3e74df4e5e
found in TYPO3 core.
http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016/
2009-10-22 Oliver Hader <oliver@typo3.org>
* Release of TYPO3 4.2.10
2009-10-22 Ernesto Baschny <ernst@cron-it.de>
* Security Issue #11664: Updated RemoveXSS code to the latest knowledge in this area (thanks to Jigal van Hemert)
* Fixed bug #11586: Potential SQL injection in frontend editing (thanks to Oliver Klee)
* Fixed bug #12309: It was possible to gain access to the Install Tool by only knowing the md5 hash of the password.
* Fixed bug #12310: Encryption key can be recalculated when using normal mailform when [FE][strictFormmail] == 0 (thanks to Oliver Klee)
* Fixed bug #12090: Filenames should be escaped with escapeshellarg before passing them to imagemagick (thanks to Oliver Klee)
* Fixed bug #12303: XSS vulnerability due to not proper sanitizing in function t3lib_div::quoteJSvalue (thanks to Oliver Klee)
* Fixed bug #12304: Frame inclusion in the backend through alt_mod_frameset (thanks to Oliver Klee)
* Fixed bug #12305: XSS vulnerability in view_help.php / tfID parameter (thanks to Oliver Klee)
* Fixed bug #12306: XSS vulnerability in module dispatcher
* Fixed bug #12307: XSS vulnerability in alt_palette (thanks to Oliver Klee)
* Fixed bug #12308: XSS vulnerability in "DB > Full search" functionality
* Fixed bug #10501: XSS vulnerability in the install tool (thanks to Oliver Klee)
2009-10-21 Rupert Germann <rupi@gmx.li>
* Fixed bug #12280: Error Message while creating empty Folders (thanks to Daniel Schmitzer)
* Fixed bug #12300 (Follow-up to 11995): Output compression breaks prompt for keyboard input in CLI scripts
2009-10-21 Steffen Kamper <info@sk-typo3.de>
* Fixed bug #12272: Steps disregarded in t3lib_lock (thanks to Dan Osipov)
2009-10-15 Rupert Germann <rupi@gmx.li>
* Fixed bug #8728: PHP Warning, if SQL error occurs in class t3lib_db in functions which depend on an existing resultset (thanks to Felix Oertel)
2009-10-11 Rupert Germann <rupi@gmx.li>
* Fixed bug #10971: Fatal error in impexp module: Call to a member function includeLLFile() on a non-object (thanks to Andre Steiling)
2009-10-10 Rupert Germann <rupi@gmx.li>
* Fixed bug #12129 (follow-up to bug #11986): Translation update broken with activated output compression (thanks to Steffen Gebert)
2009-09-29 Oliver Hader <oliver@typo3.org>
* Fixed bug #11433: touch(): Utime failed in install tool (thanks to Steffen Gebert)
98 lines
2.9 KiB
Makefile
98 lines
2.9 KiB
Makefile
# $NetBSD: Makefile,v 1.16 2009/10/22 14:53:09 taca Exp $
|
|
#
|
|
|
|
DISTNAME= ${TYPO3NAME}
|
|
PKGNAME= typo3-${VER}
|
|
CATEGORIES= www
|
|
MASTER_SITES= ${MASTER_SITE_SOURCEFORGE:=typo3/}
|
|
DISTFILES= ${TYPO3NAME}${EXTRACT_SUFX} ${SITESRC}${EXTRACT_SUFX}
|
|
|
|
MAINTAINER= taca@NetBSD.org
|
|
HOMEPAGE= http://typo3.com/
|
|
COMMENT= The typo3 content management system
|
|
LICENSE= gnu-gpl-v2
|
|
|
|
DEPENDS+= ${PHP_PKG_PREFIX}-{mysql,pgsql}>=5.1.0:../../databases/php-mysql
|
|
DEPENDS+= ${PHP_PKG_PREFIX}-zlib>=5.2.0:../../archivers/php-zlib/
|
|
|
|
PKG_DESTDIR_SUPPORT= destdir
|
|
|
|
VER= 4.2.10
|
|
NO_BUILD= yes
|
|
USE_TOOLS= pax
|
|
|
|
TYPO3NAME= typo3_src-${VER}
|
|
SITESRC= dummy-${VER}
|
|
|
|
PHP_VERSIONS_ACCEPTED= 5
|
|
|
|
# maybe resides in lang/php/phpversion.mk
|
|
REPLACE_INTERPRETER+= php
|
|
REPLACE.php.old= .*php[^ ]*
|
|
REPLACE.php.new= ${PREFIX}/bin/php
|
|
REPLACE_FILES.php= typo3/cli_dispatch.phpsh \
|
|
typo3/mod/user/ws/cli/ws_cli.phpsh \
|
|
typo3/sysext/indexed_search/cli/indexer_cli.phpsh
|
|
|
|
TYPO3DATADIR= fileadmin fileadmin/_temp_ fileadmin/user_upload \
|
|
typo3conf typo3conf/ext typo3conf/l10n typo3temp uploads \
|
|
uploads/media uploads/pics uploads/tf
|
|
|
|
BUILD_DEFS+= APACHE_GROUP
|
|
|
|
FILES_SUBST+= TYPO3DIR=${TYPO3DIR:Q} SITEDIR=${SITEDIR:Q}
|
|
PLIST_SUBST+= EGDIR=${EGDIR:Q} SITEDIR=${SITEDIR:Q} \
|
|
TYPO3DIR=${TYPO3DIR:Q} TYPO3NAME=${TYPO3NAME:Q}
|
|
|
|
EGDIR= share/examples/typo3
|
|
|
|
INSTALLATION_DIRS+= ${EGDIR} ${TYPO3DIR}/${SITEDIR} ${TYPO3DIR}/${TYPO3NAME}
|
|
|
|
CONF_FILES_PERMS+= ${EGDIR}/localconf.php \
|
|
${TYPO3DIR}/${SITEDIR}/typo3conf/localconf.php \
|
|
${BINOWN} ${APACHE_GROUP} 0660
|
|
|
|
.for d in ${TYPO3DATADIR}
|
|
OWN_DIRS_PERMS+= ${TYPO3DIR}/${SITEDIR}/${d} ${BINOWN} ${APACHE_GROUP} 0770
|
|
CHECK_PERMS_SKIP+= ${TYPO3DIR}/${SITEDIR}/${d}
|
|
.endfor
|
|
|
|
SUBST_CLASSES+= conf
|
|
SUBST_FILES.conf+= ${WRKDIR}/README
|
|
SUBST_FILES.conf+= ${WRKSRC}/t3lib/config_default.php
|
|
SUBST_SED.conf+= -e 's|@PREFIX@|${PREFIX:Q}|g'
|
|
SUBST_SED.conf+= -e 's|@TYPO3DIR@|${TYPO3DIR:Q}|g'
|
|
SUBST_SED.conf+= -e 's|@SITEDIR@|${SITEDIR:Q}|g'
|
|
SUBST_STAGE.conf= post-configure
|
|
|
|
PRINT_PLIST_AWK+= /^${EGDIR:S|/|\\/|g}/ \
|
|
{ gsub(/${EGDIR:S|/|\\/|g}/, "$${EGDIR}") }
|
|
PRINT_PLIST_AWK+= /^${TYPO3DIR:S|/|\\/|g}\/${TYPO3NAME}/ \
|
|
{ gsub(/${TYPO3DIR:S|/|\\/|g}\/${TYPO3NAME}/, \
|
|
"$${TYPO3DIR}/$${TYPO3NAME}") }
|
|
PRINT_PLIST_AWK+= /^${TYPO3DIR:S|/|\\/|g}\/${SITEDIR}/ \
|
|
{ gsub(/${TYPO3DIR:S|/|\\/|g}\/${SITEDIR}/, \
|
|
"$${TYPO3DIR}/$${SITEDIR}") }
|
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
|
|
SITEDIR?= www
|
|
TYPO3DIR?= share/typo3
|
|
|
|
post-extract:
|
|
${CP} ${FILESDIR}/README ${WRKDIR}
|
|
|
|
pre-install:
|
|
${FIND} ${WRKSRC:Q} -name "*.orig*" -exec ${RM} -f {} \;
|
|
|
|
do-install:
|
|
cd ${WRKSRC}; \
|
|
pax -rw . ${DESTDIR}${PREFIX}/${TYPO3DIR}/${TYPO3NAME}
|
|
cd ${WRKDIR}/${SITESRC}; \
|
|
pax -rw . ${DESTDIR}${PREFIX}/${TYPO3DIR}/${SITEDIR}
|
|
${RM} -f ${DESTDIR}${PREFIX}/${TYPO3DIR}/${SITEDIR}/typo3conf/localconf.php
|
|
${INSTALL_DATA} ${WRKDIR}/${SITESRC}/typo3conf/localconf.php \
|
|
${DESTDIR}${PREFIX}/${EGDIR}
|
|
|
|
.include "../../lang/php/phpversion.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|