40  #31797          [BUGFIX] Properly escape the Image=
   Magick frame selector (Georg Ringer)
   2014-01-09  7d3eb35  #24877,#6708    [BUGFIX] Only create one keypair i=
   n rsaauth (Tom Ruether)
   2014-01-09  a31b325  #38767          [BUGFIX] use search word(s) for or=
   dering search results (again) (Ralf Hettinger)
   2014-01-08  03d6320  #47694          [BUGFIX] foreign_match_fields not =
   fully supported (Stefan Froemken)
   2014-01-08  e959451  #53727          [BUGFIX] Form Wizard saving destro=
   ys Radio Buttons (Markus Klein)
   2014-01-08  42a3eb3  #52133          [BUGFIX] Display relations' titles=
    when TCA label field is type inline (Claus Due)
   2014-01-07  272f80c  #54807          [BUGFIX] PageBrowsing ViewHelper d=
   efines unused method argument (Benjamin Rau)
   2014-01-07  e09b381  #54808          [BUGFIX] Repository uses wrong pro=
   perty to calc current result page (Benjamin Rau)
   2014-01-04  81a30e8  #53662          [BUGFIX] Allow NULL values in INSE=
   RT queries (Alexander Stehlik)
   2014-01-04  67ac84c  #53682          [TASK] Optimize speed for instanti=
   ating class with arguments (Helmut Hummel)
   2013-12-23  9283d4b  #54115          [BUGFIX] ClassAliasMap, Tx_ VH nam=
   espace and closing tag throws Exception (Claus Due)
   2013-12-21  8379b1a  #54531          [BUGFIX] Fix message for install t=
   ool warning (Cynthia Mattingly)
   2013-12-18  a95ab93  #54369          [TASK] Fix travis builds (Markus K=
   lein)
   2013-12-18  2a4d603  #51752          [BUGFIX] ArrayIterator::seek() war=
   ning in ElementBrowser (Markus Klein)
   2013-12-18  e4590fe  #52059          [BUGFIX] felogin: Unknown modifier=
    in regular expression (Wouter Wolters)
   2013-12-18  e8978f9  #47648          [BUGFIX] Remove ElementBrowser::is=
   ReadOnlyFolder (Markus Klein)
   2013-12-13  be7505a  #54027          [BUGFIX] No double htmlspecialchar=
   s for filemount select (Alexander Stehlik)
   2013-12-12  41fe22d  #53818          [BUGFIX] Cleanly unset cookies on =
   login in cookie-check (Stefan Neufeind)