Date: Sun, 26 May 2013 06:50:01 GMT From: Garrett Wollman <wollman@bimajority.org> To: freebsd-ports-bugs@FreeBSD.org Subject: Re: ports/178331: unpatched security issues in databases/couchdb Message-ID: <201305260650.r4Q6o16F076680@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR ports/178331; it has been noted by GNATS. From: Garrett Wollman <wollman@bimajority.org> To: freebsd-gnats-submit@freebsd.org Cc: Subject: Re: ports/178331: unpatched security issues in databases/couchdb Date: Sun, 26 May 2013 02:47:33 -0400 The following patch updates the port to 1.2.2. I tried bringing it all the way to the current 1.3 release but ended up with a binary that hard-crashed the Erlang VM on startup. Index: databases/couchdb/Makefile =================================================================== --- databases/couchdb/Makefile (revision 319091) +++ databases/couchdb/Makefile (working copy) @@ -2,19 +2,19 @@ # $FreeBSD$ PORTNAME= couchdb -PORTVERSION= 1.2.0 +PORTVERSION= 1.2.2 PORTEPOCH= 1 -PORTREVISION= 2 +#PORTREVISION= CATEGORIES= databases MASTER_SITES= ${MASTER_SITE_APACHE} -MASTER_SITE_SUBDIR= couchdb/releases/${PORTVERSION} +MASTER_SITE_SUBDIR= couchdb/source/${PORTVERSION} DISTNAME= apache-couchdb-${PORTVERSION} MAINTAINER= till@php.net COMMENT= A document database server, accessible via a RESTful JSON API LIB_DEPENDS= icudata:${PORTSDIR}/devel/icu \ - js:${PORTSDIR}/lang/spidermonkey17 \ + mozjs185:${PORTSDIR}/lang/spidermonkey185 \ curl:${PORTSDIR}/ftp/curl BUILD_DEPENDS= ${LOCALBASE}/bin/help2man:${PORTSDIR}/misc/help2man \ erlc:${PORTSDIR}/lang/erlang @@ -35,6 +35,11 @@ --with-js-lib=${LOCALBASE}/lib PLIST_SUB+= PORTVERSION="${PORTVERSION}" +# Override default value of ${STRIP} because the underlying makefile +# erroneously tries to install a shell script with ${STRIP}, causing +# an install error. +STRIP="" + MAN1= couchdb.1 couchjs.1 .include <bsd.port.options.mk> Index: databases/couchdb/distinfo =================================================================== --- databases/couchdb/distinfo (revision 319091) +++ databases/couchdb/distinfo (working copy) @@ -1,2 +1,2 @@ -SHA256 (apache-couchdb-1.2.0.tar.gz) = 0f254ddea2471dbc4d3c6cd1fa61e4782c75475fb325024e10f68bf1aa8d5c37 -SIZE (apache-couchdb-1.2.0.tar.gz) = 1326925 +SHA256 (apache-couchdb-1.2.2.tar.gz) = 6824b9eec0c05d022ef52f663074c67eca5493d848574ff2d73611e92bff8701 +SIZE (apache-couchdb-1.2.2.tar.gz) = 1408271
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201305260650.r4Q6o16F076680>