From hidekazu@gate.pc88.gr.jp  Sun Mar 31 04:59:12 2002
Return-Path: <hidekazu@gate.pc88.gr.jp>
Received: from gate.pc88.gr.jp (gate.pc88.gr.jp [202.224.239.170])
	by hub.freebsd.org (Postfix) with ESMTP id 77A8937B419
	for <FreeBSD-gnats-submit@freebsd.org>; Sun, 31 Mar 2002 04:59:10 -0800 (PST)
Received: (from hidekazu@localhost)
	by gate.pc88.gr.jp (8.11.6/8.11.6) id g2VCx6n28740;
	Sun, 31 Mar 2002 21:59:06 +0900 (JST)
	(envelope-from hidekazu)
Message-Id: <200203311259.g2VCx6n28740@gate.pc88.gr.jp>
Date: Sun, 31 Mar 2002 21:59:06 +0900 (JST)
From: Hidekazu Kuroki <hidekazu@pc88.gr.jp>
Reply-To: Hidekazu Kuroki <hidekazu@pc88.gr.jp>
To: FreeBSD-gnats-submit@freebsd.org
Cc: hnsmaster@h14m.org
Subject: Update Port:japanese/hns(to 2.10.3)
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         36571
>Category:       ports
>Synopsis:       Update Port:japanese/hns(to 2.10.3)
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    freebsd-ports
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Sun Mar 31 05:00:01 PST 2002
>Closed-Date:    Tue Apr 02 14:19:05 PST 2002
>Last-Modified:  Tue Apr 02 14:19:05 PST 2002
>Originator:     Hidekazu Kuroki
>Release:        FreeBSD 4.5-RELEASE i386
>Organization:
>Environment:
System: FreeBSD gate.pc88.gr.jp 4.5-RELEASE FreeBSD 4.5-RELEASE #0: Mon Jan 28 14:31:56 GMT 2002 murray@builder.freebsdmall.com:/usr/src/sys/compile/GENERIC i386


	
>Description:
Update japanese/hns to v2.10.3.
- fixes a cross-site scripting vulnerability.

	
>How-To-Repeat:
	
>Fix:
----BEGIN----
diff -rcN hns.orig/Makefile hns/Makefile
*** hns.orig/Makefile	Fri Mar 29 00:32:35 2002
--- hns/Makefile	Sun Mar 31 21:42:08 2002
***************
*** 6,12 ****
  #
  
  PORTNAME=	hns
! PORTVERSION=	2.10.2
  CATEGORIES=	japanese www perl5
  MASTER_SITES=	http://www.h14m.org/dist/
  DISTNAME=	${PORTNAME}-${PORTVERSION:R}-pl${PORTVERSION:E}
--- 6,12 ----
  #
  
  PORTNAME=	hns
! PORTVERSION=	2.10.3
  CATEGORIES=	japanese www perl5
  MASTER_SITES=	http://www.h14m.org/dist/
  DISTNAME=	${PORTNAME}-${PORTVERSION:R}-pl${PORTVERSION:E}
diff -rcN hns.orig/distinfo hns/distinfo
*** hns.orig/distinfo	Fri Mar 29 00:32:35 2002
--- hns/distinfo	Sun Mar 31 21:43:09 2002
***************
*** 1 ****
! MD5 (hns-2.10-pl2.tar.gz) = cb9703d710c2d1a3a0321574f16d7694
--- 1 ----
! MD5 (hns-2.10-pl3.tar.gz) = 9428cbc3791fbd6530e28f43d31ffa99
-----END-----
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: pat 
State-Changed-When: Tue Apr 2 14:18:53 PST 2002 
State-Changed-Why:  
Committed, Thanks! 

http://www.freebsd.org/cgi/query-pr.cgi?pr=36571 
>Unformatted:
