From owner-freebsd-ports Sat Mar 15 1:38:18 2003 Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id AD67A37B401 for ; Sat, 15 Mar 2003 01:38:15 -0800 (PST) Received: from mail.ukpost.com (ns0.ukpost.com [217.158.120.130]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9586343FAF for ; Sat, 15 Mar 2003 01:38:14 -0800 (PST) (envelope-from jason@ukpost.com) Received: from mail.ukpost.com (mail.ukpost.com [217.158.120.132]) by mail.ukpost.com (Postfix) with ESMTP id A43B11F8003; Sat, 15 Mar 2003 09:38:00 +0000 (GMT) Date: Sat, 15 Mar 2003 09:38:00 +0000 (GMT) From: Jason Clifford To: Kris Kennaway Cc: ports@freebsd.org Subject: Re: Security update to p5-Business-OnlinePayment-WorldPay-Junior-1.03 In-Reply-To: <20030314224436.GA4020@rot13.obsecurity.org> Message-ID: MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="8323328-1415567397-1047721080=:18019" Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. --8323328-1415567397-1047721080=:18019 Content-Type: TEXT/PLAIN; charset=US-ASCII On Fri, 14 Mar 2003, Kris Kennaway wrote: > > I am the author of the perl module previously named > > Business-OnlinePayment-WorldPay-Junior-1.03. > > > > Please be advised that I have today made an important security update to > > the module to fix a serious, remotely exploitable, bug in the module. > > Thanks for the notice; someone needs to submit a port update to the > new version in order for the FreeBSD port to be updated. Thanks Kris, I don't use FreeBSD myself at the moment and I've not built a port package however I've downloaded the existing one and edited the contents of the tarball to what I think will be a valid one for the new version of the module. Note that it has a different name now as my module does not use the Business::OnlinePayment API and they have asked for it to be renamed to avoid confusion. I've attached the revised ports file. I hope it is useful. Jason Clifford -- UKFSN.ORG Finance Free Software while you surf the 'net http://www.ukfsn.org/ Get the T-Shirt Now --8323328-1415567397-1047721080=:18019 Content-Type: APPLICATION/x-gzip; name="p5-Business-WorldPay-Junior.tar.gz" Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: p5-Business-WorldPay-Junior.tar.gz Content-Disposition: attachment; filename="p5-Business-WorldPay-Junior.tar.gz" H4sIAFPxcj4AA+1YbW/iOBDuV/wrLLWV7j6QBMrLLlpWhZJ22ePtgF7vGzKx AR95W9uUciv++41T0rLdK1RH1Op280htEntm/HhmPJkQFrP1heQ+kzJ7EwiX 9sgq+3nh80CYRwnBsgpWuViEq2WVS4VvrhscwcBZoVi2CqXykZUr5gv5I1xM isAuLKQiAuOjv4gM/B1y++b/pwh3xL9N5mzCXXboGlbOskqFwnPxzxXK+Yf4 Q+hBvlSCIWwlscF9+Mnjf4w7bInDQCiJncB1maN44GNvE3o8CUQlE2dIpRKn SKVynyPoGDeIYtgRDC60kgHkirhNhDPDecs6A4GbWeBFE5nP2of4wuUTMEvx h8in54v5RPpGIKYf0TGIn1wKxuqDxgk8oV63P+zU2nY181yWRiJ/2P1Bs9up ZnKGVUIXtaF91e037UE143Hp4JAJt4jatcHQ7o8GzaGeOPm69Tzq2f3W6KJX 66y3xUaD63qj2X9cHPV+u9J0en37svlnNQOnB4FCszOEPxsEI0eeb3ag94Qu uu223RlWMzU8Js6c+TSig72ALu79i9WM4XhXeMB0DPD95rBk4pY7DKH6dbPV GDXsnt1pROwfaK/NRr1phF7l5Kt2xQAIr01KFBkTyaQJFGEeZZ6qNExvJb+4 exQb2UjqqXrrpmdeA7falPnqqYnlcqmVXT6GO4T6151t3t9sZA0Rjjzf7Vw2 r677EOcVk+hhJa3Q6l7UWvXawF6bYNKMYmlKrthI35qwsrYAGaBD1zmLQwPj 0d221qOszpY1ihSqmR35bZwhZHDfcReU4Q9jSQ0dYcObf0RvfXKTwa76T7lU 3J8Eh66xp/5buVzpof7nSzld/8vQBqT1/xXQbhTxL89lQFaXUwP8Y0z//hVX 8dih78fv39F8zmHUIU5xMn43LlNiMQhiflL6Qc7Ez4Rd5z+cT7OUSUccuMa+ /s/Sc5vzf1aC74QcXIvp+X8NDGdcxr1IKIJbDgHHBEvuhTCyhIZEBXhGfApP ShBfkqhBlNCZ+ErPxUmDdCcTkpWnx5cz5mOdVtMXNDcGQtssCPdk1BZFHLjD 1crANdfFXGEaADsQBSbOPDK9xQkDS6T0yrdM8MkqmneI6+q+C+vGBstFCCYZ xePVIykyUUzAnmPyMyLxmDEfeYQyAw/ByoYarAzu4VMfLCy5mkUrCPZlwQXz Nv7gnscoh2bYXT3yIAp9bx9r+5q0tgtj7C4E54BpDlPcp+CXmivB4n37cS+G 4wYNS2fGPBLpb6IFJ5WHEYk5Y2FEjt05ELwpsARGKPLBItQScAt76wTQu2t6 8O8xApsdSdxeDX5vGWlV/4Gxr/7DcZHqwDX21P88FP4nv/+UQSOt/6+Bf/uk Oj2NP5NOT804O8w4O8zNl1Hoof+gPGUqq2uRNEJ3vz5ZqOBZBnp2FgguGTVI EsYCCdmuDH53qK34pZMALToeOYHvw4shAWNMCKlEEoY2r5WRDmUC9ny2TMCK YFMoViyJDd4Sl9NRHMfRLJAv8//moda/+LR3DSME07q8onPKhfBwktYTtfli Y8lQOpDE95pvXWRTpEiRIkWKFClSpEiRIkWKN8Y/IrVUegAoAAA= --8323328-1415567397-1047721080=:18019-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message