diff options
| author | phantom <phantom@FreeBSD.org> | 2002-01-08 11:07:43 +0000 |
|---|---|---|
| committer | phantom <phantom@FreeBSD.org> | 2002-01-08 11:07:43 +0000 |
| commit | a09d990d4e6d972a8975265fd662ec34db4fc2b8 (patch) | |
| tree | aaad26ec8b6c7d58a7e032f6251657f60ed92c29 /devel/bugzilla2 | |
| parent | a5cc6d77273fcb3bc846938d144e2e3c8f9ed0c9 (diff) | |
| download | FreeBSD-ports-a09d990d4e6d972a8975265fd662ec34db4fc2b8.zip FreeBSD-ports-a09d990d4e6d972a8975265fd662ec34db4fc2b8.tar.gz | |
* FORCED COMMIT SINCE PREVIOUS COMMIT WAS FAILED IN MIDDLE AND
* MAIL NOTIFICATION WASN'T SEND
Update to 2.14.1 (security update). Upgrade to all users highly
recomended!
From Security Advisory for Bugzilla:
: *** SECURITY ISSUES RESOLVED ***
:
: - Multiple instances of user-account hijacking capability were fixed (Bugs
: 54901, 108385, 185516)
:
: - Two occurrences of allowing data protected by Bugzilla's groupset
: restrictions to be visible to users outside of those groups were fixes
: (Bugs 102141, 108821)
:
: - One instance of an untrusted variable being echoed back to a user via
: HTML was fixed (Bug 98146)
:
: - Multiple instances of untrusted variables being passed to SQL queries
: were fixed (Bugs 108812, 108822, 109679, 109690)
Diffstat (limited to 'devel/bugzilla2')
0 files changed, 0 insertions, 0 deletions
