From coop9211@uidaho.edu  Fri Apr 16 09:14:18 2004
Return-Path: <coop9211@uidaho.edu>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 4B1A516A4CE; Fri, 16 Apr 2004 09:14:18 -0700 (PDT)
Received: from mta10.adelphia.net (mta10.adelphia.net [68.168.78.202])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id C391443D2F; Fri, 16 Apr 2004 09:14:17 -0700 (PDT)
	(envelope-from coop9211@uidaho.edu)
Received: from borgdemon.losaca.adelphia.net ([67.21.169.8])
          by mta10.adelphia.net
          (InterMail vM.5.01.06.08 201-253-122-130-108-20031117) with ESMTP
          id <20040416161417.YZBR8065.mta10.adelphia.net@borgdemon.losaca.adelphia.net>;
          Fri, 16 Apr 2004 12:14:17 -0400
Received: from borgdemon.losaca.adelphia.net (localhost [127.0.0.1])
	by borgdemon.losaca.adelphia.net (Postfix) with ESMTP
	id 62950122; Fri, 16 Apr 2004 09:14:15 -0700 (PDT)
Message-Id: <1082132055.0@borgdemon.losaca.adelphia.net>
Date: Fri, 16 Apr 2004 09:14:15 -0700
From: "John Merryweather Cooper,Home Office,,(509) 338-9391 " <John Merryweather Cooper <coop9211@uidaho.edu>>
To: "FreeBSD gnats submit" <FreeBSD-gnats-submit@freebsd.org>
Cc: tamo@mutt.no-ip.org
Subject: [PATCH] Update www/neon to 0.24.5 can close PR 65613
X-Send-Pr-Version: gtk-send-pr 0.3.3 
X-GNATS-Notify:

>Number:         65631
>Category:       ports
>Synopsis:       [PATCH] Update www/neon to 0.24.5 can close PR 65613
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    lev
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Fri Apr 16 09:20:18 PDT 2004
>Closed-Date:    Sat Apr 17 23:44:05 PDT 2004
>Last-Modified:  Sat Apr 17 23:44:05 PDT 2004
>Originator:     John Merryweather Cooper,Home Office,,(509) 338-9391
>Release:        FreeBSD 4.10-BETA i386
>Organization:
>Environment:


System: FreeBSD 4.10-BETA #7: Sat Apr 10 13:03:04 PDT 2004
    root@borgdemon.losaca.adelphia.net:/usr/obj/usr/src/sys/K6-2



>Description:


Versions of www/neon older than 0.24.5 are marked as forbidden because of a security bug.  The one in the tree is 0.24.3.  This has been noted in PR 65613, but no patch has been provided.  This PR rememdies that situation.


>How-To-Repeat:


See security advisory.


>Fix:


--- update-neon-0.24.5 begins here ---
# This is a patch for neon to update it to neon-0.24.5
# 
# To apply this patch:
# STEP 1: Chdir to the source directory.
# STEP 2: Run the 'applypatch' program with this patch file as input.
#
# If you do not have 'applypatch', it is part of the 'makepatch' package
# that you can fetch from the Comprehensive Perl Archive Network:
# http://www.perl.com/CPAN/authors/Johan_Vromans/makepatch-x.y.tar.gz
# In the above URL, 'x' should be 2 or higher.
#
# To apply this patch without the use of 'applypatch':
# STEP 1: Chdir to the source directory.
# STEP 2: Run the 'patch' program with this file as input.
#
#### End of Preamble ####

#### Patch data follows ####
diff -u 'neon/Makefile' 'neon-0.24.5/Makefile'
Index: ./Makefile
--- ./Makefile	Thu Apr 15 19:42:41 2004
+++ ./Makefile	Fri Apr 16 09:02:14 2004
@@ -2,19 +2,16 @@
 # Date created:		13 October 2000
 # Whom:			Mikhail Teterin <mi@aldan.algebra.com>
 #
-# $FreeBSD: ports/www/neon/Makefile,v 1.27 2004/04/16 00:27:02 nectar Exp $
+# $FreeBSD$
 #
 
 PORTNAME=	neon
-PORTVERSION=	0.24.3
-PORTREVISION=	2
+PORTVERSION=	0.24.5
 CATEGORIES=	www
 MASTER_SITES=	http://www.webdav.org/neon/
 
 MAINTAINER=	lev@FreeBSD.org
 COMMENT=	An HTTP and WebDAV client library for Unix systems
-
-FORBIDDEN=	http://vuxml.freebsd.org/84237895-8f39-11d8-8b29-0020ed76ef5a.html
 
 LIB_DEPENDS=	expat.5:${PORTSDIR}/textproc/expat2
 
diff -u 'neon/distinfo' 'neon-0.24.5/distinfo'
Index: ./distinfo
--- ./distinfo	Wed Mar 31 02:55:35 2004
+++ ./distinfo	Fri Apr 16 09:02:28 2004
@@ -1,2 +1,2 @@
-MD5 (neon-0.24.3.tar.gz) = 4cce6d468ffa22d47160874c8920de91
-SIZE (neon-0.24.3.tar.gz) = 575864
+MD5 (neon-0.24.5.tar.gz) = 69c2a079ea0ab01c6c39e8e01a58c665
+SIZE (neon-0.24.5.tar.gz) = 599383
#### End of Patch data ####

#### ApplyPatch data follows ####
# Data version        : 1.0
# Date generated      : Fri Apr 16 09:08:11 2004
# Generated by        : makepatch 2.00
# Recurse directories : Yes
# p 'Makefile' 2620 1082131334 0100644
# p 'distinfo' 95 1082131348 0100644
#### End of ApplyPatch data ####

#### End of Patch kit [created: Fri Apr 16 09:08:11 2004] ####
#### Checksum: 65 2107 25868 ####
--- update-neon-0.24.5 ends here ---



>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-ports-bugs->lev  
Responsible-Changed-By: krion 
Responsible-Changed-When: Fri Apr 16 11:12:54 PDT 2004 
Responsible-Changed-Why:  
Over to maintainer. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=65631 
State-Changed-From-To: open->closed 
State-Changed-By: lev 
State-Changed-When: Sat Apr 17 23:43:27 PDT 2004 
State-Changed-Why:  

Coomitted, thanks! 


http://www.freebsd.org/cgi/query-pr.cgi?pr=65631 
>Unformatted:
