[dokuwiki] * fix CVE-2012-2129

topdog topdog at fedoraproject.org
Tue Apr 24 05:03:54 UTC 2012


commit 846b35cec8a48e7744c443c6296cee1fb057a5ca
Author: Andrew Colin Kissa <andrew at topdog.za.net>
Date:   Tue Apr 24 07:02:55 2012 +0200

    * fix CVE-2012-2129

 fix-CVE-2012-2129.patch |   12 ++++++++++++
 1 files changed, 12 insertions(+), 0 deletions(-)
---
diff --git a/fix-CVE-2012-2129.patch b/fix-CVE-2012-2129.patch
new file mode 100644
index 0000000..7836225
--- /dev/null
+++ b/fix-CVE-2012-2129.patch
@@ -0,0 +1,12 @@
+diff -ruN dokuwiki-2011-05-25a.orig/inc/html.php dokuwiki-2011-05-25a/inc/html.php
+--- dokuwiki-2011-05-25a.orig/inc/html.php	2011-06-14 21:58:53.000000000 +0200
++++ dokuwiki-2011-05-25a/inc/html.php	2012-04-24 06:59:27.365004291 +0200
+@@ -1283,7 +1283,7 @@
+     global $TEXT;
+ 
+     if ($param['target'] !== 'section') {
+-        msg('No editor for edit target ' . $param['target'] . ' found.', -1);
++        msg('No editor for edit target ' . hsc($param['target']) . ' found.', -1);
+     }
+ 
+     $attr = array('tabindex'=>'1');


More information about the scm-commits mailing list