rsion: 1.0

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D297115

            Bug ID: 297115
           Summary: www/nextcloud: file integrity check fails with
                    patch-PR296323 (34.0.2)
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: brnrd@freebsd.org
          Reporter: thomas@bsdunix.ch
          Assignee: brnrd@freebsd.org
             Flags: maintainer-feedback?(brnrd@freebsd.org)

The patch files/patch-PR296323 breaks Nextclouds built-in code integrity ch=
eck
on 34.0.2. The same patch is shipped in the binary pkg, so installations
upgraded via pkg (not only from source) are affected as well.

The integrity check reports two distinct problems:

1) INVALID_HASH
The patch modifies two core files in place, so their hashes no longer match
Nextclouds signed manifest:
  - core/BackgroundJobs/CleanupBackgroundJobsJob.php
  - lib/private/BackgroundJob/JobRuns.php

2) EXTRA_FILE
The patch process leaves .orig backup files behind, which the integrity che=
ck
flags as unexpected extra files:
  - core/BackgroundJobs/CleanupBackgroundJobsJob.php.orig
  - lib/private/BackgroundJob/JobRuns.php.orig

Steps to reproduce:
  1. Install www/nextcloud 34.0.2 (from pkg or from ports).
  2. Run the integrity check, e.g.:
       sudo -u www php occ integrity:check-core (or via the web UI:
Administration settings -> Security).
  3. The results list INVALID_HASH for the two patched files and EXTRA_FILE=
 for
the two .orig files.

--=20
You are receiving this mail because:
You are the assignee for the bug.=