Subject: CVS commit: pkgsrc/www/trac
To: None <pkgsrc-changes@NetBSD.org>
From: Thomas Klausner <wiz@netbsd.org>
List: pkgsrc-changes
Date: 03/10/2007 20:55:34
Module Name:	pkgsrc
Committed By:	wiz
Date:		Sat Mar 10 20:55:34 UTC 2007

Modified Files:
	pkgsrc/www/trac: Makefile distinfo

Log Message:
Update to 0.10.3.1:

Trac 0.10.3.1 (March 8, 2007)
http://svn.edgewall.org/repos/trac/tags/trac-0.10.3.1

 Trac 0.10.3.1 is a security release:
 * Always send "Content-Disposition: attachment" headers where potentially
   unsafe (user provided) content is available for download. This behaviour
   can be altered using the "render_unsafe_content" option in the
   "attachment" and "browser" sections of trac.ini.
 * Fixed XSS vulnerability in "download wiki page as text" in combination with
   Microsoft IE. Reported by Yoshinori Oota, Business Architects Inc.


To generate a diff of this commit:
cvs rdiff -r1.24 -r1.25 pkgsrc/www/trac/Makefile
cvs rdiff -r1.17 -r1.18 pkgsrc/www/trac/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.