[SCM] BOINC packaging branch, wheezy, updated. debian/7.0.27+dfsg-5-21-g8ddb22e

Guo Yixuan culu.gyx at gmail.com
Thu Jun 27 02:20:11 UTC 2013


The following commit has been merged in the wheezy branch:
commit dd29bf941f6259db8e82d797f4efcb0fdc10b7c7
Author: Guo Yixuan <culu.gyx at gmail.com>
Date:   Thu Jun 27 10:09:35 2013 +0800

    CVE-2013-2018 4th patch
    
    boinc-v2: ce3110489bc139b8218252ba1cb0862d69f72ae3

diff --git a/debian/patches/CVE-2013-2018-4-SQL-injections.patch b/debian/patches/CVE-2013-2018-4-SQL-injections.patch
new file mode 100644
index 0000000..2a6a168
--- /dev/null
+++ b/debian/patches/CVE-2013-2018-4-SQL-injections.patch
@@ -0,0 +1,25 @@
+From ce3110489bc139b8218252ba1cb0862d69f72ae3 Mon Sep 17 00:00:00 2001
+From: David Anderson <davea at ssl.berkeley.edu>
+Date: Tue, 8 Jan 2013 11:32:16 -0800
+Subject: [PATCH] - user web: fix typo
+
+---
+ html/user/team_search.php | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/html/user/team_search.php b/html/user/team_search.php
+index 1a87bcd..3778695 100644
+--- a/html/user/team_search.php
++++ b/html/user/team_search.php
+@@ -149,7 +149,7 @@ function search($params) {
+         $tried = true;
+     }
+     if ($params->type and $params->type>1) {
+-        $list2 = get_teams("type=$type", $params->active);
++        $list2 = get_teams("type=$params->type", $params->active);
+         //echo "<br>type matches: ",sizeof($list2);
+         merge_lists($list2, $list, 2);
+         $tried = true;
+-- 
+1.8.3.1
+
diff --git a/debian/patches/series b/debian/patches/series
index 0971b9a..3f215ca 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -64,3 +64,4 @@ wrapper.patch
 CVE-2013-2018-1-SQL-injections.patch
 CVE-2013-2018-2-SQL-injections.patch
 CVE-2013-2018-3-SQL-injections.patch
+CVE-2013-2018-4-SQL-injections.patch

-- 
BOINC packaging



More information about the pkg-boinc-commits mailing list