New upstream release 15.7a, fixing CVE-2009-014815.7a-1

11 files changed, 50 insertions, 16 deletions

diff --git a/contrib/webcscope/CVS/Entries b/contrib/webcscope/CVS/Entries
index 998a8cd..9ffc335 100644
--- a/contrib/webcscope/CVS/Entries
+++ b/contrib/webcscope/CVS/Entries
@@ -1,7 +1,7 @@
-D/icons////
 /INSTALL/1.1/Fri Jun 29 14:20:16 2001//
 /LICENSE/1.1/Fri Jun 29 14:20:16 2001//
 /TODO/1.1/Fri Jun 29 14:20:16 2001//
 /cgi-lib.pl/1.1/Fri Jun 29 14:20:16 2001//
-/cscope/1.1/Fri Jun 29 14:20:16 2001//
 /hilite.c/1.1/Fri Jun 29 14:20:16 2001//
+D/icons////
+/cscope/1.2/Sun Jan  7 12:34:02 2007//
diff --git a/contrib/webcscope/CVS/Entries.Extra b/contrib/webcscope/CVS/Entries.Extra
new file mode 100644
index 0000000..d1a4ab5
--- /dev/null
+++ b/contrib/webcscope/CVS/Entries.Extra
@@ -0,0 +1,7 @@
+/INSTALL////
+/LICENSE////
+/TODO////
+/cgi-lib.pl////
+/hilite.c////
+D/icons////
+/cscope////
diff --git a/contrib/webcscope/CVS/Entries.Extra.Old b/contrib/webcscope/CVS/Entries.Extra.Old
new file mode 100644
index 0000000..64171ad
--- /dev/null
+++ b/contrib/webcscope/CVS/Entries.Extra.Old
@@ -0,0 +1,7 @@
+/INSTALL////
+/LICENSE////
+/TODO////
+/cgi-lib.pl////
+/cscope////
+/hilite.c////
+D/icons////
diff --git a/contrib/webcscope/CVS/Entries.Old b/contrib/webcscope/CVS/Entries.Old
new file mode 100644
index 0000000..74047ad
--- /dev/null
+++ b/contrib/webcscope/CVS/Entries.Old
@@ -0,0 +1,7 @@
+/INSTALL/1.1/Fri Jun 29 14:20:16 2001//
+/LICENSE/1.1/Fri Jun 29 14:20:16 2001//
+/TODO/1.1/Fri Jun 29 14:20:16 2001//
+/cgi-lib.pl/1.1/Fri Jun 29 14:20:16 2001//
+/cscope/1.1/Fri Jun 29 14:20:16 2001//
+/hilite.c/1.1/Fri Jun 29 14:20:16 2001//
+D/icons////
diff --git a/contrib/webcscope/CVS/Root b/contrib/webcscope/CVS/Root
index e0eb551..0a83832 100644
--- a/contrib/webcscope/CVS/Root
+++ b/contrib/webcscope/CVS/Root
@@ -1 +1 @@
-broeker@cscope.cvs.sourceforge.net:/cvsroot/cscope
+:ssh;username=broeker;hostname=cscope.cvs.sourceforge.net:/cvsroot/cscope

diff --git a/contrib/webcscope/cscope b/contrib/webcscope/cscope
index 7d98fce..1ed2e5c 100755
--- a/contrib/webcscope/cscope
+++ b/contrib/webcscope/cscope
@@ -1,6 +1,6 @@
-#!/bin/perl
+#!/usr/bin/perl
 
-# $Id: cscope,v 1.1 2001/06/29 14:20:16 petr Exp $
+# $Id: cscope,v 1.2 2007/01/07 12:34:01 broeker Exp $
 #
 # WebCscope: A web interface to the cscope application
 # Copyright (C) 2001, Ragho Mahalingam <ragho@mahalingam.com>
@@ -22,6 +22,9 @@
 # Change History:
 # 
 # $Log: cscope,v $
+# Revision 1.2  2007/01/07 12:34:01  broeker
+# Direct attention to security issues with webcscope.
+#
 # Revision 1.1  2001/06/29 14:20:16  petr
 # Added webcscope to contribs.
 #
@@ -375,6 +378,7 @@ sub PrintForm {
 	print &HtmlTop ("Web-CScope");
 
 	print <<ENDOFTEXTA;
+<p style="color:red">Be aware that this webfrontend is insecure and allows viewing ALL apache readable files, including your configuration!</p>   
 Select an operation below and enter a symbol, function or text to search in
 the database.  The active version is $version.  Input is case-sensitive,
 so if your search returns no results, check the case and the symbol name.<hr>
@@ -431,7 +435,7 @@ ENDOFTEXT2
 sub Feedback {
 
   $feedback  = "<font size=-1>";
-  $feedback .= '$Id: cscope,v 1.1 2001/06/29 14:20:16 petr Exp $<br>';
+  $feedback .= '$Id: cscope,v 1.2 2007/01/07 12:34:01 broeker Exp $<br>';
   $feedback .= "$comment{name}<i>&lt;";
   $feedback .= "<a href=\"mailto:$comment{email}\">";
   $feedback .= "$comment{email}</a>&gt;</i></font>";
diff --git a/contrib/webcscope/icons/CVS/Entries b/contrib/webcscope/icons/CVS/Entries
index 22f20b0..9f2db96 100644
--- a/contrib/webcscope/icons/CVS/Entries
+++ b/contrib/webcscope/icons/CVS/Entries
@@ -1,10 +1,10 @@
-/back.gif/1.3/Fri Jun 29 15:58:07 2001/-kb/
-/bomb.gif/1.3/Fri Jun 29 15:58:07 2001/-kb/
-/c.gif/1.3/Fri Jun 29 15:58:07 2001/-kb/
-/down.gif/1.3/Fri Jun 29 15:58:07 2001/-kb/
-/folder.gif/1.3/Fri Jun 29 15:58:07 2001/-kb/
-/folder.open.gif/1.3/Fri Jun 29 15:58:07 2001/-kb/
-/left.gif/1.3/Fri Jun 29 15:58:07 2001/-kb/
-/up.gif/1.3/Fri Jun 29 15:58:07 2001/-kb/
-/world2.gif/1.3/Fri Jun 29 15:58:07 2001/-kb/
+/back.gif/1.3/Fri Jun 29 15:58:08 2001/-kb/
+/bomb.gif/1.3/Fri Jun 29 15:58:08 2001/-kb/
+/c.gif/1.3/Fri Jun 29 15:58:08 2001/-kb/
+/down.gif/1.3/Fri Jun 29 15:58:08 2001/-kb/
+/folder.gif/1.3/Fri Jun 29 15:58:08 2001/-kb/
+/folder.open.gif/1.3/Fri Jun 29 15:58:08 2001/-kb/
+/left.gif/1.3/Fri Jun 29 15:58:08 2001/-kb/
+/up.gif/1.3/Fri Jun 29 15:58:08 2001/-kb/
+/world2.gif/1.3/Fri Jun 29 15:58:08 2001/-kb/
 D
diff --git a/contrib/webcscope/icons/CVS/Entries.Extra b/contrib/webcscope/icons/CVS/Entries.Extra
new file mode 100644
index 0000000..3510fdf
--- /dev/null
+++ b/contrib/webcscope/icons/CVS/Entries.Extra
@@ -0,0 +1,9 @@
+/back.gif////
+/bomb.gif////
+/c.gif////
+/down.gif////
+/folder.gif////
+/folder.open.gif////
+/left.gif////
+/up.gif////
+/world2.gif////
diff --git a/contrib/webcscope/icons/CVS/Entries.Extra.Old b/contrib/webcscope/icons/CVS/Entries.Extra.Old
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/contrib/webcscope/icons/CVS/Entries.Extra.Old
diff --git a/contrib/webcscope/icons/CVS/Entries.Old b/contrib/webcscope/icons/CVS/Entries.Old
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/contrib/webcscope/icons/CVS/Entries.Old
diff --git a/contrib/webcscope/icons/CVS/Root b/contrib/webcscope/icons/CVS/Root
index e0eb551..0a83832 100644
--- a/contrib/webcscope/icons/CVS/Root
+++ b/contrib/webcscope/icons/CVS/Root
@@ -1 +1 @@
-broeker@cscope.cvs.sourceforge.net:/cvsroot/cscope
+:ssh;username=broeker;hostname=cscope.cvs.sourceforge.net:/cvsroot/cscope