Changelog for
php-mhash-4.2.3-10.i386.rpm :
Tue Nov 4 13:00:00 2003 PLD Team
All persons listed below can be reached at AATTpld.org.pl
$Log: php.spec,v $
Revision 1.221.2.2 2003/11/04 17:06:08 kloczek
- release 10,
- SECURITY FIXES: added sessid patch: fixed CAN-2003-0442
Cross-site scripting (XSS) vulnerability in the transparent SID support
capability for PHP before 4.3.2 (session.use_trans_sid) allows remote
attackers to insert arbitrary script via the PHPSESSID parameter.
Revision 1.221.2.1 2003/02/06 13:20:52 qboosh
- added wrap patch (fix for wordwrap() buffer overflow) from RH
- release 9, STRB to ra/updates/security