Pullup ticket #4271 - requested by taca

www/typo3_60: security update

Revisions pulled up:
- www/typo3_60/MESSAGE                                          1.1
- www/typo3_60/Makefile                                         1.6-1.7
- www/typo3_60/PLIST                                            1.6
- www/typo3_60/distinfo                                         1.6-1.7

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Dec  5 16:44:04 UTC 2013

   Modified Files:
   	pkgsrc/www/typo3_60: Makefile PLIST distinfo
   Added Files:
   	pkgsrc/www/typo3_60: MESSAGE

   Log Message:
   Update typo60 to 6.0.11 (TYPO3 6.0.11).  Also add MESSAGE file.

   2013-11-26  5e5f1d2                  [RELEASE] Release of TYPO3 6.0.11 (TYPO3 Release Team)
   2013-11-26  762cb0a  #53918          [BUGFIX] t3skin calls addIconSprite for each lang (Michiel Roos)
   2013-11-24  96944c0  #15958          [BUGFIX] Reload list module on clickmenu action (Bernhard Kraft)
   2013-11-21  9e2a0a1  #53802          [BUGFIX] Fix moving/copying files and folders between storages (Frans Saris)
   2013-11-21  487903a  #53844          [BUGFIX] Fix regression in ResourceCompressor (Markus Klein)
   2013-11-20  aed68c8  #53243          [BUGFIX] Filemtime / Filesize trigger warning (Tomita Militaru)
   2013-11-20  2857828  #53458          [BUGFIX] Fluid paginate widget wrong number of links (Klaas Johan Kooistra)
   2013-11-19  3d6f5be  #53773          [BUGFIX] Fix JS error in lang module (Markus Klein)
   2013-11-19  ea58bd5  #53750          [BUGFIX] Scheduler extension sql file is invalid (Michiel Roos)
   2013-11-19  055e6a5  #34544          [BUGFIX] fix javascript error "TBE_EDITOR not defined" in sys_action (Ralf Hettinger)
   2013-11-19  6c6582a  #51998          [BUGFIX] ExtDirect StateProvider should store all settings (Johannes Feustel)
   2013-11-19  9a5858d  #53746          [TASK] Optimization in AbstractViewHelper (Wouter Wolters)
   2013-11-18  464a804  #53707          [BUGFIX] Rename hook in VariableFrontend.php (Nicole Cordes)
   2013-11-18  ad98c0a  #53711          [BUGFIX] additionalAttributes for be.buttons.icon-VH misses hsc (Markus Klein)
   2013-11-15  d33b4eb                  Revert "[BUGFIX] EM: Fetch list as html, not as json" (Helmut Hummel)
   2013-11-14  ecd873f  #45724          [BUGFIX] FILES.folder does not work (Stefan Froemken)
   2013-11-14  2fef8ad  #51234          [BUGFIX] Move beuser property mappings to global scope (Philipp Gampe)
   2013-11-14  c9c7551  #17493          [BUGFIX] Fix broken edit icons on cType HTML (Stefan Neufeind)
   2013-11-13  c372d65  #25157,#45550   [BUGFIX] Distinguish unassigend columns and colPos 0 (Georg Ringer)
   2013-11-13  e6b77d8  #51918          [BUGFIX] Native date and datetime values do not consider timezone (Oliver Hader)
   2013-11-12  0e4f15a  #52926          [BUGFIX] Compressor resolves dots in filenames correctly (Christian Kuhn)
   2013-11-12  6163c42  #53115          [BUGFIX] T3editor: Make errors/exceptions show correctly (Stefan Neufeind)
   2013-11-12  4435311  #22136          [BUGFIX] Fix menu popup for all IE versions (Alexander Opitz)
   2013-11-12  53a5a1a  #52934          [BUGFIX] dataTables: Avoid sending cookie-data too often (Stefan Neufeind)
   2013-11-12  94c4d70  #53399          [BUGFIX] Wrong usage-text for cli_dispatch (Tomita Militaru)
   2013-11-12  f113773  #52904          [BUGFIX] Evaluator in JS fails with namespaces (Stefan Aebischer)
   2013-11-12  9678fc6  #53538          [BUGFIX] Make be.buttons.icon-ViewHelper extensible (Stefan Neufeind)
   2013-11-11  e9bc5e1  #52727          [TASK] Hard-coded labels in file collections (Tomita Militaru)
   2013-11-11  bc9a847  #37948          [BUGFIX] Correctly append additionalTreelistUpdateFields (Bart Dubelaar)
   2013-11-11  a8f0d86  #53423          [BUGFIX] EM: Fetch list as html, not as json (Stefan Neufeind)
   2013-11-11  6f4ae27  #48809,#51730,  [BUGFIX] Fix wrong handling of php and TYPO3 dependencies (Susanne Moog)
   2013-11-10  907d5b1  #52173          [BUGFIX] Correct storage selection (follow-up) (Ernesto Baschny)
   2013-11-09  b7a6f48  #53477          [TASK] Fix superfluous strlen() on constant strings (Steffen Ritter)
   2013-11-09  58f1fa5  #47040          [BUGFIX] Enable treeConfig overriding by Page TSconfig (Stefan Froemken)
   2013-11-09  cb14179  #53195          [BUGFIX] T3editor: Honour fileDenyPattern on saving included TS (Stefan Neufeind)
   2013-11-08  c3773a4  #29179          [BUGFIX] Escape title, extension, description of scheduler tasks (Tomita Militaru)
   2013-10-23  648018e  #31572          [BUGFIX] Exception using cObject FORM in TypoScript (Andreas Bouche)
   2013-10-18  8c21be4  #35073          [BUGFIX] Enable BE search for multiple mountpoints (Georg Ringer)
   2013-10-17  fe876a8  #52931          [TASK] Exclude central Modernizr from concatenation (Stefan Neufeind)
   2013-10-16  04e4a4b  #52529          [BUGFIX] Suppress empty tag names in output of array2xml (Markus Hoelzle)
   2013-10-16  ac2b59e  #52823          [BUGFIX] Preserve vendor name in refering request (Thomas Maroschik)
   2013-10-15  693b575  #52845          [BUGFIX] Moving folders fails (Oliver Hader)
   2013-10-15  85d0653  #50802          [BUGFIX] Only load folder contents if folder is initialised (Frans Saris)
   2013-10-15  38958f0  #52824          [BUGFIX] Superfluous usage of ObjectManagerException (Oliver Hader)
   2013-10-15  4ba140a  #51707          [FEATURE] Add getValidators to AbstractCompositeValidator (Stefan Froemken)
   2013-10-15  1156074  #52771          [BUGFIX] Use callback in preg_replace in RemoveXSS (Jigal van Hemert)
   2013-10-14  c577f9e  #52773          [BUGFIX] Detect unix-styled absolute paths on Windows systems (Nicole Cordes)
   2013-10-13  6cc1f7a  #52759          [BUGFIX] Object passed to date() (Xavier Perseguers)
   2013-10-12  f272d54  #52731          [TASK] Use 6.1 branch in travis-integration for travis (Christian Kuhn)
   2013-10-12  6cbf164  #52728          [BUGFIX] Use BackendUtility use statement (Anja Leichsenring)
   2013-10-12  13c6602  #52104          [BUGFIX] Wrong calculation of maximum value for checkbox fields (Nicole Cordes)
   2013-10-12  23b8d11  #52715          [BUGFIX] Prevent empty newline below scheduler-task-name (Stefan Neufeind)
   2013-10-11  a909546  #52708          [BUGFIX] DataMapFactory::resolveTableName must remove leading backslashes (Alexander Schnitzler)
   2013-10-11  5faa4da  #50912          [BUGFIX] BackendUtility::viewOnClick() called with non-integer (Oliver Hader)
   2013-10-11  13c5bf9  #51051          [BUGFIX] Clear_cache() must not consider page ids lower than 0 (Oliver Hader)
   2013-10-11  17fe304  #37611          [BUGFIX] Select available page when changing WS (Thorsten Kahler)
   2013-10-11  e30b70b  #52636          [BUGFIX] Copy records to target page before origin page is deleted (Timo Webler)
   2013-10-11  db7d3e5  #17551          [BUGFIX] Create workspace placeholder with processed field content (Sascha Egerer)
   2013-10-11  660e030  #36573          [BUGFIX] Add workspace overlay for fetched records. (Timo Webler)
   2013-10-11  7c837df  #37209          [BUGFIX] WS preview shows pages changes from all WS (Thorsten Kahler)
   2013-10-11  5aeddac  #52530          [BUGFIX] Delete modified record in WS just deletes WS version (Sascha Egerer)
   2013-10-11  f561b99  #37065          [BUGFIX] Don't show duplicates in workspace preview (Timo Webler)
   2013-10-10  b4b0b0e  #52178          [BUGFIX] Cannot upload an extension as zip (Xavier Perseguers)
   2013-10-07  31e44bd  #46845          [BUGFIX] Fix namespace in FileMountRepositoryTest (Marc Bastian Heinrichs)
   2013-10-07  a7da230  #49538          [BUGFIX] Fields of type file_reference are not properly indexed (Martin Borer)
   2013-10-07  388c02d  #52546          [BUGFIX] Missing closing tag in ElementBrowser (Philipp Gampe)
   2013-10-06  30d93b4  #50756          [FEATURE] Backport ClassNamingUtility (Stefan Neufeind)
   2013-10-05  d6a8e68  #52469          [TASK] Use instanceof comparison instead of string comparison (Benjamin Serfhos)
   2013-09-30  8e1ea88  #43540          [BUGFIX] TS is fetched from cache incorrectly sometimes (Dmitry Dulepov)
   2013-09-28  a2532bb  #51329          [BUGFIX] Initialize extension name in command requests (Alexander Stehlik)
   2013-09-28  7144eb5  #52346          [BUGFIX] Incomplete backup in AbstractUserAuthenticationTest (Christian Kuhn)
   2013-09-27  9c200ea  #52091,#51684   [BUGFIX] Check for string before using strlen (Kilian Hann)
   2013-09-27  128d147  #52045          [BUGFIX] EmConfUtility accesses non-arrays (Markus Klein)
   2013-09-27  9fa9f15  #51588          [BUGFIX] Clear cached menu by tag (Zbigniew Jacko)
   2013-09-27  30af6a5  #50437          [BUGFIX] Fix jumpToUrl()-Usage in Element Browser (Benjamin Pick)
   2013-09-26  77c69e7  #52266          [BUGFIX] groupFor-VH does not work with @lazy (Stefan Froemken)
   2013-09-26  3f0cc99  #50913          [BUGFIX] Fix PHP warning trigged in getAuthInfoArray() (Christian Finkemeier)
   2013-09-26  919541b  #52316          [BUGFIX] Fatal in DefaultConfiguration (Christian Kuhn)
   2013-09-26  0deefa0  #52305          [BUGFIX] Configure main extbase caches for unlimited entry lifetime (Christian Kuhn)
   2013-09-26  d00db27  #52295          [TASK] Use SimpleFileBackend for t3lib_l10n cache (Christian Kuhn)
   2013-09-25  d01851c  #52226          [BUGFIX] EM does not link to docs.typo3.org (Xavier Perseguers)
   2013-09-25  68bb292  #51116          [BUGFIX] Increase performance of exports for caches (Markus Klein)
   2013-09-25  3f8cd14  #52243          [BUGFIX] Remove duplicate exception code (Fabien Udriot)
   2013-09-24  7151ce0  #52173          [BUGFIX] Correct storage selection (common prefixes) (Ernesto Baschny)
   2013-09-24  0a80fb6  #52201          [BUGFIX] Fix broken Unit-test for #44825 (Wouter Wolters)
   2013-09-23  be4627f  #44825          [BUGFIX] Fix page.headerData + USER_INT (Helmut Hummel)
   2013-09-20  580a576  #48912          [BUGFIX] Increase length of identifier field in sys_file (Nicole Cordes)
   2013-09-20  cb6bf25  #52056          [BUGFIX] Wrong exception on renaming folder (Francois Suter)
   2013-09-19  cdba66b  #49328          [BUGFIX] Fix PHP warning when writing to Backend user log (Alexander Stehlik)
   2013-09-17  23e6007  #45859          [BUGFIX] Faulty expand/collapse behavior in Element Browser (Oliver Hader)
   2013-09-17  c79315a  #19045          [BUGFIX] Fix cropping of transparent gifs with im6. (Stefan Neufeind)
   2013-09-17  aa4ab27  #50907          [BUGFIX] Form Wizard: Adds mouse pointer to docheader icons (Ernesto Baschny)
   2013-09-13  22ee660  #51981          [BUGFIX] Also consider JPEG files for IM/GM (Markus Klein)
   2013-09-12  40cb0a4  #51803          [TASK] Use a 401 header if login is not successful (Georg Ringer)
   2013-09-12  903046f  #51891          [BUGFIX] Call to undefined method setTemplateFile (Wouter Wolters)

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Tue Dec 10 15:21:30 UTC 2013

   Modified Files:
   	pkgsrc/www/typo3_60: Makefile distinfo

   Log Message:
   Update typo3_60 package to 6.0.12 (TYPO3 6.0.12).

   - Fix multiple vulnerabilities in TYPO3 CMS:
   	http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004/

   2013-12-10  55ea17b                  [RELEASE] Release of TYPO3 6.0.12 (TYPO3 Release Team)
   2013-12-10  c703d1d  #31206          [SECURITY] XSS in header link of all content elements (Anja Leichsenring)
   2013-12-10  0f1e28b  #42772          [SECURITY] XSS in colorpicker wizard (Marcus Krause)
   2013-12-10  1cbe889  #45043          [SECURITY] Prevent editor controlled hmac content (Franz G. Jahn)
   2013-12-10  79f6850  #48691          [SECURITY] XSS in backend user adminstration (Marc Bastian Heinrichs)
   2013-12-10  b22cbce  #41714          [SECURITY] Information Disclosure in Wizards (Helmut Hummel)
   2013-12-10  e4134ae  #54099          [SECURITY] Fix open redirection in openid extension (Helmut Hummel)
   2013-12-10  2fb0277  #48187          [SECURITY] feuser_adminLib.inc allows to set arbitrary fields (Anja Leichsenring)
   2013-12-10  bd6095f  #36768          [SECURITY] XSS in be_layout wizard (Anja Leichsenring)
   2013-12-10  872cf3d  #47086          [SECURITY] XSS in beuser VH (Anja Leichsenring)
   2013-12-10  cb55c53  #54074          [SECURITY] Remove possible XSS from ActionController Error output (Anja Leichsenring)
   2013-12-10  578cc80  #54073          [SECURITY] Unsafe unserialize of GET parameter in Add-Wizard (Steffen Ritter)
   2013-12-02  9757d0c  #54124          [BUGFIX] ClientUtility does not detect Internet Explorer 11 (Stefan Neufeind)
   2013-12-02  5bf7430  #54117          [BUGFIX] Add missing namespacing for calling GeneralUtility (Stefan Neufeind)
   2013-11-29  30e1f41  #42651          [BUGFIX] ext:adodb Restrict connection wizard to admins (Christian Kuhn)

4 files changed, 28 insertions, 10 deletions

diff --git a/www/typo3_60/MESSAGE b/www/typo3_60/MESSAGE
new file mode 100644
index 00000000000..498f499fd7e
--- /dev/null
+++ b/www/typo3_60/MESSAGE
@@ -0,0 +1,15 @@
+===========================================================================
+$NetBSD: MESSAGE,v 1.1.2.2 2013/12/16 17:27:55 tron Exp $
+
+1. Set up typo3; Add below line in your httpd.conf.
+
+	Alias	/typo3	${PREFIX}/${TYPO3DIR}/${SITEDIR}
+
+   Or set DocumentRoot to ${PREFIX}/${TYPO3DIR}/${SITEDIR}.
+
+2. First, enable TYPO3 installer.
+
+    	# cp /dev/null ${PREFIX}/${TYPO3DIR}/${SITEDIR}/typo3conf/ENABLE_INSTALL_TOOL
+
+3. Access typo3 site.  You will be redirected to installer.
+===========================================================================
diff --git a/www/typo3_60/Makefile b/www/typo3_60/Makefile
index 6c3e07aa998..6129dc384a2 100644
--- a/www/typo3_60/Makefile
+++ b/www/typo3_60/Makefile
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.5 2013/09/13 11:35:58 taca Exp $
+# $NetBSD: Makefile,v 1.5.2.1 2013/12/16 17:27:55 tron Exp $
 #
 
 DISTNAME=	${TYPO3NAME}
@@ -16,7 +16,7 @@ DEPENDS+=	${PHP_PKG_PREFIX}-{mysql,pgsql}>=5.1.0:../../databases/php-mysql
 DEPENDS+=	${PHP_PKG_PREFIX}-zlib>=5.2.0:../../archivers/php-zlib/
 DEPENDS+=	${PHP_PKG_PREFIX}-json>=5.2.0:../../textproc/php-json
 
-VER=		6.0.10
+VER=		6.0.12
 NO_BUILD=	yes
 USE_TOOLS+=	bash:run pax
 
diff --git a/www/typo3_60/PLIST b/www/typo3_60/PLIST
index 5943720f32f..5a3935b85d0 100644
--- a/www/typo3_60/PLIST
+++ b/www/typo3_60/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.5 2013/09/13 11:35:58 taca Exp $
+@comment $NetBSD: PLIST,v 1.5.2.1 2013/12/16 17:27:55 tron Exp $
 ${EGDIR}/LocalConfiguration.php
 ${TYPO3DIR}/${TYPO3NAME}/ChangeLog
 ${TYPO3DIR}/${TYPO3NAME}/GPL.txt
@@ -2974,6 +2974,7 @@ ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Classes/TypoScript/ExtendedTemplateSe
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Classes/TypoScript/Parser/TypoScriptParser.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Classes/TypoScript/TemplateService.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Classes/Utility/ArrayUtility.php
+${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Classes/Utility/ClassNamingUtility.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Classes/Utility/ClientUtility.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Classes/Utility/CommandUtility.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Classes/Utility/DebugUtility.php
@@ -3102,6 +3103,7 @@ ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/Unit/TypoScript/Fixtures/ext_ty
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/Unit/TypoScript/TemplateServiceTest.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/Unit/TypoScript/TypoScriptParserTest.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/Unit/Utility/ArrayUtilityTest.php
+${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/Unit/Utility/ClassNamingUtilityTest.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/Unit/Utility/ClientUtilityTest.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/Unit/Utility/ExtensionMangementUtilityTest.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/core/Tests/Unit/Utility/Fixtures/MathUtilityTestClassWithStringRepresentationFixture.php
@@ -4133,6 +4135,7 @@ ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/fluid/Tests/Unit/ViewHelpers/ThenViewHelpe
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/fluid/Tests/Unit/ViewHelpers/Uri/EmailViewHelperTest.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/fluid/Tests/Unit/ViewHelpers/Uri/ExternalViewHelperTest.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/fluid/Tests/Unit/ViewHelpers/ViewHelperBaseTestcase.php
+${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/fluid/Tests/Unit/ViewHelpers/Widget/Controller/PaginateControllerTest.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/fluid/ext_emconf.php
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/fluid/ext_icon.gif
 ${TYPO3DIR}/${TYPO3NAME}/typo3/sysext/fluid/ext_localconf.php
diff --git a/www/typo3_60/distinfo b/www/typo3_60/distinfo
index 2d09e87fc07..bc2abe01850 100644
--- a/www/typo3_60/distinfo
+++ b/www/typo3_60/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.5 2013/09/13 11:35:58 taca Exp $
+$NetBSD: distinfo,v 1.5.2.1 2013/12/16 17:27:55 tron Exp $
 
-SHA1 (dummy-6.0.10.tar.gz) = c0d73dd69cec9b7fdd29f01cce9353da0f38e226
-RMD160 (dummy-6.0.10.tar.gz) = be0cda082241332158a9c6a808e920a6b1f0e7f3
-Size (dummy-6.0.10.tar.gz) = 10322 bytes
-SHA1 (typo3_src-6.0.10.tar.gz) = 6a90c93042f60d8484e1c425c2fd211885dd30ff
-RMD160 (typo3_src-6.0.10.tar.gz) = 683646777d5fc0e8d8512db3b354ac061ae23e40
-Size (typo3_src-6.0.10.tar.gz) = 22286661 bytes
+SHA1 (dummy-6.0.12.tar.gz) = a4099fd889318a0b6e04c9a1d393a89ff3c581a6
+RMD160 (dummy-6.0.12.tar.gz) = d5427591352a7a7ba06a492aab3f7b3c641311c8
+Size (dummy-6.0.12.tar.gz) = 10323 bytes
+SHA1 (typo3_src-6.0.12.tar.gz) = 1f14b6ed7d971d5f94d8147d27d1055916e228f2
+RMD160 (typo3_src-6.0.12.tar.gz) = c03a5725e68cacb8c508a4837b225a0037524785
+Size (typo3_src-6.0.12.tar.gz) = 22296232 bytes
 SHA1 (patch-t3lib_stddb_DefaultConfiguration.php) = ab5f670ed50d6f7b30564d275f0b95d1c33193d3