pkgsrc-Changes archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
CVS commit: pkgsrc/www
Module Name: pkgsrc
Committed By: taca
Date: Mon Feb 3 15:20:39 UTC 2014
Modified Files:
pkgsrc/www/contao: Makefile.common
pkgsrc/www/contao211: distinfo
Log Message:
Update contao211 package to 2.11.14, fix for CVE-2014-1860.
Version 2.11.14 (2014-02-03)
----------------------------
### Fixed
Do not pass POST data to the `deserialize()` function, so it is not vulnerable
to PHP object injection. Thanks to Pedro Ribeiro for his input (see #6695).
To generate a diff of this commit:
cvs rdiff -u -r1.55 -r1.56 pkgsrc/www/contao/Makefile.common
cvs rdiff -u -r1.18 -r1.19 pkgsrc/www/contao211/distinfo
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Home |
Main Index |
Thread Index |
Old Index