diff options
| author | spz <spz> | 2011-01-09 19:59:48 +0000 |
|---|---|---|
| committer | spz <spz> | 2011-01-09 19:59:48 +0000 |
| commit | ad2f0c72f47af7d31e9073f5093ad4857e8d69a6 (patch) | |
| tree | 9d4d664c49e46331f8c8c612673ad3a103f1894c /sysutils | |
| parent | fa6aeb138cc5d48869175991574854540b500137 (diff) | |
| download | pkgsrc-ad2f0c72f47af7d31e9073f5093ad4857e8d69a6.tar.gz | |
security update
Problems fixed:
#32080 Specially crafted <base href> can lead to XSS exploit
#32032 TextEncode related resource information not saved correctly in db file
#32014 CVE-2010-1677: DoS when processing html messages with deep tag nesting
#32013 CVE-2010-4524: Improper escaping of certain HTML sequences (XSS)
#26577 Changed semantic for unpack breaks UTF-8
#25486 Resource FieldStore causes .mhonarc.db to grow over bounds.
#25225 dir_create() fails to make temporary directories (PATCH)
#24247 iso2022jp.pl: unneeded ESC ( B remains in message body
#23198 Incorrect Setting Installation Directory
#20142 strip backslash in rfc822 From: field
#20074 extra space in subject
#18908 X-Subject data get split in separate lines
#18113 inconsistant thread slices w/ poor man's windowing
#17904 FieldOrder affects AddressModifyCode
#17860 incorrect nested HTML Tags for references
#17660 Threaded index resource ordering doesn't allow well formed XML output
#15433 relative attachmentdir is relative to current working dir, not outdir
#14747 major (10X) memory savings possible in some situations
#13853 creation of archive with attachments writes over symlinks
Diffstat (limited to 'sysutils')
0 files changed, 0 insertions, 0 deletions