Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-current.git;a=commitdiff;h=7af9bdea29c3f4af5a0ee9fc7dd165a5793a9ed0
commit 7af9bdea29c3f4af5a0ee9fc7dd165a5793a9ed0 Author: DeX77 <[email protected]> Date: Fri Aug 18 16:07:10 2017 +0200 postfixadmin-3.1-1-x86_64 * version bump diff --git a/source/network-extra/postfixadmin/CVE-2014-2655.patch b/source/network-extra/postfixadmin/CVE-2014-2655.patch deleted file mode 100644 index 9ec1297..0000000 --- a/source/network-extra/postfixadmin/CVE-2014-2655.patch +++ /dev/null @@ -1,17 +0,0 @@ -Description: SECURITY: fix SQL injection in show_gen_status() - This vulnerability is only exploitable by authenticated users - able to create new aliases. If the alias contains SQL code, the - list-virtual.php overview triggers the vulnerability. -Origin: backport, http://sourceforge.net/p/postfixadmin/code/1650 -Applied-Upstream: 2.3.7 ---- a/functions.inc.php -+++ b/functions.inc.php -@@ -2175,6 +2175,8 @@ - global $CONF, $table_alias; - $stat_string = ""; - -+ $show_alias = escape_string($show_alias); -+ - $stat_goto = ""; - $stat_result = db_query ("SELECT goto FROM $table_alias WHERE address='$show_alias'"); - if ($stat_result['rows'] > 0) diff --git a/source/network-extra/postfixadmin/FrugalBuild b/source/network-extra/postfixadmin/FrugalBuild index 81bcae5..e01f03f 100644 --- a/source/network-extra/postfixadmin/FrugalBuild +++ b/source/network-extra/postfixadmin/FrugalBuild @@ -2,8 +2,8 @@ # Maintainer: CSÉCSY László <[email protected]> pkgname=postfixadmin -pkgver=2.3.6 -pkgrel=2 +pkgver=3.1 +pkgrel=1 pkgdesc="web-based management tool for postfix" rodepends=('postfix>=2.0' 'apache>=1.3.27' 'php>=5.0' 'mysql>=5.0') groups=('network-extra') @@ -15,13 +15,8 @@ up2date="lynx -dump http://sourceforge.net/projects/postfixadmin/ | grep 'Downlo backup=('var/www/postfixadmin/config.inc.php' \ 'var/www/postfixadmin/motd.txt' \ 'var/www/postfixadmin/motd-users.txt') -sha1sums=('63c891865f3adcadddd44eeac460f87b8060ac7a' \ - 'bd08cb4289798385a2b4a71433377dedda9e8e6e') - -# FSA fix *** -source=(${source[@]} CVE-2014-2655.patch) -sha1sums=(${sha1sums[@]} '6d749b51f4dad11b8ab97827e296070d16e062cf') -# *********** +sha1sums=('08d4844bd67c69ddf4236752798348b1037dd968' \ + 'c321abff5e5ffa3cf908f38fc34b97ea94b73120') build() {
_______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
