pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: pkgsrc/www



Module Name:    pkgsrc
Committed By:   taca
Date:           Mon Feb  3 15:20:39 UTC 2014

Modified Files:
        pkgsrc/www/contao: Makefile.common
        pkgsrc/www/contao211: distinfo

Log Message:
Update contao211 package to 2.11.14, fix for CVE-2014-1860.

Version 2.11.14 (2014-02-03)
----------------------------

### Fixed
Do not pass POST data to the `deserialize()` function, so it is not vulnerable
to PHP object injection. Thanks to Pedro Ribeiro for his input (see #6695).


To generate a diff of this commit:
cvs rdiff -u -r1.55 -r1.56 pkgsrc/www/contao/Makefile.common
cvs rdiff -u -r1.18 -r1.19 pkgsrc/www/contao211/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.




Home | Main Index | Thread Index | Old Index