www/openx: CVE-2013-7149 no patch available?

[Alan Hicks]

On 06/05/2014 20:26, Volodymyr Kostyrko wrote:
> Hi all.
>
> In case anyone is still using www/openx.
>
> Does anyone know about any patches for this issue? Had anyone patched
> openx by himself?
>

The project has moved to https://github.com/revive-adserver

Although I have patched my copy of OpenX for both the vulnerability and 
PostgreSQL support, there was no interest from the people at 
revive-adserver, though they have since patched the vulnerability. 
Having almost completed the removal of OpenX from my servers there is 
little interest in supporting it.  Original patch attached for reference.

Hope this helps,
Alan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: lib_OA_Dal_Delivery.php.diff
Type: text/x-patch
Size: 28337 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20140507/7cb065c8/attachment.bin>