Your message dated Wed, 08 Sep 2010 20:00:31 +0000
with message-id <[email protected]>
and subject line Bug#595099: fixed in typo3-src 4.2.5-1+lenny5
has caused the Debian Bug report #595099,
regarding typo3-src: typo3 backend stops working due to backported security
patches
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
595099: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=595099
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: typo3-src
Version: 4.2.5-1+lenny4
Severity: normal
Tags: patch
the patch 06-SecBull-TYPO3-SA-2010-012.dpatch introduces the usage of
a non existing function: t3lib_div::sanitizeLocalUrl
In my case this renders the backend unusable with the error:
PHP Fatal error: Call to undefined method t3lib_div::sanitizelocalurl() in
/usr/share/typo3/typo3_src-4.2/typo3/index.php on line 125
the function sanitizelocalurl was obviously introduced after typo3 4.2.5 but
wasn't backported along with the other stuff
applying the patch 0015263_v2.patch from this bugreport solved the problem for
me:
http://bugs.typo3.org/view.php?id=15263
Noet however that this patch was intended for typo3 4.1 and maybe it is better
to get the function definition from the same version as the rest of the
backported security fixes
-- System Information:
Debian Release: 5.0.5
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.26-2-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
--- End Message ---
--- Begin Message ---
Source: typo3-src
Source-Version: 4.2.5-1+lenny5
We believe that the bug you reported is fixed in the latest version of
typo3-src, which is due to be installed in the Debian FTP archive:
typo3-src-4.2_4.2.5-1+lenny5_all.deb
to main/t/typo3-src/typo3-src-4.2_4.2.5-1+lenny5_all.deb
typo3-src_4.2.5-1+lenny5.diff.gz
to main/t/typo3-src/typo3-src_4.2.5-1+lenny5.diff.gz
typo3-src_4.2.5-1+lenny5.dsc
to main/t/typo3-src/typo3-src_4.2.5-1+lenny5.dsc
typo3_4.2.5-1+lenny5_all.deb
to main/t/typo3-src/typo3_4.2.5-1+lenny5_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Christian Welzel <[email protected]> (supplier of updated typo3-src package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 06 Aug 2010 23:30:00 +0200
Source: typo3-src
Binary: typo3 typo3-src-4.2
Architecture: source all
Version: 4.2.5-1+lenny5
Distribution: stable-security
Urgency: high
Maintainer: Christian Welzel <[email protected]>
Changed-By: Christian Welzel <[email protected]>
Description:
typo3 - Powerful content management framework (Meta package)
typo3-src-4.2 - Powerful content management framework (Core)
Closes: 595099
Changes:
typo3-src (4.2.5-1+lenny5) stable-security; urgency=high
.
* Added a patch to fix a regression introduced during last security
patch. The last patch renders the backend unusable. Thanks to
Fabian Ruff <[email protected]> (Closes: 595099).
Checksums-Sha1:
f4b200bf76805aa18fac07f10d40a783f4d4b444 1008 typo3-src_4.2.5-1+lenny5.dsc
5811e45da8786189e4e792dd22e1fa24e3680e93 149043
typo3-src_4.2.5-1+lenny5.diff.gz
377ecdfc50da6cfa4d9d6bbe2500d6a5156b07ae 134050 typo3_4.2.5-1+lenny5_all.deb
f24acfa9517990395a2a165f98eb6fa24819f288 8194252
typo3-src-4.2_4.2.5-1+lenny5_all.deb
Checksums-Sha256:
31bfeb04f7f94be43105747455fb86dc366264d315f0843406540f5c86ec5e19 1008
typo3-src_4.2.5-1+lenny5.dsc
e29b780d1f77e23815a4cb9bbfd0c101658950d133d20090557f358ecb71ada4 149043
typo3-src_4.2.5-1+lenny5.diff.gz
7bfa0dd7a36a19bb1262af50df4c42a5a712388da7b75be740733108282fece6 134050
typo3_4.2.5-1+lenny5_all.deb
6f060016cab22e572ba2fa75b9d34147ac3fde5bb3f634ced558ccfb98205df1 8194252
typo3-src-4.2_4.2.5-1+lenny5_all.deb
Files:
ae2679dfa995bc4d97c3385b185613f7 1008 web optional typo3-src_4.2.5-1+lenny5.dsc
c44d4e5f388a382673f6c921dcdc24ed 149043 web optional
typo3-src_4.2.5-1+lenny5.diff.gz
92862c44d428912c1b48dd3363fa6dd9 134050 web optional
typo3_4.2.5-1+lenny5_all.deb
189667ba77e8546e48f0e079da893f0f 8194252 web optional
typo3-src-4.2_4.2.5-1+lenny5_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFMg4FiUHLQNqxYNSARAmXWAKC5fJxoCOQ315nQlJbzbOM8idCrkgCeJeho
BrlrHZaUxEDHRCYAPc7mQwM=
=5m2/
-----END PGP SIGNATURE-----
--- End Message ---
