I have investigated the issue and found out that it is not just about the missing brace, an additional database upgrade would also be required to fix CVE-2017-14990 in Wheezy. The signup_id column does not exist before version 3.7. In addition further code changes would be necessary. I believe this would be too intrusive in this case because CVE-2017-14990 is merely a new hardening feature for multisite installations. I will revert the patch for CVE-2017-14990 for now. I am sorry for any inconvenience this may have caused.
Regards, Markus
signature.asc
Description: OpenPGP digital signature
