Path to this page:
Next | Query returned 1 messages, browsing 1 to 10 | previous
CVS Commit History:
2008-05-15 12:33:01 by Tyler R. Retzlaff | Files touched by this commit (3) | ![Package updated](https://pkgsrc.se/images/update.gif) |
Log message:
pullup ticket #2380 - requested by adrianp
bugzilla: update for cross-site scripting vulnerability
revisions pulled up:
- pkgsrc/devel/bugzilla/Makefile
- pkgsrc/devel/bugzilla/PLIST
- pkgsrc/devel/bugzilla/distinfo
Module Name: pkgsrc
Committed By: adrianp
Date: Tue May 6 19:36:39 UTC 2008
Modified Files:
pkgsrc/devel/bugzilla: Makefile PLIST distinfo
Log message:
2.22.4
Class: Cross-Site Scripting
Versions: 2.17.2 and higher
Description: When using the "Format for Printing" view of a bug (or
the "Long Format" of a bug list, which is the same thing),
there was a cross-site scripting hole--arbitrary text
from a particular URL parameter could be injected into the
page without filtering.
|
Next | Query returned 1 messages, browsing 1 to 10 | previous