Subject: CVS commit: [pkgsrc-2014Q2] pkgsrc/www/php-sugarcrm
From: Matthias Scheler
Date: 2014-07-09 22:31:46
Message id: 20140709203146.1883E96@cvs.netbsd.org

Log Message:
Pullup ticket #4447 - requested by taca
www/php-sugarcrm: security update

Revisions pulled up:
- www/php-sugarcrm/Makefile                                     1.8
- www/php-sugarcrm/distinfo                                     1.4

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Jul  2 09:13:02 UTC 2014

   Modified Files:
   	pkgsrc/www/php-sugarcrm: Makefile

   Log Message:
   Update php-sugarcrm to 6.5.17, security release.

   Quote from http://www.providentcrm.com/news/sugarcrm-6-5-17-patch-list/.

   1. Module scanner now blocks two additional functions:
      simplexml_load_file and simplexml_load_string
   2. JS Security Fix in Emails --  changing AJAX call from GET to POST.
   3. XML Handling -- Additional error handling and libxml_disable_entity_loader
      is now set to true.
   4. Users module -- Additional checking on un-authorised access to other users
      profile, plus Bugfix for password field.

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jul  3 01:32:50 UTC 2014

   Modified Files:
   	pkgsrc/www/php-sugarcrm: distinfo

   Log Message:
   Forgot to commit distinfo.

Files:
RevisionActionfile
1.7.2.1modifypkgsrc/www/php-sugarcrm/Makefile
1.3.2.1modifypkgsrc/www/php-sugarcrm/distinfo