[TASK] Raise submodule pointer

Change-Id: I746cc091153c5675fed46b5444c11a6af1dd1de1
Reviewed-on: http://review.typo3.org/9988
Reviewed-by: TYPO3 v4 Release Team
Tested-by: TYPO3 v4 Release Team
[!!!][SECURITY] XSS in filelink element

Add escaping to description and file name of file link content element.
Warning: There is no longer HTML possible in description!

Change-Id: Ib765412c4732ed083f67009ed5ff43444d7ca606
Fixes: #25246
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Review: http://review.typo3.org/9945
Security-Commit: 17352254b4fd53c97ca3545d1ca81b576e44d387
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10021
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] Information disclosure showing DB name

By accessing a cli script in the frontend, it is possible
that the DB name is shown.

Change-Id: I4998eff997a50e94183f64d06bd76fb5d399bb98
Fixes: #29060
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Review: http://review.typo3.org/9944
Security-Commit: 1c36ac1e84a506351d7946759976eaf80fe36d94
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10022
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS in show item

Change-Id: Iaf43a2097be961679a6d03c3b948b163e153f95f
Fixes: #29397
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Review: http://review.typo3.org/9943
Security-Commit: 929b49ae0991e268b8e62651be5416cbc76deb66
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10023
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] Missing escaping for sys_notes

sys_notes misses an escaping in info module

Change-Id: I2066d850231b3994b9bfa018648e855211c993aa
Fixes: #22748
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Review: http://review.typo3.org/9942
Security-Commit: 41a869269bb50a86a467aedef0a9e89fdd56b765
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10024
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] Missing escaping in scheduler

A proper escaping is missing for field "frequency"
Sanitize submitted uid

Change-Id: Id18dfcfb542837becb559c571f0c23a7a81cc40a
Fixes: #24474
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Review: http://review.typo3.org/9941
Security-Commit: ba96a0e50b77124f75128b19f74db39e3edeee6b
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10025
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS in BE file list

Change-Id: Ic25488783111b59138b58a57e562e5fd03e1dca9
Fixes: #30940
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Review: http://review.typo3.org/9940
Security-Commit: be6b2649b0583f72971bd370a6e72419f6069aa7
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10026
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS possibility in RemoveXSS

RemoveXSS fails to properly remove non printable characters, especially
zero-byte (\x00) chars.

Change-Id: I6a019d4174cf7d0e7d5cf2a4e06b665897ac3e87
Fixes: #30188
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Review: http://review.typo3.org/9938
Security-Commit: fcd0af65fe92349e0566e2306c6ff565346081e9
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10027
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS in be_layouts

Some values from the backend layout configuration
are not properly escaped

Change-Id: I72c45c6c7774c7608a5a88620266b06be9118b01
Fixes: #29536
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Review: http://review.typo3.org/9939
Security-Commit: e17ddd00f6870171157acaa710b60f716cce6a87
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10029
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader