Path to this page:
Subject: CVS commit: [pkgsrc-2008Q1] pkgsrc/devel/bugzilla
From: Tyler R. Retzlaff
Date: 2008-05-15 12:33:01
Message id: 20080515103301.5413E175D0@cvs.netbsd.org
Log Message:
pullup ticket #2380 - requested by adrianp
bugzilla: update for cross-site scripting vulnerability
revisions pulled up:
- pkgsrc/devel/bugzilla/Makefile
- pkgsrc/devel/bugzilla/PLIST
- pkgsrc/devel/bugzilla/distinfo
Module Name: pkgsrc
Committed By: adrianp
Date: Tue May 6 19:36:39 UTC 2008
Modified Files:
pkgsrc/devel/bugzilla: Makefile PLIST distinfo
Log Message:
2.22.4
Class: Cross-Site Scripting
Versions: 2.17.2 and higher
Description: When using the "Format for Printing" view of a bug (or
the "Long Format" of a bug list, which is the same thing),
there was a cross-site scripting hole--arbitrary text
from a particular URL parameter could be injected into the
page without filtering.
Files: