From owner-freebsd-ports-bugs@FreeBSD.ORG Fri Mar 23 12:30:06 2007 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 1B79E16A40F for ; Fri, 23 Mar 2007 12:30:06 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [69.147.83.40]) by mx1.freebsd.org (Postfix) with ESMTP id F043913C457 for ; Fri, 23 Mar 2007 12:30:05 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id l2NCU5Si035344 for ; Fri, 23 Mar 2007 12:30:05 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id l2NCU5RB035343; Fri, 23 Mar 2007 12:30:05 GMT (envelope-from gnats) Resent-Date: Fri, 23 Mar 2007 12:30:05 GMT Resent-Message-Id: <200703231230.l2NCU5RB035343@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Yasushi Hayashi Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 62E7E16A402 for ; Fri, 23 Mar 2007 12:21:37 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [69.147.83.33]) by mx1.freebsd.org (Postfix) with ESMTP id 53C5713C44C for ; Fri, 23 Mar 2007 12:21:37 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.13.1/8.13.1) with ESMTP id l2NCLaUV037221 for ; Fri, 23 Mar 2007 12:21:36 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.13.1/8.13.1/Submit) id l2NCGZoL036334; Fri, 23 Mar 2007 12:16:35 GMT (envelope-from nobody) Message-Id: <200703231216.l2NCGZoL036334@www.freebsd.org> Date: Fri, 23 Mar 2007 12:16:35 GMT From: Yasushi Hayashi To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.0 Cc: Subject: ports/110709: [maintainer update] www/zope29 update to fix vulnerability X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Mar 2007 12:30:06 -0000 >Number: 110709 >Category: ports >Synopsis: [maintainer update] www/zope29 update to fix vulnerability >Confidential: no >Severity: serious >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: maintainer-update >Submitter-Id: current-users >Arrival-Date: Fri Mar 23 12:30:05 GMT 2007 >Closed-Date: >Last-Modified: >Originator: Yasushi Hayashi >Release: FreeBSD 6.2-STABLE i386 >Organization: >Environment: System: FreeBSD www.yasi.to 6.2-STABLE FreeBSD 6.2-STABLE #1: Sat Feb 10 09:05:27 JST 2007 root@ www.yasi.to:/usr/obj/usr/src/sys/GENERIC i386 >Description: In March 20,2007, Zope.org released hotfix for cross-site scripting vulnerability. See: http://www.zope.org/Products/Zope/Hotfix-2007-03-20/announcement/view This PR upgrade www/zope29. >How-To-Repeat: >Fix: Patch attached with submission follows: diff -urN /usr/ports/www/zope29.old/Makefile /usr/ports/www/zope29/Makefile --- /usr/ports/www/zope29.old/Makefile Thu Jan 4 22:16:03 2007 +++ /usr/ports/www/zope29/Makefile Thu Mar 22 20:47:01 2007 @@ -7,10 +7,14 @@ PORTNAME= zope29 PORTVERSION= 2.9.6 +PORTREVISION= 1 CATEGORIES= www python zope -MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/ +MASTER_SITES= http://www.zope.org/Products/Zope/${PORTVERSION}/ \ + http://www.zope.org/Products/Zope/Hotfix-2007-03-20/Hotfix-20070320/:hotfix DISTNAME= Zope-${PORTVERSION}-final EXTRACT_SUFX= .tgz +DISTFILES= ${DISTNAME}${EXTRACT_SUFX} \ + Hotfix_20070320.tgz:hotfix DIST_SUBDIR= zope MAINTAINER= yasi@yasi.to @@ -72,6 +76,9 @@ -e 's,^.*LN.*PYTHON.*$$,,g' \ ${WRKSRC}/${MAKEFILE} +post-build: + -@${PYTHON_CMD} ${PYTHON_LIBDIR}/compileall.py ${WRKDIR}/Hotfix_20070320/ + post-install: ${MV} ${ZOPEBASEDIR}/skel/etc/zope.conf.in \ ${ZOPEBASEDIR}/skel/etc/zope.conf.sample.in @@ -79,6 +86,7 @@ ${MKDIR} ${ZOPEBASEDIR}/Products ${CP} ${FILESDIR}/Products_00readme-freebsd.txt \ ${ZOPEBASEDIR}/Products/00readme-freebsd.txt + ${CP} -R ${WRKDIR}/Hotfix_20070320 ${ZOPEBASEDIR}/Products/ ${FIND} ${ZOPEBASEDIR} -type f -print0 | ${XARGS} -0 -- ${CHMOD} a-w+r diff -urN /usr/ports/www/zope29.old/distinfo /usr/ports/www/zope29/distinfo --- /usr/ports/www/zope29.old/distinfo Thu Jan 4 22:16:03 2007 +++ /usr/ports/www/zope29/distinfo Thu Mar 22 20:19:35 2007 @@ -1,3 +1,6 @@ MD5 (zope/Zope-2.9.6-final.tgz) = a87008a9e78248072ea5908e1006b269 SHA256 (zope/Zope-2.9.6-final.tgz) = 00ffe561df9ede6543bf5dceeea964048ee005705ba98dd8f8dbfcd8dd64fcc4 SIZE (zope/Zope-2.9.6-final.tgz) = 6989768 +MD5 (zope/Hotfix_20070320.tgz) = 0b4cd365d99731e18827ead11400087d +SHA256 (zope/Hotfix_20070320.tgz) = 3b8760301826aba22386a561de48523663fc7840fc11280e2c34163ba4be383a +SIZE (zope/Hotfix_20070320.tgz) = 3805 diff -urN /usr/ports/www/zope29.old/pkg-plist /usr/ports/www/zope29/pkg-plist --- /usr/ports/www/zope29.old/pkg-plist Thu Jan 4 22:16:09 2007 +++ /usr/ports/www/zope29/pkg-plist Thu Mar 22 20:56:37 2007 @@ -1,4 +1,12 @@ %%ZOPEBASEDIR%%/Products/00readme-freebsd.txt +%%ZOPEBASEDIR%%/Products/Hotfix_20070320/README.txt +%%ZOPEBASEDIR%%/Products/Hotfix_20070320/__init__.py +%%ZOPEBASEDIR%%/Products/Hotfix_20070320/__init__.pyc +%%ZOPEBASEDIR%%/Products/Hotfix_20070320/tests/__init__.py +%%ZOPEBASEDIR%%/Products/Hotfix_20070320/tests/test_hotfix.py +%%ZOPEBASEDIR%%/Products/Hotfix_20070320/tests/__init__.pyc +%%ZOPEBASEDIR%%/Products/Hotfix_20070320/tests/test_hotfix.pyc +%%ZOPEBASEDIR%%/Products/Hotfix_20070320/version.txt %%ZOPEBASEDIR%%/bin/README.txt %%ZOPEBASEDIR%%/bin/analyze.py %%ZOPEBASEDIR%%/bin/check_catalog.py @@ -9540,5 +9548,7 @@ @dirrm %%ZOPEBASEDIR%%/lib @dirrm %%ZOPEBASEDIR%%/doc @dirrm %%ZOPEBASEDIR%%/bin +@dirrm %%ZOPEBASEDIR%%/Products/Hotfix_20070320/tests +@dirrm %%ZOPEBASEDIR%%/Products/Hotfix_20070320/ @dirrmtry %%ZOPEBASEDIR%%/Products @dirrmtry %%ZOPEBASEDIR%% >Release-Note: >Audit-Trail: >Unformatted: