./www/geeklog, PHP/MySQL based application for managing dynamic web content

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: pkgsrc-2009Q2, Version: 1.5.2.5, Package name: geeklog-1.5.2.5, Maintainer: taca

Geeklog is a PHP/MySQL based application for managing dynamic web content.

"Out of the box", it is a blog engine, or a CMS with support for comments,
trackbacks, multiple syndication formats, spam protection, and all the
other vital features of such a system.

DEINSTALL [+/-]

Required to run:
[databases/php-mysql] [www/ap-php]

Required to build:
[www/apache22] [lang/perl5]

Master sites:

SHA1: fa0e1e97a8d3fa7ccdff0835eb0bd0e963d5bc24
RMD160: a218749173c0c4e1aba322759f7ee32d20ec166d
Filesize: 4393.635 KB

Version history: (Expand)


CVS history: (Expand)


   2009-09-13 16:57:36 by Matthias Scheler | Files touched by this commit (11) | Package updated
Log message:
Pullup ticket #2889 - requested by taca
geeklog: security update

Revisions pulled up:
- www/geeklog/Makefile				1.23
- www/geeklog/PLIST				1.10
- www/geeklog/distinfo				1.10
- www/geeklog/patches/patch-aa			1.4
- www/geeklog/patches/patch-aj			1.2
- www/geeklog/patches/patch-ak			1.1
- www/geeklog/patches/patch-al			1.1
- www/geeklog/patches/patch-ba			1.1
- www/geeklog/patches/patch-bb			1.1
- www/geeklog/patches/patch-bc			1.1
- www/geeklog/patches/patch-bd			1.1
---
Module Name:	pkgsrc
Committed By:	taca
Date:		Sun Sep 13 01:15:11 UTC 2009

Modified Files:
	pkgsrc/www/geeklog: Makefile PLIST distinfo
	pkgsrc/www/geeklog/patches: patch-aa patch-aj
Added Files:
	pkgsrc/www/geeklog/patches: patch-ak patch-al patch-ba patch-bb
	    patch-bc patch-bd

Log message:
Update Geeklog 1.5.2sr5 by adding patches since 1.5.2sr5 isn't provided
as full release.

And add updated fckeditor for Geeklog.

These updates should fix known security problems, Secunia SA36372.

Jul 30, 2009 (1.5.2sr5)
------------

This release addresses the following security issues:
- Gerendi Sandor Attila reported an XSS in the forms to email a user and to
  email a story to a friend.
- The "Mail Story to a Friend" function didn't check story \ 
permissions, so that
  it was possible to email a story even if you didn't have the permissions to
  view it on the site.