diff options
| author | simon <simon@FreeBSD.org> | 2005-01-01 19:21:47 +0000 |
|---|---|---|
| committer | simon <simon@FreeBSD.org> | 2005-01-01 19:21:47 +0000 |
| commit | 0494c92ce9788302cb28becaf0100bc23623a8bf (patch) | |
| tree | acb7f59247b77a77846efcfef3fe0a6372fa4745 /mail/ecartis | |
| parent | f973087a7457578f6b0a0b009ae8100a97899b32 (diff) | |
| download | FreeBSD-ports-0494c92ce9788302cb28becaf0100bc23623a8bf.zip FreeBSD-ports-0494c92ce9788302cb28becaf0100bc23623a8bf.tar.gz | |
Fix a security vulnerabiliy which allows an attacker in the same
domain as the list admin to gain administrator privileges and alter
list settings.
VuXML: http://vuxml.FreeBSD.org/be543d74-539a-11d9-a9e7-0001020eed82.html
Obtained from: Debian
Approved by: portmgr (krion), maintainer timeout
Diffstat (limited to 'mail/ecartis')
| -rw-r--r-- | mail/ecartis/Makefile | 2 | ||||
| -rw-r--r-- | mail/ecartis/files/patch-CAN-2004-0913 | 12 |
2 files changed, 13 insertions, 1 deletions
diff --git a/mail/ecartis/Makefile b/mail/ecartis/Makefile index 8c4703b..2a86351 100644 --- a/mail/ecartis/Makefile +++ b/mail/ecartis/Makefile @@ -7,7 +7,7 @@ PORTNAME= ecartis PORTVERSION= 1.0.0.s20031228 -PORTREVISION= 1 +PORTREVISION= 2 PORTEPOCH= 1 CATEGORIES= mail MASTER_SITES= ftp://ftp.ecartis.org/pub/ecartis/snapshots/tar/ diff --git a/mail/ecartis/files/patch-CAN-2004-0913 b/mail/ecartis/files/patch-CAN-2004-0913 new file mode 100644 index 0000000..11ed905 --- /dev/null +++ b/mail/ecartis/files/patch-CAN-2004-0913 @@ -0,0 +1,12 @@ +--- modules/lsg2/lsg2-main.c.orig ++++ modules/lsg2/lsg2-main.c +@@ -180,6 +180,9 @@ + struct listserver_cgi_mode *curmode; + char *tbuf; + ++ /* turn off loose host matching */ ++ LMAPI->set_var("no-loose-domain-match", "yes", VAR_GLOBAL); ++ + /* Generic header */ + + if (LMAPI->get_bool("lsg2-iis-support")) |
