config.inc.php | 19 12 + 7 - 0 !
1 file changed, 12 insertions(+), 7 deletions(-)

 this patch sets the dbconfig placeholders in config.inc.php.

functions.inc.php | 2 2 + 0 - 0 !
1 file changed, 2 insertions(+)

 security: fix sql injection in show_gen_status()
 This vulnerability is only exploitable by authenticated users
 able to create new aliases. If the alias contains SQL code, the 
 list-virtual.php overview triggers the vulnerability.