From owner-freebsd-ports-bugs@FreeBSD.ORG Sat Dec 9 10:10:07 2006 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id D345A16A416 for ; Sat, 9 Dec 2006 10:10:07 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [69.147.83.40]) by mx1.FreeBSD.org (Postfix) with ESMTP id EE1C343CA6 for ; Sat, 9 Dec 2006 10:09:03 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id kB9AA6gV005073 for ; Sat, 9 Dec 2006 10:10:07 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id kB9AA6n9005072; Sat, 9 Dec 2006 10:10:06 GMT (envelope-from gnats) Resent-Date: Sat, 9 Dec 2006 10:10:06 GMT Resent-Message-Id: <200612091010.kB9AA6n9005072@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, HAYASHI Yasushi Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 85BFB16A407 for ; Sat, 9 Dec 2006 10:01:45 +0000 (UTC) (envelope-from yasi@www.yasi.to) Received: from www.yasi.to (58-188-176-207.eonet.ne.jp [58.188.176.207]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8D8D043CAD for ; Sat, 9 Dec 2006 10:00:40 +0000 (GMT) (envelope-from yasi@www.yasi.to) Received: from www.yasi.to (localhost.yasi.to [127.0.0.1]) by www.yasi.to (8.13.8/8.13.8) with ESMTP id kB9A1fqi035512 for ; Sat, 9 Dec 2006 19:01:42 +0900 (JST) (envelope-from yasi@www.yasi.to) Received: (from yasi@localhost) by www.yasi.to (8.13.8/8.13.8/Submit) id kB9A1eBs035511; Sat, 9 Dec 2006 19:01:40 +0900 (JST) (envelope-from yasi) Message-Id: <200612091001.kB9A1eBs035511@www.yasi.to> Date: Sat, 9 Dec 2006 19:01:40 +0900 (JST) From: HAYASHI Yasushi To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: ports/106508: [security update] www/zope28 update for well-known vulnerability X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: HAYASHI Yasushi List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Dec 2006 10:10:07 -0000 >Number: 106508 >Category: ports >Synopsis: [security update] www/zope28 update for well-known vulnerability >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Sat Dec 09 10:10:06 GMT 2006 >Closed-Date: >Last-Modified: >Originator: HAYASHI Yasushi >Release: FreeBSD 6.2-PRERELEASE i386 >Organization: >Environment: System: FreeBSD www.yasi.to 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #0: Thu Dec 7 04:22:08 JST 2006 yasi@www.yasi.to:/usr/obj/usr/src/sys/MYKERNEL i386 >Description: www/zope28 doesn't contain Hotfix for well-known vulnerability. See detail at: http://www.zope.org/Products/Zope/Hotfix-2006-08-21/Hotfix-20060821/README.txt This PR is same as ports/106505. >How-To-Repeat: >Fix: --- zope28.txt begins here --- diff -urN /usr/ports/www/zope28.old/Makefile /usr/ports/www/zope28/Makefile --- /usr/ports/www/zope28.old/Makefile Sat Jul 29 08:07:48 2006 +++ /usr/ports/www/zope28/Makefile Sat Dec 9 18:42:46 2006 @@ -7,17 +7,21 @@ PORTNAME= zope PORTVERSION= 2.8.8 +PORTREVISION= 1 CATEGORIES= www python zope -MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/ -DISTNAME= Zope-${PORTVERSION}-final -EXTRACT_SUFX= .tgz +MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/:src \ + http://www.zope.org/Products/Zope/Hotfix-2006-08-21/Hotfix-20060821/:hotfix +DISTFILES= Zope-${PORTVERSION}-final.tgz:src \ + ${HOTFIX}.tar.gz:hotfix DIST_SUBDIR= zope MAINTAINER= dsh@vlink.ru COMMENT= An object-based web application platform -USE_PYTHON?= 2.3.5 +WRKSRC= ${WRKDIR}/Zope-${PORTVERSION}-final +USE_PYTHON= 2.3-2.4 USE_RC_SUBR= ${PORTNAME}28.sh zeo28.sh +HOTFIX= Hotfix_20060821 LATEST_LINK= zope28 # Note: the notes that follow reflect the decisions of prior maintainers @@ -66,7 +70,11 @@ -e 's,^\(EXENAMES="\).*"$$,\1${PYTHON_VERSION}",g' \ ${WRKSRC}/configure +post-build: + -${PYTHON_CMD} ${PYTHON_LIBDIR}/compileall.py ${WRKDIR}/${HOTFIX} + post-install: + @${CP} -R ${WRKDIR}/${HOTFIX} ${ZOPEBASEDIR}/lib/python/Products/ ${MV} ${ZOPEBASEDIR}/skel/etc/zope.conf.in \ ${ZOPEBASEDIR}/skel/etc/zope.conf.sample.in diff -urN /usr/ports/www/zope28.old/distinfo /usr/ports/www/zope28/distinfo --- /usr/ports/www/zope28.old/distinfo Sat Jul 29 08:07:48 2006 +++ /usr/ports/www/zope28/distinfo Wed Dec 6 22:00:05 2006 @@ -1,3 +1,6 @@ MD5 (zope/Zope-2.8.8-final.tgz) = 6deaf23f8a77a1d6f0be43864cff9b54 SHA256 (zope/Zope-2.8.8-final.tgz) = 94a6ad1fe0fdc28c0ea5c3a501976b96b16a4110a3290a80e4897bd3f145c856 SIZE (zope/Zope-2.8.8-final.tgz) = 5394023 +MD5 (zope/Hotfix_20060821.tar.gz) = 5cb921d15ff6d290bfc73bdc20ff67c1 +SHA256 (zope/Hotfix_20060821.tar.gz) = 6ba5f717cc7443c6182c5b829f2a4228e7c56667d07e2b6fad8323ab1ec850af +SIZE (zope/Hotfix_20060821.tar.gz) = 1050 diff -urN /usr/ports/www/zope28.old/pkg-plist /usr/ports/www/zope28/pkg-plist --- /usr/ports/www/zope28.old/pkg-plist Sat Jul 29 08:07:48 2006 +++ /usr/ports/www/zope28/pkg-plist Sat Dec 9 17:02:13 2006 @@ -939,6 +939,10 @@ %%ZOPEBASEDIR%%/lib/python/Products/Five/viewable.pyc %%ZOPEBASEDIR%%/lib/python/Products/Five/zcml.py %%ZOPEBASEDIR%%/lib/python/Products/Five/zcml.pyc +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_20060821/README.txt +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_20060821/__init__.py +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_20060821/__init__.pyc +%%ZOPEBASEDIR%%/lib/python/Products/Hotfix_20060821/version.txt %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.py %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/MIMETag.pyc %%ZOPEBASEDIR%%/lib/python/Products/MIMETools/README.txt @@ -6834,6 +6838,7 @@ @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ZReST/tests @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ZReST/www @dirrm %%ZOPEBASEDIR%%/lib/python/Products/ZReST +@dirrm %%ZOPEBASEDIR%%/lib/python/Products/Hotfix_20060821 @dirrm %%ZOPEBASEDIR%%/lib/python/Products/MIMETools @dirrm %%ZOPEBASEDIR%%/lib/python/Products/StandardCacheManagers/tests @dirrm %%ZOPEBASEDIR%%/lib/python/Products/StandardCacheManagers/help --- zope28.txt ends here --- >Release-Note: >Audit-Trail: >Unformatted: