Date: Sun, 20 Jul 2003 11:53:14 +0200 (CEST) From: Stefan Walter <sw@gegenunendlich.de> To: FreeBSD-gnats-submit@FreeBSD.org Cc: Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org> Subject: ports/54652: Update/fix net/freenet yet again: 0.5.2.r1 -> 0.5.2.1 (obsoletes PRs ports/54430 and ports/54580) Message-ID: <20030720095314.81AA48812@kyuzo.dunkelkammer.void> Resent-Message-ID: <200307201000.h6KA0YFZ078303@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 54652 >Category: ports >Synopsis: Update/fix net/freenet yet again: 0.5.2.r1 -> 0.5.2.1 (obsoletes PRs ports/54430 and ports/54580) >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Sun Jul 20 03:00:33 PDT 2003 >Closed-Date: >Last-Modified: >Originator: Stefan Walter >Release: FreeBSD 5.1-RELEASE i386 >Organization: >Environment: System: FreeBSD kyuzo.dunkelkammer.void 5.1-RELEASE FreeBSD 5.1-RELEASE #0: Sat Jul 19 11:01:42 CEST 2003 root@kyuzo.dunkelkammer.void:/usr/src/sys/i386/compile/KYUZO i386 >Description: (Sorry for yet another PR on net/freenet, but I consider it necessary due to the vulnerability fixed in this release. This PR obsoletes ports/54430 and ports/54580.) - Update net/freenet to version 0.5.2.1, which fixes a possibly exploitable vulnerability in the web interface (see http://www.freenetproject.org/ for more info on this). - Rename the $JAVAVM variable in the wrapper script to avoid infinite loops in the javavmwrapper script. Tested with FreeBSD's jdk-1.4.1p3_3. >How-To-Repeat: Install the port. >Fix: --- freenet-0.5.2.1.patch begins here --- diff -urN freenet.old/Makefile freenet/Makefile --- freenet.old/Makefile Thu Jul 17 14:23:25 2003 +++ freenet/Makefile Sun Jul 20 11:27:00 2003 @@ -6,16 +6,15 @@ # PORTNAME= freenet -PORTVERSION= 0.5.2.r1 +PORTVERSION= 0.5.2.1 CATEGORIES= net java security MASTER_SITES= ${MASTER_SITE_SOURCEFORGE} MASTER_SITE_SUBDIR= ${PORTNAME} -DISTNAME= ${PORTNAME}-${PORTVERSION:S/.r/-rc/} MAINTAINER= lioux@FreeBSD.org COMMENT= peer-to-peer network aiming at anonymity and freedom of speech -USE_JAVA= 1.3+ +USE_JAVA= 1.4+ NO_BUILD= yes NO_BUILD_DEPENDS_JAVA= yes WRKSRC= ${WRKDIR}/${PORTNAME} diff -urN freenet.old/distinfo freenet/distinfo --- freenet.old/distinfo Thu Jul 17 14:23:25 2003 +++ freenet/distinfo Sun Jul 20 11:26:41 2003 @@ -1 +1 @@ -MD5 (freenet-0.5.2-rc1.tar.gz) = 4fa988b915517a44def233760662f420 +MD5 (freenet-0.5.2.1.tar.gz) = 59270ee48d889e0be9cae584b67d2743 diff -urN freenet.old/files/wrapper.sh freenet/files/wrapper.sh --- freenet.old/files/wrapper.sh Thu Jul 17 14:23:25 2003 +++ freenet/files/wrapper.sh Thu Jul 17 14:23:56 2003 @@ -5,7 +5,7 @@ PREFIX="%%PREFIX%%" # java -JAVAVM="%%JAVAVM%%" +JAVAVM_CALL="%%JAVAVM%%" JAR_DIR="%%JAR_DIR%%" JAR_FILES="%%JAR_FILES%%" JAR_START="%%JAR_START%%" @@ -19,7 +19,7 @@ configure_freenet () { echo "Configuring FreeNet node" cd ${HOME_DIR} && - ${JAVAVM} -jar ./${JAR_START} freenet.node.Main --config "${@}" + ${JAVAVM_CALL} -jar ./${JAR_START} freenet.node.Main --config "${@}" } configure_java_classpath () { @@ -91,7 +91,7 @@ start_freenet () { echo "Starting FreeNet node" cd ${HOME_DIR} && - nice -10 ${JAVAVM} -jar ./${JAR_START} "${@}" & + nice -10 ${JAVAVM_CALL} -jar ./${JAR_START} "${@}" & echo $! > ${HOME_DIR}/freenet.pid exit 0 } --- freenet-0.5.2.1.patch ends here --- >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030720095314.81AA48812>