Path to this page:
Subject: CVS commit: [pkgsrc-2013Q3] pkgsrc/www/typo3_45
From: Matthias Scheler
Date: 2013-12-17 14:10:12
Message id: 20131217131012.9977E96@cvs.netbsd.org
Log Message:
Pullup ticket #4274 - requested by taca
www/typo3_45: security update
Revisions pulled up:
- www/typo3_45/Makefile 1.28-1.29
- www/typo3_45/PLIST 1.13
- www/typo3_45/distinfo 1.23-1.24
---
Module Name: pkgsrc
Committed By: taca
Date: Thu Dec 5 16:41:07 UTC 2013
Modified Files:
pkgsrc/www/typo3_45: Makefile distinfo
Log Message:
Update typo345 to 4.5.31 (TYPO3 4.5.31).
2013-11-26 434ce71 [RELEASE] Release of TYPO3 4.5.31 (TYPO3 \
Release Team)
2013-11-19 396534e #53758 [BUGFIX] Table cache_imagesizes is \
defined twice (Michiel Roos)
2013-11-19 3f2ed1d #53750 [BUGFIX] Scheduler extension sql file is \
invalid (Michiel Roos)
2013-11-15 428baac #17493 [BUGFIX] Fix broken edit icons on cType \
HTML (Stefan Neufeind)
2013-11-11 6755f40 #37948 [BUGFIX] Correctly append \
additionalTreelistUpdateFields (Bart Dubelaar)
2013-11-11 082facd #31998 [BUGFIX] Faulty check for missing SMTP \
port (Stefan Neufeind)
2013-11-09 c581f33 #29179 [BUGFIX] Escape title, extension, \
description of scheduler tasks (Stefan Neufeind)
2013-11-09 7b08aa9 #53195 [BUGFIX] T3editor: Honour \
fileDenyPattern on saving included TS (Stefan Neufeind)
2013-11-04 d372f5f #38055 [BUGFIX] Remove declare(encoding=) \
(Josef Florian Glatz)
2013-10-28 5ae438c #53075 [BUGFIX] Cannot auto-load SC_* classes \
(Ernesto Baschny)
2013-10-22 b5d6e9f #50881 [TASK] Added missing core autoloaded \
files (Ernesto Baschny)
2013-10-13 5b072ff #52759 [BUGFIX] Object passed to date() \
(Philipp Gampe)
2013-10-12 6371e46 #52104 [BUGFIX] Wrong calculation of maximum \
value for checkbox fields (Nicole Cordes)
2013-10-12 78871e2 #37611 [BUGFIX] Select available page when \
changing WS (Thorsten Kahler)
2013-10-11 ce02c01 #36573 [BUGFIX] Add workspace overlay for \
fetched records. (Anja Leichsenring)
2013-10-11 d114ddb #37065 [BUGFIX] Don't show duplicates in \
workspace preview (Timo Webler)
2013-10-06 3289c39 #52045 [BUGFIX] EmConfUtility accesses \
non-arrays (Markus Klein)
2013-09-27 cd1e12b #52091,#51684 [BUGFIX] Check for string before using \
strlen (Markus Klein)
2013-09-26 c8d2033 #34886 [BUGFIX] CF FileBackend unlimited \
lifetime support (Dominique Feyer)
2013-09-18 ef6dc06 [BUGFIX] Fix cropping of transparent \
gifs with im6. (Felix Bu$(Q+m(Bnemann)
2013-09-12 70ce540 #51803 [TASK] Use a 401 header if login is not \
successful (Georg Ringer)
---
Module Name: pkgsrc
Committed By: taca
Date: Tue Dec 10 15:18:33 UTC 2013
Modified Files:
pkgsrc/www/typo3_45: Makefile PLIST distinfo
Log Message:
Update typo3_45 package to 4.5.32 (TYPO3 4.5.32).
- Fix multiple vulnerabilities in TYPO3 CMS:
\
http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/
- Enable PHP_VERSIONS_ACCEPTED which was accidently commented out by previous
commit.
2013-12-10 1956962 [RELEASE] Release of TYPO3 4.5.32 (TYPO3 \
Release Team)
2013-12-10 60576d1 #31206 [SECURITY] XSS in header link of all \
content elements (Anja Leichsenring)
2013-12-10 77dc1c4 #42772 [SECURITY] XSS in colorpicker wizard \
(Anja Leichsenring)
2013-12-10 52d3bff #45043 [SECURITY] Prevent editor controlled \
hmac content (Franz G. Jahn)
2013-12-10 cae8739 #20811 [SECURITY] XSS vulnerability in \
extension manager (Marcus Krause)
2013-12-10 ba92f0a #41714 [SECURITY] Information Disclosure in \
Wizards (Anja Leichsenring)
2013-12-10 63ff910 #54099 [SECURITY] Fix open redirection in \
openid extension (Anja Leichsenring)
2013-12-10 c4d1336 #48187 [SECURITY] feuser_adminLib.inc allows to \
set arbitrary fields (Steffen Ritter)
2013-12-10 5342284 #36768 [SECURITY] XSS in be_layout wizard (Anja \
Leichsenring)
2013-12-10 b360a1a #54074 [SECURITY] Remove possible XSS from \
ActionController Error output (Anja Leichsenring)
2013-12-10 78ee538 #54073 [SECURITY] Unsafe unserialize of GET \
parameter in Add-Wizard (Marcus Krause)
2013-12-08 5aa4ab2 #54282 [BUGFIX] Fix failing test (Anja Leichsenring)
2013-12-08 6add221 #54280 [BUGFIX] Fix failing test (Anja Leichsenring)
2013-12-02 0c3fa95 #54124 [BUGFIX] ClientUtility does not detect \
Internet Explorer 11 (Stefan Neufeind)
2013-12-02 d353ab0 #54120 Revert "[BUGFIX] Object passed to \
date()" (Markus Klein)
2013-11-29 309e93a #42651 [BUGFIX] ext:adodb Restrict connection \
wizard to admins (Christian Kuhn)
2013-11-26 1d95cad #25157,#45550 [BUGFIX] Distinguish unassigend columns \
and colPos 0 (Philipp Gampe)
Files: