Pullup ticket #4417 - requested by obache
emulators/suse131_x11: security update

Revisions pulled up:
- emulators/suse131_x11/Makefile                                1.6-1.7
- emulators/suse131_x11/distinfo                                1.6

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Fri May 23 13:18:56 UTC 2014

   Modified Files:
   	pkgsrc/emulators/suse131_x11: Makefile distinfo

   Log Message:
   Apply openSUSE Security Update: openSUSE-SU-2014:0711-1
   libXfont: Fixed multiple vulnerabilities

      An update that fixes three vulnerabilities is now available.

   Description:

      libxfont was updated to fix multiple vulnerabilities:
      - Integer overflow of allocations in font metadata file parsing
        (CVE-2014-0209).
      - Unvalidated length fields when parsing xfs protocol replies
        (CVE-2014-0210).
      - Integer overflows calculating memory needs for xfs replies
        (CVE-2014-0211).

      These vulnerabilities could be used by a local, authenticated user to
      raise privileges
      or by a remote attacker with control of the font server to execute code
       with the privileges of the X server.

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Fri May 23 13:20:50 UTC 2014

   Modified Files:
   	pkgsrc/emulators/suse131_x11: Makefile

   Log Message:
   Bump PKGREVISION to refrect libXfont rpm update.
Pullup ticket #4418 - requested by taca
www/typo3_45: security update

Revisions pulled up:
- www/typo3_45/Makefile                                         1.30
- www/typo3_45/PLIST                                            1.14
- www/typo3_45/distinfo                                         1.25

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue May 27 13:47:25 UTC 2014

   Modified Files:
   	pkgsrc/www/typo3_45: Makefile PLIST distinfo

   Log Message:
   Update typo3_45 to 4.5.34 (TYPO4 4.5.34), contains several security fixes.

   2014-05-22  2ee368c                  [RELEASE] Release of TYPO3 4.5.34 (TYPO3 Release Team)
   2014-05-22  55d5f38  #30377          [SECURITY] Add trusted HTTP_HOST configuration (Helmut Hummel)
   2014-05-22  efb098b  #54111,#54113   [SECURITY] XSS in (old) extension manager information function (Marc Bastian Heinrichs)
   2014-05-22  94011a3  #48695          [SECURITY] XSS in new content element wizard (Markus Klein)
   2014-05-22  b62651b  #54109          [SECURITY] XSS in template tools on root page (Marc Bastian Heinrichs)
   2014-05-22  a98ae3c  #57576          [SECURITY] XSS in Backend Layout Wizard (Nicole Cordes)
   2014-05-22  4f7258c  #48693          [SECURITY] Encode URL for use in JavaScript (Markus Klein)
   2014-05-22  742ad49  #56458          [SECURITY] Fix insecure unserialize in colorpicker (Helmut Hummel)
   2014-05-22  9bd7776  #54526          [SECURITY] Remove charts.swf to get rid of XSS vulnerability (Helmut Hummel)
   2014-05-08  6ffdcee  #58187          [BUGFIX] Solve stackoverflow in prototype in IE8 (Jigal van Hemert)
   2014-04-16  5d6a16e                  [TASK] Set TYPO3 version to 4.5.34-dev (TYPO3 Release Team)

   2014-04-16  5bd6b52                  [RELEASE] Release of TYPO3 4.5.33 (TYPO3 Release Team)
   2014-04-15  aebc244  #51768          [TASK] Updates prototype and scriptaculous, fixing IE9+ issues (Ernesto Baschny)
   2014-04-15  51a3897  #57934          [BUGFIX] Use validEmail() instead of deprecated checkEmail() (Stefan Neufeind)
   2014-04-15  fcdaec0  #56580          [BUGFIX] SoftReferenceIndex typolink lacks support for title attributes (Marc Bastian Heinrichs)
   2014-04-04  4316e98  #57656          [TASK] Integrate default README.txt (Oliver Hader)
   2014-04-04  9d36515  #57603          [SECURITY] Prevent XSS in scheduler form (Nicole Cordes)
   2014-02-27  e34a90b  #55966          [BUGFIX] Revert "[TASK] Use a 401 header if login is not successful" (Markus Klein)
   2014-02-25  5c4554b  #23984          [BUGFIX] felogin reset password links not clickable (Jigal van Hemert)
   2014-02-09  7d6a8cc  #55811          [BUGFIX] Namespace usage in test (Christian Kuhn)
   2014-02-08  44d7cfc  #16491          [BUGFIX] CSV-Download not working in IE and HTTPS backend (Christian Kuhn)
   2014-01-30  138b13a  #55458          [BUGFIX] DocumentTemplate class inserts inDocStyles twice (Stefan Neufeind)
   2014-01-28  b867b04  #55350          [BUGFIX] Invalid constant in the domain redirect function (Tim Lochmueller)
   2014-01-17  ab6256f                  Revert "[TASK] Optimize speed for instantiating class with arguments" (Ernesto Baschny)
   2014-01-17  2526bdd  #53682          [TASK] Optimize speed for instantiating class with arguments (Helmut Hummel)
   2014-01-16  102307f  #54748          [BUGFIX] Fix PHP fatal error in be.tableList view helper (Marc Bastian Heinrichs)
   2014-01-09  e6643e1  #52554          [TASK] Change list view delete icon if record is deleted in WS (Sascha Egerer)
   2014-01-08  765882e  #52133          [BUGFIX] Display relations' titles when TCA label field is type inline (Stefan Froemken)
   2013-12-12  d3e9494  #53818          [BUGFIX] Cleanly unset cookies on login in cookie-check (Stefan Neufeind)
Pullup ticket #4419 - requested by taca
www/typo3_47: security update

Revisions pulled up:
- www/typo3_47/Makefile                                         1.21
- www/typo3_47/PLIST                                            1.11
- www/typo3_47/distinfo                                         1.16

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue May 27 13:49:11 UTC 2014

   Modified Files:
   	pkgsrc/www/typo3_47: Makefile PLIST distinfo

   Log Message:
   Update to typo3_47 to 4.7.19 (TYPO3 4.7.19), contains several securify fixes.

   2014-05-22  4ebc6ca                  [RELEASE] Release of TYPO3 4.7.19 (TYPO3 Release Team)
   2014-05-22  07eba3e  #30377          [SECURITY] Add trusted HTTP_HOST configuration (Helmut Hummel)
   2014-05-22  ec33beb  #54111,#54113   [SECURITY] XSS in (old) extension manager information function (Marc Bastian Heinrichs)
   2014-05-22  fb096e3  #48695          [SECURITY] XSS in new content element wizard (Markus Klein)
   2014-05-22  1389da5  #54109          [SECURITY] XSS in template tools on root page (Marc Bastian Heinrichs)
   2014-05-22  65fc32f  #57576          [SECURITY] XSS in Backend Layout Wizard (Nicole Cordes)
   2014-05-22  7bec5c8  #48693          [SECURITY] Encode URL for use in JavaScript (Markus Klein)
   2014-05-22  b907b64  #56458          [SECURITY] Fix insecure unserialize in colorpicker (Helmut Hummel)
   2014-05-22  c39bca9  #54526          [SECURITY] Remove charts.swf to get rid of XSS vulnerability (Helmut Hummel)
   2014-04-16  53b74d7                  [TASK] Set TYPO3 version to 4.7.19-dev (TYPO3 Release Team)

   2014-04-16  26f503d                  [RELEASE] Release of TYPO3 4.7.18 (TYPO3 Release Team)
   2014-04-15  f329f76  #51768          [TASK] Updates prototype and scriptaculous, fixing IE9+ issues (Ernesto Baschny)
   2014-04-15  9a2f402  #56580          [BUGFIX] SoftReferenceIndex typolink lacks support for title attributes (Marc Bastian Heinrichs)
   2014-04-04  d470aa5  #57656          [TASK] Integrate default README.txt (Oliver Hader)
   2014-04-04  be342b4  #57603          [SECURITY] Prevent XSS in scheduler form (Nicole Cordes)
   2014-02-25  4dfb4d3  #23984          [BUGFIX] felogin reset password links not clickable (Jigal van Hemert)
   2014-02-10  0345de6                  [TASK] Execute lint in parallel (Helmut Hummel)
   2014-02-09  df8e21b  #55811          [BUGFIX] Namespace usage in test (Christian Kuhn)
   2014-02-08  84d2050  #16491          [BUGFIX] CSV-Download not working in IE and HTTPS backend (Christian Kuhn)
   2014-01-27  a42059c  #55366,#55377   [TASK] Change phpunit repository url for travis (Philipp Gampe)
   2014-01-17  3d40e0a  #53682          [TASK] Optimize speed for instantiating class with arguments (Helmut Hummel)
   2014-01-16  394e421  #54748          [BUGFIX] Fix PHP fatal error in be.tableList view helper (Marc Bastian Heinrichs)
   2014-01-09  66bb350  #38767          [BUGFIX] use search word(s) for ordering search results (again) (Ralf Hettinger)
   2014-01-08  f3b8711  #52133          [BUGFIX] Display relations' titles when TCA label field is type inline (Stefan Froemken)
   2013-12-18  53a6a36  #54369          [TASK] Fix travis builds (Markus Klein)
   2013-12-12  019d6b7  #53818          [BUGFIX] Cleanly unset cookies on login in cookie-check (Stefan Neufeind)
Pullup ticket #4420 - requested by taca
www/typo3_60: security update

Revisions pulled up:
- www/typo3_60/Makefile                                         1.8
- www/typo3_60/PLIST                                            1.7
- www/typo3_60/distinfo                                         1.8

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue May 27 13:50:48 UTC 2014

   Modified Files:
   	pkgsrc/www/typo3_60: Makefile PLIST distinfo

   Log Message:
   Update typo3_60 to 6.0.14 (TYPO3 6.0.14), contains several security fixes.

   2014-05-22  d1d252f                  [RELEASE] Release of TYPO3 6.0.14 (TYPO3 Release Team)
   2014-05-22  37273fb  #30377          [SECURITY] Add trusted HTTP_HOST configuration (Helmut Hummel)
   2014-05-22  edd27ad  #54111,#54113   [SECURITY] XSS in (old) extension manager information function (Nicole Cordes)
   2014-05-22  00f00b1  #48695          [SECURITY] XSS in new content element wizard (Marcus Krause)
   2014-05-22  6b7f3a8  #54109          [SECURITY] XSS in template tools on root page (Marc Bastian Heinrichs)
   2014-05-22  5935348  #57576          [SECURITY] XSS in Backend Layout Wizard (Helmut Hummel)
   2014-05-22  dda1739  #48693          [SECURITY] Encode URL for use in JavaScript (Jigal van Hemert)
   2014-05-22  5e00a13  #56458          [SECURITY] Fix insecure unserialize in colorpicker (Helmut Hummel)
   2014-05-22  0f29e1f  #54526          [SECURITY] Remove charts.swf to get rid of XSS vulnerability (Helmut Hummel)
   2014-05-21  e50f6a6  #54917          [BUGFIX] Indexer tries to insert NULL into DB (Markus Klein)
   2014-05-15  53c830f  #53079          [BUGFIX] FlashMessageService not available in TYPO3 6.0 (Oliver Hader)
   2014-05-14  459c34d  #58529          [BUGFIX] DependencyUtility does count() on an integer (Markus Klein)
   2014-04-25  bd704d5  #58180          [BUGFIX] Database query error for non-workspaces tables (Oliver Hader)
   2014-04-16  d1fc88d                  [TASK] Set TYPO3 version to 6.0.14-dev (TYPO3 Release Team)

   2014-04-16  be80735                  [RELEASE] Release of TYPO3 6.0.13 (TYPO3 Release Team)
   2014-04-15  d9e6546  #51768          [TASK] Updates prototype and scriptaculous, fixing IE9+ issues (Ernesto Baschny)
   2014-04-15  48f974e  #56580          [BUGFIX] SoftReferenceIndex typolink lacks support for title attributes (Marc Bastian Heinrichs)
   2014-04-15  9d1c880  #56991          [BUGFIX] Fix refindex for FlexForm fields type group file_reference (Marc Bastian Heinrichs)
   2014-04-15  75f6b1b  #56353,#56352   [BUGFIX] Fields of type group file are not properly indexed (Marc Bastian Heinrichs)
   2014-04-15  4e64a39  #57010          [BUGFIX] Add SoftIndex parser typolink to link in sys_file_reference (Marc Bastian Heinrichs)
   2014-04-04  72be9f3  #57656          [TASK] Integrate default README.txt (Oliver Hader)
   2014-04-04  de4e047  #57603          [SECURITY] Prevent XSS in scheduler form (Nicole Cordes)
   2014-03-31  03646f1  #57296          [BUGFIX] Test typeof TBE_EDITOR for object not function (Alexander Opitz)
   2014-03-24  87d3d40  #57238          [BUGFIX] Typo in Extbase localization file (Xavier Perseguers)
   2014-03-13  be10ede  #56855          [BUGFIX] Extbase tries to overlay pages_language_overlay records (Stanislas Rolland)
   2014-03-08  15b15c0  #43885          [BUGFIX] Temporary DB tree mount notice missing in ElementBrowser (Lorenz Ulrich)
   2014-03-05  99025c1  #46185          [BUGFIX] IdentityProperties were not set (Stefan Froemken)
   2014-03-03  69c103b  #56262          [BUGFIX] Double escape of title in indexed search (Markus Klein)
   2014-02-28  cf83948  #56378          [BUGFIX] Do not log with severity 1320177676 (Christian Weiske)
   2014-02-28  432a7bd  #56421          [BUGFIX] @return for TYPO3\CMS\Sv\AuthenticationService::authUser (Christian Weiske)
   2014-02-28  1474e2c  #41413          [BUGFIX] URL-encoded title in link wizard (Helmut Hummel)
   2014-02-27  ab4ef14  #55966          [BUGFIX] Revert "[TASK] Use a 401 header if login is not successful" (Markus Klein)
   2014-02-25  95cb16e  #56184          [BUGFIX] Paginator in TER list not using ajax (Jigal van Hemert)
   2014-02-25  8c2179f  #23984          [BUGFIX] felogin reset password links not clickable (Jigal van Hemert)
   2014-02-21  9ebf4bb  #54724          [BUGFIX] Use count on storage after initialization of LazyObjectStorage (Marc Bastian Heinrichs)
   2014-02-21  4b44141  #49499          [BUGFIX] Fix possible language handling issue (Markus Klein)
   2014-02-20  568b9bf  #56135          [BUGFIX] DatabaseConnection::listQuery wrong usage of strpos() (Markus Klein)
   2014-02-19  40d97d5  #56067          [BUGFIX] Various static calls to non-static functions (Markus Klein)
   2014-02-18  e428692  #54304          [BUGFIX] Missing encoding in flexforms IRRE javascript (Alexey Gafiulov)
   2014-02-17  a335bcf  #52527          [BUGFIX] addToAllTCAtypes() doesn't add new field (Tomita Militaru)
   2014-02-17  88fd2df  #55998          [BUGFIX] Usage of undefined variables in ShortcutToolbarItem (Tim Lochmueller)
   2014-02-11  e2ebdfd  #53028          [BUGFIX] cache_clearAtMidnight conflicts with content start/endtime (Dmitry Dulepov)
   2014-02-10  e73b549                  [TASK] Execute lint in parallel (Helmut Hummel)
   2014-02-09  d2881f5  #53768,#28745   [BUGFIX] Allow to render the same TS object twice (Markus Klein)
   2014-02-09  228fbc5  #55821          [BUGFIX] Tests: Remove unstable GeneralUtilityTest::getUrl* (Christian Kuhn)
   2014-02-09  d9bf811  #18797          [BUGFIX] "New page" wizard discloses existence of pages outside DB mount (Nicole Cordes)
   2014-02-09  2a233ef  #53564          [TASK] Add possibility creating accessible mock for abstract classes (Marc Bastian Heinrichs)
   2014-02-08  33a058b  #16491          [BUGFIX] CSV-Download not working in IE and HTTPS backend (Wouter Wolters)
   2014-02-06  0fe2509  #55713          [BUGFIX] Missing namespace in ContentObjectRenderer (Markus Klein)
   2014-02-05  0004322  #54112          [BUGFIX] Set missing markers to empty string (Bernhard Kraft)
   2014-02-03  8623b17  #54371          [BUGFIX] Add stdWrap on value property of TEXT (Markus Klein)
   2014-02-03  e5a844d  #52048          [BUGFIX] Locker throws exception if semaphore can not be acquired (Markus Klein)
   2014-01-30  dc271e4  #55475          [BUGFIX] Regression in DataHandler (Wouter Wolters)
   2014-01-30  460da13  #41450          [BUGFIX] Handle empty tags in language pack index files (Alexander Stehlik)
   2014-01-29  3a84755  #55407          [BUGFIX] ClickMenu does not show destination-foldername (Stefan Neufeind)
   2014-01-28  e5df843  #55350          [BUGFIX] Invalid constant in the domain redirect function (Tim Lochmueller)
   2014-01-27  3b2cb07  #55366,#55377   [TASK] Change phpunit repository url for travis (Philipp Gampe)
   2014-01-24  72db639  #55093          [BUGFIX] Simulate time in TYPO3 admin panel broken (Peter Niederlag)
   2014-01-23  68057cf  #54849          [BUGFIX] CLI context cannot write to backend log (Oliver Hader)
   2014-01-16  c4703db  #53712          [BUGFIX] Create valid file reference index data (Alexander Stehlik)
   2014-01-16  42cd027  #50266          [BUGFIX] File browser fails on inexistent expandFolder (Mario Rimann)
   2014-01-15  f76c7ea  #34631          [BUGFIX] Show correct record title for be_groups and be_users (Markus Klein)
   2014-01-14  f3d324d  #53826          [BUGFIX] Folder tree in popup throws JS error (Aske Ertmann)
   2014-01-14  df52d4a  #53352          [BUGFIX] Add defaultTypoScript to hierachyInfo (Peter Niederlag)
   2014-01-09  d0c4276  #53862          [BUGFIX] isValidUrl() idna converts whole URI (Michiel Roos)
   2014-01-09  9f330b7  #52554          [TASK] Change list view delete icon if record is deleted in WS (Sascha Egerer)
   2014-01-09  ffc3f2b  #24877,#6708    [BUGFIX] Only create one keypair in rsaauth (Tom Ruether)
   2014-01-09  583a51b  #38767          [BUGFIX] use search word(s) for ordering search results (again) (Ralf Hettinger)
   2014-01-08  74be2df  #38766          [BUGFIX] l10n_mode for "pages" table and group fields. (Johannes Feustel)
   2014-01-08  d1e2110  #53727          [BUGFIX] Form Wizard saving destroys Radio Buttons (Markus Klein)
   2014-01-08  96ff927  #52133          [BUGFIX] Display relations' titles when TCA label field is type inline (Claus Due)
   2014-01-04  2c40d1b  #53662          [BUGFIX] Allow NULL values in INSERT queries (Alexander Stehlik)
   2014-01-04  dd187dd  #53682          [TASK] Optimize speed for instantiating class with arguments (Helmut Hummel)
   2013-12-23  c2211f5  #54115          [BUGFIX] ClassAliasMap, Tx_ VH namespace and closing tag throws Exception (Claus Due)
   2013-12-18  6be4de6  #54369          [TASK] Fix travis builds (Markus Klein)
   2013-12-18  e6bfc6e  #51752          [BUGFIX] ArrayIterator::seek() warning in ElementBrowser (Markus Klein)
   2013-12-18  1294fe7  #52059          [BUGFIX] felogin: Unknown modifier in regular expression (Wouter Wolters)
   2013-12-18  4f8c872  #47648          [BUGFIX] Remove ElementBrowser::isReadOnlyFolder (Markus Klein)
   2013-12-13  78b00f3  #54027          [BUGFIX] No double htmlspecialchars for filemount select (Alexander Stehlik)
   2013-12-12  28ca149  #53818          [BUGFIX] Cleanly unset cookies on login in cookie-check (Stefan Neufeind)
Pullup ticket #4421 - requested by taca
www/typo3_61: security update

Revisions pulled up:
- www/typo3_61/Makefile                                         1.5
- www/typo3_61/PLIST                                            1.3
- www/typo3_61/distinfo                                         1.4

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue May 27 13:52:14 UTC 2014

   Modified Files:
   	pkgsrc/www/typo3_61: Makefile PLIST distinfo

   Log Message:
   Update typo3_61 to 6.1.9 (TYPO3 6.1.9), contains several security fixes=
   .=


   2014-05-22  2bb8360                  [RELEASE] Release of TYPO3 6.1.9 (=
   TYPO3 Release Team)
   2014-05-22  6fafbf7  #30377          [SECURITY] Add trusted HTTP_HOST c=
   onfiguration (Helmut Hummel)
   2014-05-22  2994a1c  #54111,#54113   [SECURITY] XSS in (old) extension =
   manager information function (Nicole Cordes)
   2014-05-22  12741ad  #48695          [SECURITY] XSS in new content elem=
   ent wizard (Marcus Krause)
   2014-05-22  7595ad4  #54109          [SECURITY] XSS in template tools o=
   n root page (Marc Bastian Heinrichs)
   2014-05-22  6965806  #57576          [SECURITY] XSS in Backend Layout W=
   izard (Helmut Hummel)
   2014-05-22  54e4691  #48693          [SECURITY] Encode URL for use in J=
   avaScript (Jigal van Hemert)
   2014-05-22  b6826ff  #56458          [SECURITY] Fix insecure unserializ=
   e in colorpicker (Helmut Hummel)
   2014-05-22  32efb1b  #54526          [SECURITY] Remove charts.swf to ge=
   t rid of XSS vulnerability (Helmut Hummel)
   2014-05-21  6a91a90  #54917          [BUGFIX] Indexer tries to insert N=
   ULL into DB (Markus Klein)
   2014-05-15  3ee99e9  #58842          [BUGFIX] Wrong system requirements=
    link (Markus Klein)
   2014-05-14  f86e016  #58529          [BUGFIX] DependencyUtility does co=
   unt() on an integer (Markus Klein)
   2014-05-08  fb8370d  #58187          [BUGFIX] Solve stackoverflow in pr=
   ototype in IE8 (Jigal van Hemert)
   2014-05-08  3abc703  #58373          [BUGFIX] Default image title in RT=
   E contains the file name (Stanislas Rolland)
   2014-05-05  db90a26  #45183          [BUGFIX] Wrong result on empty str=
   ing globalString condition (Marc Bastian Heinrichs)
   2014-05-04  d422bf6  #58504          [BUGFIX] saltedpasswords: Check rs=
   aauth loading (Nicole Cordes)
   2014-05-04  05ef8fe  #58484          [BUGFIX] SoftReferenceIndex suppor=
   t for more values in class attribute (Marc Bastian Heinrichs)
   2014-05-02  a49ddfd  #58418          [BUGFIX] Retrieving extension fail=
   s with some PHP versions (Sascha Wilking)
   2014-04-29  0150f9c  #58166          [BUGFIX] Wrong comment in ActionMe=
   nuViewHelper (Markus Klein)
   2014-04-25  8cf4f78  #58180          [BUGFIX] Database query error for =
   non-workspaces tables (Oliver Hader)
   2014-04-16  a4f013a                  [TASK] Set TYPO3 version to 6.1.9-=
   dev (TYPO3 Release Team)

   2014-04-16  d94f80d                  [RELEASE] Release of TYPO3 6.1.8 (=
   TYPO3 Release Team)
   2014-04-16  68763fa  #57957          [BUGFIX] DBAL sql_fetch_* must ret=
   urn boolean or array (Jigal van Hemert)
   2014-04-16  65896ee  #24925,#24871   [BUGFIX] Followup: Mandatory for S=
   electbox with TCA not possible (Stefan Neufeind)
   2014-04-15  8e8b020  #24925,#24871   [BUGFIX] Mandatory for Selectbox w=
   ith TCA not possible (Benjamin Mack)
   2014-04-15  d124103  #56580          [BUGFIX] SoftReferenceIndex typoli=
   nk lacks support for title attributes (Marc Bastian Heinrichs)
   2014-04-15  6139c97  #56991          [BUGFIX] Fix refindex for FlexForm=
    fields type group file_reference (Marc Bastian Heinrichs)
   2014-04-15  1dbfe75  #56353,#56352   [BUGFIX] Fields of type group file=
    are not properly indexed (Marc Bastian Heinrichs)
   2014-04-15  b22b39d  #57010          [BUGFIX] Add SoftIndex parser typo=
   link to link in sys_file_reference (Marc Bastian Heinrichs)
   2014-04-15  5dd53b1  #51768          [TASK] Updates prototype and scrip=
   taculous, fixing IE9+ issues (Ernesto Baschny)
   2014-04-12  a60b6dc  #47694          [BUGFIX] Follow up foreign_match_f=
   ields not fully supported (Marc Bastian Heinrichs)
   2014-04-12  b93d9b4  #50378          [BUGFIX] sql_free_result does not =
   work with all allowed types (Wouter Wolters)
   2014-04-07  a896350  #57690          [BUGFIX] User settings do not obey=
    setup.override (Markus Klein)
   2014-04-05  21f0d12  #55683          [BUGFIX] ClickMenu: Visibility-opt=
   ions only if fields allowed (Stefan Neufeind)
   2014-04-04  2b3dd27  #57656          [TASK] Integrate default README.tx=
   t (Oliver Hader)
   2014-04-04  1329a96  #57603          [SECURITY] Prevent XSS in schedule=
   r form (Nicole Cordes)
   2014-04-01  6ae6b40  #57518          [BUGFIX] Make Extbase EnvironmentS=
   ervice a Singleton (Marc Bastian Heinrichs)
   2014-03-31  03ec17a  #57296          [BUGFIX] Test typeof TBE_EDITOR fo=
   r object not function (Alexander Opitz)
   2014-03-26  2b5c50e  #54394          [BUGFIX] Exception if thumbnail do=
   es not exist (Markus Klein)
   2014-03-24  cbdd065  #57238          [BUGFIX] Typo in Extbase localizat=
   ion file (Xavier Perseguers)
   2014-03-23  fc5b7b2  #57179          [BUGFIX] Module Menu throws PHP wa=
   rning for top level menu items (Benjamin Mack)
   2014-03-23  9b36936  #57202          [BUGFIX] Parsetime: config.debug s=
   hould override LocalConfiguration (Stefan Neufeind)
   2014-03-19  819218a  #55340          [BUGFIX] Several typos in Page Bro=
   wsing ViewHelper (Benjamin Rau)
   2014-03-19  f8233c1  #56205          [BUGFIX] Cannot use contain with m=
   ultivalued static enumeration column (Xavier Perseguers)
   2014-03-14  d5160a9  #56150          [BUGFIX] RootlineUtility does not =
   consider disablefield (Christian Reiter)
   2014-03-13  2a80fcd  #56855          [BUGFIX] Extbase tries to overlay =
   pages_language_overlay records (Stanislas Rolland)
   2014-03-13  2ee3509  #56720          [BUGFIX] Alignment of button "add =
   a new element at this place" (Patrick Broens)
   2014-03-13  bed1054  #56830          [BUGFIX] Show thumbnails in list m=
   odule (Markus Klein)
   2014-03-13  3800d8b  #56084          [BUGFIX] Followup: Ajax handler TY=
   PO3_tcefile::process is broken (Frans Saris)
   2014-03-12  d405041  #23864          [BUGFIX] Correctly validate New Co=
   ntent Element entries (Ludwig Rafelsberger)
   2014-03-10  06e5ad9  #52386          [BUGFIX] Allow record insert on ro=
   otlevel (Benjamin Serfhos)
   2014-03-08  2df9cb9  #43885          [BUGFIX] Temporary DB tree mount n=
   otice missing in ElementBrowser (Lorenz Ulrich)
   2014-03-07  472a2f2  #55457          [BUGFIX] RTE on first new IRRE rec=
   ord keeps loading in IE (Stanislas Rolland)
   2014-03-07  e61b2cf  #23552          [BUGFIX] Default size for group-ty=
   pe fields (Christian Plattner)
   2014-03-05  f8c9a77  #46185          [BUGFIX] IdentityProperties were n=
   ot set (Stefan Froemken)
   2014-03-05  e7cf550  #11771          [BUGFIX] Catch all errors while st=
   arting installer (Alexander Opitz)
   2014-03-03  28d25c9  #56262          [BUGFIX] Double escape of title in=
    indexed search (Markus Klein)
   2014-02-28  ded338b  #56378          [BUGFIX] Do not log with severity =
   1320177676 (Christian Weiske)
   2014-02-28  8f0ce1c  #56421          [BUGFIX] @return for TYPO3\CMS\Sv\=
   AuthenticationService::authUser (Christian Weiske)
   2014-02-28  342686b  #41413          [BUGFIX] URL-encoded title in link=
    wizard (Helmut Hummel)
   2014-02-27  5ce3128  #55966          [BUGFIX] Revert "[TASK] Use a 401 =
   header if login is not successful" (Markus Klein)
   2014-02-25  a5d8893  #56184          [BUGFIX] Paginator in TER list not=
    using ajax (Jigal van Hemert)
   2014-02-25  b4a8235  #23984          [BUGFIX] felogin reset password li=
   nks not clickable (Jigal van Hemert)
   2014-02-24  5da89e2  #56242          [BUGFIX] Fix JS concat if first fi=
   le is forced on top (Benjamin Kott)
   2014-02-21  c47d8c5  #54724          [BUGFIX] Use count on storage afte=
   r initialization of LazyObjectStorage (Marc Bastian Heinrichs)
   2014-02-21  6512f65  #49499          [BUGFIX] Fix possible language han=
   dling issue (Markus Klein)
   2014-02-20  b09e7f9  #39048          [BUGFIX] Rendering inline TCEforms=
    without AJAX is broken (Alexander Jahn)
   2014-02-20  c9ae284  #53116,#56019   [BUGFIX] concatenateJs/Css does no=
   t consider forceOnTop (Markus Klein)
   2014-02-20  b8eeb55  #56135          [BUGFIX] DatabaseConnection::listQ=
   uery wrong usage of strpos() (Markus Klein)
   2014-02-19  bd607e2  #55286          [BUGFIX] Suppress EXIF warnings in=
   dexing images (Felix Althaus)
   2014-02-19  45f944c  #56067          [BUGFIX] Various static calls to n=
   on-static functions (Markus Klein)
   2014-02-19  d2ef187  #56057          [BUGFIX] Add missing htmlspecialch=
   ars for thumbnail URL (Wouter Wolters)
   2014-02-18  b7169bb  #52955          [BUGFIX] Show labels of additional=
    doktypes in new page drag area (Caspar Stuebs)
   2014-02-18  7af5ad6  #54304          [BUGFIX] Missing encoding in flexf=
   orms IRRE javascript (Alexey Gafiulov)
   2014-02-17  48eab76  #52527          [BUGFIX] addToAllTCAtypes() doesn'=
   t add new field (Tomita Militaru)
   2014-02-17  6344793  #56037          [BUGFIX] Fix clipboard thumbnail r=
   endering (Frans Saris)
   2014-02-17  dc0ec8a  #55998          [BUGFIX] Usage of undefined variab=
   les in ShortcutToolbarItem (Tim Lochmueller)
   2014-02-17  52c294b  #55362          [BUGFIX] CommandController is not =
   executed at same time (Tom Ruether)
   2014-02-11  c9ffade  #49440          [BUGFIX] Missing label felogin_for=
   gotHash (Karol Lamparski)
   2014-02-11  edbef68  #53028          [BUGFIX] cache_clearAtMidnight con=
   flicts with content start/endtime (Dmitry Dulepov)
   2014-02-10  474380f                  [TASK] Execute lint in parallel (H=
   elmut Hummel)
   2014-02-09  e36633a  #53768,#28745   [BUGFIX] Allow to render the same =
   TS object twice (Markus Klein)
   2014-02-09  9971136  #55821          [BUGFIX] Tests: Remove unstable Ge=
   neralUtilityTest::getUrl* (Christian Kuhn)
   2014-02-09  101be25  #18797          [BUGFIX] "New page" wizard disclos=
   es existence of pages outside DB mount (Nicole Cordes)
   2014-02-09  5f6d783  #53564          [TASK] Add possibility creating ac=
   cessible mock for abstract classes (Marc Bastian Heinrichs)
   2014-02-08  cead255  #16491          [BUGFIX] CSV-Download not working =
   in IE and HTTPS backend (Wouter Wolters)
   2014-02-08  98c8e0a  #55698          [BUGFIX] Fix "action" labels in BE=
    log (Thorsten Kahler)
   2014-02-07  9e79487  #55611          [TASK] Move cursor::pointer to com=
   plete header area in IRRE (Georg Ringer)
   2014-02-06  79d2bac  #54131          [BUGFIX] Followup to #54131 (Frans=
    Saris)
   2014-02-06  ad267f8  #55713          [BUGFIX] Missing namespace in Cont=
   entObjectRenderer (Markus Klein)
   2014-02-05  27c1f61  #54112          [BUGFIX] Set missing markers to em=
   pty string (Bernhard Kraft)
   2014-02-04  4d7947a  #55434          [BUGFIX] Various PHP Warnings with=
    invalid credentials (Xavier Perseguers)
   2014-02-03  1263413  #54467          [BUGFIX] TSFE->altPageTitle can no=
   t be set in extensions (Markus Klein)
   2014-02-03  a070a5c  #54371          [BUGFIX] Add stdWrap on value prop=
   erty of TEXT (Markus Klein)
   2014-02-03  85b3fed  #52048          [BUGFIX] Locker throws exception i=
   f semaphore can not be acquired (Markus Klein)
   2014-02-02  af8f6eb  #54289          [BUGFIX] PropertyMapper does not w=
   ork with class aliasses (Frans Saris)
   2014-01-31  9596d4d  #54131          [BUGFIX] getLabelsFromItemsList() =
   retuns no value when no item found (Frans Saris)
   2014-01-30  3dcc61d  #55475          [BUGFIX] Regression in DataHandler=
    (Wouter Wolters)
   2014-01-30  a5e884f  #55458          [BUGFIX] DocumentTemplate class in=
   serts inDocStyles twice (Stefan Neufeind)
   2014-01-30  084b5a9  #41450          [BUGFIX] Handle empty tags in lang=
   uage pack index files (Alexander Stehlik)
   2014-01-29  b81c5d5  #55407          [BUGFIX] ClickMenu does not show d=
   estination-foldername (Stefan Neufeind)
   2014-01-28  d6803b7  #55350          [BUGFIX] Invalid constant in the d=
   omain redirect function (Tim Lochmueller)
   2014-01-27  91b1db0  #55377          [TASK] Change repository url for i=
   ntroduction package (Philipp Gampe)
   2014-01-27  1af64b0  #55366          [TASK] Change phpunit repository u=
   rl for travis (Philipp Gampe)
   2014-01-24  3cefa40  #53964          [BUGFIX] Better description of [BE=
   ][unzip_path]/[BE][diff_path] (Markus Klein)
   2014-01-24  041780f  #55093          [BUGFIX] Simulate time in TYPO3 ad=
   min panel broken (Peter Niederlag)
   2014-01-23  8f55af7  #53201          [BUGFIX] sys_category table not li=
   sted in allowed excludefields (Tomita Militaru)
   2014-01-23  eec8579  #53665          [BUGFIX] Removing single category =
   item not possible (Francois Suter)
   2014-01-23  57b70f7  #54849          [BUGFIX] CLI context cannot write =
   to backend log (Oliver Hader)
   2014-01-22  b865ad9  #55246          [BUGFIX] Class 'TYPO3\CMS\Recordli=
   st\Browser\GeneralUtility' not found (Oliver Hader)
   2014-01-21  c96321d  #37539          [BUGFIX] Static method cannot be a=
   bstract (Xavier Perseguers)
   2014-01-21  ae54769  #54884          [BUGFIX] RootlineUtility does not =
   consider foreign_sorting (Markus Klein)
   2014-01-16  0965b22  #53712          [BUGFIX] Create valid file referen=
   ce index data (Alexander Stehlik)
   2014-01-16  b7ce3ef  #50266          [BUGFIX] File browser fails on ine=
   xistent expandFolder (Mario Rimann)
   2014-01-15  429e13d  #34631          [BUGFIX] Show correct record title=
    for be_groups and be_users (Markus Klein)
   2014-01-15  5b23142  #54995          [BUGFIX] PHP warnings in ElementBr=
   owser (Markus Klein)
   2014-01-14  0ac8948  #54959          [TASK] Speedup typolink root-line =
   handling (Steffen Ritter)
   2014-01-14  714fca7  #53826          [BUGFIX] Folder tree in popup thro=
   ws JS error (Aske Ertmann)
   2014-01-14  f68832a  #53352          [BUGFIX] Add defaultTypoScript to =
   hierachyInfo (Peter Niederlag)
   2014-01-13  22d3be1  #51805          [BUGFIX] Template dropdown doesn't=
    refresh template title after save (Torben Hansen)
   2014-01-11  72f5d5a  #54909          [BUGFIX] Add missing logger names =
   (Steffen M=FCller)
   2014-01-09  2620cb5  #53975          [BUGFIX] Allow empty values in sta=
   rt/stop filter of belog (Steffen M=FCller)
   2014-01-09  c99a07a  #53862          [BUGFIX] isValidUrl() idna convert=
   s whole URI (Michiel Roos)
   2014-01-09  4e3e3dc  #52554          [TASK] Change list view delete ico=
   n if record is deleted in WS (Sascha Egerer)
   2014-01-09  f378b40  #31797          [BUGFIX] Properly escape the Image=
   Magick frame selector (Georg Ringer)
   2014-01-09  7d3eb35  #24877,#6708    [BUGFIX] Only create one keypair i=
   n rsaauth (Tom Ruether)
   2014-01-09  a31b325  #38767          [BUGFIX] use search word(s) for or=
   dering search results (again) (Ralf Hettinger)
   2014-01-08  03d6320  #47694          [BUGFIX] foreign_match_fields not =
   fully supported (Stefan Froemken)
   2014-01-08  e959451  #53727          [BUGFIX] Form Wizard saving destro=
   ys Radio Buttons (Markus Klein)
   2014-01-08  42a3eb3  #52133          [BUGFIX] Display relations' titles=
    when TCA label field is type inline (Claus Due)
   2014-01-07  272f80c  #54807          [BUGFIX] PageBrowsing ViewHelper d=
   efines unused method argument (Benjamin Rau)
   2014-01-07  e09b381  #54808          [BUGFIX] Repository uses wrong pro=
   perty to calc current result page (Benjamin Rau)
   2014-01-04  81a30e8  #53662          [BUGFIX] Allow NULL values in INSE=
   RT queries (Alexander Stehlik)
   2014-01-04  67ac84c  #53682          [TASK] Optimize speed for instanti=
   ating class with arguments (Helmut Hummel)
   2013-12-23  9283d4b  #54115          [BUGFIX] ClassAliasMap, Tx_ VH nam=
   espace and closing tag throws Exception (Claus Due)
   2013-12-21  8379b1a  #54531          [BUGFIX] Fix message for install t=
   ool warning (Cynthia Mattingly)
   2013-12-18  a95ab93  #54369          [TASK] Fix travis builds (Markus K=
   lein)
   2013-12-18  2a4d603  #51752          [BUGFIX] ArrayIterator::seek() war=
   ning in ElementBrowser (Markus Klein)
   2013-12-18  e4590fe  #52059          [BUGFIX] felogin: Unknown modifier=
    in regular expression (Wouter Wolters)
   2013-12-18  e8978f9  #47648          [BUGFIX] Remove ElementBrowser::is=
   ReadOnlyFolder (Markus Klein)
   2013-12-13  be7505a  #54027          [BUGFIX] No double htmlspecialchar=
   s for filemount select (Alexander Stehlik)
   2013-12-12  41fe22d  #53818          [BUGFIX] Cleanly unset cookies on =
   login in cookie-check (Stefan Neufeind)
Pullup ticket #4424 - requested by taca
mail/dovecot2: security update

Revisions pulled up:
- mail/dovecot2/Makefile                                        1.61-1.62
- mail/dovecot2/PLIST                                           1.35
- mail/dovecot2/distinfo                                        1.46

---
   Module Name:	pkgsrc
   Committed By:	obache
   Date:		Wed Apr  9 07:27:19 UTC 2014

   Modified Files:
   	pkgsrc/mail/dovecot2: Makefile

   Log Message:
   recursive bump from icu shlib major bump.

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Wed May 14 06:09:53 UTC 2014

   Modified Files:
   	pkgsrc/mail/dovecot2: Makefile PLIST distinfo

   Log Message:
   Changes 2.2.13:
   * Fixed a DoS attack against imap/pop3-login processes. If SSL/TLS
     handshake was started but wasn't finished, the login process
     attempted to eventually forcibly disconnect the client, but failed
     to do it correctly. This could have left the connections hanging
     arond for a long time. (Affected Dovecot v1.1+)

   + mdbox: Added mdbox_purge_preserve_alt setting to keep the file
     within alt storage during purge. (Should become enforced in v2.3.0?)
   + fts: Added support for parsing attachments via Apache Tika. Enable
     with: plugin { fts_tika = http://tikahost:9998/tika/ }
   + virtual plugin: Delay opening backend mailboxes until it's necessary.
     This requires mailbox_list_index=yes to work. (Currently IMAP IDLE
     command still causes all backend mailboxes to be opened.)
   + mail_never_cache_fields=* means now to disable all caching. This may
     be a useful optimization as doveadm/dsync parameter for some admin
     tasks which shouldn't really update the cache file.
   + IMAP: Return SPECIAL-USE flags always for LSUB command.
   - pop3 server was still crashing in v2.2.12 with some settings
   - maildir: Various fixes and improvements to handling compressed mails,
     especially when they have broken/missing S=sizes in filenames.
   - fts-lucene, fts-solr: Fixed crash on search when the index contained
     duplicate entries.
   - Many fixes and performance improvements to dsync and replication
   - director was somewhat broken when there were exactly two directors
     in the ring. It caused errors about "weak users" getting stuck.
   - mail_attachment_dir: Attachments with the last base64-encoded line
     longer than the rest wasn't handled correctly.
   - IMAP: SEARCH/SORT PARTIAL was handled completely wrong in v2.2.11+
   - acl: Global ACL file handling was broken when multiple entries
     matched the mailbox name. (Only the first entry was used.)
Pullup ticket #4425 - requested by taca
mail/dovecot2-pigeonhole: keep in step with mail/dovecot2

Revisions pulled up:
- mail/dovecot2-pigeonhole/Makefile                             1.18
- mail/dovecot2-pigeonhole/PLIST                                1.6
- mail/dovecot2-pigeonhole/distinfo                             1.12

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Wed May 14 06:10:36 UTC 2014

   Modified Files:
   	pkgsrc/mail/dovecot2-pigeonhole: Makefile PLIST distinfo

   Log Message:
   Changes 0.4.3:

   * Editheader extension: Made control characters allowed for editheader,
     except NUL. Before, this would cause a runtime error.
   + Upgraded Dovecot-specific Sieve "vnd.dovecot.duplicate" extension to
     match the new draft "duplicate" extension.
   - Fixed sieve_result_global_log_error to log only as i_info in
     administrator log (syslog) if executed from multiscript context.
   - Sieve redirect extension: Adjusted loop detection to show leniency to
     resent messages.
   - Sieve include extension: Fixed problem with handling of duplicate
     includes with different parameters :once or :optional.
   - Sieve spamtest/virustest extensions: Tests were erroneously performed
     against the original message. When used together with extprograms
     filter to add the spam headers, the changes were not being used by
     the spamtest and virustest extensions.
   - Deprecated Sieve notify extension: Fixed segfault problems in message
     string substitution.
   - ManageSieve: Fixed active link verification to handle redundant path
     slashes correctly.
   - Sieve vacation extension:
     - Fixed interaction of sieve_vacation_dont_check_recipient with
       sieve_vacation_send_from_recipient setting.
     - Fixed log message for discarded response.
   - Sieve extprograms plugin:
     - Forgot to disable the alarm() timeouts set for script execution.
     - Fixed fd leak and handling of output shutdown.
     - Fixed 'Bad filedescriptor' error occurring when disconnecting
       script client.
     - Made sure that programs are never forked with root privileges.
Pullup ticket #4423 - requested by taca
www/p5-LWP-Protocol-https: security patch

Apply patch to fix CVE-2014-3230.
Pullup tickets #4418, #4419, #4420, #4421, #4423, #4424 and #4425.