Path to this page:
Next | Query returned 1 messages, browsing 1 to 10 | previous
CVS Commit History:
2017-05-11 20:04:57 by Benny Siegert | Files touched by this commit (3) |
Log message:
Pullup ticket #5408 - requested by sevan
www/py-django-cms: security fix
Revisions pulled up:
- www/py-django-cms/Makefile 1.44
- www/py-django-cms/PLIST 1.30
- www/py-django-cms/distinfo 1.35
---
Module Name: pkgsrc
Committed By: adam
Date: Tue May 9 08:13:50 UTC 2017
Modified Files:
pkgsrc/www/py-django-cms: Makefile PLIST distinfo
Log message:
Changes 3.4.3:
* Fixed a security vulnerability in the page redirect field which
allowed users
to insert JavaScript code.
* Fixed a security vulnerability where the ``next`` parameter for the
toolbar login
was not sanitised and could point to another domain.
|
Next | Query returned 1 messages, browsing 1 to 10 | previous