add note for CVE-2019-12744 and CVE-2019-12745

This commit is contained in:
Uwe Steinmann 2019-06-13 09:13:38 +02:00
parent 0b6d1b4597
commit f32ac518ea

View File

@ -1,6 +1,9 @@
--------------------------------------------------------------------------------
Changes in version 5.1.11
--------------------------------------------------------------------------------
- fix for CVE-2019-12744, add .htaccess file to data directory, better
documentation for installing seeddms
- fix for CVE-2019-12745, propperly escape strings used in Select2 js library
- do not show attributes in search results in extra column anymore
- fix setting language during login (Closes #437)
- fix indexing documents even if no preIndexDocument hook is set (Closes #437)
@ -55,7 +58,7 @@
- catch error when updating a document fails (Closes #410)
- use always 'Send from' address as Return-Path when set, only if not set the
logged in user's email will be used (Closes #418)
- show the debug output when sendind a test mail
- show the debug output when sending a test mail
- add hooks add hooks folderListPreContent and folderListPostContent in
class.ViewFolder.php
- do not redirect to ForcePassword page if out.Logout.php was opened. This