[cyber] I: 4.0/branch packages: +2 (6855)

QA Team Robot qa на altlinux.org
Сб Авг 7 01:53:26 UTC 2010


	2 UPDATED packages

typo3-dummy - Dummy site for TYPO3
* Fri Aug 06 2010 Michael Shigorin <mike на altlinux> 4.2.14-alt0.M40.1
- 4.2.14: regression fixes for important security fixes in 4.2.13
- 4.2.13: major/medium security fixes:
  + several XSS in backend (valid backend login required)
  + open redirection in backend (valid backend login required)
  + SQL injection in some backend record editing forms
    (special backend login/configuration required)
  + arbitrary code execution depending on server configuration
    (valid backend login required to upload .phtml)
  + webroot path disclosure possible with defective extensions
  + Extension Manager: XSS and arbitrary file access
    (valid backend admin login required)
  + form content element data check failure (spam abuse)
  + header injection with jumpurl feature
  + frontend login box: open redirection, XSS
  + install tool: session fixation
  + t3lib_htmlmail includes the exact CMS version in headers
* Sat Jul 04 2009 Michael Shigorin <mike на altlinux> 4.2.8-alt0.M40.1

typo3_src - A free, feature rich, Content Management Framework/System
* Fri Aug 06 2010 Michael Shigorin <mike на altlinux> 4.2.14-alt0.M40.1
- 4.2.14
* Sat Jul 04 2009 Michael Shigorin <mike на altlinux> 4.2.8-alt0.M40.1

Total 6855 source packages.


Подробная информация о списке рассылки Sisyphus-cybertalk