diff options
| author | taca <taca@pkgsrc.org> | 2014-11-24 13:29:08 +0000 |
|---|---|---|
| committer | taca <taca@pkgsrc.org> | 2014-11-24 13:29:08 +0000 |
| commit | b965c93bfd31e2c3d14b45587475a1204f83c531 (patch) | |
| tree | 41709c238d6776baafac37bdb1fed6de38b4c4ab /www/contao | |
| parent | 0003cd23ac979cb87df97687b459505fb26e872c (diff) | |
| download | pkgsrc-b965c93bfd31e2c3d14b45587475a1204f83c531.tar.gz | |
Update contao32 to 3.2.16, security release.
Version 3.2.16 (2014-11-24)
---------------------------
### Fixed
Fixed a potential directory traversal vulnerability.
### Fixed
Fixed a severe XSS vulnerability. In this context, the insert tag flags
`base64_encode` and `base64_decode` have been removed.
### Fixed
Handle nested insert tags in strip_insert_tags().
### Fixed
Correctly store the model in Dbafs::addResource() (see #7440).
### Fixed
Send the request token when toggling the visibility of an element (see #7406).
### Fixed
Always apply the IE security fix in the Environment class (see #7453).
### Fixed
Correctly handle archives being part of multiple RSS feeds (see #7398).
### Fixed
Correctly handle `0` in utf8_convert_encoding() (see #7403).
### Fixed
Send a 301 redirect to forward to the language root page (see #7420).
Diffstat (limited to 'www/contao')
| -rw-r--r-- | www/contao/Makefile.common | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/www/contao/Makefile.common b/www/contao/Makefile.common index 8f8ea8bff75..5e01c4e4f72 100644 --- a/www/contao/Makefile.common +++ b/www/contao/Makefile.common @@ -1,10 +1,10 @@ -# $NetBSD: Makefile.common,v 1.83 2014/11/02 01:19:54 taca Exp $ +# $NetBSD: Makefile.common,v 1.84 2014/11/24 13:29:08 taca Exp $ # # used by www/contao32/Makefile # used by www/contao33/Makefile # current release -CT32_VERSION= 3.2.15 +CT32_VERSION= 3.2.16 CT33_VERSION= 3.3.6 CT_VERS?= 32 |