share/pixmaps/tryton/tryton-preferences.svg | 36 19 + 17 - 0 !
1 file changed, 19 insertions(+), 17 deletions(-)

 replace tryton-preferences.svg with public domain version.
Bug: http://bugs.tryton.org/roundup/issue2245

tryton.desktop | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 adjust name of the icon to be used for the desktop file.

setup.py | 2 1 + 1 - 0 !
tryton/config.py | 6 3 + 3 - 0 !
2 files changed, 4 insertions(+), 4 deletions(-)

 adjust icon directory to policy conforming place.

tryton/action/main.py | 5 3 + 2 - 0 !
1 file changed, 3 insertions(+), 2 deletions(-)

 sanitize the file extension
 Sanitize correctly the file extension of temporary files received by the
 server. A malicious server could send a file with an extension, that could
 contain the filesystem path separator. So it could force the client to
 write any file on the client host with the permissions of the user.
 This bug was detected by the Tryton project itself.