CVS commit: [pkgsrc-2026Q2] pkgsrc/www/typo3-13

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Sun Aug 16 21:40:17 UTC 2026

Modified Files:
        pkgsrc/www/typo3-13 [pkgsrc-2026Q2]: Makefile PLIST distinfo

Log Message:
Pullup ticket #7235 - requested by taca
www/typo3-13: Security fix

Revisions pulled up:
- www/typo3-13/Makefile                                         1.15-1.17
- www/typo3-13/PLIST                                            1.10-1.11
- www/typo3-13/distinfo                                         1.14-1.15

---
   Module Name: pkgsrc
   Committed By:        wen
   Date:                Fri Jul 31 01:18:52 UTC 2026

   Modified Files:
        pkgsrc/www/typo3-13: Makefile PLIST distinfo

   Log Message:
   Update to 13.4.33

   Upstream changes:
   Here is a list of what was fixed since 13.4.32:
       2026-07-14 83afd988319 [RELEASE] Release of TYPO3 13.4.33 (thanks t=
   o Oliver Hader)
       2026-07-14 8f5d67d81bf [BUGFIX] Refine exceptions to root-level res=
   triction in DataHandler (thanks to Oliver Hader)
       2026-07-14 93907c6255d [TASK] Raise guzzlehttp/* dependencies (than=
   ks to Oliver Hader)
       2026-07-10 01bd136c235 [BUGFIX] Add accessible label to language fl=
   ag in content element header (thanks to Christian Rath-Ulrich)
       2026-07-05 e1b0aeb30a8 [DOCS] Clarify instruction about stopping sc=
   heduler tasks (thanks to Riccardo De Contardi)
       2026-07-04 b9fe0066c57 [DOCS] Adjust wrong changelog $request() exa=
   mple (thanks to Garvin Hicking)
       2026-07-01 31efda308e8 [TASK] Implement and apply custom PHPStan ru=
   le to harden unserialize (thanks to Elias H=E4u=DFler)
       2026-07-01 2dbd8ac72a3 [TASK] Update PHPStan to v2.2.3 (thanks to E=
   lias H=E4u=DFler)
       2026-06-29 45bf1fcf320 [BUGFIX] List extension:activate in list of =
   possible commands (thanks to Benjamin Franzke)
       2026-06-29 bc90be0d638 [TASK] Add request to ModifyPageLinkConfigur=
   ationEvent (thanks to Helmut Hummel)
       2026-06-27 daf40ea0327 [BUGFIX] Fix initial EXT:introduction databa=
   se import on sqlite (thanks to Benjamin Franzke)
       2026-06-26 44fc9c8a69f [TASK] Prevent PHPUnit warnings on Reflectio=
   nService destructor (thanks to Garvin Hicking)
       2026-06-26 c4002573c0b [TASK] Update npm package dompurify to v3.4.=
   11 (thanks to Oliver Hader)
       2026-06-26 eee1b9f1757 [BUGFIX] Guard undefined array key in ImageP=
   rocessingInstructions (thanks to Garvin Hicking)
       2026-06-26 89d2a122c02 [TASK] Obtain ConnectionPool from container =
   in functional tests (thanks to Benjamin Franzke)
       2026-06-26 5d9c51c55a2 [TASK] Add non-admin backend user and group =
   to FAL DataHandler tests (thanks to Oliver Hader)
       2026-06-25 c5f08d948a8 [BUGFIX] Allow base64url characters in Corre=
   lationId pattern (thanks to Oliver Hader)
       2026-06-25 dfaaf59d7b2 [TASK] Harden redirects history rollback pro=
   cessing (thanks to Oliver Hader)
       2026-06-24 c4ff122c77f [TASK] Promote generateRandomBase64String to=
    public API (thanks to Oliver Hader)
       2026-06-23 dcfb6502efa [BUGFIX] Allow adding entries to an empty se=
   ttings stringlist (thanks to Wolfgang Klinger)
       2026-06-22 0727294f727 [BUGFIX] Properly backport avoid using null =
   as array offset (thanks to Garvin Hicking)
       2026-06-19 c20e9a44be3 [BUGFIX] Properly require symfony/polyfill-p=
   hp84 and php85 (thanks to Garvin Hicking)
       2026-06-18 29cc2fd65ae [BUGFIX] Correctly use QueryResultInterface =
   for PHPStan (thanks to Markus Klein)
       2026-06-16 2415ff31ccd [TASK] Set TYPO3 version to 13.4.33-dev (tha=
   nks to Benni Mack)

   Here is a list of what was fixed since 13.4.31:
       2026-06-16 225be9bc7bd [RELEASE] Release of TYPO3 13.4.32 (thanks t=
   o Benni Mack)
       2026-06-16 c2d2a91a574 [BUGFIX] Allow scheduler tasks with logger r=
   eferences to be deserialized (thanks to Benjamin Franzke)
       2026-06-15 8baff8c8ce3 [BUGFIX] Improve permission check in Clipboa=
   rd for root page (thanks to Georg Ringer)
       2026-06-11 ca6bf1ccd3d [BUGFIX] Make cache NullBackend transient (t=
   hanks to Helmut Hummel)
       2026-06-10 dd1d1accc35 [BUGFIX] Silence unserialize() warnings in P=
   HP >=3D8.3 (thanks to Benjamin Franzke)
       2026-06-10 49bc3424768 [BUGFIX] Ensure correct TS overrides for lab=
   els (thanks to Markus Klein)
       2026-06-10 a8dac701d67 [BUGFIX] Convert float precision in image cr=
   op command (thanks to Stig N=F8rgaard F=E6rch)
       2026-06-09 1caebb0b413 [BUGFIX] Create missing var/transient in Dir=
   ectory Status check (thanks to Maike Kiebele)
       2026-06-09 f840cafd8e9 [TASK] Set TYPO3 version to 13.4.32-dev (tha=
   nks to Oliver Hader)

---
   Module Name: pkgsrc
   Committed By:        wen
   Date:                Fri Jul 31 08:52:21 UTC 2026

   Modified Files:
        pkgsrc/www/typo3-13: Makefile PLIST

   Log Message:
   Fix PLIST
   Thanks to taca@

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Wed Aug 12 15:22:11 UTC 2026

   Modified Files:
        pkgsrc/www/typo3-13: Makefile distinfo

   Log Message:
   www/typo3-13: update to 13.4.34

   13.4.34 (2026-08-11)

   This release is a combined bug fix and security release.  (CVE-2026-194=
   18)

   Find more details in the security bulletins:

        TYPO3-CORE-SA-2026-021:
        <https://news.typo3.com/security/advisory/typo3-core-sa-2026-021>.


To generate a diff of this commit:
cvs rdiff -u -r1.14 -r1.14.2.1 pkgsrc/www/typo3-13/Makefile
cvs rdiff -u -r1.9 -r1.9.2.1 pkgsrc/www/typo3-13/PLIST
cvs rdiff -u -r1.13 -r1.13.2.1 pkgsrc/www/typo3-13/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/typo3-13/Makefile
diff -u pkgsrc/www/typo3-13/Makefile:1.14 pkgsrc/www/typo3-13/Makefile:1.14.2.1
--- pkgsrc/www/typo3-13/Makefile:1.14   Tue Jun  9 13:11:40 2026
+++ pkgsrc/www/typo3-13/Makefile        Sun Aug 16 21:40:17 2026
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.14 2026/06/09 13:11:40 taca Exp $
+# $NetBSD: Makefile,v 1.14.2.1 2026/08/16 21:40:17 maya Exp $
 
 DISTNAME=      typo3_src-${VER}
 PKGNAME=       ${PHP_PKG_PREFIX}-typo3-${VER}
@@ -25,7 +25,7 @@ REPLACE_PHP+= vendor/symfony/yaml/Resour
 REPLACE_PHP+=  vendor/typo3/cms-cli/typo3
 REPLACE_PHP+=  vendor/typo3fluid/fluid/bin/fluid
 
-VER=           13.4.31
+VER=           13.4.34
 
 NO_BUILD=      YES
 TYPO3DIR=      share/typo3

Index: pkgsrc/www/typo3-13/PLIST
diff -u pkgsrc/www/typo3-13/PLIST:1.9 pkgsrc/www/typo3-13/PLIST:1.9.2.1
--- pkgsrc/www/typo3-13/PLIST:1.9       Tue Jun  9 13:11:40 2026
+++ pkgsrc/www/typo3-13/PLIST   Sun Aug 16 21:40:17 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.9 2026/06/09 13:11:40 taca Exp $
+@comment $NetBSD: PLIST,v 1.9.2.1 2026/08/16 21:40:17 maya Exp $
 share/examples/typo3/typo3.conf
 share/typo3/CODE_OF_CONDUCT.md
 share/typo3/CONTRIBUTING.md
@@ -2426,6 +2426,7 @@ share/typo3/typo3/sysext/core/Classes/Ty
 share/typo3/typo3/sysext/core/Classes/Type/Icon/IconState.php
 share/typo3/typo3/sysext/core/Classes/Type/Map.php
 share/typo3/typo3/sysext/core/Classes/Type/TypeInterface.php
+share/typo3/typo3/sysext/core/Classes/Type/VirtualRecord.php
 share/typo3/typo3/sysext/core/Classes/TypoScript/AST/AbstractAstBuilder.php
 share/typo3/typo3/sysext/core/Classes/TypoScript/AST/AstBuilder.php
 share/typo3/typo3/sysext/core/Classes/TypoScript/AST/AstBuilderInterface.php
@@ -12685,7 +12686,6 @@ share/typo3/vendor/guzzlehttp/guzzle/LIC
 share/typo3/vendor/guzzlehttp/guzzle/README.md
 share/typo3/vendor/guzzlehttp/guzzle/UPGRADING.md
 share/typo3/vendor/guzzlehttp/guzzle/composer.json
-share/typo3/vendor/guzzlehttp/guzzle/package-lock.json
 share/typo3/vendor/guzzlehttp/guzzle/src/BodySummarizer.php
 share/typo3/vendor/guzzlehttp/guzzle/src/BodySummarizerInterface.php
 share/typo3/vendor/guzzlehttp/guzzle/src/Client.php
@@ -12709,27 +12709,34 @@ share/typo3/vendor/guzzlehttp/guzzle/src
 share/typo3/vendor/guzzlehttp/guzzle/src/Handler/CurlFactoryInterface.php
 share/typo3/vendor/guzzlehttp/guzzle/src/Handler/CurlHandler.php
 share/typo3/vendor/guzzlehttp/guzzle/src/Handler/CurlMultiHandler.php
+share/typo3/vendor/guzzlehttp/guzzle/src/Handler/CurlShareHandleState.php
+share/typo3/vendor/guzzlehttp/guzzle/src/Handler/CurlVersion.php
 share/typo3/vendor/guzzlehttp/guzzle/src/Handler/EasyHandle.php
 share/typo3/vendor/guzzlehttp/guzzle/src/Handler/HeaderProcessor.php
 share/typo3/vendor/guzzlehttp/guzzle/src/Handler/MockHandler.php
 share/typo3/vendor/guzzlehttp/guzzle/src/Handler/Proxy.php
+share/typo3/vendor/guzzlehttp/guzzle/src/Handler/ProxyEnvironment.php
 share/typo3/vendor/guzzlehttp/guzzle/src/Handler/StreamHandler.php
+share/typo3/vendor/guzzlehttp/guzzle/src/Handler/TlsVersion.php
 share/typo3/vendor/guzzlehttp/guzzle/src/HandlerStack.php
 share/typo3/vendor/guzzlehttp/guzzle/src/MessageFormatter.php
 share/typo3/vendor/guzzlehttp/guzzle/src/MessageFormatterInterface.php
 share/typo3/vendor/guzzlehttp/guzzle/src/Middleware.php
+share/typo3/vendor/guzzlehttp/guzzle/src/Multiplexing.php
 share/typo3/vendor/guzzlehttp/guzzle/src/Pool.php
 share/typo3/vendor/guzzlehttp/guzzle/src/PrepareBodyMiddleware.php
 share/typo3/vendor/guzzlehttp/guzzle/src/RedirectMiddleware.php
 share/typo3/vendor/guzzlehttp/guzzle/src/RequestOptions.php
 share/typo3/vendor/guzzlehttp/guzzle/src/RetryMiddleware.php
 share/typo3/vendor/guzzlehttp/guzzle/src/TransferStats.php
+share/typo3/vendor/guzzlehttp/guzzle/src/TransportSharing.php
 share/typo3/vendor/guzzlehttp/guzzle/src/Utils.php
 share/typo3/vendor/guzzlehttp/guzzle/src/functions.php
 share/typo3/vendor/guzzlehttp/guzzle/src/functions_include.php
 share/typo3/vendor/guzzlehttp/promises/CHANGELOG.md
 share/typo3/vendor/guzzlehttp/promises/LICENSE
 share/typo3/vendor/guzzlehttp/promises/README.md
+share/typo3/vendor/guzzlehttp/promises/UPGRADING.md
 share/typo3/vendor/guzzlehttp/promises/composer.json
 share/typo3/vendor/guzzlehttp/promises/src/AggregateException.php
 share/typo3/vendor/guzzlehttp/promises/src/CancellationException.php
@@ -12750,6 +12757,7 @@ share/typo3/vendor/guzzlehttp/promises/s
 share/typo3/vendor/guzzlehttp/psr7/CHANGELOG.md
 share/typo3/vendor/guzzlehttp/psr7/LICENSE
 share/typo3/vendor/guzzlehttp/psr7/README.md
+share/typo3/vendor/guzzlehttp/psr7/UPGRADING.md
 share/typo3/vendor/guzzlehttp/psr7/composer.json
 share/typo3/vendor/guzzlehttp/psr7/src/AppendStream.php
 share/typo3/vendor/guzzlehttp/psr7/src/BufferStream.php
@@ -12771,6 +12779,7 @@ share/typo3/vendor/guzzlehttp/psr7/src/P
 share/typo3/vendor/guzzlehttp/psr7/src/Query.php
 share/typo3/vendor/guzzlehttp/psr7/src/Request.php
 share/typo3/vendor/guzzlehttp/psr7/src/Response.php
+share/typo3/vendor/guzzlehttp/psr7/src/Rfc3986.php
 share/typo3/vendor/guzzlehttp/psr7/src/Rfc7230.php
 share/typo3/vendor/guzzlehttp/psr7/src/ServerRequest.php
 share/typo3/vendor/guzzlehttp/psr7/src/Stream.php
@@ -14482,6 +14491,34 @@ share/typo3/vendor/symfony/polyfill-php8
 share/typo3/vendor/symfony/polyfill-php83/bootstrap72.php
 share/typo3/vendor/symfony/polyfill-php83/bootstrap81.php
 share/typo3/vendor/symfony/polyfill-php83/composer.json
+share/typo3/vendor/symfony/polyfill-php84/LICENSE
+share/typo3/vendor/symfony/polyfill-php84/Php84.php
+share/typo3/vendor/symfony/polyfill-php84/README.md
+share/typo3/vendor/symfony/polyfill-php84/Resources/Deprecated.php
+share/typo3/vendor/symfony/polyfill-php84/Resources/RoundingMode.php
+share/typo3/vendor/symfony/polyfill-php84/Resources/stubs/Deprecated.php
+share/typo3/vendor/symfony/polyfill-php84/Resources/stubs/Pdo/Dblib.php
+share/typo3/vendor/symfony/polyfill-php84/Resources/stubs/Pdo/Firebird.php
+share/typo3/vendor/symfony/polyfill-php84/Resources/stubs/Pdo/Mysql.php
+share/typo3/vendor/symfony/polyfill-php84/Resources/stubs/Pdo/Odbc.php
+share/typo3/vendor/symfony/polyfill-php84/Resources/stubs/Pdo/Pgsql.php
+share/typo3/vendor/symfony/polyfill-php84/Resources/stubs/Pdo/Sqlite.php
+share/typo3/vendor/symfony/polyfill-php84/Resources/stubs/ReflectionConstant.php
+share/typo3/vendor/symfony/polyfill-php84/Resources/stubs/RoundingMode.php
+share/typo3/vendor/symfony/polyfill-php84/bootstrap.php
+share/typo3/vendor/symfony/polyfill-php84/bootstrap72.php
+share/typo3/vendor/symfony/polyfill-php84/bootstrap82.php
+share/typo3/vendor/symfony/polyfill-php84/composer.json
+share/typo3/vendor/symfony/polyfill-php85/LICENSE
+share/typo3/vendor/symfony/polyfill-php85/Php85.php
+share/typo3/vendor/symfony/polyfill-php85/README.md
+share/typo3/vendor/symfony/polyfill-php85/Resources/stubs/DelayedTargetValidation.php
+share/typo3/vendor/symfony/polyfill-php85/Resources/stubs/Filter/FilterException.php
+share/typo3/vendor/symfony/polyfill-php85/Resources/stubs/Filter/FilterFailedException.php
+share/typo3/vendor/symfony/polyfill-php85/Resources/stubs/NoDiscard.php
+share/typo3/vendor/symfony/polyfill-php85/bootstrap.php
+share/typo3/vendor/symfony/polyfill-php85/bootstrap80.php
+share/typo3/vendor/symfony/polyfill-php85/composer.json
 share/typo3/vendor/symfony/polyfill-uuid/LICENSE
 share/typo3/vendor/symfony/polyfill-uuid/README.md
 share/typo3/vendor/symfony/polyfill-uuid/Uuid.php

Index: pkgsrc/www/typo3-13/distinfo
diff -u pkgsrc/www/typo3-13/distinfo:1.13 pkgsrc/www/typo3-13/distinfo:1.13.2.1
--- pkgsrc/www/typo3-13/distinfo:1.13   Tue Jun  9 13:11:40 2026
+++ pkgsrc/www/typo3-13/distinfo        Sun Aug 16 21:40:17 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.13 2026/06/09 13:11:40 taca Exp $
+$NetBSD: distinfo,v 1.13.2.1 2026/08/16 21:40:17 maya Exp $
 
-BLAKE2s (typo3_src-13.4.31.tar.gz) = 40bccf477798e8206ed5383d3fbe5aa35b98b56ec35ef17e31cc9cd9d61c12ef
-SHA512 (typo3_src-13.4.31.tar.gz) = 9d76e5ae2c3e903d51709194050aad09d9d2f5c91911a20b6a1613d8cc1c9e5c794fe9e633c67b51f13c5fda3731ff7e4be2bbf54f7ce8bb18bb1895d88a5f3f
-Size (typo3_src-13.4.31.tar.gz) = 26070857 bytes
+BLAKE2s (typo3_src-13.4.34.tar.gz) = d8bd78382dba6e14759ef54356fe8fe9c114a507d4b5945ec967598740ba495c
+SHA512 (typo3_src-13.4.34.tar.gz) = 132353ec8871e6814bdc0ee1caa94cf4165634a36968f0781c976bcb04ca157cc3e297b557a3bd7e05194d2187e984171bff1ab730a5c73bde1047a4acbd0637
+Size (typo3_src-13.4.34.tar.gz) = 26176262 bytes