Mercurial > moin > 1.9

changeset 5913:f2fb4b3ed8e5 1.9.6

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
update CHANGES
author Thomas Waldmann <tw AT waldmann-edv DOT de>
date Sat, 29 Dec 2012 19:19:14 +0100
parents 3c27131a3c52
children d5669dcdc16b
files docs/CHANGES
diffstat 1 files changed, 1 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/docs/CHANGES	Sat Dec 29 18:19:25 2012 +0100
+++ b/docs/CHANGES	Sat Dec 29 19:19:14 2012 +0100
@@ -26,6 +26,7 @@
 
   Fixes:
   * fix remote code execution vulnerability in twikidraw/anywikidraw action
+  * fix path traversal vulnerability in AttachFile action
   * fix XSS issue, escape page name in rss link
   * escape user- or admin-defined css url
   * make taintfilename more secure