[packages/dokuwiki] - up to 2012-07-13 snap, fixes XSS vulnerability (SA49196)
glen
glen at pld-linux.org
Fri Jul 13 23:01:19 CEST 2012
commit 883cc49ac49db19b1263ff8d2e2190e8119cce1f
Author: Elan Ruusamäe <glen at delfi.ee>
Date: Fri Jul 13 23:58:47 2012 +0300
- up to 2012-07-13 snap, fixes XSS vulnerability (SA49196)
Fix HTML injection in mediaFileList (Secunia advisory SA49196)
dokuwiki-config-allow-require.patch | 11 -----------
dokuwiki.spec | 15 ++++++---------
install.patch | 11 -----------
3 files changed, 6 insertions(+), 31 deletions(-)
---
diff --git a/dokuwiki.spec b/dokuwiki.spec
index aab6e59..cdf46d1 100644
--- a/dokuwiki.spec
+++ b/dokuwiki.spec
@@ -1,18 +1,18 @@
-%define subver 2012-07-08
+%define subver 2012-07-13
%define ver %(echo %{subver} | tr -d -)
%define snap 1
%define php_min_version 5.2.4
-%include /usr/lib/rpm/macros.php
+#include /usr/lib/rpm/macros.php
Summary: PHP-based Wiki webapplication
Summary(pl.UTF-8): Aplikacja WWW Wiki oparta na PHP
Name: dokuwiki
Version: %{ver}
-Release: 0.12
+Release: 0.1
License: GPL v2
Group: Applications/WWW
#Source0: http://www.splitbrain.org/_media/projects/dokuwiki/%{name}-%{subver}.tgz
-Source0: http://github.com/splitbrain/dokuwiki/tarball/master/%{name}.tgz
-# Source0-md5: d7afe9a8a4a73637d4620017f16f4b6a
+Source0: http://github.com/splitbrain/dokuwiki/tarball/master/%{name}-%{subver}.tgz
+# Source0-md5: 21bb0371b5625789e8c1cf3e5052e291
Source1: %{name}-apache.conf
Source2: %{name}-lighttpd.conf
Source3: http://glen.alkohol.ee/pld/jude.png
@@ -32,7 +32,6 @@ Source11: http://glen.alkohol.ee/pld/astah.png
Patch66: %{name}-config.patch
Patch0: %{name}-paths.patch
Patch1: system-jquery.patch
-Patch3: %{name}-config-allow-require.patch
Patch4: %{name}-geshi.patch
Patch5: %{name}-http_auth-option.patch
Patch6: %{name}-nice_exit.patch
@@ -43,7 +42,6 @@ Patch12: %{name}-mailthreads.patch
Patch13: %{name}-media-directlink.patch
Patch14: interwiki-outputonly.patch
Patch15: simplepie.patch
-Patch18: install.patch
Patch19: pld-branding.patch
Patch20: fixprivilegeescalationbug.diff
Patch21: task-1821.patch
@@ -133,7 +131,6 @@ touch data/pages/playground/playground.txt
%endif
%patch0 -p1
%patch1 -p1
-%patch3 -p1
%patch4 -p1
%patch5 -p1
%patch6 -p1
@@ -144,7 +141,6 @@ touch data/pages/playground/playground.txt
%patch13 -p1
%patch14 -p1
%patch15 -p1
-%patch18 -p1
%patch19 -p1
%patch20 -p1
#%patch21 -p1 UPDATE to new mailer class
@@ -342,6 +338,7 @@ exit 0
%dir %{_appdir}/inc
%{_appdir}/inc/*.php
+%{_appdir}/inc/preload.php.dist
%{_appdir}/inc/auth
%{_appdir}/inc/parser
More information about the pld-cvs-commit
mailing list