Path to this page:
Subject: CVS commit: [pkgsrc-2009Q2] pkgsrc/www/geeklog
From: Matthias Scheler
Date: 2009-09-13 16:57:36
Message id: 20090913145736.CCBA3175D0@cvs.netbsd.org
Log Message:
Pullup ticket #2889 - requested by taca
geeklog: security update
Revisions pulled up:
- www/geeklog/Makefile 1.23
- www/geeklog/PLIST 1.10
- www/geeklog/distinfo 1.10
- www/geeklog/patches/patch-aa 1.4
- www/geeklog/patches/patch-aj 1.2
- www/geeklog/patches/patch-ak 1.1
- www/geeklog/patches/patch-al 1.1
- www/geeklog/patches/patch-ba 1.1
- www/geeklog/patches/patch-bb 1.1
- www/geeklog/patches/patch-bc 1.1
- www/geeklog/patches/patch-bd 1.1
---
Module Name: pkgsrc
Committed By: taca
Date: Sun Sep 13 01:15:11 UTC 2009
Modified Files:
pkgsrc/www/geeklog: Makefile PLIST distinfo
pkgsrc/www/geeklog/patches: patch-aa patch-aj
Added Files:
pkgsrc/www/geeklog/patches: patch-ak patch-al patch-ba patch-bb
patch-bc patch-bd
Log Message:
Update Geeklog 1.5.2sr5 by adding patches since 1.5.2sr5 isn't provided
as full release.
And add updated fckeditor for Geeklog.
These updates should fix known security problems, Secunia SA36372.
Jul 30, 2009 (1.5.2sr5)
------------
This release addresses the following security issues:
- Gerendi Sandor Attila reported an XSS in the forms to email a user and to
email a story to a friend.
- The "Mail Story to a Friend" function didn't check story \
permissions, so that
it was possible to email a story even if you didn't have the permissions to
view it on the site.
Files: