CVE-2008-2360 server-branch-1.3

[Jeremy Huddleston]

Ah, you're right... I was just looking at the commits to master and  
didn't even cross my mind that the render changes happened post  
1.4 ... thanks for saving me some time =)

--Jeremy

On Jun 11, 2008, at 12:01, Julien Cristau wrote:

> On Wed, Jun 11, 2008 at 11:53:11 -0700, Jeremy Huddleston wrote:
>
>> All the just-announced vulnerability fixes are easily applied to the
>> 1.3 server branch except for CVE-2008-2360 ... does someone have a  
>> fix
>> for CVE-2008-2360 for server-1.3-branch (yes, I'm trying to weasel  
>> out
>> of rolling it myself mostly because I don't want the  
>> responsibility ;>)
>>
> Hi,
>
> 'git cherry-pick -x b1a4a96885bf191d5f4afcfb2b41a88631b8412b' seems to
> work?
>
> Cheers,
> Julien