Updated SVG handling, closing several related vulnerabilities reported in #2831 and...
authorpdontthink <pdontthink@7612ce4b-ef26-0410-bec9-ea0150e637f0>
Wed, 27 Feb 2019 03:45:41 +0000 (03:45 +0000)
committerpdontthink <pdontthink@7612ce4b-ef26-0410-bec9-ea0150e637f0>
Wed, 27 Feb 2019 03:45:41 +0000 (03:45 +0000)
git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@14810 7612ce4b-ef26-0410-bec9-ea0150e637f0

doc/ChangeLog

index 8830f53..936ff67 100644 (file)
@@ -423,6 +423,9 @@ Version 1.5.2 - SVN
   - Added favicon and ability for admins to use their own by setting
     $head_tag_extra in config_local.php (see documentation in
     config/config_local.php)
+  - Updated SVG handling, closing several related vulnerabilities
+    (#2831) [CVE-2018-14950] [CVE-2018-14951] [CVE-2018-14952]
+    [CVE-2018-14953] [CVE-2018-14954] [CVE-2018-14955]
 
 Version 1.5.1 (branched on 2006-02-12)
 --------------------------------------