From glarkin@sourcehosting.net  Thu Jun 15 21:30:15 2006
Return-Path: <glarkin@sourcehosting.net>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D762416A47D
	for <FreeBSD-gnats-submit@freebsd.org>; Thu, 15 Jun 2006 21:30:15 +0000 (UTC)
	(envelope-from glarkin@sourcehosting.net)
Received: from sourcehosting.net (sourcehosting.net [204.8.45.67])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 214CE43D49
	for <FreeBSD-gnats-submit@freebsd.org>; Thu, 15 Jun 2006 21:30:15 +0000 (GMT)
	(envelope-from glarkin@sourcehosting.net)
Received: (qmail 5767 invoked by uid 0); 15 Jun 2006 21:30:08 -0000
Received: from glarkin@sourcehosting.net by patches by uid 2033 with qmail-scanner-1.20rc1 
 (0.80  Clear:RC:1:. 
 Processed in 3.665302 secs); 15 Jun 2006 21:30:08 -0000
Received: from 68-112-252-252.dhcp.oxfr.ma.charter.com (HELO cube.entropy.prv) (68.112.252.252)
  by 192.168.1.4 with SMTP; 15 Jun 2006 21:30:04 -0000
Received: from fuzz-fbsd60.entropy.prv (fuzz-fbsd60.entropy.prv [192.168.1.18])
	by cube.entropy.prv (Postfix) with ESMTP id 9DE5C48F9BC
	for <FreeBSD-gnats-submit@freebsd.org>; Thu, 15 Jun 2006 17:30:03 -0400 (EDT)
Received: from fuzz-fbsd60.entropy.prv (localhost.entropy.prv [127.0.0.1])
	by fuzz-fbsd60.entropy.prv (8.13.4/8.13.4) with ESMTP id k5FLSpgZ001046
	for <FreeBSD-gnats-submit@freebsd.org>; Thu, 15 Jun 2006 17:28:51 -0400 (EDT)
	(envelope-from glarkin@fuzz-fbsd60.entropy.prv)
Received: (from glarkin@localhost)
	by fuzz-fbsd60.entropy.prv (8.13.4/8.13.4/Submit) id k5FLSoji001045;
	Thu, 15 Jun 2006 17:28:50 -0400 (EDT)
	(envelope-from glarkin)
Message-Id: <200606152128.k5FLSoji001045@fuzz-fbsd60.entropy.prv>
Date: Thu, 15 Jun 2006 17:28:50 -0400 (EDT)
From: "Gregory C. Larkin" <glarkin@sourcehosting.net>
Reply-To: "Gregory C. Larkin" <glarkin@sourcehosting.net>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: [maintainer update] Security update to WebCalendar 1.0.4
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         98993
>Category:       ports
>Synopsis:       [maintainer update] Security update to WebCalendar 1.0.4
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    itetcu
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          maintainer-update
>Submitter-Id:   current-users
>Arrival-Date:   Thu Jun 15 21:30:41 GMT 2006
>Closed-Date:    Fri Jun 16 09:18:31 GMT 2006
>Last-Modified:  Fri Jun 16 09:18:31 GMT 2006
>Originator:     Gregory C. Larkin
>Release:        FreeBSD 6.0-RELEASE i386
>Organization:
SourceHosting.net, LLC
>Environment:
System: FreeBSD fuzz-fbsd60.entropy.prv 6.0-RELEASE FreeBSD 6.0-RELEASE #0: Thu Nov 3 09:36:13 UTC 2005 root@x64.samsco.home:/usr/obj/usr/src/sys/GENERIC i386


	
>Description:
	Update port to version 1.0.4 to correct serious security issue.
>How-To-Repeat:
	Please see: http://www.securityfocus.com/archive/1/435379
>Fix:

	Install WebCalendar 1.0.4

--- webcalendar-1.04.patch begins here ---
diff -ruN webcalendar-1.03/Makefile webcalendar/Makefile
--- webcalendar-1.03/Makefile	Sun Apr 23 23:52:02 2006
+++ webcalendar/Makefile	Thu Jun 15 16:49:37 2006
@@ -6,7 +6,7 @@
 #
 
 PORTNAME=	WebCalendar
-DISTVERSION=	1.0.3
+DISTVERSION=	1.0.4
 CATEGORIES=	www
 MASTER_SITES=	${MASTER_SITE_SOURCEFORGE}
 MASTER_SITE_SUBDIR=	webcalendar
@@ -16,8 +16,9 @@
 COMMENT=	A web-based calendar application
 
 USE_PHP=	pcre session ldap
-USE_APACHE=	yes
+WANT_PHP_WEB=	yes
 NO_BUILD=	yes
+
 WRKSRC=		${WRKDIR}/WebCalendar-${DISTVERSION}
 
 WEBWCDIR?=	www/data/WebCalendar
diff -ruN webcalendar-1.03/distinfo webcalendar/distinfo
--- webcalendar-1.03/distinfo	Sun Apr 23 23:52:02 2006
+++ webcalendar/distinfo	Thu Jun 15 16:31:43 2006
@@ -1,3 +1,3 @@
-MD5 (WebCalendar-1.0.3.tar.gz) = 499f9daed1970625e26b8062d4b53f0e
-SHA256 (WebCalendar-1.0.3.tar.gz) = dd974906eaf5bceeca4dbe8ea545b913ac53f79cc68aa9bb7d6a25bce9a962b2
-SIZE (WebCalendar-1.0.3.tar.gz) = 885250
+MD5 (WebCalendar-1.0.4.tar.gz) = 1b356259f64f2331bcc76fada2cd510d
+SHA256 (WebCalendar-1.0.4.tar.gz) = e278d9f1933fb16dc4d1781c2f4a8cd64599d61c547ef7c6b8f952861f3986b7
+SIZE (WebCalendar-1.0.4.tar.gz) = 884919
--- webcalendar-1.04.patch ends here ---


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-ports-bugs->itetcu 
Responsible-Changed-By: itetcu 
Responsible-Changed-When: Fri Jun 16 08:41:53 UTC 2006 
Responsible-Changed-Why:  
I'll take it. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=98993 
State-Changed-From-To: open->feedback 
State-Changed-By: itetcu 
State-Changed-When: Fri Jun 16 08:42:26 UTC 2006 
State-Changed-Why:  
Is there a VuXML entry for this ? If no, could you please submit one ? 

http://www.freebsd.org/cgi/query-pr.cgi?pr=98993 
State-Changed-From-To: feedback->closed 
State-Changed-By: itetcu 
State-Changed-When: Fri Jun 16 09:18:29 UTC 2006 
State-Changed-Why:  
Committed. Thanks! 

http://www.freebsd.org/cgi/query-pr.cgi?pr=98993 
>Unformatted:
