[TASK] Raise submodule pointer

Change-Id: I05969b15725e0b4b72101158fc29ec2f14d1da6e
Reviewed-on: http://review.typo3.org/9985
Reviewed-by: TYPO3 v4 Release Team
Tested-by: TYPO3 v4 Release Team
[SECURITY] Information disclosure showing DB name

By accessing a cli script in the frontend, it is possible
that the DB name is shown.

Change-Id: I123530c4814dd1ac4a3af6d5eaea3df62dc11297
Fixes: #29060
Security-Commit: 1d43d5ccf1f2d1e6ffbe8600795ea8235e8cd6d3
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10003
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS in be_layouts

Some values from the backend layout configuration
are not properly escaped

Change-Id: Ifc5debc16e29d632f21380c1fb2e410e00633fa7
Fixes: #29536
Security-Commit: f686b42d55688dde6b6bc64f75032c56c09aed4c
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10004
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[!!!][SECURITY] XSS in filelink element

Add escaping to description and file name of file link content element.
Warning: There is no longer HTML possible in description!

Change-Id: I709af9bb05d84c5a61448b2d0b6ec8f8a20e5ec5
Fixes: #25246
Security-Commit: 7873e7e96e9a6261096910c342fefdcfa9b431bb
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10005
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS possibility in RemoveXSS

RemoveXSS fails to properly remove non printable characters, especially
zero-byte (\x00) chars.

Change-Id: If1caf9bda7338bd47203b55e27c5a99bbdfed3b0
Fixes: #30188
Security-Commit: 1ff7a55aefd3d4c1690e3f35760ea5ef30dab9b2
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10006
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS in BE file list

Change-Id: Ib4bdd5ce29827919deb8560a9e70d5b4dc0de849
Fixes: #30940
Security-Commit: e7e6aa481d16f9d6e5bcd3961d05bf6e3d5dfb5f
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10007
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] Missing escaping in scheduler

A proper escaping is missing for field "frequency"
Sanitize submitted uid

Change-Id: I0025d826e65889e84b1733d66ad93d608de5c6f0
Fixes: #24474
Security-Commit: f32c2f4159b641456e6466ae14a14f893d6c2326
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10008
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS in show item

Change-Id: I026fb44afac01e61a861d3b3bc8e99c15c1972e8
Fixes: #29397
Security-Commit: e34600be49087e59941b89025da4e1d75e407970
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10009
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS for extension meta data in About module

Change-Id: I139ab25d50f348341cc0feb3ee358337c2500420
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Fixes: #30969
Security-Commit: 161de99c2dddb19263477b316c437985484bcd38
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10010
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] Missing escaping for sys_notes

sys_notes misses an escaping in info module, not in page/list module

Change-Id: I8145299dfc35ec1a3a17d32852987c6fd01575c5
Fixes: #22748
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Commit: a613e5419862827b791505852622e5e010265a97
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10011
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader