From root@unix-experience.fr  Fri Apr 19 17:48:21 2013
Return-Path: <root@unix-experience.fr>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1])
	by hub.freebsd.org (Postfix) with ESMTP id 9693C6DB
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 19 Apr 2013 17:48:21 +0000 (UTC)
	(envelope-from root@unix-experience.fr)
Received: from unix-experience.fr (unix-experience.fr [88.190.14.11])
	by mx1.freebsd.org (Postfix) with ESMTP id 38417863
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 19 Apr 2013 17:48:20 +0000 (UTC)
Received: from unix-experience.fr (localhost [127.0.0.1])
	by unix-experience.fr (8.14.5/8.14.5) with ESMTP id r3JGrUYl079584
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 19 Apr 2013 18:53:30 +0200 (CEST)
	(envelope-from root@unix-experience.fr)
Received: (from root@localhost)
	by unix-experience.fr (8.14.5/8.14.5/Submit) id r3JGrUsC079583;
	Fri, 19 Apr 2013 18:53:30 +0200 (CEST)
	(envelope-from root)
Message-Id: <201304191653.r3JGrUsC079583@unix-experience.fr>
Date: Fri, 19 Apr 2013 18:53:30 +0200 (CEST)
From: Loic Blot <root@unix-experience.fr>
Reply-To: Loic Blot <loic.blot@unix-experience.fr>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: Owncloud: Two critical security updates and urgent fixes
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         177979
>Category:       ports
>Synopsis:       www/owncloud: Two critical security updates and urgent fixes
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kevlo
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Fri Apr 19 17:50:02 UTC 2013
>Closed-Date:    Sat Apr 20 15:53:39 UTC 2013
>Last-Modified:  Sat Apr 20 16:00:01 UTC 2013
>Originator:     Loic Blot
>Release:        FreeBSD 9.1-RELEASE amd64
>Organization:
Centre National de la Recherche Scientifique	
>Environment:
System: FreeBSD www.unix-experience.fr 9.1-RELEASE FreeBSD 9.1-RELEASE #0 r243825: Tue Dec 4 09:23:10 UTC 2012 root@farrell.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC amd64
	
>Description:
	Two critical security fixes for owncloud:
	* XSS problem in a flash file
	* A very importante security update (Authentification bypass on calendars)
	
>How-To-Repeat:
>Fix:

--- port.diff begins here ---
--- Makefile.old	2013-04-19 18:13:07.000000000 +0200
+++ Makefile	2013-04-19 18:21:13.000000000 +0200
@@ -1,7 +1,7 @@
 # $FreeBSD: www/owncloud/Makefile 315922 2013-04-17 01:57:56Z kevlo $
 
 PORTNAME=	owncloud
-PORTVERSION=	5.0.4
+PORTVERSION=	5.0.5
 CATEGORIES=	www
 MASTER_SITES=	http://download.owncloud.org/community/
 
--- distinfo.old	2013-04-19 18:13:11.000000000 +0200
+++ distinfo	2013-04-19 18:24:25.000000000 +0200
@@ -1,2 +1,2 @@
-SHA256 (owncloud-5.0.4.tar.bz2) = fa6c93631368afe5b475e3173130b60be5f4f1166cd5d6f7993d242ac448f0d4
-SIZE (owncloud-5.0.4.tar.bz2) = 13878837
+SHA256 (owncloud-5.0.5.tar.bz2) = d1538f598f7b06a2d0494a9675a461e4bcd976e7e4ddf372efc1a2ec50007a31
+SIZE (owncloud-5.0.5.tar.bz2) = 13865933
--- port.diff ends here ---


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-ports-bugs->kevlo 
Responsible-Changed-By: edwin 
Responsible-Changed-When: Fri Apr 19 17:54:50 UTC 2013 
Responsible-Changed-Why:  
Over to maintainer (via the GNATS Auto Assign Tool) 

http://www.freebsd.org/cgi/query-pr.cgi?pr=177979 
State-Changed-From-To: open->closed 
State-Changed-By: kevlo 
State-Changed-When: Sat Apr 20 15:53:26 UTC 2013 
State-Changed-Why:  
Committed, thanks. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=177979 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: ports/177979: commit references a PR
Date: Sat, 20 Apr 2013 15:53:16 +0000 (UTC)

 Author: kevlo
 Date: Sat Apr 20 15:53:03 2013
 New Revision: 316156
 URL: http://svnweb.freebsd.org/changeset/ports/316156
 
 Log:
   Update to 5.0.5
   
   Feature safe:	yes
   
   PR:	ports/177979
   Submitted by:	Loic Blot <root at unix-experience dot fr>
 
 Modified:
   head/www/owncloud/Makefile
   head/www/owncloud/distinfo
 
 Modified: head/www/owncloud/Makefile
 ==============================================================================
 --- head/www/owncloud/Makefile	Sat Apr 20 15:42:32 2013	(r316155)
 +++ head/www/owncloud/Makefile	Sat Apr 20 15:53:03 2013	(r316156)
 @@ -1,7 +1,7 @@
  # $FreeBSD$
  
  PORTNAME=	owncloud
 -PORTVERSION=	5.0.4
 +PORTVERSION=	5.0.5
  CATEGORIES=	www
  MASTER_SITES=	http://download.owncloud.org/community/
  
 
 Modified: head/www/owncloud/distinfo
 ==============================================================================
 --- head/www/owncloud/distinfo	Sat Apr 20 15:42:32 2013	(r316155)
 +++ head/www/owncloud/distinfo	Sat Apr 20 15:53:03 2013	(r316156)
 @@ -1,2 +1,2 @@
 -SHA256 (owncloud-5.0.4.tar.bz2) = fa6c93631368afe5b475e3173130b60be5f4f1166cd5d6f7993d242ac448f0d4
 -SIZE (owncloud-5.0.4.tar.bz2) = 13878837
 +SHA256 (owncloud-5.0.5.tar.bz2) = d1538f598f7b06a2d0494a9675a461e4bcd976e7e4ddf372efc1a2ec50007a31
 +SIZE (owncloud-5.0.5.tar.bz2) = 13865933
 _______________________________________________
 svn-ports-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/svn-ports-all
 To unsubscribe, send any mail to "svn-ports-all-unsubscribe@freebsd.org"
 
>Unformatted:
