[pkg-horde] [SCM] Debian Horde Packages repository: dimp1 package branch, debian-sid, updated. debian/1.1.4+debian2-1-1-gabfe5e6

[Gregory Colpart]

The following commit has been merged in the debian-sid branch:
commit abfe5e6058ea469db71a71313bad90a1ef079a57
Author: Gregory Colpart <reg at evolix.fr>
Date:   Sat Oct 30 15:15:02 2010 +0200

    Commit changes by Moritz Muehlenhoff <muehlenhoff at univention.de> (a lot of kudos to him)

diff --git a/debian/changelog b/debian/changelog
index 7a3ff5a..f6c863f 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+dimp1 (1.1.4+debian2-1.1) unstable; urgency=medium
+
+  * Non-maintainer upload by the Security Team
+  * Fix CVE-2010-3693 (Closes: #598583)
+
+ -- Moritz Muehlenhoff <jmm at debian.org>  Sat, 23 Oct 2010 17:25:43 +0200
+
 dimp1 (1.1.4+debian2-1) unstable; urgency=low
 
   * Repack tarball with dragdrop.js as this is not the same as the
diff --git a/lib/Views/ListMessages.php b/lib/Views/ListMessages.php
index d403fbd..17aaf6a 100644
--- a/lib/Views/ListMessages.php
+++ b/lib/Views/ListMessages.php
@@ -83,7 +83,7 @@ class DIMP_Views_ListMessages {
             $folder = $c_ptr['dimp_searchquery'] = $GLOBALS['imp_search']->createSearchID($search_id);
         }
 
-        $label = IMP::getLabel($folder);
+        $label = htmlspecialchars(IMP::getLabel($folder));
 
         /* Set the current time zone. */
         NLS::setTimeZone();

-- 
Debian Horde Packages repository: dimp1 package