ports/164717: [maintainer update] update www/mathopd to 1.5p7
Michiel Boland
michiel at boland.org
Thu Feb 2 20:20:10 UTC 2012
>Number: 164717
>Category: ports
>Synopsis: [maintainer update] update www/mathopd to 1.5p7
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: maintainer-update
>Submitter-Id: current-users
>Arrival-Date: Thu Feb 02 20:20:08 UTC 2012
>Closed-Date:
>Last-Modified:
>Originator: Michiel Boland
>Release: FreeBSD 9.0-STABLE amd64
>Organization:
>Environment:
System: FreeBSD charlemagne.boland.org 9.0-STABLE FreeBSD 9.0-STABLE #0: Sat Jan 14 16:53:56 CET 2012 root at charlemagne.boland.org:/usr/obj/usr/src/sys/CHARLEMAGNE amd64
>Description:
Update the www/mathopd port to 1.5p7.
The previous version has a vulnerability that could lead to directory
traversal when the '*' construct in config files is used.
>How-To-Repeat:
n/a
>Fix:
--- mathopd-1.5p7.diff begins here ---
diff -ur mathopd.orig/Makefile mathopd/Makefile
--- mathopd.orig/Makefile 2007-08-13 10:34:41.000000000 +0200
+++ mathopd/Makefile 2012-02-02 20:26:14.000000000 +0100
@@ -6,12 +6,13 @@
#
PORTNAME= mathopd
-PORTVERSION= 1.5p6
+PORTVERSION= 1.5p7
CATEGORIES= www
MASTER_SITES= http://www.mathopd.org/dist/
MAINTAINER= michiel at boland.org
COMMENT= A very small, yet very fast HTTP server
+
CFLAGS+= -DFREEBSD_SENDFILE
MAKE_ARGS= CFLAGS="${CFLAGS}"
diff -ur mathopd.orig/distinfo mathopd/distinfo
--- mathopd.orig/distinfo 2011-03-27 17:35:51.000000000 +0200
+++ mathopd/distinfo 2012-02-02 20:21:43.000000000 +0100
@@ -1,2 +1,2 @@
-SHA256 (mathopd-1.5p6.tar.gz) = ece0d9d96f114aff39c508de109263213861769aac2592bde27faecca4b615a6
-SIZE (mathopd-1.5p6.tar.gz) = 59578
+SHA256 (mathopd-1.5p7.tar.gz) = b3489e24622574e4e92aa105dad1e1a076a441aa805675d1885a240b15932a4e
+SIZE (mathopd-1.5p7.tar.gz) = 59684
--- mathopd-1.5p7.diff ends here ---
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-ports-bugs
mailing list