Path to this page:
Subject: CVS commit: pkgsrc/databases/couchdb
From: Filip Hajny
Date: 2013-03-04 15:12:40
Message id: 20130304141240.B68B4175DD@cvs.netbsd.org
Log Message:
Update couchdb to 1.2.1.
Changes in 1.2.1:
* Fixed CVE-2012-5641: Apache CouchDB Information disclosure via unescaped
backslashes in URLs on Windows
* Fixed CVE-2012-5649: Apache CouchDB JSONP arbitrary code execution with Adobe
Flash
* Fixed CVE-2012-5650: Apache CouchDB DOM based Cross-Site Scripting via Futon
UI
* Fix various bugs in the URL rewriter when recursion is involved.
* Fix couchdb start script.
* Futon: Disable buttons that aren't available for the logged-in user.
* Fix potential replication timeouts.
* Change use of signals to avoid broken view groups.
Files: