Date: Wed, 18 Apr 2007 22:20:04 -0700 (PDT) From: "Philip M. Gollucci" <pgollucci@apache.org> To: FreeBSD-gnats-submit@FreeBSD.org Cc: erwin@FreeBSD.org, apache@FreeBSD.org Subject: ports/111844: UPDATE: www/mod_perl 1.29 -> 1.30 (CVE Security Fix) Message-ID: <200704190520.l3J5K4q1058705@piccollo.p6m7g8.net> Resent-Message-ID: <200704190530.l3J5U324057427@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 111844 >Category: ports >Synopsis: UPDATE: www/mod_perl 1.29 -> 1.30 (CVE Security Fix) >Confidential: no >Severity: serious >Priority: high >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: maintainer-update >Submitter-Id: current-users >Arrival-Date: Thu Apr 19 05:30:03 GMT 2007 >Closed-Date: >Last-Modified: >Originator: Philip M. Gollucci >Release: FreeBSD 6.2-PRERELEASE i386 >Organization: >Environment: System: FreeBSD piccollo.p6m7g8.net 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #0: Mon Sep 25 02:11:28 EDT 2006 pgollucci@piccollo.p6m7g8.net:/usr/obj/usr/src/sys/PICCOLLO i386 >Description: Update to 1.30 Changes: http://perl.apache.org/dist/mod_perl-1.0-current/Changes CVE: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1349 >How-To-Repeat: >Fix: Upgrade. I know there still some portlint issues, and ports/74907: [PATCH] www/mod_perl: cleanups was filed previously, but I'd like to see this go first so security upgrades are easier. Also, erwin@ (CC'ed) hinted I should take maintainership of this port on efnet about 3 months ago. So I've finally gotten around to to doing that. Once this goes in, I'll circle back and review the above PR and portlint errors. --- mod_perl.diff begins here --- Index: Makefile =================================================================== RCS file: /home/ncvs/ports/www/mod_perl/Makefile,v retrieving revision 1.33 diff -u -r1.33 Makefile --- Makefile 8 Sep 2006 10:43:15 -0000 1.33 +++ Makefile 19 Apr 2007 05:11:34 -0000 @@ -6,19 +6,18 @@ # PORTNAME= mod_perl -PORTVERSION= 1.29 -PORTREVISION= 2 +PORTVERSION= 1.30 CATEGORIES= www perl5 MASTER_SITES= ${MASTER_SITE_PERL_CPAN} MASTER_SITE_SUBDIR= Apache -MAINTAINER= apache@FreeBSD.org +MAINTAINER= pgollucci@p6m7g8.com COMMENT= Embeds a Perl interpreter in the Apache server BUILD_DEPENDS= ${SITE_PERL}/LWP.pm:${PORTSDIR}/www/p5-libwww RUN_DEPENDS= ${BUILD_DEPENDS} -USE_APACHE= YES +USE_APACHE= yes PERL_CONFIGURE= yes CONFIGURE_ARGS+= USE_APXS=1 EVERYTHING=1 INSTALLSITELIB=${SITE_PERL} \ INSTALLSITEARCH=${SITE_PERL}/${PERL_ARCH} \ Index: distinfo =================================================================== RCS file: /home/ncvs/ports/www/mod_perl/distinfo,v retrieving revision 1.11 diff -u -r1.11 distinfo --- distinfo 24 Jan 2006 03:13:27 -0000 1.11 +++ distinfo 19 Apr 2007 05:11:34 -0000 @@ -1,3 +1,3 @@ -MD5 (mod_perl-1.29.tar.gz) = 1491931790509b9af06fc037d02b0e7a -SHA256 (mod_perl-1.29.tar.gz) = b401efaa105dd5f82d6e61f0efa372d4018db15e0748ca34a52d8daa209dea6b -SIZE (mod_perl-1.29.tar.gz) = 378877 +MD5 (mod_perl-1.30.tar.gz) = bfd6f6cff1ab1cc3dbb58a236701d169 +SHA256 (mod_perl-1.30.tar.gz) = af6e1380a9197750b2d443f02a7a0dba3586c3fc0c8269beaafef09159184a08 +SIZE (mod_perl-1.30.tar.gz) = 389029 Index: files/patch-Makefile.PL =================================================================== RCS file: /home/ncvs/ports/www/mod_perl/files/patch-Makefile.PL,v retrieving revision 1.1 diff -u -r1.1 patch-Makefile.PL --- files/patch-Makefile.PL 18 Aug 2004 19:11:12 -0000 1.1 +++ files/patch-Makefile.PL 19 Apr 2007 05:11:34 -0000 @@ -1,15 +1,14 @@ ---- Makefile.PL.orig Thu Feb 15 12:39:35 2001 -+++ Makefile.PL Thu Feb 15 12:41:28 2001 -@@ -1300,7 +1300,11 @@ +--- Makefile.PL.orig Wed Apr 18 22:00:41 2007 ++++ Makefile.PL Wed Apr 18 22:01:40 2007 +@@ -1380,7 +1380,10 @@ my $string = $self->MM::install; my $add = ""; - if($USE_APXS) { -- $add = "apxs_install"; -+# XXX The FreeBSD port for mod_perl takes care of installing libperl.so -+# itself via the pkg-install script. -+# -+# $add = "apxs_install"; -+ print "Disabling apxs_install target; deferred to pkg-install\n"; + if ($USE_APXS) { +- $add = "apxs_install"; ++ # XXX The FreeBSD port for mod_perl takes care of installing libperl.so ++ # itself via the pkg-install script. ++ # ++ # $add = "apxs_install"; } - elsif ($win32_auto and $win32_args{INSTALL_DLL}) { - $add = 'amp_install'; + elsif ($win32_auto and + ($win32_args{INSTALL_DLL} or $win32_args{INSTALL_LIB})) { --- mod_perl.diff ends here --- >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200704190520.l3J5K4q1058705>