cvs commit: ports/www/apache20 Makefile ports/www/apache20/files patch-secfix-CAN-2005-3352

[Clement Laforet]

clement     2005-12-12 20:35:19 UTC

  FreeBSD ports repository

  Modified files:
    www/apache20         Makefile 
  Added files:
    www/apache20/files   patch-secfix-CAN-2005-3352 
  Log:
  SECURITY: CVE-2005-3352 (cve.mitre.org)
       mod_imap: Escape untrusted referer header before outputting in HTML
       to avoid potential cross-site scripting.  Change also made to
       ap_escape_html so we escape quotes.  Reported by JPCERT.
       [Mark Cox]
  
  Reported by:    simon
  
  Revision  Changes    Path
  1.231     +1 -1      ports/www/apache20/Makefile
  1.1       +35 -0     ports/www/apache20/files/patch-secfix-CAN-2005-3352 (new)