[geeklog-cvs] geeklog-1.3/public_html/docs history,1.168.2.3,1.168.2.4

[dhaun at iowaoutdoors.org]

Update of /var/cvs/geeklog-1.3/public_html/docs
In directory www:/tmp/cvs-serv17668/public_html/docs

Modified Files:
      Tag: geeklog_1_3_9_1
	history 
Log Message:
Don't use $topic in the language files (use %s instead).


Index: history
===================================================================
RCS file: /var/cvs/geeklog-1.3/public_html/docs/history,v
retrieving revision 1.168.2.3
retrieving revision 1.168.2.4
diff -C2 -d -r1.168.2.3 -r1.168.2.4
*** history	31 May 2004 19:50:40 -0000	1.168.2.3
--- history	7 Oct 2004 19:44:15 -0000	1.168.2.4
***************
*** 1,4 ****
--- 1,25 ----
  GeekLog History/Changes:
  
+ Oct 8, 2004 (1.3.9sr2)
+ -----------
+ 
+ This release addresses 2 security issues:
+ 
+ - Fixed a cross site scripting vulnerability caused by using the $topic
+   variable in the language files ($LANG05[3]) where it should have been
+   using '%s' instead (bug #293) [Vinny, Dirk]
+ - It was possible to post comments to stories or polls for which comment
+   posting had been switched off [Dirk]
+   This was only a problem if you allowed anonymous posts or when spammers
+   went through the trouble of actually signing up for an account before
+   posting.
+ 
+ Non-security related fixes:
+ 
+ - Fixed lib-plugins.php to be compatible with PHP 5 [Dirk]
+ - Includes updated PEAR packages to resolve email problems some users were
+   having (especially with safe_mode being on).
+ 
+ 
  Jun 1, 2004 (1.3.9sr1)
  -----------