OpenPKG CVS Repository
http://cvs.openpkg.org/
____________________________________________________________________________
Server: cvs.openpkg.org Name: Ralf S. Engelschall
Root: /v/openpkg/cvs Email: [EMAIL PROTECTED]
Module: openpkg-src Date: 08-Jun-2007 17:52:20
Branch: HEAD Handle: 2007060816521900
Modified files:
openpkg-src/wordpress wordpress.patch wordpress.spec
Log:
fix security bug
Summary:
Revision Changes Path
1.5 +12 -0 openpkg-src/wordpress/wordpress.patch
1.42 +1 -1 openpkg-src/wordpress/wordpress.spec
____________________________________________________________________________
patch -p0 <<'@@ .'
Index: openpkg-src/wordpress/wordpress.patch
============================================================================
$ cvs diff -u -r1.4 -r1.5 wordpress.patch
--- openpkg-src/wordpress/wordpress.patch 17 May 2007 08:28:45 -0000
1.4
+++ openpkg-src/wordpress/wordpress.patch 8 Jun 2007 15:52:19 -0000
1.5
@@ -43,3 +43,15 @@
$post_data =
compact('post_content','post_title','post_date','post_date_gmt','post_author','post_category',
'post_status');
$post_data = add_magic_quotes($post_data);
+Index: xmlrpc.php
+--- xmlrpc.php.orig 2007-05-11 23:40:15 +0200
++++ xmlrpc.php 2007-06-08 16:07:27 +0200
+@@ -538,7 +538,7 @@
+ $username = $args[1];
+ $password = $args[2];
+ $category = $args[3];
+- $max_results = $args[4];
++ $max_results = (int) $args[4];
+
+ if(!$this->login_pass_ok($username, $password)) {
+ return($this->error);
@@ .
patch -p0 <<'@@ .'
Index: openpkg-src/wordpress/wordpress.spec
============================================================================
$ cvs diff -u -r1.41 -r1.42 wordpress.spec
--- openpkg-src/wordpress/wordpress.spec 31 May 2007 16:43:31 -0000
1.41
+++ openpkg-src/wordpress/wordpress.spec 8 Jun 2007 15:52:19 -0000
1.42
@@ -46,7 +46,7 @@
Group: CMS
License: GPL
Version: %{V_wordpress}
-Release: 20070531
+Release: 20070608
# list of sources
Source0: http://wordpress.org/wordpress-%{V_wordpress}.tar.gz
@@ .
______________________________________________________________________
OpenPKG http://openpkg.org
CVS Repository Commit List openpkg-cvs@openpkg.org
