From mathias@univ-paris4.fr  Sun Aug 26 11:30:28 2007
Return-Path: <mathias@univ-paris4.fr>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 0626316A417
	for <FreeBSD-gnats-submit@freebsd.org>; Sun, 26 Aug 2007 11:30:28 +0000 (UTC)
	(envelope-from mathias@univ-paris4.fr)
Received: from sorbon.sorbonne.fr (sorbon.sorbonne.fr [195.220.107.3])
	by mx1.freebsd.org (Postfix) with ESMTP id 8ED4313C46B
	for <FreeBSD-gnats-submit@freebsd.org>; Sun, 26 Aug 2007 11:30:27 +0000 (UTC)
	(envelope-from mathias@univ-paris4.fr)
Received: from sritux.univ-paris4.fr (sritux.univ-paris4.fr [195.220.117.24])
          by sorbon.sorbonne.fr (8.13.8/jtpda-5.4) with ESMTP id l7QBKAKi007737
          ; Sun, 26 Aug 2007 13:20:10 +0200 (CEST)
Received: from sritux.univ-paris4.fr (localhost [127.0.0.1])
	by sritux.univ-paris4.fr (8.13.6/8.13.6) with ESMTP id l7QBK7bE088738;
	Sun, 26 Aug 2007 13:20:07 +0200 (CEST)
	(envelope-from mathias@sritux.univ-paris4.fr)
Received: (from mathias@localhost)
	by sritux.univ-paris4.fr (8.13.6/8.13.6/Submit) id l7QBK7u3088737;
	Sun, 26 Aug 2007 13:20:07 +0200 (CEST)
	(envelope-from mathias)
Message-Id: <200708261120.l7QBK7u3088737@sritux.univ-paris4.fr>
Date: Sun, 26 Aug 2007 13:20:07 +0200 (CEST)
From: Mathias Monnerville <mathias.monnerville@paris-sorbonne.fr>
Reply-To: Mathias Monnerville <mathias@monnerville.com>
To: FreeBSD-gnats-submit@freebsd.org
Cc: mathias@monnerville.com
Subject: Update port: www/glpi to 0.68.3.2 (security fixes)
X-Send-Pr-Version: 3.113
X-GNATS-Notify: mathias@monnerville.com

>Number:         115828
>Category:       ports
>Synopsis:       Update port: www/glpi to 0.68.3.2 (security fixes)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    rafan
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Sun Aug 26 11:40:00 GMT 2007
>Closed-Date:    Mon Aug 27 12:40:33 GMT 2007
>Last-Modified:  Mon Aug 27 12:50:02 GMT 2007
>Originator:     Mathias Monnerville
>Release:        FreeBSD 6.1-RELEASE i386
>Organization:
>Environment:
System: FreeBSD sritux.univ-paris4.fr 6.1-RELEASE FreeBSD 6.1-RELEASE #0: Sun May 7 04:32:43 UTC 2006 root@opus.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386

	
>Description:
A security problem have been founded in the version 1.73 of phpmailer when using sendmail function.
	
>How-To-Repeat:
	
>Fix:

	

--- patch.diff begins here ---
diff -ur ./Makefile latest/Makefile
--- ./Makefile	Sat Mar 24 17:43:27 2007
+++ latest/Makefile	Sun Aug 26 12:34:00 2007
@@ -6,11 +6,10 @@
 #
 
 PORTNAME=	glpi
-PORTVERSION=	0.68.3
-PORTREVISION=	1
+DISTVERSION= 0.68.3-2
 CATEGORIES=	www
 MASTER_SITES=	http://glpi-project.org/IMG/gz/ \
-		http://download.gna.org/kanicule/
+		http://download.gna.org/kanicule/freebsd/distfiles/
 
 MAINTAINER=	mathias@monnerville.com
 COMMENT=	Free IT and asset management software
diff -ur ./distinfo latest/distinfo
--- ./distinfo	Mon Feb 12 00:16:49 2007
+++ latest/distinfo	Sun Aug 26 12:03:02 2007
@@ -1,3 +1,3 @@
-MD5 (glpi-0.68.3.tar.gz) = a7c30daabd4054e993e28793d3c0e0e1
-SHA256 (glpi-0.68.3.tar.gz) = 324f4e12858890c2ba6fd04b078b360102b68edb3a8e83b39cb711f5c59caa04
-SIZE (glpi-0.68.3.tar.gz) = 1405403
+MD5 (glpi-0.68.3-2.tar.gz) = 918dbd3cb175625a4421097bbec43cc4
+SHA256 (glpi-0.68.3-2.tar.gz) = 45c2f08cd139da06502a26395999313cfd4a6c01452da812004b526fed0360ef
+SIZE (glpi-0.68.3-2.tar.gz) = 1394598
Only in .: latest
Only in .: patch.diff
diff -ur ./pkg-message latest/pkg-message
--- ./pkg-message	Mon Feb 12 00:16:49 2007
+++ latest/pkg-message	Sun Aug 26 12:15:26 2007
@@ -1,4 +1,6 @@
 *****************************************************************
+First time installation notes:
+
 Before using GLPI, you will need to configure your database.
 Full installation instructions are available here:
 
diff -ur ./pkg-plist latest/pkg-plist
--- ./pkg-plist	Mon Feb 12 00:16:49 2007
+++ latest/pkg-plist	Sun Aug 26 12:50:35 2007
@@ -46,7 +46,6 @@
 www/glpi/files/_uploads/remove.txt
 www/glpi/front/_relpos.php
 www/glpi/front/backup.php
-www/glpi/front/backup.php~
 www/glpi/front/cartridge.edit.php
 www/glpi/front/cartridge.form.php
 www/glpi/front/cartridge.php
@@ -232,7 +231,6 @@
 www/glpi/inc/timer.class.php
 www/glpi/inc/tracking.class.php
 www/glpi/inc/tracking.function.php
-www/glpi/inc/tracking.function.php~
 www/glpi/inc/typedoc.class.php
 www/glpi/inc/user.class.php
 www/glpi/inc/user.function.php
@@ -306,6 +304,7 @@
 www/glpi/lib/phpcas/languages/languages.php
 www/glpi/lib/phpmailer/LICENSE
 www/glpi/lib/phpmailer/class.phpmailer.php
+www/glpi/lib/phpmailer/class.phpmailer.php~
 www/glpi/lib/phpmailer/class.smtp.php
 www/glpi/lib/phpmailer/language/phpmailer.lang-en.php
 www/glpi/lib/scriptaculous/builder.js
--- patch.diff ends here ---


>Release-Note:
>Audit-Trail:
Class-Changed-From-To: maintainer-update->change-request 
Class-Changed-By: edwin 
Class-Changed-When: Sun Aug 26 11:40:10 UTC 2007 
Class-Changed-Why:  
Fix category (submitter is not maintainer) 

http://www.freebsd.org/cgi/query-pr.cgi?pr=115828 
State-Changed-From-To: open->feedback 
State-Changed-By: edwin 
State-Changed-When: Sun Aug 26 11:40:17 UTC 2007 
State-Changed-Why:  
Awaiting maintainers feedback 

http://www.freebsd.org/cgi/query-pr.cgi?pr=115828 

From: Mathias Monnerville <mathias@monnerville.com>
To: bug-followup@FreeBSD.org
Cc: mathias@monnerville.com
Subject: Re: ports/115828: Update port: www/glpi to 0.68.3.2 (security fixes)
Date: Sun, 26 Aug 2007 14:28:05 +0200

 Hello,
 
 Patch has been approved. 
 
 The category was at first maintainer-update because the orginal mail was sent by me from 
 another email address (@paris-sorbonne.fr); sorry for that.
 
 Regards,
 Mathias Monnerville
 
 On Sun, Aug 26, 2007 at 11:40:14AM +0000, Edwin Groothuis wrote:
 > Maintainer of www/glpi,
 >
 > Please note that PR ports/115828 has just been submitted.
 >
 > If it contains a patch for an upgrade, an enhancement or a bug fix
 > you agree on, reply to this email stating that you approve the
 > patch
 > and a committer will take care of it.
 >
 > The full text of the PR can be found at:
 >     http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/115828
 >
 > --
 > Edwin Groothuis
 > edwin@FreeBSD.org
Responsible-Changed-From-To: freebsd-ports-bugs->rafan 
Responsible-Changed-By: rafan 
Responsible-Changed-When: Sun Aug 26 13:06:16 UTC 2007 
Responsible-Changed-Why:  
I'll take it. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=115828 
State-Changed-From-To: feedback->closed 
State-Changed-By: rafan 
State-Changed-When: Mon Aug 27 12:40:32 UTC 2007 
State-Changed-Why:  
Committed. Thanks! 

http://www.freebsd.org/cgi/query-pr.cgi?pr=115828 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: ports/115828: commit references a PR
Date: Mon, 27 Aug 2007 12:40:16 +0000 (UTC)

 rafan       2007-08-27 12:40:09 UTC
 
   FreeBSD ports repository
 
   Modified files:
     www/glpi             Makefile distinfo pkg-message pkg-plist 
   Log:
   - Update to 0.68.3.2
   - Remove editor backup files
   
   PR:             ports/115828
   Submitted by:   Mathias Monnerville <mathias.monnerville at paris-sorbonne.fr> (maintainer)
   
   Revision  Changes    Path
   1.4       +5 -3      ports/www/glpi/Makefile
   1.2       +3 -3      ports/www/glpi/distinfo
   1.2       +2 -0      ports/www/glpi/pkg-message
   1.2       +0 -2      ports/www/glpi/pkg-plist
 _______________________________________________
 cvs-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/cvs-all
 To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
 
>Unformatted:
