From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 260271381F3 for ; Mon, 5 Nov 2012 21:40:21 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id A09A2E04C1; Mon, 5 Nov 2012 21:40:06 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 05901E04C1 for ; Mon, 5 Nov 2012 21:40:05 +0000 (UTC) Received: from flycatcher.gentoo.org (flycatcher.gentoo.org [81.93.255.6]) (using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 32C8233C3B4 for ; Mon, 5 Nov 2012 21:40:03 +0000 (UTC) Received: by flycatcher.gentoo.org (Postfix, from userid 2238) id A66A2215F3; Mon, 5 Nov 2012 21:40:01 +0000 (UTC) From: "Markos Chandras (hwoarang)" To: gentoo-commits@lists.gentoo.org Reply-To: gentoo-dev@lists.gentoo.org, hwoarang@gentoo.org Subject: [gentoo-commits] gentoo-x86 commit in app-admin/webmin/files: webmin-1.600-SA51201.patch X-VCS-Repository: gentoo-x86 X-VCS-Files: webmin-1.600-SA51201.patch X-VCS-Directories: app-admin/webmin/files X-VCS-Committer: hwoarang X-VCS-Committer-Name: Markos Chandras Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit Message-Id: <20121105214001.A66A2215F3@flycatcher.gentoo.org> Date: Mon, 5 Nov 2012 21:40:01 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: e015e60b-0643-452f-a86c-37547ce17c80 X-Archives-Hash: 9514c5272b461d9b6f5edb67c7a5dae0 hwoarang 12/11/05 21:40:01 Added: webmin-1.600-SA51201.patch Log: Revbump to fix security problem in #441840. Thanks to PhobosK . Remove old ebuild (Portage version: 2.1.11.30/cvs/Linux x86_64, signed Manifest commit with key B4AFF2C2) Revision Changes Path 1.1 app-admin/webmin/files/webmin-1.600-SA51201.patch file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/webmin/files/webmin-1.600-SA51201.patch?rev=1.1&view=markup plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/webmin/files/webmin-1.600-SA51201.patch?rev=1.1&content-type=text/plain Index: webmin-1.600-SA51201.patch =================================================================== diff -ur a/passwd/edit_passwd.cgi b/passwd/edit_passwd.cgi --- a/passwd/edit_passwd.cgi 2012-09-21 21:07:11.000000000 +0300 +++ b/passwd/edit_passwd.cgi 2012-11-01 19:00:02.000000000 +0200 @@ -19,7 +19,7 @@ %uconfig = &foreign_config("useradmin"); $user[6] =~ s/,.*$// if ($uconfig{'extra_real'}); print &ui_table_row($text{'passwd_for'}, - $user[0].( $user[6] ? " ($user[6])" : "" )); + &html_escape($user[0].( $user[6] ? " ($user[6])" : "" ))); # Old password field if ($access{'old'} == 1 || diff -ur a/passwd/index.cgi b/passwd/index.cgi --- a/passwd/index.cgi 2012-09-21 21:07:11.000000000 +0300 +++ b/passwd/index.cgi 2012-11-01 19:00:02.000000000 +0200 @@ -85,7 +85,7 @@ @grid = ( ); for($i=0; $i<@ulist; $i++) { push(@grid, "[0]\">". + "user=".&urlize($ulist[$i]->[0])."\">". &html_escape($ulist[$i]->[0]).""); } print &ui_grid_table(\@grid, 4, 100, undef, undef, diff -ur a/passwd/module.info b/passwd/module.info --- a/passwd/module.info 2012-09-21 21:11:10.000000000 +0300 +++ b/passwd/module.info 2012-11-01 19:00:02.000000000 +0200 @@ -1,48 +1,38 @@ -desc_pt_BR=Alterar Senha -desc_ca=Canvi de Contrasenyes -desc_it=Cambio Password -desc_hu.UTF-8=Jelszavak -readonly=1 -desc=Change Passwords category=system -desc_ja_JP.euc=パスワードの変更 -desc_zh_TW.Big5=怒鷄KX -desc_ko_KR.UTF-8= 覲蟆 -desc_fi=Vaihda Salasanoja +depends=useradmin +desc=Change Passwords +desc_pl=Zmiany hase +desc_hu=Jelszavak name=Passwd -desc_tr=Parolalar Deitir -os_support=!windows +desc_ca=Canvi de Contrasenyes desc_de=Passwörter ändern -desc_af=Verander Wagwoord -desc_sk=Zmena hesla -desc_pl.UTF-8=Zmiany hase -desc_cz.UTF-8=Zmna hesla -desc_ja_JP.UTF-8=鴻若紊 -desc_fr=Changez le Mot de Passe -desc_pl=Zmiany hase +desc_nl=Wachtwoorden Wijzigen +desc_zh_TW.Big5=怒鷄KX desc_es=Cambio de Contraseñas -desc_ru_RU=瑁鉉 desc_no=Passord administrasjon -desc_cz=Zmna hesla -desc_ms=Menukar Katalaluan -desc_nl=Wachtwoorden Wijzigen -desc_sk.UTF-8=Zmena hesla -desc_hu=Jelszavak -desc_zh_TW.UTF-8=莅翫腆 -version=1.600 -longdesc=Change the password of any user on the system. +desc_af=Verander Wagwoord +desc_it=Cambio Password desc_ru_SU=霑厦棉 +desc_ru_RU=瑁鉉 passwd=Change the passwords of Unix users. +longdesc=Change the password of any user on the system. +desc_pt_BR=Alterar Senha +desc_ms=Menukar Katalaluan +desc_cz=Zmna hesla +desc_sk=Zmena hesla +desc_tr=Parolalar Deitir +readonly=1 +os_support=!windows +desc_zh_TW.UTF-8=莅翫腆 +desc_fi=Vaihda Salasanoja desc_ko_KR.euc=章硲 痕井 +desc_ko_KR.UTF-8= 覲蟆 +desc_ja_JP.euc=パスワードの変更 +desc_ja_JP.UTF-8=鴻若紊 desc_ru.UTF-8=舒仂仍亳 -depends=useradmin 1.600 -desc_de.UTF-8=Passwörter ändern -desc_fi.UTF-8=Vaihda Salasanoja -desc_af.UTF-8=Verander Wagwoord -desc_fr.UTF-8=Changez le Mot de Passe -desc_ms.UTF-8=Menukar Katalaluan -desc_it.UTF-8=Cambio Password -desc_es.UTF-8=Cambio de Contraseñas -desc_ca.UTF-8=Canvi de Contrasenyes -desc_pt_BR.UTF-8=Alterar Senha -desc_nl.UTF-8=Wachtwoorden Wijzigen +desc_fr=Changez le Mot de Passe +desc_hu.UTF-8=Jelszavak +desc_cz.UTF-8=Zmna hesla +desc_pl.UTF-8=Zmiany hase +desc_sk.UTF-8=Zmena hesla +version=1.605