Add ebuild for version 3.7.2.
This commit is contained in:
		
							parent
							
								
									8353bb631b
								
							
						
					
					
						commit
						bd68f02363
					
				
					 4 changed files with 102 additions and 0 deletions
				
			
		
							
								
								
									
										27
									
								
								sys-cluster/ganglia-web/files/CVE-2013-6395-fix-xss.patch
									
										
									
									
									
										Normal file
									
								
							
							
						
						
									
										27
									
								
								sys-cluster/ganglia-web/files/CVE-2013-6395-fix-xss.patch
									
										
									
									
									
										Normal file
									
								
							|  | @ -0,0 +1,27 @@ | |||
| From a014c9542710ad50fd1a7fd1eb39b44261edf3a2 Mon Sep 17 00:00:00 2001 | ||||
| From: Justin Bronder <jsbronder@gmail.com> | ||||
| Date: Mon, 23 Dec 2013 11:39:03 -0500 | ||||
| Subject: [PATCH] CVE-2013-6395 fix xss | ||||
| 
 | ||||
| https://bugs.gentoo.org/show_bug.cgi?id=492580 | ||||
| http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6395 | ||||
| ---
 | ||||
|  header.php | 2 +- | ||||
|  1 file changed, 1 insertion(+), 1 deletion(-) | ||||
| 
 | ||||
| diff --git a/header.php b/header.php
 | ||||
| index d0a30c2..e1cb0e8 100755
 | ||||
| --- a/header.php
 | ||||
| +++ b/header.php
 | ||||
| @@ -485,7 +485,7 @@ $data->assign("custom_time", $custom_time);
 | ||||
|  ///////////////////////////////////////////////////////////////////////// | ||||
|  if ( $context == "cluster" ) { | ||||
|    if ( isset($user['host_regex']) && $user['host_regex'] != "" ) | ||||
| -    $set_host_regex_value="value='" . $user['host_regex'] . "'";
 | ||||
| +    $set_host_regex_value="value='" . htmlentities($user['host_regex'], ENT_QUOTES) . "'";
 | ||||
|    else | ||||
|      $set_host_regex_value=""; | ||||
|   | ||||
| -- 
 | ||||
| 1.8.3.2 | ||||
| 
 | ||||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue