Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to master grimoire by Vlad Glagolev (9b1cdea686f58f9a7e3e11adf7b2675e0ead233a)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Vlad Glagolev <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to master grimoire by Vlad Glagolev (9b1cdea686f58f9a7e3e11adf7b2675e0ead233a)
  • Date: Thu, 22 Apr 2010 16:59:18 -0500

GIT changes to master grimoire by Vlad Glagolev <stealth AT sourcemage.org>:

net/cacti/DETAILS | 1 +
net/cacti/HISTORY | 4 ++++
net/cacti/patches/sql_injection_template_export.patch | 13 +++++++++++++
3 files changed, 18 insertions(+)

New commits:
commit 9b1cdea686f58f9a7e3e11adf7b2675e0ead233a
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

cacti: added official patch, security update

diff --git a/net/cacti/DETAILS b/net/cacti/DETAILS
index 4fb7d2a..5bbb0ae 100755
--- a/net/cacti/DETAILS
+++ b/net/cacti/DETAILS
@@ -1,5 +1,6 @@
SPELL=cacti
VERSION=0.8.7e
+ SECURITY_PATCH=1
PATCHLEVEL=2
SOURCE=$SPELL-$VERSION.tar.gz
if [[ $CACTI_PA == y ]]; then
diff --git a/net/cacti/HISTORY b/net/cacti/HISTORY
index 84e0442..5ee2f3a 100644
--- a/net/cacti/HISTORY
+++ b/net/cacti/HISTORY
@@ -1,3 +1,7 @@
+2010-04-23 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: SECURITY_PATCH=1
+ * patches/sql_injection_template_export.patch: added
+
2010-04-06 Philippe "Puppet_Master" Caseiro <puppetmaster AT sourcemage.org>
* DEPENDS: updated mysql dependency to MYSQL provider

diff --git a/net/cacti/patches/sql_injection_template_export.patch
b/net/cacti/patches/sql_injection_template_export.patch
new file mode 100644
index 0000000..397990c
--- /dev/null
+++ b/net/cacti/patches/sql_injection_template_export.patch
@@ -0,0 +1,13 @@
+--- cacti-0.8.7e/templates_export.php 2009-06-28 12:07:11.000000000 -0400
++++ cacti-fixed/templates_export.php 2010-04-17 14:08:42.000000000 -0400
+@@ -49,6 +49,10 @@
+ function form_save() {
+ global $export_types;
+
++ /* ================= input validation ================= */
++ input_validate_input_number(get_request_var_post("export_item_id"));
++ /* ==================================================== */
++
+ if (isset($_POST["save_component_export"])) {
+ $xml_data = get_item_xml($_POST["export_type"],
$_POST["export_item_id"], (((isset($_POST["include_deps"]) ?
$_POST["include_deps"] : "") == "") ? false : true));
+



  • [SM-Commit] GIT changes to master grimoire by Vlad Glagolev (9b1cdea686f58f9a7e3e11adf7b2675e0ead233a), Vlad Glagolev, 04/22/2010

Archive powered by MHonArc 2.6.24.

Top of Page