adrianp 813491f44c - Update to 2.18.3 ... - Update addresses two security issues - From the ChangeLog: > Version 2.18.2 > -------------- > > + You can now create accounts with createaccount.cgi even > when the "requirelogin" parameter is turned on. (Bug 294778) > > + Bugs that are in disabled groups may not show a padlock > on the bug list, or may otherwise behave strangely. You > can now fix this using sanitycheck.cgi. (Bug 277454) > > + If sendmail dies while you are marking a bug > as a duplicate, the duplicates table will no longer become > corrupted. (Bug 225042) > > + Any user can change a flag on any bug. This also allows the > attacker to expose the summary of any bug, even a hidden bug. > > + Summaries of private bugs are sometimes exposed under a very rare > condition if you use MySQL replication. > > Version 2.18.3 > -------------- > > + The query.cgi page was broken in 2.18.2 by bug 300138. > That is now fixed.		2005-07-14 10:26:29 +00:00
..
files
patches	- Modify checkconfig.pl to accept any version of File::Spec as this will	2005-06-17 22:58:02 +00:00
DESCR	- Update to 2.18.1	2005-05-15 17:04:32 +00:00
distinfo	- Update to 2.18.3	2005-07-14 10:26:29 +00:00
Makefile	- Update to 2.18.3	2005-07-14 10:26:29 +00:00
MESSAGE	- Update to 2.18.1	2005-05-15 17:04:32 +00:00
options.mk
PLIST	- Update to 2.18.3	2005-07-14 10:26:29 +00:00