78cfa9cc40
Changelog: This release is a security release which addresses the following vulnerabilities: RT 4.0.0 and above are vulnerable to a cross-site scripting (XSS) attack via the user and group rights management pages. This vulnerability is assigned CVE-2015-5475. It was discovered and reported by Marcin KopeÄ at Data Reliance Shared Service Center. RT 4.2.0 and above are vulnerable to a cross-site scripting (XSS) attack via the cryptography interface. This vulnerability could allow an attacker with a carefully-crafted key to inject JavaScript into RT's user interface. Installations which use neither GnuPG nor S/MIME are unaffected.
8 lines
529 B
Text
8 lines
529 B
Text
$NetBSD: distinfo,v 1.13 2016/01/30 23:54:20 ryoon Exp $
|
|
|
|
SHA1 (rt-4.2.12.tar.gz) = ddbf70752c2b96354caf7687534addf075859d4d
|
|
RMD160 (rt-4.2.12.tar.gz) = 6726a687ba8042b35aa78337609c3d710d98264c
|
|
SHA512 (rt-4.2.12.tar.gz) = e816c5481bdb158209bd78bc82af4abc0243af500abe55ae3aac666259e983282d82577de6207899745b4781fb0a50d3094901a248e7ac958dd852343b6f2676
|
|
Size (rt-4.2.12.tar.gz) = 7537620 bytes
|
|
SHA1 (patch-Makefile.in) = d46b5cd6e9de77409ac8d6b6c172bc9dd3ed96be
|
|
SHA1 (patch-config.layout) = 1e237d38d4e3a2ad6c240feb3e58f1345c7ff476
|