diff options
| author |   Renat Lumpau <rl03@gentoo.org> | 2006-03-25 16:01:43 +0000 |
|---|---|---|
| committer | Renat Lumpau <rl03@gentoo.org> | 2006-03-25 16:01:43 +0000 |
| commit | 2562d0695236087b5f909b08b93b1a8788dd9949 (patch) | |
| tree | 2c2634acd2f65179959d0780bd031120b73902cc /www-apps/twiki/files | |
| parent | Mark 3.4.3 stable on ia64 (diff) | |
| download | gentoo-2-2562d0695236087b5f909b08b93b1a8788dd9949.tar.gz gentoo-2-2562d0695236087b5f909b08b93b1a8788dd9949.tar.bz2 gentoo-2-2562d0695236087b5f909b08b93b1a8788dd9949.zip | |
Patch for CVE-2006-1386
(Portage version: 2.1_pre6-r3)
Diffstat (limited to 'www-apps/twiki/files')
| -rw-r--r-- | www-apps/twiki/files/CVE-2006-1386.patch | 23 | ||||
| -rw-r--r-- | www-apps/twiki/files/digest-twiki-4.0.1-r1 (renamed from www-apps/twiki/files/digest-twiki-4.0.1) | 0 |
2 files changed, 23 insertions, 0 deletions
diff --git a/www-apps/twiki/files/CVE-2006-1386.patch b/www-apps/twiki/files/CVE-2006-1386.patch new file mode 100644 index 000000000000..dff921cd50a5 --- /dev/null +++ b/www-apps/twiki/files/CVE-2006-1386.patch @@ -0,0 +1,23 @@ +diff -ur work/lib/TWiki/UI/RDiff.pm work_patched/lib/TWiki/UI/RDiff.pm +--- work/lib/TWiki/UI/RDiff.pm 2006-02-07 10:08:45.000000000 -0500 ++++ work_patched/lib/TWiki/UI/RDiff.pm 2006-03-25 10:55:01.000000000 -0500 +@@ -394,6 +394,7 @@ + + TWiki::UI::checkWebExists( $session, $webName, $topic, 'diff' ); + TWiki::UI::checkTopicExists( $session, $webName, $topic, 'diff' ); ++ TWiki::UI::checkAccess( $session, $webName, $topic, 'view', $session->{user} ); + + my $renderStyle = $query->param('render') || + $session->{prefs}->getPreferencesValue( 'DIFFRENDERSTYLE' ) || +diff -ur work/lib/TWiki/UI/Save.pm work_patched/lib/TWiki/UI/Save.pm +--- work/lib/TWiki/UI/Save.pm 2006-02-07 10:08:45.000000000 -0500 ++++ work_patched/lib/TWiki/UI/Save.pm 2006-03-25 10:54:19.000000000 -0500 +@@ -104,7 +104,7 @@ + + if( $topicExists ) { + ( $prevMeta, $prevText ) = +- $store->readTopic( undef, $webName, $topic, undef ); ++ $store->readTopic( $user, $webName, $topic, undef ); + if( $prevMeta ) { + foreach my $k ( keys %$prevMeta ) { + unless( $k =~ /^_/ || $k eq 'FORM' || $k eq 'TOPICPARENT' || diff --git a/www-apps/twiki/files/digest-twiki-4.0.1 b/www-apps/twiki/files/digest-twiki-4.0.1-r1 index 18b0503f8fd4..18b0503f8fd4 100644 --- a/www-apps/twiki/files/digest-twiki-4.0.1 +++ b/www-apps/twiki/files/digest-twiki-4.0.1-r1 |