diff options
Diffstat (limited to 'docs/rel_notes.txt')
| -rw-r--r-- | docs/rel_notes.txt | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/docs/rel_notes.txt b/docs/rel_notes.txt index 9d84e6818..366673f97 100644 --- a/docs/rel_notes.txt +++ b/docs/rel_notes.txt @@ -143,10 +143,6 @@ fix the problem on your installation. *** SECURITY ISSUES RESOLVED *** -- The bug list sort order could take arbitrary SQL. There - are no known exploits for this problem. - (bug 130821) - - The bug reporter could set the priority even when 'letsubmitterchoosepriority' was off. (bug 63018) @@ -401,6 +397,12 @@ fix the problem on your installation. corrupted. (bug 92263) +- The bug list sort order is now stricter about the SQL it will accept, + ensuring you use correct column name syntax. Before this, there were + some syntax checks, so it is not known whether this problem was + exploitable. + (bug 130821) + ******************************************** *** USERS UPGRADING FROM 2.14 OR EARLIER *** ******************************************** |