From d82569bf1b87300c42c99b4970ebf11be94d0bf9 Mon Sep 17 00:00:00 2001 From: taca Date: Mon, 24 Nov 2014 13:29:08 +0000 Subject: Update contao32 to 3.2.16, security release. Version 3.2.16 (2014-11-24) --------------------------- ### Fixed Fixed a potential directory traversal vulnerability. ### Fixed Fixed a severe XSS vulnerability. In this context, the insert tag flags `base64_encode` and `base64_decode` have been removed. ### Fixed Handle nested insert tags in strip_insert_tags(). ### Fixed Correctly store the model in Dbafs::addResource() (see #7440). ### Fixed Send the request token when toggling the visibility of an element (see #7406). ### Fixed Always apply the IE security fix in the Environment class (see #7453). ### Fixed Correctly handle archives being part of multiple RSS feeds (see #7398). ### Fixed Correctly handle `0` in utf8_convert_encoding() (see #7403). ### Fixed Send a 301 redirect to forward to the language root page (see #7420). --- www/contao/Makefile.common | 4 ++-- www/contao32/distinfo | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/www/contao/Makefile.common b/www/contao/Makefile.common index 8f8ea8bff75..5e01c4e4f72 100644 --- a/www/contao/Makefile.common +++ b/www/contao/Makefile.common @@ -1,10 +1,10 @@ -# $NetBSD: Makefile.common,v 1.83 2014/11/02 01:19:54 taca Exp $ +# $NetBSD: Makefile.common,v 1.84 2014/11/24 13:29:08 taca Exp $ # # used by www/contao32/Makefile # used by www/contao33/Makefile # current release -CT32_VERSION= 3.2.15 +CT32_VERSION= 3.2.16 CT33_VERSION= 3.3.6 CT_VERS?= 32 diff --git a/www/contao32/distinfo b/www/contao32/distinfo index 770d9f15ac1..d53a37f8b48 100644 --- a/www/contao32/distinfo +++ b/www/contao32/distinfo @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.16 2014/11/02 01:17:44 taca Exp $ +$NetBSD: distinfo,v 1.17 2014/11/24 13:29:08 taca Exp $ -SHA1 (contao/3.2.15.tar.gz) = 7066436ec0d0b6e9c06435ce7cd8f83b806195b3 -RMD160 (contao/3.2.15.tar.gz) = fc770b35b74090b7526c88a9ab3779679ea5c2c8 -Size (contao/3.2.15.tar.gz) = 11128363 bytes +SHA1 (contao/3.2.16.tar.gz) = 0ca4af45ba3f287510c0ef7b33e5ca28832d5bb9 +RMD160 (contao/3.2.16.tar.gz) = 16532482571147bce6456af950897fe1a1e53ae6 +Size (contao/3.2.16.tar.gz) = 11128999 bytes SHA1 (patch-system_bin_sqldump) = 920e6e8e579ae2cbeb84ca6ac74f4b9951a66f5c -- cgit v1.2.3