Log message:
Pullup ticket #3907 - requested by
www/typo3_46 security update

Revisions pulled up:
- www/typo3_46/Makefile                                         1.12-1.13
- www/typo3_46/PLIST                                            1.6-1.7
- www/typo3_46/distinfo                                         1.11-1.12

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sun Aug 12 15:52:21 UTC 2012

   Modified Files:
   	pkgsrc/www/typo3_46: Makefile PLIST distinfo

   Log message:
   Update typo3_46 to 4.6.11.

   2012-08-08  74fd6bb                  [RELEASE] Release of TYPO3 4.6.11 (TYPO3 \ 
Release Team)
   2012-08-08  e809cd3                  [TASK] Raise submodule pointer (TYPO3 \ 
Release Team)
   2012-08-07  a5cd4df  #39583          [BUGFIX] Exception "Could not \ 
create directory" (Michael Klapper)
   2012-08-05  e96eedc  #39527          [BUGFIX] Pass $fieldName when processing \ 
FlexForm DS in t3lib_transferData (Claus Due)
   2012-08-03  b6a6c6d  #39509          [BUGFIX] t3lib_db - expects parameter 1 \ 
to be resource, boolean given (Michael Klapper)
   2012-08-01  731d547  #32282          [BUGFIX] unlink issues warnings for lock \ 
files (Markus Klein)
   2012-08-01  38ca29a  #38849          [BUGFIX] IRRE childs don't expand in \ 
Internet Explorer (Stefan Aebischer)
   2012-08-01  fef9743  #39417          [BUGFIX] t3lib_db::exec_SELECTgetRows \ 
method annotation (Nicole Cordes)
   2012-07-31  102d0c8  #33625          [BUGFIX] Properly check disabled \ 
versioning within tcemain (Tolleiv Nietsch)
   2012-07-30  aef25cd  #22152          [BUGFIX] PHP warnings may show up in the \ 
List module (Dmitry Dulepov)
   2012-07-29  689bb9d  #31278          [BUGFIX] Shell command arguments are not \ 
escaped (Dmitry Dulepov)
   2012-07-26  349da10  #26815          [BUGFIX] RTE transformation transforms \ 
LF/CR between div and hr into space (Stanislas Rolland)
   2012-07-25  ce5ba95  #35154,#38691   [BUGFIX] Exclude E_STRICT from errors \ 
with PHP 5.4 (Philipp Gampe)
   2012-07-25  8affd66  #38604          [TASK] Always return a boolean in \ 
t3lib_div::validPathStr (Andy Grunwald)
   2012-07-24  f35b46d  #39220          [BUGFIX] Invalid fallback for \ 
non-localized labels (Xavier Perseguers)
   2012-07-24  bde9302  #33082          [TASK] Improve error message of \ 
"broken rootline" (Georg Ringer)
   2012-07-23  8621c14  #34152          [BUGFIX] stdWrap numRows fails due to \ 
wrong SELECT clause (Ernesto Baschny)
   2012-07-22  612d705  #33895          [BUGFIX] Update extension must \ 
invalidate autoloader cache (Philipp Gampe)
   2012-07-21  37ecea2                  [TASK] Raise submodule pointer (TYPO3 \ 
Release Team)
   2012-07-20  8851d23  #39026          [BUGFIX] QT movies prefixed abusively in \ 
Media CE (Francois Suter)
   2012-07-20  2b103fa  #39052          [BUGFIX] Send sane HTTP response in \ 
showpic on error (Christian Kuhn)
   2012-07-15  9a71681  #38104          [BUGFIX] Remove bogus template in \ 
template analyzer (Helmut Hummel)
   2012-07-12  3d19540  #24626          [BUGFIX] Drag&Drop inside the root \ 
page of the pagetree isn't possible (Stefan Galinski)
   2012-07-12  cdee4ff  #33546          [BUGFIX] Check if user is allowed to \ 
paste page to pagetree (Max Roesch)
   2012-07-12  c3e4fcb  #36313          [BUGFIX] Add rootline workspace overlay \ 
for backend_layouts. (Timo Webler)
   2012-07-09  2fd0f62  #38791          [BUGFIX] accessibilityWrap ignores \ 
simple value (Jigal van Hemert)
   2012-07-07  cb139fe  #18771          [BUG] t3lib_div::getFilesInDir order \ 
differs from order in Filelist (Benjamin Mack)
   2012-07-06  d693daa  #36316          [BUGFIX] RTE: Importing google webfonts \ 
breaks style sheet parsing (Stanislas Rolland)
   2012-07-05  78a7a0c  #36438          [BUGFIX] RTE spellcheck issue on Windows \ 
server (Stanislas Rolland)
   2012-07-05  999624f  #38658          [BUGFIX] RTE 4.6: Force IE9 to use IE8 \ 
mode in frontend (Stanislas Rolland)

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Aug 15 13:51:01 UTC 2012

   Modified Files:
   	pkgsrc/www/typo3_46: Makefile PLIST distinfo

   Log message:
   Update typo3_46 to 4.6.12.

   This release fixes several security problems TYPO3-CORE-SA-2012-004,

   \ 
<http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/>

   2012-08-15  a1e439e                  [RELEASE] Release of TYPO3 4.6.12 (TYPO3 \ 
Release Team)
   2012-08-15  7a839a3  #21634          [SECURITY] XSS in install tool (Mario Rimann)
   2012-08-15  2ae69c8  #32653          [SECURITY] Page Link Target vulnerable \ 
to XSS (Markus Bucher)
   2012-08-15  1eaebd3  #25052          [SECURITY] XSS in validateForm (Markus \ 
Bucher)
   2012-08-15  9b2b8fb  #25356          [SECURITY] XSS in TCE forms (Christian Kuhn)
   2012-08-15  6376643  #30967          [SECURITY] XSS in Scheduler Example Task \ 
(Mario Rimann)
   2012-08-15  a4a20e9  #37127          [SECURITY] HTML5 support in RemoveXSS \ 
(Franz G. Jahn)
   2012-08-15  829e391  #39345          [SECURITY] Information Disclosure in the \ 
Configuration Module (Mario Rimann)
   2012-08-15  dc6529c  #33520          [SECURITY] Untrusted GP data is \ 
unserialized in old CSH handling (Helmut Hummel)
   2012-08-15  8c0b4dc  #31927          [SECURITY] XSS in Indexed Search \ 
statistics (Steffen Gebert)
   2012-08-15  4c8c0fd  #23226          [SECURITY] t3lib_div::quoteJSvalue \ 
allows XSS (Helmut Hummel)

Log message:
Pullup ticket #3851 - requested by taca
www/typo3_46: security update

Revisions pulled up:
- www/typo3_46/Makefile                                         1.11
- www/typo3_46/PLIST                                            1.5
- www/typo3_46/distinfo                                         1.10

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jul  5 14:23:04 UTC 2012

   Modified Files:
   	pkgsrc/www/typo3_46: Makefile PLIST distinfo

   Log message:
   Update typo3_46 to 4.6.10 (TYPO3 4.6.10).

   Fix XSS in swfupload.

   2012-07-04  38d29a9                  [RELEASE] Release of TYPO3 4.6.10 =
   (TYPO3 Release Team)
   2012-07-04  96ccf99  #38578          [SECURITY] XSS in swfupload (Olive=
   r Hader)
   2012-07-04  ac6fda8                  [TASK] Raise submodule pointer (TY=
   PO3 Release Team)
   2012-07-04  d8f537d  #35154          [BUGFIX] Exclude E_STRICT from exc=
   eptionalErrors (Mario Rimann)
   2012-07-04  b061b84  #37615          [BUGFIX] IRRE records can't be exp=
   anded without an hidden field (Oliver Hader)
   2012-07-04  ca50ec0  #29254          [BUGFIX] TSFE->additionalFooterDat=
   a for USER_INT (Oliver Hader)
   2012-07-03  e4267b5  #38574          [BUGFIX] In IE9, RTE does not work=
    correctly in compat modes IE8/IE7 (Stanislas Rolland)
   2012-07-03  0b98eb7                  Revert "[BUGFIX] In IE9, RTE does =
   not work correctly in compat modes IE8/IE7" (Stanislas Rolland)
   2012-07-03  2a25577  #38574          [BUGFIX] In IE9, RTE does not work=
    correctly in compat modes IE8/IE7 (Stanislas Rolland)
   2012-07-02  8d1d267  #34786          [BUGFIX] Custom HTML tags no longe=
   r malformed in IE (Bart Dubelaar)
   2012-07-01  3b74b25  #38511          [BUGFIX] Remove a rather dubious u=
   nit test for Redis cache backend (Christian Kuhn)
   2012-06-30  3d24c7e  #33446          [BUGFIX] canBeInterpretedAsInteger=
    fatals if given an object (Philipp Gampe)
   2012-06-30  09e1a88  #38501          [BUGFIX]  Fix unit test failure if=
    gif compress is disabled (Susanne Moog)
   2012-06-30  7ff3dce  #35915          [BUGFIX] VariableFrontend initiali=
   zeObject not called (Daniel P=F6tzinger)
   2012-06-30  68125fa  #37618          [BUGFIX] Remove class of td if "No=
    CSS styles for this table" is set (Juergen Furrer)
   2012-06-30  e4ce956  #36290          [BUGFIX] Markers (%s) are not repl=
   aced in TCEmain error messages (Bart Dubelaar)
   2012-06-30  2c83967  #33444          [BUGFIX] Fatal error in configurat=
   ion ($BE_USER->uc) (Susanne Moog)
   2012-06-29  065670f  #38357          [TASK] Add travis configuration fi=
   le (Helmut Hummel)
   2012-06-29  0712cc1  #36093          [BUGFIX] Reports: Wrong indication=
    for saltedpasswords (Markus Klein)
   2012-06-28  56c9837  #37541          [BUGFIX] Declaration of tx_rtehtml=
   area_base::drawRTE() not compatible (Stanislas Rolland)
   2012-06-28  825886e  #34303          [BUGFIX] IRRE hide/unhide broken (=
   dkd-egerer Sascha Egerer)
   2012-06-28  fa1d287  #34685          [TASK] PHP 5.4 adjustments (Markus=
    Klein)
   2012-06-28  0f6bc15  #36194          [BUGFIX] Ensure $output is used as=
    string (Peter Niederlag)
   2012-06-27  c75df95  #32773          [BUGFIX] fe_adminLib.inc uses unde=
   fined function (Sven Burkert)
   2012-06-21  0602c31  #36300          [BUGFIX] Properly load existing us=
   ergroups in task (Bart Dubelaar)
   2012-06-17  4526c0d  #36777          [BUGFIX] Unnecessary warning in cs=
   s_styled_content (division by zero) (Thomas Layh)
   2012-06-13  98ccffb  #35944          [BUGFIX] Hide the field "Selected =
   Pages" for menu type "Sitemap" (Marco Huber)
   2012-05-30  4114744  #21943          [BUGFIX] redirect to referrer when=
    changing password (Jigal van Hemert)
   2012-05-28  c32cf60  #37553          BUGFIX] Illegal string offset (Jig=
   al van Hemert)