All of these changes are pulled from 2.2.5 (with lots of version change hunks removed). All touched functionality seems to work, but I was unable to devise an exploit for CVE-2008-2723. The rest of the fixes definitely work.
All of these changes are pulled from 2.2.5 (with lots of version change hunks removed). All touched functionality seems to work, but I was unable to devise an exploit for CVE-2008-2723. The rest of the fixes definitely work.