From owner-cvs-all@FreeBSD.ORG  Fri Jul 30 17:35:00 2004
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id C834816A4CE; Fri, 30 Jul 2004 17:35:00 +0000 (GMT)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id BDCED43D46; Fri, 30 Jul 2004 17:35:00 +0000 (GMT)
	(envelope-from thierry@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.11/8.12.11) with ESMTP id i6UHYcA5093461;
	Fri, 30 Jul 2004 17:34:38 GMT
	(envelope-from thierry@repoman.freebsd.org)
Received: (from thierry@localhost)
	by repoman.freebsd.org (8.12.11/8.12.11/Submit) id i6UHYcwh093460;
	Fri, 30 Jul 2004 17:34:38 GMT
	(envelope-from thierry)
Message-Id: <200407301734.i6UHYcwh093460@repoman.freebsd.org>
From: Thierry Thomas <thierry@FreeBSD.org>
Date: Fri, 30 Jul 2004 17:34:38 +0000 (UTC)
To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: ports/mail/imp3 Makefile distinfo
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 30 Jul 2004 17:35:00 -0000

thierry     2004-07-30 17:34:38 UTC

  FreeBSD ports repository

  Modified files:
    mail/imp3            Makefile distinfo 
  Log:
  - SECURITY: Closed an XSS hole in the HTML viewer, a variation to the one
    reported in http://www.greymagic.com/security/advisories/gm005-mc/.
    This vulnerability only exists when using the Internet Explorer to
    access IMP and only when using the inline MIME viewer for HTML messages.
  
  - Commented out the complete <style> tags in the HTML viewer to avoid CSS
    code appearing in the message.
  
  - Fixed a cosmetic issue with broken mail servers that return quotes where
    they should not (Bug #292).  <- edwin ;-)
  
  - Updated translations: Estonian, German.
  
  Revision  Changes    Path
  1.34      +1 -1      ports/mail/imp3/Makefile
  1.10      +2 -2      ports/mail/imp3/distinfo