From owner-freebsd-ports-bugs@FreeBSD.ORG Fri Sep 29 05:00:36 2006 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F1C2C16A47E for ; Fri, 29 Sep 2006 05:00:35 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4CEAD43D5A for ; Fri, 29 Sep 2006 05:00:35 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id k8T50ZSd040612 for ; Fri, 29 Sep 2006 05:00:35 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id k8T50ZAo040611; Fri, 29 Sep 2006 05:00:35 GMT (envelope-from gnats) Resent-Date: Fri, 29 Sep 2006 05:00:35 GMT Resent-Message-Id: <200609290500.k8T50ZAo040611@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, chinsan Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5044916A47B; Fri, 29 Sep 2006 04:54:02 +0000 (UTC) (envelope-from chinsan.tw@gmail.com) Received: from smtp2.bc.hgc.com.tw (smtp2.bc.hgc.com.tw [203.133.1.156]) by mx1.FreeBSD.org (Postfix) with ESMTP id DF31343D67; Fri, 29 Sep 2006 04:54:01 +0000 (GMT) (envelope-from chinsan.tw@gmail.com) Received: from smtp2.bc.hgc.com.tw (61-63-0-host123.kbtelecom.net.tw [61.63.0.123]) by smtp2.bc.hgc.com.tw (Postfix) with SMTP id BC3A22E9DF; Fri, 29 Sep 2006 12:54:01 +0800 (CST) Received: by smtp2.bc.hgc.com.tw (sSMTP sendmail emulation); Fri, 29 Sep 2006 12:49:28 +0800 Message-Id: <20060929045401.BC3A22E9DF@smtp2.bc.hgc.com.tw> Date: Fri, 29 Sep 2006 12:49:28 +0800 From: chinsan To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: simon@FreeBSD.org Subject: ports/103797: [MAINTAINER] www/dokuwiki-devel: Fix security issue(Codeinjection) X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Sep 2006 05:00:36 -0000 >Number: 103797 >Category: ports >Synopsis: [MAINTAINER] www/dokuwiki-devel: Fix security issue(Codeinjection) >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: maintainer-update >Submitter-Id: current-users >Arrival-Date: Fri Sep 29 05:00:34 GMT 2006 >Closed-Date: >Last-Modified: >Originator: chinsan >Release: FreeBSD 6.2-PRERELEASE i386 >Organization: Taiwan >Environment: System: FreeBSD BSD6.giga.hgc.com.tw 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #6: Thu Sep 14 09:46:10 CST 2006 >Description: - Fix security issue(Codeinjection in fetch.php) http://bugs.splitbrain.org/?do=details&id=926 - Make portlint more happy. Notified by simon@, thanks. Generated with FreeBSD Port Tools 0.77 >How-To-Repeat: >Fix: --- dokuwiki-devel-20060609_1.patch begins here --- diff -ruN --exclude=CVS /usr/ports/www/dokuwiki-devel/Makefile /usr/home/chinsan/project/dokuwiki-devel/Makefile --- /usr/ports/www/dokuwiki-devel/Makefile Tue Jul 4 00:26:27 2006 +++ /usr/home/chinsan/project/dokuwiki-devel/Makefile Fri Sep 29 12:46:06 2006 @@ -7,6 +7,7 @@ PORTNAME= dokuwiki PORTVERSION= ${DIST_VER:S/${PORTNAME}//:S/-//g} +PORTREVISION= 1 CATEGORIES= www MASTER_SITES= http://chinsan2.twbbs.org/distfiles/ \ ftp://chinsan2.twbbs.org/distfiles/ \ @@ -80,6 +81,9 @@ .endif pre-patch: +# Fix http://bugs.splitbrain.org/?do=details&id=926 + @${REINPLACE_CMD} -e '25,26 s,=,= (int),' ${WRKSRC}/lib/exe/fetch.php + @${FIND} ${WRKSRC}/lib/exe -name "*.php.bak" -delete .if defined(WIKI_LANG) @${REINPLACE_CMD} -e 's|lang\(.*\)'en'|lang\1'${WIKI_LANG}'|g' \ ${WRKSRC}/conf/dokuwiki.php @@ -88,16 +92,6 @@ post-patch: @${TOUCH} ${WRKSRC}/data/changes.log - -# This target is only meant to be used by the port maintainer. -x-generate-plist: - @make makesum - @make patch - @cd ${WRKSRC} && ${FIND} -s . -type f | \ - ${SED} -e 's|^./||;s|^|%%DOKUWIKI_DIR%%/|' > ${TEMP_PLIST} \ - && ${FIND} -d * -type d | \ - ${SED} -e 's|^|@dirrm %%DOKUWIKI_DIR%%/|' >> ${TEMP_PLIST} \ - && ${ECHO_CMD} "@dirrmtry %%DOKUWIKI_DIR%%" >> ${TEMP_PLIST} do-install: # Data files --- dokuwiki-devel-20060609_1.patch ends here --- >Release-Note: >Audit-Trail: >Unformatted: