ports/103797: [MAINTAINER] www/dokuwiki-devel: Fix security issue(Codeinjection)
chinsan
chinsan.tw at gmail.com
Fri Sep 29 05:00:36 UTC 2006
>Number: 103797
>Category: ports
>Synopsis: [MAINTAINER] www/dokuwiki-devel: Fix security issue(Codeinjection)
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: maintainer-update
>Submitter-Id: current-users
>Arrival-Date: Fri Sep 29 05:00:34 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator: chinsan
>Release: FreeBSD 6.2-PRERELEASE i386
>Organization:
Taiwan
>Environment:
System: FreeBSD BSD6.giga.hgc.com.tw 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #6: Thu Sep 14 09:46:10 CST 2006
>Description:
- Fix security issue(Codeinjection in fetch.php)
http://bugs.splitbrain.org/?do=details&id=926
- Make portlint more happy.
Notified by simon@, thanks.
Generated with FreeBSD Port Tools 0.77
>How-To-Repeat:
>Fix:
--- dokuwiki-devel-20060609_1.patch begins here ---
diff -ruN --exclude=CVS /usr/ports/www/dokuwiki-devel/Makefile /usr/home/chinsan/project/dokuwiki-devel/Makefile
--- /usr/ports/www/dokuwiki-devel/Makefile Tue Jul 4 00:26:27 2006
+++ /usr/home/chinsan/project/dokuwiki-devel/Makefile Fri Sep 29 12:46:06 2006
@@ -7,6 +7,7 @@
PORTNAME= dokuwiki
PORTVERSION= ${DIST_VER:S/${PORTNAME}//:S/-//g}
+PORTREVISION= 1
CATEGORIES= www
MASTER_SITES= http://chinsan2.twbbs.org/distfiles/ \
ftp://chinsan2.twbbs.org/distfiles/ \
@@ -80,6 +81,9 @@
.endif
pre-patch:
+# Fix http://bugs.splitbrain.org/?do=details&id=926
+ @${REINPLACE_CMD} -e '25,26 s,=,= (int),' ${WRKSRC}/lib/exe/fetch.php
+ @${FIND} ${WRKSRC}/lib/exe -name "*.php.bak" -delete
.if defined(WIKI_LANG)
@${REINPLACE_CMD} -e 's|lang\(.*\)'en'|lang\1'${WIKI_LANG}'|g' \
${WRKSRC}/conf/dokuwiki.php
@@ -88,16 +92,6 @@
post-patch:
@${TOUCH} ${WRKSRC}/data/changes.log
-
-# This target is only meant to be used by the port maintainer.
-x-generate-plist:
- @make makesum
- @make patch
- @cd ${WRKSRC} && ${FIND} -s . -type f | \
- ${SED} -e 's|^./||;s|^|%%DOKUWIKI_DIR%%/|' > ${TEMP_PLIST} \
- && ${FIND} -d * -type d | \
- ${SED} -e 's|^|@dirrm %%DOKUWIKI_DIR%%/|' >> ${TEMP_PLIST} \
- && ${ECHO_CMD} "@dirrmtry %%DOKUWIKI_DIR%%" >> ${TEMP_PLIST}
do-install:
# Data files
--- dokuwiki-devel-20060609_1.patch ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-ports-bugs
mailing list