From owner-freebsd-ports-bugs@FreeBSD.ORG Thu Jun 15 21:30:43 2006 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 89A8216A47A for ; Thu, 15 Jun 2006 21:30:43 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id C1F8143D48 for ; Thu, 15 Jun 2006 21:30:41 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id k5FLUftK033865 for ; Thu, 15 Jun 2006 21:30:41 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id k5FLUfpE033864; Thu, 15 Jun 2006 21:30:41 GMT (envelope-from gnats) Resent-Date: Thu, 15 Jun 2006 21:30:41 GMT Resent-Message-Id: <200606152130.k5FLUfpE033864@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, "Gregory C. Larkin" Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D762416A47D for ; Thu, 15 Jun 2006 21:30:15 +0000 (UTC) (envelope-from glarkin@sourcehosting.net) Received: from sourcehosting.net (sourcehosting.net [204.8.45.67]) by mx1.FreeBSD.org (Postfix) with ESMTP id 214CE43D49 for ; Thu, 15 Jun 2006 21:30:15 +0000 (GMT) (envelope-from glarkin@sourcehosting.net) Received: (qmail 5767 invoked by uid 0); 15 Jun 2006 21:30:08 -0000 Received: from glarkin@sourcehosting.net by patches by uid 2033 with qmail-scanner-1.20rc1 (0.80 Clear:RC:1:. Processed in 3.665302 secs); 15 Jun 2006 21:30:08 -0000 Received: from 68-112-252-252.dhcp.oxfr.ma.charter.com (HELO cube.entropy.prv) (68.112.252.252) by 192.168.1.4 with SMTP; 15 Jun 2006 21:30:04 -0000 Received: from fuzz-fbsd60.entropy.prv (fuzz-fbsd60.entropy.prv [192.168.1.18]) by cube.entropy.prv (Postfix) with ESMTP id 9DE5C48F9BC for ; Thu, 15 Jun 2006 17:30:03 -0400 (EDT) Received: from fuzz-fbsd60.entropy.prv (localhost.entropy.prv [127.0.0.1]) by fuzz-fbsd60.entropy.prv (8.13.4/8.13.4) with ESMTP id k5FLSpgZ001046 for ; Thu, 15 Jun 2006 17:28:51 -0400 (EDT) (envelope-from glarkin@fuzz-fbsd60.entropy.prv) Received: (from glarkin@localhost) by fuzz-fbsd60.entropy.prv (8.13.4/8.13.4/Submit) id k5FLSoji001045; Thu, 15 Jun 2006 17:28:50 -0400 (EDT) (envelope-from glarkin) Message-Id: <200606152128.k5FLSoji001045@fuzz-fbsd60.entropy.prv> Date: Thu, 15 Jun 2006 17:28:50 -0400 (EDT) From: "Gregory C. Larkin" To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: ports/98993: [maintainer update] Security update to WebCalendar 1.0.4 X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: "Gregory C. Larkin" List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Jun 2006 21:30:43 -0000 >Number: 98993 >Category: ports >Synopsis: [maintainer update] Security update to WebCalendar 1.0.4 >Confidential: no >Severity: critical >Priority: high >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: maintainer-update >Submitter-Id: current-users >Arrival-Date: Thu Jun 15 21:30:41 GMT 2006 >Closed-Date: >Last-Modified: >Originator: Gregory C. Larkin >Release: FreeBSD 6.0-RELEASE i386 >Organization: SourceHosting.net, LLC >Environment: System: FreeBSD fuzz-fbsd60.entropy.prv 6.0-RELEASE FreeBSD 6.0-RELEASE #0: Thu Nov 3 09:36:13 UTC 2005 root@x64.samsco.home:/usr/obj/usr/src/sys/GENERIC i386 >Description: Update port to version 1.0.4 to correct serious security issue. >How-To-Repeat: Please see: http://www.securityfocus.com/archive/1/435379 >Fix: Install WebCalendar 1.0.4 --- webcalendar-1.04.patch begins here --- diff -ruN webcalendar-1.03/Makefile webcalendar/Makefile --- webcalendar-1.03/Makefile Sun Apr 23 23:52:02 2006 +++ webcalendar/Makefile Thu Jun 15 16:49:37 2006 @@ -6,7 +6,7 @@ # PORTNAME= WebCalendar -DISTVERSION= 1.0.3 +DISTVERSION= 1.0.4 CATEGORIES= www MASTER_SITES= ${MASTER_SITE_SOURCEFORGE} MASTER_SITE_SUBDIR= webcalendar @@ -16,8 +16,9 @@ COMMENT= A web-based calendar application USE_PHP= pcre session ldap -USE_APACHE= yes +WANT_PHP_WEB= yes NO_BUILD= yes + WRKSRC= ${WRKDIR}/WebCalendar-${DISTVERSION} WEBWCDIR?= www/data/WebCalendar diff -ruN webcalendar-1.03/distinfo webcalendar/distinfo --- webcalendar-1.03/distinfo Sun Apr 23 23:52:02 2006 +++ webcalendar/distinfo Thu Jun 15 16:31:43 2006 @@ -1,3 +1,3 @@ -MD5 (WebCalendar-1.0.3.tar.gz) = 499f9daed1970625e26b8062d4b53f0e -SHA256 (WebCalendar-1.0.3.tar.gz) = dd974906eaf5bceeca4dbe8ea545b913ac53f79cc68aa9bb7d6a25bce9a962b2 -SIZE (WebCalendar-1.0.3.tar.gz) = 885250 +MD5 (WebCalendar-1.0.4.tar.gz) = 1b356259f64f2331bcc76fada2cd510d +SHA256 (WebCalendar-1.0.4.tar.gz) = e278d9f1933fb16dc4d1781c2f4a8cd64599d61c547ef7c6b8f952861f3986b7 +SIZE (WebCalendar-1.0.4.tar.gz) = 884919 --- webcalendar-1.04.patch ends here --- >Release-Note: >Audit-Trail: >Unformatted: