-
- Downloads
svn merge -r98039:98711...
svn merge -r98039:98711 svn+ssh://svn.lindenlab.com/svn/linden/branches/Branch_1-24-Server --> release Merging various security fixes from Branch_1-24-Server. Related to RequestXfer exploit: * DEV-21706 (SEC-188): llParticleSystem can be used to obtain asset id. * DEV-21767: Migrate RequestXfer to TCP-only * DEV-21765: Fix RequestXfer traversal exploit * DEV-21775: LLXferManager::processFileRequest() still has file vulnerabilities Various fixes: * fix for VFS memory corruption in llvfs. * Bump server version to 1.24.9. Landstore fixes: * Passing locale to fulfill-order-item from region reservation fulfillment.
Showing
- indra/llcommon/llversionserver.h 2 additions, 2 deletionsindra/llcommon/llversionserver.h
- indra/llmessage/llxfermanager.cpp 112 additions, 7 deletionsindra/llmessage/llxfermanager.cpp
- indra/llmessage/llxfermanager.h 16 additions, 0 deletionsindra/llmessage/llxfermanager.h
- indra/llvfs/llvfs.cpp 1 addition, 1 deletionindra/llvfs/llvfs.cpp
- indra/newview/llfloaterregioninfo.cpp 2 additions, 0 deletionsindra/newview/llfloaterregioninfo.cpp
- indra/newview/llviewermessage.cpp 5 additions, 0 deletionsindra/newview/llviewermessage.cpp
- scripts/messages/message_template.msg 2 additions, 1 deletionscripts/messages/message_template.msg
Loading
Please register or sign in to comment