From stolz@i2.informatik.rwth-aachen.de  Fri Jun 20 01:27:36 2003
Return-Path: <stolz@i2.informatik.rwth-aachen.de>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E69FF37B401
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 20 Jun 2003 01:27:35 -0700 (PDT)
Received: from atlas.informatik.rwth-aachen.de (atlas.Informatik.RWTH-Aachen.DE [137.226.194.2])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6B48F43FAF
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 20 Jun 2003 01:27:34 -0700 (PDT)
	(envelope-from stolz@i2.informatik.rwth-aachen.de)
Received: from menelaos.informatik.rwth-aachen.de (menelaos.Informatik.RWTH-Aachen.DE [137.226.194.73])
	by atlas.informatik.rwth-aachen.de (8.11.3/8.11.3/SuSE Linux 8.11.1-0.5) with ESMTP id h5K8RXK09401
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 20 Jun 2003 10:27:33 +0200
Received: (from stolz@localhost)
	by menelaos.informatik.rwth-aachen.de (8.12.9/8.12.9/Submit) id h5K8RXLK006746;
	Fri, 20 Jun 2003 10:27:33 +0200 (CEST)
	(envelope-from stolz)
Message-Id: <200306200827.h5K8RXLK006746@menelaos.informatik.rwth-aachen.de>
Date: Fri, 20 Jun 2003 10:27:33 +0200 (CEST)
From: Volker Stolz <stolz@i2.informatik.rwth-aachen.de>
Reply-To: Volker Stolz <stolz@i2.informatik.rwth-aachen.de>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: [maintainer] Update eldav.el to 0.7.2 (security fix)
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         53543
>Category:       ports
>Synopsis:       [maintainer] Update eldav.el to 0.7.2 (security fix)
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Jun 20 01:30:14 PDT 2003
>Closed-Date:    Fri Jun 20 01:49:48 PDT 2003
>Last-Modified:  Fri Jun 20 01:49:48 PDT 2003
>Originator:     Volker Stolz
>Release:        FreeBSD 4.8-STABLE i386
>Organization:
Lehrstuhl fr Informatik II
>Environment:
System: FreeBSD menelaos.informatik.rwth-aachen.de 4.8-STABLE FreeBSD 4.8-STABLE #4: Tue Apr 29 11:28:13 CEST 2003 root@menelaos.informatik.rwth-aachen.de:/usr/obj/usr/src/sys/MENELAOS i386


	
>Description:
Update to 0.7.2 which fixes insecure handling of temporary files

This patch SUPERSEDES ports/52215!

>How-To-Repeat:
>Fix:
--- eldav begins here ---
diff -urN eldav.el.orig/Makefile eldav.el/Makefile
--- eldav.el.orig/Makefile	Tue Mar  4 23:10:13 2003
+++ eldav.el/Makefile	Fri Jun 20 10:21:19 2003
@@ -6,31 +6,29 @@
 #
 
 PORTNAME=	eldav.el
-PORTVERSION=	1.17
+PORTVERSION=	0.7.2
+PORTEPOCH=	1
 CATEGORIES=	www elisp
 MASTER_SITES=	http://www.gohome.org/eldav/
-DISTNAME=	eldav.el
-EXTRACT_SUFX=	.gz
-DIST_SUBDIR=	${PORTNAME}-${PORTVERSION}
+DISTNAME=	eldav-${PORTVERSION}
 
 MAINTAINER=	stolz@i2.informatik.rwth-aachen.de
 COMMENT=	An interface to WebDAV servers for Emacs
 
 RUN_DEPENDS=	nd:${PORTSDIR}/www/nd
 
-EXTRACT_AFTER_ARGS=	| ${CAT} >${WRKDIR}/${DISTNAME}
-
 NO_BUILD=	yes
-NO_WRKSUBDIR=	yes
 
 EMACSLISPDIR=	${PREFIX}/share/emacs/site-lisp
 XEMACSLISPDIR=	${PREFIX}/lib/xemacs/site-lisp
 
 do-install:
 	${MKDIR} ${EMACSLISPDIR}
-	${INSTALL_DATA} ${WRKDIR}/${DISTNAME} ${EMACSLISPDIR}/${DISTNAME}
 	${MKDIR} ${XEMACSLISPDIR}
-	${LN} -sf ${EMACSLISPDIR}/${DISTNAME} ${XEMACSLISPDIR}
+.for file in eldav.el vc-eldav.el
+	${INSTALL_DATA} ${WRKSRC}/${file} ${EMACSLISPDIR}/
+	${LN} -sf ${EMACSLISPDIR}/${file} ${XEMACSLISPDIR}/
+.endfor
 
 post-install:
 	@${CAT} ${PKGMESSAGE}
diff -urN eldav.el.orig/distinfo eldav.el/distinfo
--- eldav.el.orig/distinfo	Thu Jan 23 12:06:36 2003
+++ eldav.el/distinfo	Fri Jun 20 10:21:30 2003
@@ -1 +1 @@
-MD5 (eldav.el-1.17/eldav.el.gz) = 01a5aad07ecc4475eb1ed8af2fd0b560
+MD5 (eldav-0.7.2.tar.gz) = 8d59cdd907484ddbed05bb550bb75ad8
diff -urN eldav.el.orig/pkg-message eldav.el/pkg-message
--- eldav.el.orig/pkg-message	Thu Sep  5 10:13:39 2002
+++ eldav.el/pkg-message	Fri Jun 20 10:20:52 2003
@@ -2,16 +2,15 @@
 
 (require 'eldav)
 
-If you want to use a proxy server, the following setting
-is also needed:
+Using a proxy:
 
 (setq eldav-proxy "http://your.proxy.server:8080")
 
-Then you can access WebDAV files by specifying a magic
-file name like:
+You can access WebDAV files by preceding WebDAV URLs
+with a colon:
 
 :http://your.webdav.server/path/to/file/name
 
-(Add preceding ':' to the WebDAV URL.)
+Enabling the Eldav VC feature (experimental):
+(setq eldav-use-vc t)
 
-NOTICE: You need the MULE version of Emacs!
diff -urN eldav.el.orig/pkg-plist eldav.el/pkg-plist
--- eldav.el.orig/pkg-plist	Thu Sep  5 10:13:39 2002
+++ eldav.el/pkg-plist	Fri Jun 20 10:20:52 2003
@@ -1,6 +1,12 @@
 share/emacs/site-lisp/eldav.el
+share/emacs/site-lisp/vc-eldav.el
 @exec mkdir -p %D/lib/xemacs/site-lisp
+@exec mkdir -p %D/share/emacs/site-lisp
 @exec ln -sf %D/%F %D/lib/xemacs/site-lisp/eldav.el
+@exec ln -sf %D/%F %D/lib/xemacs/site-lisp/vc-eldav.el
 @unexec rm %D/lib/xemacs/site-lisp/eldav.el
+@unexec rm %D/lib/xemacs/site-lisp/vc-eldav.el
 @dirrm lib/xemacs/site-lisp
 @dirrm lib/xemacs
+@dirrm share/emacs/site-lisp
+@dirrm share/emacs
--- eldav ends here ---
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: erwin 
State-Changed-When: Fri Jun 20 01:49:30 PDT 2003 
State-Changed-Why:  
Committed with minor modification to pkg-plist, thanks! 

http://www.freebsd.org/cgi/query-pr.cgi?pr=53543 
>Unformatted:
