diff options
| author |   Aaron Walker <ka0ttic@gentoo.org> | 2005-05-30 05:18:55 +0000 |
|---|---|---|
| committer | Aaron Walker <ka0ttic@gentoo.org> | 2005-05-30 05:18:55 +0000 |
| commit | 2f74980de3051f3cd3d81e0ad90533cad43ce40d (patch) | |
| tree | 11e729170ddaa157151eb86fc3e74b66c399938e /www-apps/phprojekt/files | |
| parent | Adding esekeyd, thanks to kandian for the tip (diff) | |
| download | historical-2f74980de3051f3cd3d81e0ad90533cad43ce40d.tar.gz historical-2f74980de3051f3cd3d81e0ad90533cad43ce40d.tar.bz2 historical-2f74980de3051f3cd3d81e0ad90533cad43ce40d.zip | |
Version bump; added patch to fix chat script insertion vuln for sec bug 89950.
Package-Manager: portage-2.0.51.22-r1
Diffstat (limited to 'www-apps/phprojekt/files')
| -rw-r--r-- | www-apps/phprojekt/files/digest-phprojekt-4.2.3 | 3 | ||||
| -rw-r--r-- | www-apps/phprojekt/files/phprojekt-4.2.3-fix-chat-vuln.diff | 18 |
2 files changed, 21 insertions, 0 deletions
diff --git a/www-apps/phprojekt/files/digest-phprojekt-4.2.3 b/www-apps/phprojekt/files/digest-phprojekt-4.2.3 new file mode 100644 index 000000000000..aa1657f00e29 --- /dev/null +++ b/www-apps/phprojekt/files/digest-phprojekt-4.2.3 @@ -0,0 +1,3 @@ +MD5 364263b1b0a513dba5df4215e6f2e1f0 phprojekt-4.2.3.tar.gz 1026462 +MD5 4d8ca59d86c32650c34e06691b335841 setup.zip 2830 +MD5 25d69434fb367f39db402c33df6cebd4 lib.zip 2149 diff --git a/www-apps/phprojekt/files/phprojekt-4.2.3-fix-chat-vuln.diff b/www-apps/phprojekt/files/phprojekt-4.2.3-fix-chat-vuln.diff new file mode 100644 index 000000000000..3bf63a08573d --- /dev/null +++ b/www-apps/phprojekt/files/phprojekt-4.2.3-fix-chat-vuln.diff @@ -0,0 +1,18 @@ +diff --exclude='*~' --exclude='.*' -I '$Id:' -urN phprojekt-4.2.3.orig/chat/chat.php phprojekt-4.2.3/chat/chat.php +--- phprojekt-4.2.3.orig/chat/chat.php 2005-05-29 16:35:28.000000000 -0400 ++++ phprojekt-4.2.3/chat/chat.php 2005-05-29 16:37:16.000000000 -0400 +@@ -37,6 +37,7 @@ + function writetext () {
+ global $chatfile, $user_name, $user_firstname, $content, $max_lines, $chat_time, $chat_names, $chat_direction;
+ // small irc hack - replace /me with the username
++ $content = htmlentities(strip_tags($content));
+ $content = ereg_replace('/me',$user_firstname,$content);
+
+ // add time to new line
+@@ -211,4 +212,4 @@ + elseif ($mode == "alive") { alive(); }
+ elseif ($mode == 'check') { check(); }
+
+-?> +\ No newline at end of file ++?>
|