ports/126065: [MAINTAINER] www/pivot-weblog: update to 1.40.6
Hans Fredrik Nordhaug
hans at nordhaug.priv.no
Tue Jul 29 06:40:02 UTC 2008
>Number: 126065
>Category: ports
>Synopsis: [MAINTAINER] www/pivot-weblog: update to 1.40.6
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: maintainer-update
>Submitter-Id: current-users
>Arrival-Date: Tue Jul 29 06:40:01 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator: Hans Fredrik Nordhaug
>Release: FreeBSD 6.3-RELEASE-p3 i386
>Organization:
>Environment:
System: FreeBSD nordhaug.priv.no 6.3-RELEASE-p3
>Description:
- Update to 1.40.6
This is a security update fixing CVE-2008-3128 - a directory traversal vulnerability in all prior Pivot
1.40.x releases that for examples allows an attacker to read the usernames and password hashes of the
Pivot installation.
It also contains other various fixes and improvements, but no new features.
Generated with FreeBSD Port Tools 0.77
>How-To-Repeat:
>Fix:
--- pivot-weblog-1.40.6.patch begins here ---
diff -ruN --exclude=CVS /usr/ports/www/pivot-weblog/Makefile /usr/ports/www/pivot-weblog.new/Makefile
--- /usr/ports/www/pivot-weblog/Makefile 2008-04-25 17:14:41.000000000 +0200
+++ /usr/ports/www/pivot-weblog.new/Makefile 2008-07-16 18:39:53.000000000 +0200
@@ -6,11 +6,11 @@
#
PORTNAME= pivot-weblog
-PORTVERSION= 1.40.5
+PORTVERSION= 1.40.6
CATEGORIES= www
MASTER_SITES= ${MASTER_SITE_SOURCEFORGE}
MASTER_SITE_SUBDIR= ${PORTNAME}
-DISTNAME= pivot_1405_full
+DISTNAME= pivot_1406_full
MAINTAINER= hans at nordhaug.priv.no
COMMENT= A web-based tool to help you maintain weblogs (or other dynamic sites)
diff -ruN --exclude=CVS /usr/ports/www/pivot-weblog/distinfo /usr/ports/www/pivot-weblog.new/distinfo
--- /usr/ports/www/pivot-weblog/distinfo 2008-04-25 17:14:41.000000000 +0200
+++ /usr/ports/www/pivot-weblog.new/distinfo 2008-07-29 08:07:01.000000000 +0200
@@ -1,3 +1,3 @@
-MD5 (pivot_1405_full.zip) = 2a403301adfd5c08a53235d19db25897
-SHA256 (pivot_1405_full.zip) = 010043940c69b153796fdadbbed847a5bcf4246419d1b2de9edf9dddd8887346
-SIZE (pivot_1405_full.zip) = 2223749
+MD5 (pivot_1406_full.zip) = 126d19b9f1e76c40c372609ef0d6f08d
+SHA256 (pivot_1406_full.zip) = 57007d0f81e695cb19510a11a07e8a3436ff319e927119d703f11ad49f0990a1
+SIZE (pivot_1406_full.zip) = 2224093
--- pivot-weblog-1.40.6.patch ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-ports-bugs
mailing list