Subject: CVS commit: pkgsrc/www/typo3_61
From: Takahiro Kambe
Date: 2014-05-27 15:52:14
Message id: 20140527135214.5825896@cvs.netbsd.org

Log Message:
Update typo3_61 to 6.1.9 (TYPO3 6.1.9), contains several security fixes.

2014-05-22  2bb8360                  [RELEASE] Release of TYPO3 6.1.9 (TYPO3 \ 
Release Team)
2014-05-22  6fafbf7  #30377          [SECURITY] Add trusted HTTP_HOST \ 
configuration (Helmut Hummel)
2014-05-22  2994a1c  #54111,#54113   [SECURITY] XSS in (old) extension manager \ 
information function (Nicole Cordes)
2014-05-22  12741ad  #48695          [SECURITY] XSS in new content element \ 
wizard (Marcus Krause)
2014-05-22  7595ad4  #54109          [SECURITY] XSS in template tools on root \ 
page (Marc Bastian Heinrichs)
2014-05-22  6965806  #57576          [SECURITY] XSS in Backend Layout Wizard \ 
(Helmut Hummel)
2014-05-22  54e4691  #48693          [SECURITY] Encode URL for use in JavaScript \ 
(Jigal van Hemert)
2014-05-22  b6826ff  #56458          [SECURITY] Fix insecure unserialize in \ 
colorpicker (Helmut Hummel)
2014-05-22  32efb1b  #54526          [SECURITY] Remove charts.swf to get rid of \ 
XSS vulnerability (Helmut Hummel)
2014-05-21  6a91a90  #54917          [BUGFIX] Indexer tries to insert NULL into \ 
DB (Markus Klein)
2014-05-15  3ee99e9  #58842          [BUGFIX] Wrong system requirements link \ 
(Markus Klein)
2014-05-14  f86e016  #58529          [BUGFIX] DependencyUtility does count() on \ 
an integer (Markus Klein)
2014-05-08  fb8370d  #58187          [BUGFIX] Solve stackoverflow in prototype \ 
in IE8 (Jigal van Hemert)
2014-05-08  3abc703  #58373          [BUGFIX] Default image title in RTE \ 
contains the file name (Stanislas Rolland)
2014-05-05  db90a26  #45183          [BUGFIX] Wrong result on empty string \ 
globalString condition (Marc Bastian Heinrichs)
2014-05-04  d422bf6  #58504          [BUGFIX] saltedpasswords: Check rsaauth \ 
loading (Nicole Cordes)
2014-05-04  05ef8fe  #58484          [BUGFIX] SoftReferenceIndex support for \ 
more values in class attribute (Marc Bastian Heinrichs)
2014-05-02  a49ddfd  #58418          [BUGFIX] Retrieving extension fails with \ 
some PHP versions (Sascha Wilking)
2014-04-29  0150f9c  #58166          [BUGFIX] Wrong comment in \ 
ActionMenuViewHelper (Markus Klein)
2014-04-25  8cf4f78  #58180          [BUGFIX] Database query error for \ 
non-workspaces tables (Oliver Hader)
2014-04-16  a4f013a                  [TASK] Set TYPO3 version to 6.1.9-dev \ 
(TYPO3 Release Team)

2014-04-16  d94f80d                  [RELEASE] Release of TYPO3 6.1.8 (TYPO3 \ 
Release Team)
2014-04-16  68763fa  #57957          [BUGFIX] DBAL sql_fetch_* must return \ 
boolean or array (Jigal van Hemert)
2014-04-16  65896ee  #24925,#24871   [BUGFIX] Followup: Mandatory for Selectbox \ 
with TCA not possible (Stefan Neufeind)
2014-04-15  8e8b020  #24925,#24871   [BUGFIX] Mandatory for Selectbox with TCA \ 
not possible (Benjamin Mack)
2014-04-15  d124103  #56580          [BUGFIX] SoftReferenceIndex typolink lacks \ 
support for title attributes (Marc Bastian Heinrichs)
2014-04-15  6139c97  #56991          [BUGFIX] Fix refindex for FlexForm fields \ 
type group file_reference (Marc Bastian Heinrichs)
2014-04-15  1dbfe75  #56353,#56352   [BUGFIX] Fields of type group file are not \ 
properly indexed (Marc Bastian Heinrichs)
2014-04-15  b22b39d  #57010          [BUGFIX] Add SoftIndex parser typolink to \ 
link in sys_file_reference (Marc Bastian Heinrichs)
2014-04-15  5dd53b1  #51768          [TASK] Updates prototype and scriptaculous, \ 
fixing IE9+ issues (Ernesto Baschny)
2014-04-12  a60b6dc  #47694          [BUGFIX] Follow up foreign_match_fields not \ 
fully supported (Marc Bastian Heinrichs)
2014-04-12  b93d9b4  #50378          [BUGFIX] sql_free_result does not work with \ 
all allowed types (Wouter Wolters)
2014-04-07  a896350  #57690          [BUGFIX] User settings do not obey \ 
setup.override (Markus Klein)
2014-04-05  21f0d12  #55683          [BUGFIX] ClickMenu: Visibility-options only \ 
if fields allowed (Stefan Neufeind)
2014-04-04  2b3dd27  #57656          [TASK] Integrate default README.txt (Oliver \ 
Hader)
2014-04-04  1329a96  #57603          [SECURITY] Prevent XSS in scheduler form \ 
(Nicole Cordes)
2014-04-01  6ae6b40  #57518          [BUGFIX] Make Extbase EnvironmentService a \ 
Singleton (Marc Bastian Heinrichs)
2014-03-31  03ec17a  #57296          [BUGFIX] Test typeof TBE_EDITOR for object \ 
not function (Alexander Opitz)
2014-03-26  2b5c50e  #54394          [BUGFIX] Exception if thumbnail does not \ 
exist (Markus Klein)
2014-03-24  cbdd065  #57238          [BUGFIX] Typo in Extbase localization file \ 
(Xavier Perseguers)
2014-03-23  fc5b7b2  #57179          [BUGFIX] Module Menu throws PHP warning for \ 
top level menu items (Benjamin Mack)
2014-03-23  9b36936  #57202          [BUGFIX] Parsetime: config.debug should \ 
override LocalConfiguration (Stefan Neufeind)
2014-03-19  819218a  #55340          [BUGFIX] Several typos in Page Browsing \ 
ViewHelper (Benjamin Rau)
2014-03-19  f8233c1  #56205          [BUGFIX] Cannot use contain with \ 
multivalued static enumeration column (Xavier Perseguers)
2014-03-14  d5160a9  #56150          [BUGFIX] RootlineUtility does not consider \ 
disablefield (Christian Reiter)
2014-03-13  2a80fcd  #56855          [BUGFIX] Extbase tries to overlay \ 
pages_language_overlay records (Stanislas Rolland)
2014-03-13  2ee3509  #56720          [BUGFIX] Alignment of button "add a \ 
new element at this place" (Patrick Broens)
2014-03-13  bed1054  #56830          [BUGFIX] Show thumbnails in list module \ 
(Markus Klein)
2014-03-13  3800d8b  #56084          [BUGFIX] Followup: Ajax handler \ 
TYPO3_tcefile::process is broken (Frans Saris)
2014-03-12  d405041  #23864          [BUGFIX] Correctly validate New Content \ 
Element entries (Ludwig Rafelsberger)
2014-03-10  06e5ad9  #52386          [BUGFIX] Allow record insert on rootlevel \ 
(Benjamin Serfhos)
2014-03-08  2df9cb9  #43885          [BUGFIX] Temporary DB tree mount notice \ 
missing in ElementBrowser (Lorenz Ulrich)
2014-03-07  472a2f2  #55457          [BUGFIX] RTE on first new IRRE record keeps \ 
loading in IE (Stanislas Rolland)
2014-03-07  e61b2cf  #23552          [BUGFIX] Default size for group-type fields \ 
(Christian Plattner)
2014-03-05  f8c9a77  #46185          [BUGFIX] IdentityProperties were not set \ 
(Stefan Froemken)
2014-03-05  e7cf550  #11771          [BUGFIX] Catch all errors while starting \ 
installer (Alexander Opitz)
2014-03-03  28d25c9  #56262          [BUGFIX] Double escape of title in indexed \ 
search (Markus Klein)
2014-02-28  ded338b  #56378          [BUGFIX] Do not log with severity \ 
1320177676 (Christian Weiske)
2014-02-28  8f0ce1c  #56421          [BUGFIX] @return for \ 
TYPO3\CMS\Sv\AuthenticationService::authUser (Christian Weiske)
2014-02-28  342686b  #41413          [BUGFIX] URL-encoded title in link wizard \ 
(Helmut Hummel)
2014-02-27  5ce3128  #55966          [BUGFIX] Revert "[TASK] Use a 401 \ 
header if login is not successful" (Markus Klein)
2014-02-25  a5d8893  #56184          [BUGFIX] Paginator in TER list not using \ 
ajax (Jigal van Hemert)
2014-02-25  b4a8235  #23984          [BUGFIX] felogin reset password links not \ 
clickable (Jigal van Hemert)
2014-02-24  5da89e2  #56242          [BUGFIX] Fix JS concat if first file is \ 
forced on top (Benjamin Kott)
2014-02-21  c47d8c5  #54724          [BUGFIX] Use count on storage after \ 
initialization of LazyObjectStorage (Marc Bastian Heinrichs)
2014-02-21  6512f65  #49499          [BUGFIX] Fix possible language handling \ 
issue (Markus Klein)
2014-02-20  b09e7f9  #39048          [BUGFIX] Rendering inline TCEforms without \ 
AJAX is broken (Alexander Jahn)
2014-02-20  c9ae284  #53116,#56019   [BUGFIX] concatenateJs/Css does not \ 
consider forceOnTop (Markus Klein)
2014-02-20  b8eeb55  #56135          [BUGFIX] DatabaseConnection::listQuery \ 
wrong usage of strpos() (Markus Klein)
2014-02-19  bd607e2  #55286          [BUGFIX] Suppress EXIF warnings indexing \ 
images (Felix Althaus)
2014-02-19  45f944c  #56067          [BUGFIX] Various static calls to non-static \ 
functions (Markus Klein)
2014-02-19  d2ef187  #56057          [BUGFIX] Add missing htmlspecialchars for \ 
thumbnail URL (Wouter Wolters)
2014-02-18  b7169bb  #52955          [BUGFIX] Show labels of additional doktypes \ 
in new page drag area (Caspar Stuebs)
2014-02-18  7af5ad6  #54304          [BUGFIX] Missing encoding in flexforms IRRE \ 
javascript (Alexey Gafiulov)
2014-02-17  48eab76  #52527          [BUGFIX] addToAllTCAtypes() doesn't add new \ 
field (Tomita Militaru)
2014-02-17  6344793  #56037          [BUGFIX] Fix clipboard thumbnail rendering \ 
(Frans Saris)
2014-02-17  dc0ec8a  #55998          [BUGFIX] Usage of undefined variables in \ 
ShortcutToolbarItem (Tim Lochmueller)
2014-02-17  52c294b  #55362          [BUGFIX] CommandController is not executed \ 
at same time (Tom Ruether)
2014-02-11  c9ffade  #49440          [BUGFIX] Missing label felogin_forgotHash \ 
(Karol Lamparski)
2014-02-11  edbef68  #53028          [BUGFIX] cache_clearAtMidnight conflicts \ 
with content start/endtime (Dmitry Dulepov)
2014-02-10  474380f                  [TASK] Execute lint in parallel (Helmut Hummel)
2014-02-09  e36633a  #53768,#28745   [BUGFIX] Allow to render the same TS object \ 
twice (Markus Klein)
2014-02-09  9971136  #55821          [BUGFIX] Tests: Remove unstable \ 
GeneralUtilityTest::getUrl* (Christian Kuhn)
2014-02-09  101be25  #18797          [BUGFIX] "New page" wizard \ 
discloses existence of pages outside DB mount (Nicole Cordes)
2014-02-09  5f6d783  #53564          [TASK] Add possibility creating accessible \ 
mock for abstract classes (Marc Bastian Heinrichs)
2014-02-08  cead255  #16491          [BUGFIX] CSV-Download not working in IE and \ 
HTTPS backend (Wouter Wolters)
2014-02-08  98c8e0a  #55698          [BUGFIX] Fix "action" labels in \ 
BE log (Thorsten Kahler)
2014-02-07  9e79487  #55611          [TASK] Move cursor::pointer to complete \ 
header area in IRRE (Georg Ringer)
2014-02-06  79d2bac  #54131          [BUGFIX] Followup to #54131 (Frans Saris)
2014-02-06  ad267f8  #55713          [BUGFIX] Missing namespace in \ 
ContentObjectRenderer (Markus Klein)
2014-02-05  27c1f61  #54112          [BUGFIX] Set missing markers to empty \ 
string (Bernhard Kraft)
2014-02-04  4d7947a  #55434          [BUGFIX] Various PHP Warnings with invalid \ 
credentials (Xavier Perseguers)
2014-02-03  1263413  #54467          [BUGFIX] TSFE->altPageTitle can not be \ 
set in extensions (Markus Klein)
2014-02-03  a070a5c  #54371          [BUGFIX] Add stdWrap on value property of \ 
TEXT (Markus Klein)
2014-02-03  85b3fed  #52048          [BUGFIX] Locker throws exception if \ 
semaphore can not be acquired (Markus Klein)
2014-02-02  af8f6eb  #54289          [BUGFIX] PropertyMapper does not work with \ 
class aliasses (Frans Saris)
2014-01-31  9596d4d  #54131          [BUGFIX] getLabelsFromItemsList() retuns no \ 
value when no item found (Frans Saris)
2014-01-30  3dcc61d  #55475          [BUGFIX] Regression in DataHandler (Wouter \ 
Wolters)
2014-01-30  a5e884f  #55458          [BUGFIX] DocumentTemplate class inserts \ 
inDocStyles twice (Stefan Neufeind)
2014-01-30  084b5a9  #41450          [BUGFIX] Handle empty tags in language pack \ 
index files (Alexander Stehlik)
2014-01-29  b81c5d5  #55407          [BUGFIX] ClickMenu does not show \ 
destination-foldername (Stefan Neufeind)
2014-01-28  d6803b7  #55350          [BUGFIX] Invalid constant in the domain \ 
redirect function (Tim Lochmueller)
2014-01-27  91b1db0  #55377          [TASK] Change repository url for \ 
introduction package (Philipp Gampe)
2014-01-27  1af64b0  #55366          [TASK] Change phpunit repository url for \ 
travis (Philipp Gampe)
2014-01-24  3cefa40  #53964          [BUGFIX] Better description of \ 
[BE][unzip_path]/[BE][diff_path] (Markus Klein)
2014-01-24  041780f  #55093          [BUGFIX] Simulate time in TYPO3 admin panel \ 
broken (Peter Niederlag)
2014-01-23  8f55af7  #53201          [BUGFIX] sys_category table not listed in \ 
allowed excludefields (Tomita Militaru)
2014-01-23  eec8579  #53665          [BUGFIX] Removing single category item not \ 
possible (Francois Suter)
2014-01-23  57b70f7  #54849          [BUGFIX] CLI context cannot write to \ 
backend log (Oliver Hader)
2014-01-22  b865ad9  #55246          [BUGFIX] Class \ 
'TYPO3\CMS\Recordlist\Browser\GeneralUtility' not found (Oliver Hader)
2014-01-21  c96321d  #37539          [BUGFIX] Static method cannot be abstract \ 
(Xavier Perseguers)
2014-01-21  ae54769  #54884          [BUGFIX] RootlineUtility does not consider \ 
foreign_sorting (Markus Klein)
2014-01-16  0965b22  #53712          [BUGFIX] Create valid file reference index \ 
data (Alexander Stehlik)
2014-01-16  b7ce3ef  #50266          [BUGFIX] File browser fails on inexistent \ 
expandFolder (Mario Rimann)
2014-01-15  429e13d  #34631          [BUGFIX] Show correct record title for \ 
be_groups and be_users (Markus Klein)
2014-01-15  5b23142  #54995          [BUGFIX] PHP warnings in ElementBrowser \ 
(Markus Klein)
2014-01-14  0ac8948  #54959          [TASK] Speedup typolink root-line handling \ 
(Steffen Ritter)
2014-01-14  714fca7  #53826          [BUGFIX] Folder tree in popup throws JS \ 
error (Aske Ertmann)
2014-01-14  f68832a  #53352          [BUGFIX] Add defaultTypoScript to \ 
hierachyInfo (Peter Niederlag)
2014-01-13  22d3be1  #51805          [BUGFIX] Template dropdown doesn't refresh \ 
template title after save (Torben Hansen)
2014-01-11  72f5d5a  #54909          [BUGFIX] Add missing logger names (Steffen \ 
Müller)
2014-01-09  2620cb5  #53975          [BUGFIX] Allow empty values in start/stop \ 
filter of belog (Steffen Müller)
2014-01-09  c99a07a  #53862          [BUGFIX] isValidUrl() idna converts whole \ 
URI (Michiel Roos)
2014-01-09  4e3e3dc  #52554          [TASK] Change list view delete icon if \ 
record is deleted in WS (Sascha Egerer)
2014-01-09  f378b40  #31797          [BUGFIX] Properly escape the ImageMagick \ 
frame selector (Georg Ringer)
2014-01-09  7d3eb35  #24877,#6708    [BUGFIX] Only create one keypair in rsaauth \ 
(Tom Ruether)
2014-01-09  a31b325  #38767          [BUGFIX] use search word(s) for ordering \ 
search results (again) (Ralf Hettinger)
2014-01-08  03d6320  #47694          [BUGFIX] foreign_match_fields not fully \ 
supported (Stefan Froemken)
2014-01-08  e959451  #53727          [BUGFIX] Form Wizard saving destroys Radio \ 
Buttons (Markus Klein)
2014-01-08  42a3eb3  #52133          [BUGFIX] Display relations' titles when TCA \ 
label field is type inline (Claus Due)
2014-01-07  272f80c  #54807          [BUGFIX] PageBrowsing ViewHelper defines \ 
unused method argument (Benjamin Rau)
2014-01-07  e09b381  #54808          [BUGFIX] Repository uses wrong property to \ 
calc current result page (Benjamin Rau)
2014-01-04  81a30e8  #53662          [BUGFIX] Allow NULL values in INSERT \ 
queries (Alexander Stehlik)
2014-01-04  67ac84c  #53682          [TASK] Optimize speed for instantiating \ 
class with arguments (Helmut Hummel)
2013-12-23  9283d4b  #54115          [BUGFIX] ClassAliasMap, Tx_ VH namespace \ 
and closing tag throws Exception (Claus Due)
2013-12-21  8379b1a  #54531          [BUGFIX] Fix message for install tool \ 
warning (Cynthia Mattingly)
2013-12-18  a95ab93  #54369          [TASK] Fix travis builds (Markus Klein)
2013-12-18  2a4d603  #51752          [BUGFIX] ArrayIterator::seek() warning in \ 
ElementBrowser (Markus Klein)
2013-12-18  e4590fe  #52059          [BUGFIX] felogin: Unknown modifier in \ 
regular expression (Wouter Wolters)
2013-12-18  e8978f9  #47648          [BUGFIX] Remove \ 
ElementBrowser::isReadOnlyFolder (Markus Klein)
2013-12-13  be7505a  #54027          [BUGFIX] No double htmlspecialchars for \ 
filemount select (Alexander Stehlik)
2013-12-12  41fe22d  #53818          [BUGFIX] Cleanly unset cookies on login in \ 
cookie-check (Stefan Neufeind)

Files:
RevisionActionfile
1.5modifypkgsrc/www/typo3_61/Makefile
1.3modifypkgsrc/www/typo3_61/PLIST
1.4modifypkgsrc/www/typo3_61/distinfo