CVS commit: [pkgsrc-2013Q3] pkgsrc/www/typo3_45

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Tue Dec 17 13:10:12 UTC 2013

Modified Files:
        pkgsrc/www/typo3_45 [pkgsrc-2013Q3]: Makefile PLIST distinfo

Log Message:
Pullup ticket #4274 - requested by taca
www/typo3_45: security update

Revisions pulled up:
- www/typo3_45/Makefile                                         1.28-1.29
- www/typo3_45/PLIST                                            1.13
- www/typo3_45/distinfo                                         1.23-1.24

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Dec  5 16:41:07 UTC 2013

   Modified Files:
        pkgsrc/www/typo3_45: Makefile distinfo

   Log Message:
   Update typo345 to 4.5.31 (TYPO3 4.5.31).

   2013-11-26  434ce71                  [RELEASE] Release of TYPO3 4.5.31 
(TYPO3 Release Team)
   2013-11-19  396534e  #53758          [BUGFIX] Table cache_imagesizes is 
defined twice (Michiel Roos)
   2013-11-19  3f2ed1d  #53750          [BUGFIX] Scheduler extension sql file 
is invalid (Michiel Roos)
   2013-11-15  428baac  #17493          [BUGFIX] Fix broken edit icons on cType 
HTML (Stefan Neufeind)
   2013-11-11  6755f40  #37948          [BUGFIX] Correctly append 
additionalTreelistUpdateFields (Bart Dubelaar)
   2013-11-11  082facd  #31998          [BUGFIX] Faulty check for missing SMTP 
port (Stefan Neufeind)
   2013-11-09  c581f33  #29179          [BUGFIX] Escape title, extension, 
description of scheduler tasks (Stefan Neufeind)
   2013-11-09  7b08aa9  #53195          [BUGFIX] T3editor: Honour 
fileDenyPattern on saving included TS (Stefan Neufeind)
   2013-11-04  d372f5f  #38055          [BUGFIX] Remove declare(encoding=) 
(Josef Florian Glatz)
   2013-10-28  5ae438c  #53075          [BUGFIX] Cannot auto-load SC_* classes 
(Ernesto Baschny)
   2013-10-22  b5d6e9f  #50881          [TASK] Added missing core autoloaded 
files (Ernesto Baschny)
   2013-10-13  5b072ff  #52759          [BUGFIX] Object passed to date() 
(Philipp Gampe)
   2013-10-12  6371e46  #52104          [BUGFIX] Wrong calculation of maximum 
value for checkbox fields (Nicole Cordes)
   2013-10-12  78871e2  #37611          [BUGFIX] Select available page when 
changing WS (Thorsten Kahler)
   2013-10-11  ce02c01  #36573          [BUGFIX] Add workspace overlay for 
fetched records. (Anja Leichsenring)
   2013-10-11  d114ddb  #37065          [BUGFIX] Don't show duplicates in 
workspace preview (Timo Webler)
   2013-10-06  3289c39  #52045          [BUGFIX] EmConfUtility accesses 
non-arrays (Markus Klein)
   2013-09-27  cd1e12b  #52091,#51684   [BUGFIX] Check for string before using 
strlen (Markus Klein)
   2013-09-26  c8d2033  #34886          [BUGFIX] CF FileBackend unlimited 
lifetime support (Dominique Feyer)
   2013-09-18  ef6dc06                  [BUGFIX] Fix cropping of transparent 
gifs with im6. (Felix Bu$(Q+m(Bnemann)
   2013-09-12  70ce540  #51803          [TASK] Use a 401 header if login is not 
successful (Georg Ringer)

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Tue Dec 10 15:18:33 UTC 2013

   Modified Files:
        pkgsrc/www/typo3_45: Makefile PLIST distinfo

   Log Message:
   Update typo3_45 package to 4.5.32 (TYPO3 4.5.32).

   - Fix multiple vulnerabilities in TYPO3 CMS:
        
http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/
   - Enable PHP_VERSIONS_ACCEPTED which was accidently commented out by previous
     commit.

   2013-12-10  1956962                  [RELEASE] Release of TYPO3 4.5.32 
(TYPO3 Release Team)
   2013-12-10  60576d1  #31206          [SECURITY] XSS in header link of all 
content elements (Anja Leichsenring)
   2013-12-10  77dc1c4  #42772          [SECURITY] XSS in colorpicker wizard 
(Anja Leichsenring)
   2013-12-10  52d3bff  #45043          [SECURITY] Prevent editor controlled 
hmac content (Franz G. Jahn)
   2013-12-10  cae8739  #20811          [SECURITY] XSS vulnerability in 
extension manager (Marcus Krause)
   2013-12-10  ba92f0a  #41714          [SECURITY] Information Disclosure in 
Wizards (Anja Leichsenring)
   2013-12-10  63ff910  #54099          [SECURITY] Fix open redirection in 
openid extension (Anja Leichsenring)
   2013-12-10  c4d1336  #48187          [SECURITY] feuser_adminLib.inc allows 
to set arbitrary fields (Steffen Ritter)
   2013-12-10  5342284  #36768          [SECURITY] XSS in be_layout wizard 
(Anja Leichsenring)
   2013-12-10  b360a1a  #54074          [SECURITY] Remove possible XSS from 
ActionController Error output (Anja Leichsenring)
   2013-12-10  78ee538  #54073          [SECURITY] Unsafe unserialize of GET 
parameter in Add-Wizard (Marcus Krause)
   2013-12-08  5aa4ab2  #54282          [BUGFIX] Fix failing test (Anja 
Leichsenring)
   2013-12-08  6add221  #54280          [BUGFIX] Fix failing test (Anja 
Leichsenring)
   2013-12-02  0c3fa95  #54124          [BUGFIX] ClientUtility does not detect 
Internet Explorer 11 (Stefan Neufeind)
   2013-12-02  d353ab0  #54120          Revert "[BUGFIX] Object passed to 
date()" (Markus Klein)
   2013-11-29  309e93a  #42651          [BUGFIX] ext:adodb Restrict connection 
wizard to admins (Christian Kuhn)
   2013-11-26  1d95cad  #25157,#45550   [BUGFIX] Distinguish unassigend columns 
and colPos 0 (Philipp Gampe)


To generate a diff of this commit:
cvs rdiff -u -r1.27 -r1.27.2.1 pkgsrc/www/typo3_45/Makefile
cvs rdiff -u -r1.12 -r1.12.2.1 pkgsrc/www/typo3_45/PLIST
cvs rdiff -u -r1.22 -r1.22.2.1 pkgsrc/www/typo3_45/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.