From owner-freebsd-ports-bugs@FreeBSD.ORG Sun Apr 16 10:30:14 2006 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 868E816A40B for ; Sun, 16 Apr 2006 10:30:14 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8182143D45 for ; Sun, 16 Apr 2006 10:30:13 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id k3GAUDwd032498 for ; Sun, 16 Apr 2006 10:30:13 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id k3GAUD2t032497; Sun, 16 Apr 2006 10:30:13 GMT (envelope-from gnats) Resent-Date: Sun, 16 Apr 2006 10:30:13 GMT Resent-Message-Id: <200604161030.k3GAUD2t032497@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, "Filippo Natali" Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B98E316A401 for ; Sun, 16 Apr 2006 10:21:11 +0000 (UTC) (envelope-from filippo.natali@gmail.com) Received: from nproxy.gmail.com (nproxy.gmail.com [64.233.182.186]) by mx1.FreeBSD.org (Postfix) with ESMTP id ED2D843D45 for ; Sun, 16 Apr 2006 10:21:10 +0000 (GMT) (envelope-from filippo.natali@gmail.com) Received: by nproxy.gmail.com with SMTP id a4so12561nfc for ; Sun, 16 Apr 2006 03:21:10 -0700 (PDT) Received: by 10.48.242.20 with SMTP id p20mr1803937nfh; Sun, 16 Apr 2006 03:14:51 -0700 (PDT) Received: from ulby.hq.netwing.it ( [81.72.43.241]) by mx.gmail.com with ESMTP id q27sm2885748nfc.2006.04.16.03.14.50; Sun, 16 Apr 2006 03:14:51 -0700 (PDT) Message-Id: <1145182487.13919@ulby.hq.netwing.it> Date: Sun, 16 Apr 2006 12:14:47 +0200 From: "Filippo Natali" To: "FreeBSD gnats submit" X-Send-Pr-Version: gtk-send-pr 0.4.7 Cc: Subject: ports/95865: [MAINTAINER UPDATE] www/plone: fix security issue X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 16 Apr 2006 10:30:16 -0000 >Number: 95865 >Category: ports >Synopsis: [MAINTAINER UPDATE] www/plone: fix security issue >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: maintainer-update >Submitter-Id: current-users >Arrival-Date: Sun Apr 16 10:30:12 GMT 2006 >Closed-Date: >Last-Modified: >Originator: Filippo Natali >Release: FreeBSD 6.1-PRERELEASE amd64 >Organization: Netwing >Environment: System: FreeBSD 6.1-PRERELEASE #0: Sat Mar 11 13:19:18 CET 2006 root@ulby.hq.netwing.it:/usr/obj/usr/src/sys/ULBY >Description: - Add hotfix to resolve this security issue: http://secunia.com/advisories/19633/ - Bump PORTREVISION >How-To-Repeat: >Fix: --- plone-20060415.diff begins here --- diff -Nru /usr/ports/www/plone/Makefile plone/Makefile --- /usr/ports/www/plone/Makefile Fri Feb 17 03:31:59 2006 +++ plone/Makefile Sat Apr 15 12:49:05 2006 @@ -7,18 +7,21 @@ PORTNAME= plone PORTVERSION= 2.1.2 +PORTREVISION= 1 CATEGORIES= www zope -MASTER_SITES= ${MASTER_SITE_SOURCEFORGE} -MASTER_SITE_SUBDIR= plone -DISTNAME= Plone-${PORTVERSION} +MASTER_SITES= ${MASTER_SITE_SOURCEFORGE:S/$/:src/g} http://plone.org/products/plonehotfix20060410/releases/1.0/:hotfix +MASTER_SITE_SUBDIR= plone:src +DISTFILES= Plone-${PORTVERSION}.tar.gz:src ${HOTFIX}.tar.gz:hotfix DIST_SUBDIR= zope MAINTAINER= filippo.natali@gmail.com COMMENT= A user friendly implementation of the CMF written on top of ZOPE +WRKSRC= ${WRKDIR}/Plone-${PORTVERSION} USE_ZOPE= yes USE_PYTHON= yes -PLIST= ${WRKDIR}/pkg-plist +HOTFIX= PloneHotfix20060410 +PLIST= ${WRKDIR}/pkg-plist CONFLICTS= zope-archetypes-[0-9]* \ zope-btreefolder2-[0-9]* \ @@ -60,6 +63,7 @@ .for m in ${_MODULES} -${PYTHON_CMD} ${PYTHON_LIBDIR}/compileall.py ${WRKSRC}/$m .endfor + -${PYTHON_CMD} ${PYTHON_LIBDIR}/compileall.py ${WRKDIR}/${HOTFIX} pre-install: @${RM} -f ${PLIST} @@ -73,6 +77,13 @@ ${ECHO_CMD} @dirrm %%ZOPEBASEDIR%%/Products/$${i} >> ${PLIST}; \ done; \ done + @cd ${WRKDIR}; \ + for i in `${FIND} ${HOTFIX} -type f`; do \ + ${ECHO_CMD} %%ZOPEBASEDIR%%/Products/$${i} >> ${PLIST}; \ + done; \ + for i in `${FIND} -d ${HOTFIX} -type d`; do \ + ${ECHO_CMD} @dirrm %%ZOPEBASEDIR%%/Products/$${i} >> ${PLIST}; \ + done do-install: @${MKDIR} ${ZOPEBASEDIR}/${ZOPEPRODUCTDIR} @@ -81,6 +92,9 @@ @${FIND} ${ZOPEBASEDIR}/${ZOPEPRODUCTDIR}/$m -type f -print0 \ | ${XARGS} -0 -- ${CHMOD} a-w .endfor + @${CP} -R ${WRKDIR}/${HOTFIX} ${ZOPEBASEDIR}/${ZOPEPRODUCTDIR} + @${FIND} ${ZOPEBASEDIR}/${ZOPEPRODUCTDIR}/${HOTFIX} -type f -print0 \ + | ${XARGS} -0 -- ${CHMOD} a-w post-install: .if !defined(BATCH) diff -Nru /usr/ports/www/plone/distinfo plone/distinfo --- /usr/ports/www/plone/distinfo Fri Feb 17 03:31:59 2006 +++ plone/distinfo Fri Apr 14 20:06:28 2006 @@ -1,3 +1,6 @@ MD5 (zope/Plone-2.1.2.tar.gz) = 863311e29550f9b4bf6c2502fdbed1fa SHA256 (zope/Plone-2.1.2.tar.gz) = e9c0b53d887b53310daab656ef83b0abecdde39b679806a0f04f3cda222fbac2 SIZE (zope/Plone-2.1.2.tar.gz) = 7126486 +MD5 (zope/PloneHotfix20060410.tar.gz) = fecdb36acae4751f6a8975c2068247c3 +SHA256 (zope/PloneHotfix20060410.tar.gz) = f1d86b78c39392d4b9e81f9a3e854cccdcc1bcd8bf51fb6468cc1c8c9a4d30f1 +SIZE (zope/PloneHotfix20060410.tar.gz) = 2972 --- plone-20060415.diff ends here --- >Release-Note: >Audit-Trail: >Unformatted: