Path to this page:
Subject: CVS commit: pkgsrc/www/typo3_61
From: Takahiro Kambe
Date: 2013-12-10 16:22:20
Message id: 20131210152220.2609A96@cvs.netbsd.org
Log Message:
Update typo3_61 package to 6.1.7 (TYPO3 6.1.7).
- Fix multiple vulnerabilities in TYPO3 CMS:
http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/
2013-12-10 afbadea [RELEASE] Release of TYPO3 6.1.7 (TYPO3 \
Release Team)
2013-12-10 7481971 #31206 [SECURITY] XSS in header link of all \
content elements (Anja Leichsenring)
2013-12-10 cb8db28 #42772 [SECURITY] XSS in colorpicker wizard \
(Marcus Krause)
2013-12-10 2d29894 #45043 [SECURITY] Prevent editor controlled hmac \
content (Franz G. Jahn)
2013-12-10 dca9c88 #48691 [SECURITY] XSS in backend user \
adminstration (Marc Bastian Heinrichs)
2013-12-10 450e5d3 #41714 [SECURITY] Information Disclosure in \
Wizards (Helmut Hummel)
2013-12-10 7e7f9e3 #54099 [SECURITY] Fix open redirection in openid \
extension (Helmut Hummel)
2013-12-10 ad11945 #36768 [SECURITY] XSS in be_layout wizard (Anja \
Leichsenring)
2013-12-10 18e0491 #47086 [SECURITY] XSS in beuser VH (Anja Leichsenring)
2013-12-10 cbbeefd #54074 [SECURITY] Remove possible XSS from \
ActionController Error output (Anja Leichsenring)
2013-12-10 163947a #54073 [SECURITY] Unsafe unserialize of GET \
parameter in Add-Wizard (Steffen Ritter)
2013-12-02 d21a628 #54124 [BUGFIX] ClientUtility does not detect \
Internet Explorer 11 (Stefan Neufeind)
2013-12-02 e538020 #54117 [BUGFIX] Add missing namespacing for \
calling GeneralUtility (Stefan Neufeind)
2013-11-29 3a66a0e #42651 [BUGFIX] ext:adodb Restrict connection \
wizard to admins (Christian Kuhn)
Files: