Vendor Import v4.5.18

[BUGFIX] Pass $fieldName when processing FlexForm DS in t3lib_transferData (Claus Due)
[BUGFIX] t3lib_db - expects parameter 1 to be resource, boolean given (Michael Klapper)
[BUGFIX] Suggest Wizard crashes in Frontend Editing (Dennis Ahrens)
[BUGFIX] unlink issues warnings for lock files (Markus Klein)
[BUGFIX] IRRE childs don't expand in Internet Explorer (Stefan Aebischer)
[BUGFIX] t3lib_db::exec_SELECTgetRows method annotation (Nicole Cordes)
[BUGFIX] Properly check disabled versioning within tcemain (Tolleiv Nietsch)
[BUGFIX] PHP warnings may show up in the List module (Dmitry Dulepov)
[BUGFIX] Shell command arguments are not escaped (Mario Rimann)
[BUGFIX] RTE transformation transforms LF/CR between div and hr into space (Stanislas Rolland)
[BUGFIX] Exclude E_STRICT on PHP 5.4 and unify error reporting (Philipp Gampe)
[TASK] Always return a boolean in t3lib_div::validPathStr (Andy Grunwald)
[TASK] Improve error message of "broken rootline" (Georg Ringer)
[BUGFIX] Formmail doesn't always use correct character set (Jigal van Hemert)
[BUGFIX] $_EXTCONF was not filled in ext_tables.php (Ernesto Baschny)
[BUGFIX] stdWrap numRows fails due to wrong SELECT clause (Ernesto Baschny)
[TASK] Raise submodule pointer (TYPO3 Release Team)
[BUGFIX] QT movies prefixed abusively in Media CE (Francois Suter)
[BUGFIX] Send sane HTTP response in showpic on error (Christian Kuhn)
[BUGFIX] Unnecessary warning in css_styled_content (division by zero) (Thomas Layh)
[BUGFIX] datepicker does not set current time as default (Simon Schaufelberger)
[BUGFIX] Drag&Drop inside the root page of the pagetree isn't possible (Stefan Galinski)
[BUGFIX] Check if user is allowed to paste page to pagetree (Max Roesch)
[BUGFIX] Add rootline workspace overlay for backend_layouts. (Timo Webler)
[BUGFIX] accessibilityWrap ignores simple value (Jigal van Hemert)
[BUG] t3lib_div::getFilesInDir order differs from order in File list (Benjamin Mack)
[BUGFIX] RTE: Importing google webfonts breaks style sheet parsing (Stanislas Rolland)
[BUGFIX] E_DEPRECATED does not exist in PHP 5.2 (Ivan Kartolo)
[BUGFIX] RTE spellcheck issue on Windows server (Stanislas Rolland)
Vendor Import v4.5.19

[SECURITY] XSS in install tool (Mario Rimann)
[SECURITY] Page Link Target vulnerable to XSS (Markus Bucher)
[SECURITY] XSS in validateForm (Markus Bucher)
[SECURITY] XSS in TCE forms (Christian Kuhn)
[SECURITY] XSS in Scheduler Example Task (Mario Rimann)
[SECURITY] HTML5 support in RemoveXSS (Franz G. Jahn)
[SECURITY] Information Disclosure in the Configuration Module (Mario Rimann)
[SECURITY] Untrusted GP data is unserialized in old CSH handling (Helmut Hummel)
[SECURITY] XSS in Indexed Search statistics (Steffen Gebert)
[SECURITY] t3lib_div::quoteJSvalue allows XSS (Helmut Hummel)
Vendor Import v4.5.20

[TASK] Raise submodule pointer (TYPO3 Release Team)
[TASK] Update md5 sums for 4.5.20 (Steffen Ritter)
[TASK] Update backend sprites according to rebranding (Steffen Ritter)
[TASK] Introduce "TYPO3 CMS" in EXT: about (Felix Kopp)
[TASK] Adjust Logos to new style-guide (Felix Kopp)
[BUGFIX] Prevent saltedpasswords destroying the password (Xavier Perseguers)
[BUGFIX] RTE: Paste as plain text doesn't work in Safari (Mac only) (Stanislas Rolland)
[BUGFIX] CE with "All languages" doesn't show with every lang (Marcus Schwemer)
[BUGFIX] CE with "All languages" isn't shown in Page module (Georg Ringer)
[BUGFIX] Proper cursor icon in access module (Georg Ringer)
[BUGFIX] Fix the additional icon check (Wouter Wolters)
[BUGFIX] Fix translation moving in workspaces (Tolleiv Nietsch)
[BUGFIX] strftime expects parameter 2 to be long, string given (Simon Schaufelberger)
[BUGFIX] RTE: array_flip warning on array of languages (Stanislas Rolland)
[BUGFIX] Words with special characters not added to personal dictionary (Stanislas Rolland)
[BUGFIX] htmlArea RTE: Cursor jumps to first letter with Chrome 22 (Stanislas Rolland)
[BUGFIX] Do not save expand state for root node in TCA tree (Christoph Gerold)
[BUGFIX] File upload button is collapsed in Chrome 21 (Steffen Gebert)
[BUGFIX] Switch to List module on root page leads to blank page (Thomas Löffler)
[BUGFIX] Error handler registration accepts way too much PHP error types (Marcus Krause)
[BUGFIX] Tree view in admin panel is broken with PHP 5.4 (Philipp Gampe)
[BUGFIX] Error handler callback causes fatal error for parse time errors (Marcus Krause)
[BUGFIX] Error messages are not shown in 123 installation process (Nicole Cordes)
[TASK] Database creating fails due to not allowed characters (Jigal van Hemert)
[BUGFIX] Set charset property after cloning t3lib_PageRenderer (Laurent Cherpit)
[BUGFIX] PHP warning when no language pack is available (Xavier Perseguers)
Vendor Import v4.5.21

[SECURITY] Fix SQL injection and XSS in record history (Oliver Hader)
[SECURITY] XSS in TCA Tree (Oliver Hader)
[SECURITY] Fix potential XSS in t3lib_BEfunc::getFuncCheck (Helmut Hummel)
[TASK] Raise submodule pointer (TYPO3 Release Team)
[BUGFIX] No sorting in TypoScript Object Browser when browsing (Nicole Cordes)
[BUGFIX] Translated non-published page in workspace breaks live workspace (Oliver Hader)
[BUGFIX] Illegal string offsets in t3lib_stdgraphic (Wouter Wolters)
[BUGFIX] PHP 5.4 warning in CLI context in switch back user (Christian Kuhn)
[BUGFIX] t3lib_div: adjust substUrlsInPlainText to also work on URLs at end of sentence (Robert Heel)
[BUGFIX] Wrong call to TSFE in FrontendEditing (Steffen Ritter)
[TASK] Fix generation of ext_emconf.php (Wouter Wolters)
[BUGFIX] t3lib_div::unlink_tempfile does not always work on Windows (Stanislas Rolland)
[BUGFIX] TCEForms.Suggest wizard in IRRE records (Nicole Cordes)
[BUGFIX] Fix case of tests folder (Xavier Perseguers)
[BUGFIX] Unit test for saltedpasswords fail (Xavier Perseguers)
[BUGFIX] RTE: Link to disabled page doesn't show in FE, link icon does (Stanislas Rolland)
[BUGFIX] RTE: Words containing umlauts not added to personal dictionary (Stanislas Rolland)
[BUGFIX] Extension Import not working with postgresql and DBAL (Ernesto Baschny)
Vendor Import v4.5.22

[TASK] Raise submodule pointer (TYPO3 Release Team)
[TASK] Raise version numbers of system extensions (Steffen Ritter)
[BUGFIX] imagecopyresized: correct invalid parameters (Stefan Neufeind)
[TASK] Fix TYPO3 logos (Helmut Hummel)
[TASK] Raise submodule pointer (TYPO3 Release Team)
[BUGFIX] #42812 Most checkboxes (like Extended View) are not working (Michael Späth)
Vendor Import v4.5.23

[TASK] Raise submodule pointer (TYPO3 Release Team)
[BUGFIX] t3lib_iconWorks must check if array exists before using it (Jigal van Hemert)
[BUGFIX] BE user switch impossible when in adminOnly mode (Philipp Kitzberger)
[BUGFIX] Excludefieds must exclude admin only tables (Georg Ringer)
[BUGFIX] TypoLink: absolute urls when installed in subfolder (Nils Seinschedt)
[TASK] Raise submodule pointer (Christian Kuhn)
[BUGFIX][Cache][PDO] Duplicate cache entry possible (Leon Dietsch)
[BUGFIX] IE9 compatibility clear cache menu (Andreas Kiessling)
[BUGFIX] Hook call modifyDBRow in ContentContentObject (Alina Fleser)
[BUGFIX] Fix misspelling in RTE meta menu (Tomita Militaru)
[BUGFIX] load TCA before manipulation (Jigal van Hemert)
[TASK] DataHandler::getAutoVersionId() should be public (Oliver Hader)
[BUGFIX] Load date-time picker in scheduler module (Christian Kuhn)
[BUGFIX] Quick Edit triggers warnings of missing key uid (Philipp Gampe)
[TASK] Raise submodule pointer (Christian Kuhn)
[BUGFIX] Fix warnings in em on tab Maintenance (Philipp Gampe)
[BUGFIX] Correct TCA inclusion for uploads rendering (Georg Ringer)
[BUGFIX] Update description on changed error reporting defaults (Mario Rimann)
[BUGFIX] Fix typos in stdWrap_crop description (Wouter Wolters)
[BUGFIX] Apc Cache backend has side effects (Daniel Pötzinger)
[BUGFIX] Invalid call to t3lib_TCEmain::processRemapStack() (Oliver Hader)
[TASK] Raise submodule pointer (TYPO3 Release Team)
[BUGFIX] Suggest wizard is behind form inputs (Xavier Perseguers)
[BUGFIX] phpdoc: $urlParameters can be a string (Stefan Neufeind)
[BUGFIX] FE session records are never removed (Steffen Müller)
[BUGFIX] INTincScript_loadJSCode() causes PHP warnings (Markus Klein)
[BUGFIX] Enable the RTE with WebKit version 534 on iOS and Android (Stanislas Rolland)
[BUGFIX] Remove HTML in RuntimeException from sysext 'install' (Philipp Gampe)
[BUGFIX] Fix wrong column title in web>list for field colpos (Martin Kästner)
[BUGFIX] SqlParser: trim all kinds of whitespaces (Stefan Neufeind)
[TASK] Remove typo3.pageModule.js (Falk Kühnel)
[BUGFIX] Installer: Reference images wrong (Christian Kuhn)
[BUGFIX] Page Information shows incorrect number of total hits (Andrew Moore)
[BUGFIX] Old logo on "Install Tool is locked" page (Nikolas Schmidt-Voigt)
[TASK] openid: Update php-openid to 2.2.2 (Stefan Neufeind)
[TASK] Group excludefields by table (Johannes Feustel)
[BUGFIX] Hide version selector if workspaces are used (Helmut Hummel)
[TASK] Raise submodule pointer (TYPO3 Release Team)