[SECURITY] Information disclosure showing DB name

By accessing a cli script in the frontend, it is possible
that the DB name is shown.

Change-Id: Ib99342fbc80859c1963ab342ff2f07642db3c1aa
Fixes: #29060
Security-Commit: e5d79402eddb1e23b437344a72c91ad5ffb0d022
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/9995
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] Missing escaping for sys_notes

sys_notes misses an escaping in info module, not in
page/list module

Change-Id: I302b3c4cdb13e5e1aafb7f35608a9484d59854f9
Fixes: #22748
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Commit: b58d50c11bc6014bb54477ad13ad3bb775c72464
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/9996
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS in BE file list

Change-Id: I77b3c33e07a6ee6695c15566c14c7cb67053f587
Fixes: #30940
Security-Commit: a395345b246dd1aedb79890de03d6428f98a4b80
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/9997
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] Missing escaping in scheduler

A proper escaping is missing for field "frequency"
Sanitize submitted uid

Change-Id: Id811514d4dba2c3732bbbc4b03decdea1a9719ca
Fixes: #24474
Security-Commit: 6305b094b7f165e24ed3748ce6ec3dbf2a85b750
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/9998
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS for extension meta data in About module

Change-Id: Ice808f1a8f5ef2ddc1c48dbb6e55dac26f4c4942
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Fixes: #30969
Security-Commit: 254542e63e81ae5ce0754cd3a4ed08e7be7e7bbd
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/9999
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[!!!][SECURITY] XSS in filelink element

Add escaping to description and file name of file link content element.
Warning: There is no longer HTML possible in description!

Change-Id: Ie9de8b12d52a4ccf95eacae4352490aa43e95756
Fixes: #25246
Security-Review: http://review.typo3.org/5838
Security-Commit: e543cb17ed7ef9d478e2c933a102fe656eb0964e
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10000
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS in show item

Change-Id: I74b66e63015571472c1c3930067abd015991c5d6
Fixes: #29397
Security-Review: http://review.typo3.org/5857
Security-Commit: c3f1e88586a15b67c2fc2ba49ed45cb521cd1478
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10001
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS possibility in RemoveXSS

RemoveXSS fails to properly remove non printable characters, especially
zero-byte (\x00) chars.

Change-Id: Idfd0cdb4a9a27c27d86db9c4339c7227ffe6ae16
Fixes: #30188
Security-Review: http://review.typo3.org/5841
Security-Commit: dd560e6b831ee6825687dd594ddf1702012a6ecd
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10002
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[RELEASE] Release of TYPO3 4.4.14

Change-Id: I60c80742e77c66b23f5ff57f93ca33985921c755
Reviewed-on: http://review.typo3.org/10028
Reviewed-by: TYPO3 v4 Release Team
Tested-by: TYPO3 v4 Release Team
[TASK] Set TYPO3 version to 4.4.15-dev

Change-Id: I6478cd2389441452b95eb5a7bd890d4b3cea42e4
Reviewed-on: http://review.typo3.org/10031
Reviewed-by: TYPO3 v4 Release Team
Tested-by: TYPO3 v4 Release Team