Update to 1.6.0 latest snapshot. In previous versions it was possible for everybody to change a user password just by guessing the username.
I forgot to add the port name in the subject. The correct subject is: [MAINTAINER] www/fluxcms: Update to 1.6.0 latest snapshot (security fix) Sorry, Beat
State Changed From-To: open->closed Committed, thanks!
pav 2007-07-28 19:02:37 UTC FreeBSD ports repository Modified files: www/fluxcms Makefile distinfo pkg-plist Log: - Update to 1.6.0 latest snapshot. In previous versions it was possible for everybody to change a user password just by guessing the username. PR: ports/114983 Submitted by: Beat Gaetzi <beat@chruetertee.ch> (maintainer) Revision Changes Path 1.13 +2 -2 ports/www/fluxcms/Makefile 1.6 +3 -3 ports/www/fluxcms/distinfo 1.6 +8 -90 ports/www/fluxcms/pkg-plist _______________________________________________ cvs-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/cvs-all To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"