[prev in list] [next in list] [prev in thread] [next in thread] 

List:       squirrelmail-cvs
Subject:    [SM-CVS] CVS: squirrelmail ChangeLog,1.258.2.43,1.258.2.44
From:       Thijs Kinkhorst <kink () users ! sourceforge ! net>
Date:       2005-01-30 16:50:37
Message-ID: E1CvIHV-0006ob-6B () sc8-pr-cvs1 ! sourceforge ! net
[Download RAW message or body]

Update of /cvsroot/squirrelmail/squirrelmail
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv25811

Modified Files:
      Tag: SM-1_2-STABLE
	ChangeLog 
Log Message:
Apply patch for CAN-2005-0104 which is part of a patch I had to prepare for
Debian woody which still has 1.2.6 :-(. Because I have the patch available
I'll just as well commit this in this ancient branch.


Index: ChangeLog
===================================================================
RCS file: /cvsroot/squirrelmail/squirrelmail/ChangeLog,v
retrieving revision 1.258.2.43
retrieving revision 1.258.2.44
diff -u -w -r1.258.2.43 -r1.258.2.44
--- ChangeLog	3 Jan 2004 13:39:23 -0000	1.258.2.43
+++ ChangeLog	30 Jan 2005 16:50:34 -0000	1.258.2.44
@@ -4,7 +4,7 @@
 
 Version 1.2.12 [cvs]
 --------------------
-  - Fixed preferences not being save on PHP 4.3.x.
+  - Fixed preferences not being saved on PHP 4.3.x.
   - Stopped PHP 4.3.x warning about PHP 4.2.3's session bug appearing
     on the mailbox view.
   - Fixed mailbox names so + is really a possible character in the
@@ -14,6 +14,7 @@
   - Fixed issue with \ in password.
   - Disabled Ukrainian translation (it is not in Ukrainian)
   - Replaced obsolate 2mbit.com RBL with ahbl.org RBL. Bug.No.829887
+  - Security: Fix possible XSS issues in src/webmail.php. [CAN-2005-0104]
 
 Version 1.2.11 -- 9 February 2003
 ----------------------------------



-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
--
squirrelmail-cvs mailing list
List Address: squirrelmail-cvs@lists.sourceforge.net
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-cvs
http://squirrelmail.org/cvs
[prev in list] [next in list] [prev in thread] [next in thread]