CVS commit: pkgsrc/devel/bugzilla

[Adrian Portelli <adrianp%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adrianp
Date:           Tue May  6 19:36:39 UTC 2008

Modified Files:
        pkgsrc/devel/bugzilla: Makefile PLIST distinfo

Log Message:
2.22.4

Class:       Cross-Site Scripting
Versions:    2.17.2 and higher
Description: When using the "Format for Printing" view of a bug (or
             the "Long Format" of a bug list, which is the same thing),
             there was a cross-site scripting hole--arbitrary text
             from a particular URL parameter could be injected into the
             page without filtering.


To generate a diff of this commit:
cvs rdiff -r1.28 -r1.29 pkgsrc/devel/bugzilla/Makefile
cvs rdiff -r1.13 -r1.14 pkgsrc/devel/bugzilla/PLIST
cvs rdiff -r1.14 -r1.15 pkgsrc/devel/bugzilla/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.