Package: cakephp / 1.3.2-1.1+deb6u11
Metadata
Package | Version | Patches format |
---|---|---|
cakephp | 1.3.2-1.1+deb6u11 | 3.0 (quilt) |
Patch series
view the series filePatch | File delta | Description |
---|---|---|
01 remove shebang.diff | (download) |
cake/console/cake.php |
1 0 + 1 - 0 ! |
--- |
02 cake binary libs.diff | (download) |
cake/console/cake |
2 1 + 1 - 0 ! |
--- |
03 CVE 2010 4335.diff | (download) |
cake/libs/controller/components/security.php |
7 6 + 1 - 0 ! |
protect against an unsafe serialise cve-2010-4335 |
debian changes 1.3.2 1.1+deb6u11 | (download) |
cake/libs/xml.php |
2 1 + 1 - 0 ! |
upstream changes introduced in version 1.3.2-1.1+deb6u11 This patch has been created by dpkg-source during the package build. Here's the last changelog entry, hopefully it gives details on why those changes were made: . cakephp (1.3.2-1.1+deb6u11) squeeze-lts; urgency=high . * [TEMP-0000000-698CF7] Address SSRF (Server Side Request Forgery) attack by ensuring included files are "regular" (eg. `./foo.xml`) rather than merely existing (eg. `/dev/urandom`, etc.). . The person named in the Author field signed this changelog entry. |
1