Thomas, - Multiple versions of Typo3 CMS? Really? Why not just one? - As these are high-security-turnaround packasges, will you maintain them for the 18 months longer openSUSE is under official support? Also given the high amount of security issues, we would appreciate if you can help the security team there too with actively notifying us :/ Ciao, Marcus On Wed, Nov 28, 2012 at 02:56:16PM +0100, h_root wrote:

Hello community,

here is the log from the commit of package typo3-cms-4_5 for openSUSE:Factory checked in at 2012-11-28 14:56:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/typo3-cms-4_5 (Old) and /work/SRC/openSUSE:Factory/.typo3-cms-4_5.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "typo3-cms-4_5", Maintainer is ""

Changes: -------- New Changes file:

--- /dev/null 2012-11-26 11:02:30.307549147 +0100 +++ /work/SRC/openSUSE:Factory/.typo3-cms-4_5.new/typo3-cms-4_5.changes 2012-11-28 14:56:14.000000000 +0100 @@ -0,0 +1,92 @@ +------------------------------------------------------------------- +Tue Nov 13 09:22:55 UTC 2012 - Thomas.Worm@DATEV.de + +- Raised to version 4.5.22 + * Raise submodule pointer (TYPO3 Release Team) + * Raise version numbers of system extensions (Steffen Ritter) + * bugfix: imagecopyresized: correct invalid parameters (Stefan Neufeind), t3#26660 + * Fix TYPO3 logos (Helmut Hummel), t3#42850 + * Raise submodule pointer (TYPO3 Release Team) + * bugfix: t3#42812 Most checkboxes (like Extended View) are not working (Michael Spä), t3#42812 + * Set TYPO3 version to 4.5.22-dev (TYPO3 Release Team) + * security: Fix SQL injection and XSS in record history (Oliver Hader), t3#42696 + * security: XSS in TCA Tree (Oliver Hader), t3#42774 + * security: Fix potential XSS in t3lib_BEfunc::getFuncCheck (Helmut Hummel), t3#42776 + * Raise submodule pointer (TYPO3 Release Team) + * bugfix: No sorting in TypoScript Object Browser when browsing (Nicole Cordes), t3#39677 + * bugfix: Translated non-published page in workspace breaks live workspace (Oliver Hader), t3#42281 + * bugfix: Illegal string offsets in t3lib_stdgraphic (Wouter Wolters), t3#38024 + * bugfix: PHP 5.4 warning in CLI context in switch back user (Christian Kuhn), t3#37578 + * bugfix: t3lib_div: adjust substUrlsInPlainText to also work on URLs at end of sentence (Robert Heel), t3#28248 + * bugfix: Wrong call to TSFE in FrontendEditing (Steffen Ritter), t3#40733 + * Fix generation of ext_emconf.php (Wouter Wolters), t3#42444 + * bugfix: t3lib_div::unlink_tempfile does not always work on Windows (Stanislas Rolland), t3#38699 + * bugfix: TCEForms.Suggest wizard in IRRE records (Nicole Cordes), t3#27020 + * Fix case of tests folder (Xavier Perseguers) + * bugfix: Unit test for saltedpasswords fail (Xavier Perseguers) + * bugfix: RTE: Link to disabled page doesn't show in FE, link icon does (Stanislas Rolland), t3#36087 + * bugfix: RTE: Words containing umlauts not added to personal dictionary (Stanislas Rolland), t3#29685 + * bugfix: Extension Import not working with postgresql and DBAL (Ernesto Baschny), t3#38406 + * Set TYPO3 version to 4.5.21-dev (TYPO3 Release Team) + +------------------------------------------------------------------- +Wed Oct 24 07:10:29 UTC 2012 - Thomas.Worm@DATEV.de + +- Raised to version 4.5.20 + * Raise submodule pointer + * Update md5 sums for 4.5.20 + * Update backend sprites according to rebranding + * Introduce "TYPO3 CMS" in EXT: about (t3#41823) + * Adjust Logos to new style-guide (t3#41704) + * Prevent saltedpasswords destroying the password (t3#41828) + * bugfix: RTE: Paste as plain text doesn't work in + Safari (Mac only) (t3#35356) + * bugfix: CE with "All languages" doesn't show with every lang (t3#24087) + * bugfix: CE with "All languages" isn't shown in Page module (t3#24087) + * bugfix: Proper cursor icon in access module (t3#33230) + * bugfix: Fix the additional icon check (t3#41463) + * bugfix: Fix translation moving in workspaces (t3#33592) + * bugfix: strftime expects parameter 2 to be long, string given (t3#38717) + * bugfix: RTE: array_flip warning on array of languages (t3#35147) + * bugfix: Words with special characters not added to personal + dictionary (t3#38653) + * bugfix: htmlArea RTE: Cursor jumps to first letter with Chrome 22 (t3#41411) + * bugfix: Do not save expand state for root node in TCA tree (t3#31978) + * bugfix: File upload button is collapsed in Chrome 21 (t3#39659) + * bugfix: Switch to List module on root page leads to blank page (t3#40781) + * bugfix: Error handler registration accepts way too much PHP error + types (t3#31827) + * bugfix: Tree view in admin panel is broken with PHP 5.4 (t3#41213) + * bugfix: Error handler callback causes fatal error for parse time + errors (t3#31834) + * bugfix: Error messages are not shown in 123 installation process (t3#41158) + * bugfix: Database creating fails due to not allowed characters (t3#41151) + * bugfix: Set charset property after cloning t3lib_PageRenderer (t3#27957) + * bugfix: PHP warning when no language pack is available (t3#40108) + * Set TYPO3 version to 4.5.20-dev + * dbal: Update md5 sum for 4.5.20 + * extbase: Update version number to 1.3.4 + * extbase, bugfix: (Persistence) Make Typo3QuerySettings exchangeable + * extbase, bugfix: Declare LocalizationUtility::translateFileReference static + * fluid: Update version number to 1.3.1 + * fluid, bugfix: Return empty result in pagination if page does not exist + * linkvalidator: Raise version number for 4.5.20 + * linkvalidator, bugfix: Field name 'location' is case insensitive (t3#40486) + * version: Raise version number for 4.5.20 + * workspaces: Raise version number for 4.5.20 + * workspaces, feature: set default grid limit to 30 (t3#26287) +- Renamed package from typo3-4_5 to typo3-cms-4_5 due to name change of + software product. + +------------------------------------------------------------------- +Fri Sep 7 13:22:51 UTC 2012 - Thomas.Worm@DATEV.de + +- Changed installation directory from /usr/share/typo3-4.5 to + /usr/share/typo3-4_5. +- Added PHP requirements to spec file. + +------------------------------------------------------------------- +Thu Sep 6 14:08:13 UTC 2012 - Thomas.Worm@DATEV.de + +- Initial package version 4.5.19 +

New: ---- _service typo3-4.5.22.tar.bz2 typo3-cms-4_5.changes typo3-cms-4_5.spec

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences: ------------------ ++++++ typo3-cms-4_5.spec ++++++ # # spec file for package typo3-cms-4_5 # # Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # Copyright (c) 2012 Thomas Worm # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative.

# Please submit bugfixes or comments via http://bugs.opensuse.org/ #

Name: typo3-cms-4_5 Summary: Typo3 CMS v4.5 License: GPL-2.0+ Group: Productivity/Networking/Web/Frontends Version: 4.5.22 Release: 0 Source0: typo3-%{version}.tar.bz2 Url: http://www.typo3.org/ BuildArch: noarch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: zlib Requires: apache2 Requires: php5 >= 5.2 Requires: php5-iconv Requires: php5-mbstring Requires: php5-mysql Requires: php5-zlib Requires: typo3-manager Recommends: php5-gd Recommends: GraphicsMagick Provides: typo3-cms-src

# Renamed with version 4.5.20 from typo3-4_5 to typo3-cms-4_5 Obsoletes: typo3-4_5

%define underscored_version %(echo -n %{version} | sed 's/\\./_/g')

%description Enterprise Content Management System, Version %{version}

%prep %setup -q -n typo3-%{version} -c

%build

%check

%install mkdir -p %{buildroot}%{_datadir}/typo3-cms-%{underscored_version} cp -pr typo3-%{version}/* %{buildroot}%{_datadir}/typo3-cms-%{underscored_version}/ ln -s typo3-cms-%{underscored_version} %{buildroot}%{_datadir}/%{name}

%files %defattr(644,root,root,755) %{_datadir}/typo3-cms-%{underscored_version} %{_datadir}/%{name}

%changelog ++++++ _service ++++++ <services> <service name="tar_scm" mode="localonly"> <param name="scm">git</param> <param name="url">git://git.typo3.org/TYPO3v4/Core.git</param> <param name="filename">typo3</param> <param name="version">4.5.22</param> <param name="revision">TYPO3_4-5-22</param> </service> <service name="recompress" mode="localonly"> <param name="file">*.tar</param> <param name="compression">bz2</param> </service> <service name="set_version" mode="localonly" /> </services> -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org

-- Open Linux Security Engineer Position at SUSE: http://bit.ly/Li4RbS -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org