[pkgsrc/pkgsrc-2016Q2]: pkgsrc/www/typo3_62 Pullup ticket #5107 - requested b...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/d7d257e8a911
branches:  pkgsrc-2016Q2
changeset: 408899:d7d257e8a911
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Sat Sep 24 17:37:36 2016 +0000

description:
Pullup ticket #5107 - requested by taca
www/typo3_62: security fix

Revisions pulled up:
- www/typo3_62/Makefile                                         1.17-1.18
- www/typo3_62/PLIST                                            1.13-1.14
- www/typo3_62/distinfo                                         1.15-1.16

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Tue Jul 19 12:02:08 UTC 2016

   Modified Files:
        pkgsrc/www/typo3_62: Makefile PLIST distinfo

   Log Message:
   Update typo3_62 package to 6.2.26 (TYPO3 6.2.26 LTS), including security
   fix for XSS.

   2016-07-19  d719c97                  [RELEASE] Release of TYPO3 6.2.26 (TYPO3 Release Team)
   2016-07-19  2bc8727  #76358          [SECURITY] Link fields accept Javascript code when using URI Data Scheme (Valentin Despa)
   2016-07-19  485396d  #75933          [SECURITY] Prevent persistent username in filesystem (Wouter Wolters)
   2016-07-19  cd18fb5  #75740          [SECURITY] SQLi in AuthenticationService (Andreas Fernandez)
   2016-07-19  0068e6b  #73461          [SECURITY][FEATURE] Disable import module for non admin users (Christian Kuhn)
   2016-07-19  d7eafe8  #76922          [SECURITY] Prevent XSS in IRRE elements (Nicole Cordes)
   2016-07-19  8051405  #76344          [SECURITY] Escape the link text in EmailViewHelper (Wouter Wolters)
   2016-07-19  6cb7aa6  #31244          [SECURITY] Prevent XSS in ContentObjectRenderer (Stefan Neufeind)
   2016-07-07  40d771a  #73490          [BUGFIX] Field is not added to TCA if part of fieldname exists (Wouter Wolters)
   2016-06-30  f24b023  #76881          [TASK] Fix phpdoc of FileRepository (Eric Chavaillaz)
   2016-06-13  9014d11  #76617          [BUGFIX] Raise minimum version for typo3/cms-composer-installers (Helmut Hummel)
   2016-06-07  13e7a20  #76070          [BUGFIX] Prevent temp file generation in Unit Test (Nicole Cordes)
   2016-05-28  6aaed26  #76348          [TASK] Block access to /typo3_src and /typo3/vendor (Stephan Gro?berndt)
   2016-05-28  396e96d  #60173          [FOLLOWUP][BUGFIX] Re-enables fileDenyPattern check for admin users (Nicole Cordes)
   2016-05-27  cd88856  #60173          [BUGFIX] Re-enables fileDenyPattern check for admin users (Torben Hansen)

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Tue Sep 13 15:10:21 UTC 2016

   Modified Files:
        pkgsrc/www/typo3_62: Makefile PLIST distinfo

   Log Message:
   Update typo3_62 to 6.2.27 (TYPO3 6.2.27), including security fix.

   2016-09-13  46b333a                  [RELEASE] Release of TYPO3 6.2.27 (TYPO3 Release Team)
   2016-09-13  8aecd0c  #76462          [!!!][SECURITY] Mitigate potential cache flooding (Benni Mack)
   2016-09-13  b04d394  #77906          [SECURITY] Fix select_key XSS in PageLayoutView (Georg Ringer)
   2016-09-13  67e63a9  #77204          [BUGFIX] Prevent orphaned tags in Typo3DatabaseBackend (Thomas Schlumberger)
   2016-09-02  44949df  #64176          [BUGFIX] Prevent fatal error if no column in page layout is defined (Nicole Cordes)
   2016-09-02  0f77d52  #77755          [BUGFIX] Check for null in debug_check_recordset (Morton Jonuschat)
   2016-08-23  b495775  #77588          [BUGFIX] Fix sql error in EXT:linkvalidator (Daniel Windloff)
   2016-08-19  b2c9915  #76441          [BUGFIX] Index all file mounts in FAL indexer scheduler task (Hannes Bochmann)
   2016-08-18  dc83c6d  #76928          [BUGFIX] Allow URL path segments like "typo3" (Mathias Brodala)
   2016-08-18  ba4521b  #67894          [BUGFIX] Felogin form with default layout is not visible (Michiel Roos)
   2016-07-19  95c3944  #77098          [BUGFIX] Prepend current path to versionNumberInFilename RewriteRule (Marco Huber)

diffstat:

 www/typo3_62/Makefile |   4 ++--
 www/typo3_62/PLIST    |   4 +++-
 www/typo3_62/distinfo |  10 +++++-----
 3 files changed, 10 insertions(+), 8 deletions(-)

diffs (59 lines):

diff -r abd868e3dd6a -r d7d257e8a911 www/typo3_62/Makefile
--- a/www/typo3_62/Makefile     Sat Sep 24 17:24:39 2016 +0000
+++ b/www/typo3_62/Makefile     Sat Sep 24 17:37:36 2016 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.16 2016/05/24 12:55:17 taca Exp $
+# $NetBSD: Makefile,v 1.16.2.1 2016/09/24 17:37:36 bsiegert Exp $
 #
 
 DISTNAME=      ${TYPO3NAME}
@@ -18,7 +18,7 @@
 DEPENDS+=      ${PHP_PKG_PREFIX}-zip>=5.3.7:../../archivers/php-zip
 DEPENDS+=      ${PHP_PKG_PREFIX}-zlib>=5.3.7:../../archivers/php-zlib
 
-VER=           6.2.25
+VER=           6.2.27
 NO_BUILD=      yes
 USE_TOOLS+=    bash:run pax
 
diff -r abd868e3dd6a -r d7d257e8a911 www/typo3_62/PLIST
--- a/www/typo3_62/PLIST        Sat Sep 24 17:24:39 2016 +0000
+++ b/www/typo3_62/PLIST        Sat Sep 24 17:37:36 2016 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.12 2016/05/24 12:55:17 taca Exp $
+@comment $NetBSD: PLIST,v 1.12.2.1 2016/09/24 17:37:36 bsiegert Exp $
 ${TYPO3DIR}/${TYPO3NAME}/ChangeLog
 ${TYPO3DIR}/${TYPO3NAME}/INSTALL.md
 ${TYPO3DIR}/${TYPO3NAME}/LICENSE.txt
@@ -2576,6 +2576,7 @@
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/AccessibleObjectInterface.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/BaseTestCase.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/Exception.php
+${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/Functional/Cache/Backend/Typo3DatabaseBackendTest.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/Functional/Category/Collection/CategoryCollectionTest.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/Functional/DataHandling/AbstractDataHandlerActionTestCase.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/Functional/DataHandling/FAL/AbstractActionTestCase.php
@@ -4883,6 +4884,7 @@
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/impexp/Classes/Clickmenu.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/impexp/Classes/Controller/ImportExportController.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/impexp/Classes/Hook/BackendControllerHook.php
+${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/impexp/Classes/Hook/ContextMenuDisableItemsHook.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/impexp/Classes/ImportExport.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/impexp/Classes/LocalPageTree.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/impexp/Classes/Task/ImportExportTask.php
diff -r abd868e3dd6a -r d7d257e8a911 www/typo3_62/distinfo
--- a/www/typo3_62/distinfo     Sat Sep 24 17:24:39 2016 +0000
+++ b/www/typo3_62/distinfo     Sat Sep 24 17:37:36 2016 +0000
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.14 2016/05/24 12:55:17 taca Exp $
+$NetBSD: distinfo,v 1.14.2.1 2016/09/24 17:37:37 bsiegert Exp $
 
-SHA1 (typo3_src-6.2.25.tar.gz) = 08838cab9ed8293a9d870cb7e5e84e66e9241931
-RMD160 (typo3_src-6.2.25.tar.gz) = 3f0e1030778354547079a868cb35edbb9c46fa45
-SHA512 (typo3_src-6.2.25.tar.gz) = 7132695c77d74269b1cc6e3480e6754e3cfd6125bd9c74d002b2719b61cdc6f9bb66fda040666d71e4cca0107a6759a490b63ae0ca6d9a7bc7218e9577b881ef
-Size (typo3_src-6.2.25.tar.gz) = 20940818 bytes
+SHA1 (typo3_src-6.2.27.tar.gz) = feab0a9c1c9d33a8e401319628dd44b5f3477253
+RMD160 (typo3_src-6.2.27.tar.gz) = 8e6efdfe74c4360c3eb4af521302d2a465c189d0
+SHA512 (typo3_src-6.2.27.tar.gz) = 6d8e10ddad195dc6409ba8ee47a4bc7d6efbb93bbf371f4224be780f2f7fd332c81b262ca19d51b8a19ef9edd9b3ce85cc348ef817b04ff11c01878b0e5f6b89
+Size (typo3_src-6.2.27.tar.gz) = 20948237 bytes
 SHA1 (patch-typo3_sysext_core_Configuration_DefaultConfiguration.php) = e33544513630b4c931ca8e932847796d4bd694b2