Path to this page:
Subject: CVS commit: [pkgsrc-2019Q3] pkgsrc/www/davical
From: Benny Siegert
Date: 2019-12-12 13:13:11
Message id: 20191212121311.E366FFA97@cvs.NetBSD.org
Log Message:
Pullup ticket #6100 - requested by hauke
www/davical: security fix
Revisions pulled up:
- www/davical/Makefile 1.42
- www/davical/PLIST 1.12
- www/davical/distinfo 1.17
---
Module Name: pkgsrc
Committed By: hauke
Date: Thu Dec 12 08:12:27 UTC 2019
Modified Files:
pkgsrc/www/davical: Makefile PLIST distinfo
Log Message:
Update www/davical to v1.1.9.2
>From upstream's changelog:
1.1.9.2:
Bug Fixes
Fix CSRF not being checked in collection-edit.php
Other Changes
use foreach() instead of deprecated each()
1.1.9.1:
Bug Fixes
Corrects reflected cross-site scripting (XSS) vulnerability
Corrects persistent XSS vulnerability in user/group/resource details
Corrects persistent XSS vulnerability in user/group/resource list
Adds token to address cross-site request forgery (CSRF) vulnerability
Corrects syntax error in name of collection_id
Make calquery aware of default timezone
Corrections to range-based calendar queries
Add missing 'break' to rrule.php
Other Changes
Updated PHP version requirement
Files: