Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Apr 2007 22:20:04 -0700 (PDT)
From:      "Philip M. Gollucci" <pgollucci@apache.org>
To:        FreeBSD-gnats-submit@FreeBSD.org
Cc:        apache@FreeBSD.org
Subject:   ports/111847: UPDATE: www/mod_perl 1.29 -> 1.30 (CVE Security Fix)
Message-ID:  <200704190520.l3J5K4q1058705@piccollo.p6m7g8.net>
Resent-Message-ID: <200704190820.l3J8K2jj073063@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         111847
>Category:       ports
>Synopsis:       UPDATE: www/mod_perl 1.29 -> 1.30 (CVE Security Fix)
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          maintainer-update
>Submitter-Id:   current-users
>Arrival-Date:   Thu Apr 19 08:20:02 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator:     Philip M. Gollucci
>Release:        FreeBSD 6.2-PRERELEASE i386
>Organization:
>Environment:
System: FreeBSD piccollo.p6m7g8.net 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #0: Mon Sep 25 02:11:28 EDT 2006 pgollucci@piccollo.p6m7g8.net:/usr/obj/usr/src/sys/PICCOLLO i386
>Description:
Update to 1.30
Changes:
http://perl.apache.org/dist/mod_perl-1.0-current/Changes

CVE:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1349

>How-To-Repeat:
>Fix:
Upgrade.

I know there still some portlint issues, and 
ports/74907: [PATCH] www/mod_perl: cleanups
was filed previously, but I'd like to see this go first so security upgrades
are easier.

Also, erwin@ (CC'ed) hinted I should take maintainership of this port on efnet
about 3 months ago.  So I've finally gotten around to to doing that.

Once this goes in, I'll circle back and review the above PR and portlint errors.


--- mod_perl.diff begins here ---
Index: Makefile
===================================================================
RCS file: /home/ncvs/ports/www/mod_perl/Makefile,v
retrieving revision 1.33
diff -u -r1.33 Makefile
--- Makefile	8 Sep 2006 10:43:15 -0000	1.33
+++ Makefile	19 Apr 2007 05:11:34 -0000
@@ -6,19 +6,18 @@
 #
 
 PORTNAME=	mod_perl
-PORTVERSION=	1.29
-PORTREVISION=	2
+PORTVERSION=	1.30
 CATEGORIES=	www perl5
 MASTER_SITES=	${MASTER_SITE_PERL_CPAN}
 MASTER_SITE_SUBDIR=	Apache
 
-MAINTAINER=	apache@FreeBSD.org
+MAINTAINER=	pgollucci@p6m7g8.com
 COMMENT=	Embeds a Perl interpreter in the Apache server
 
 BUILD_DEPENDS=	${SITE_PERL}/LWP.pm:${PORTSDIR}/www/p5-libwww
 RUN_DEPENDS=	${BUILD_DEPENDS}
 
-USE_APACHE=	YES
+USE_APACHE=	yes
 PERL_CONFIGURE=	yes
 CONFIGURE_ARGS+=	USE_APXS=1 EVERYTHING=1 INSTALLSITELIB=${SITE_PERL} \
 			INSTALLSITEARCH=${SITE_PERL}/${PERL_ARCH} \
Index: distinfo
===================================================================
RCS file: /home/ncvs/ports/www/mod_perl/distinfo,v
retrieving revision 1.11
diff -u -r1.11 distinfo
--- distinfo	24 Jan 2006 03:13:27 -0000	1.11
+++ distinfo	19 Apr 2007 05:11:34 -0000
@@ -1,3 +1,3 @@
-MD5 (mod_perl-1.29.tar.gz) = 1491931790509b9af06fc037d02b0e7a
-SHA256 (mod_perl-1.29.tar.gz) = b401efaa105dd5f82d6e61f0efa372d4018db15e0748ca34a52d8daa209dea6b
-SIZE (mod_perl-1.29.tar.gz) = 378877
+MD5 (mod_perl-1.30.tar.gz) = bfd6f6cff1ab1cc3dbb58a236701d169
+SHA256 (mod_perl-1.30.tar.gz) = af6e1380a9197750b2d443f02a7a0dba3586c3fc0c8269beaafef09159184a08
+SIZE (mod_perl-1.30.tar.gz) = 389029
Index: files/patch-Makefile.PL
===================================================================
RCS file: /home/ncvs/ports/www/mod_perl/files/patch-Makefile.PL,v
retrieving revision 1.1
diff -u -r1.1 patch-Makefile.PL
--- files/patch-Makefile.PL	18 Aug 2004 19:11:12 -0000	1.1
+++ files/patch-Makefile.PL	19 Apr 2007 05:11:34 -0000
@@ -1,15 +1,14 @@
---- Makefile.PL.orig	Thu Feb 15 12:39:35 2001
-+++ Makefile.PL	Thu Feb 15 12:41:28 2001
-@@ -1300,7 +1300,11 @@
+--- Makefile.PL.orig	Wed Apr 18 22:00:41 2007
++++ Makefile.PL	Wed Apr 18 22:01:40 2007
+@@ -1380,7 +1380,10 @@
      my $string = $self->MM::install;
      my $add = "";
-     if($USE_APXS) {
--	$add = "apxs_install";
-+# XXX The FreeBSD port for mod_perl takes care of installing libperl.so
-+# itself via the pkg-install script.
-+#
-+#	$add = "apxs_install";
-+	print "Disabling apxs_install target; deferred to pkg-install\n";
+     if ($USE_APXS) {
+-        $add = "apxs_install";
++      # XXX The FreeBSD port for mod_perl takes care of installing libperl.so
++      # itself via the pkg-install script.
++      #
++      #  $add = "apxs_install";
      }
-     elsif ($win32_auto and $win32_args{INSTALL_DLL}) {
-       $add = 'amp_install';
+     elsif ($win32_auto and 
+            ($win32_args{INSTALL_DLL} or $win32_args{INSTALL_LIB})) {
--- mod_perl.diff ends here ---


_______________________________________________
freebsd-apache@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-apache
To unsubscribe, send any mail to "freebsd-apache-unsubscribe@freebsd.org"
>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200704190520.l3J5K4q1058705>