Security fix for www/p5-FCGI-Spawn users. Supplemental groups don't use to be dropped by bin/fcgi_spawn. This is not what bin/fcgi_spawn has the '-g' switch for. More info: https://rt.cpan.org/Ticket/Display.html?id=72408 Thanks: John Lightsey <john@nixnuts.net> Fix: Update the port to v0.16.2. Shell archive of the port is supplied (follows). How-To-Repeat: If you 'print `/usr/bin/id`, "\n";' in your CGI program running with www/p5-FCGI-Spawn, you'll see supplemental groups in the output.
Class Changed From-To: change-request->maintainer-update Fix category (submitter is maintainer) (via the GNATS Auto Assign Tool)
Responsible Changed From-To: freebsd-ports-bugs->perl perl@ wants this port PRs (via the GNATS Auto Assign Tool)
Responsible Changed From-To: perl->culot I'll take it.
Author: culot Date: Wed Feb 27 10:22:10 2013 New Revision: 313043 URL: http://svnweb.freebsd.org/changeset/ports/313043 Log: - Update to 0.16.7 [1] - Add TEST_DEPENDS - Trim Makefile's header - Pet portlint(1) by converting spaces into tabs in Makefile Changes: http://search.cpan.org/dist/FCGI-Spawn/Changes PR: ports/173698 [1] (based on) Submitted by: Peter Vereshagin <peter@vereshagin.org> (maintainer) Modified: head/www/p5-FCGI-Spawn/Makefile head/www/p5-FCGI-Spawn/distinfo head/www/p5-FCGI-Spawn/pkg-plist Modified: head/www/p5-FCGI-Spawn/Makefile ============================================================================== --- head/www/p5-FCGI-Spawn/Makefile Wed Feb 27 09:43:32 2013 (r313042) +++ head/www/p5-FCGI-Spawn/Makefile Wed Feb 27 10:22:10 2013 (r313043) @@ -1,12 +1,8 @@ -# New ports collection makefile for: p5-FCGI-Spawn -# Date created: 2007-12-28 -# Whom: Peter <peter@vereshagin.org> -# +# Created by: Peter <peter@vereshagin.org> # $FreeBSD$ -# PORTNAME= FCGI-Spawn -PORTVERSION= 0.16.1 +PORTVERSION= 0.16.7 CATEGORIES= www perl5 MASTER_SITES= CPAN PKGNAMEPREFIX= p5- @@ -14,17 +10,22 @@ PKGNAMEPREFIX= p5- MAINTAINER= peter@vereshagin.org COMMENT= FastCGI server for CGI-like applications multiprocessing -RUN_DEPENDS= p5-FCGI-ProcManager>=0:${PORTSDIR}/www/p5-FCGI-ProcManager +BUILD_DEPENDS= p5-Const-Fast>0:${PORTSDIR}/devel/p5-Const-Fast \ + p5-FCGI>0:${PORTSDIR}/www/p5-FCGI \ + p5-FCGI-ProcManager>0:${PORTSDIR}/www/p5-FCGI-ProcManager +RUN_DEPENDS:= ${BUILD_DEPENDS} +TEST_DEPENDS= p5-Test-Most>0:${PORTSDIR}/devel/p5-Test-Most \ + p5-Test-Strict>0:${PORTSDIR}/devel/p5-Test-Strict PERL_CONFIGURE= yes -USE_RC_SUBR+= fcgi_spawn +USE_RC_SUBR+= fcgi_spawn -MAN3= FCGI::Spawn.3 +MAN3= FCGI::Spawn.3 FCGI::Spawn::BinUtils.3 MAN1= fcgi_spawn.1 -OPTIONS= MYSQL "MySQL dependency to run on RC start" off \ - PGSQL "PgSQL dependency to run on RC start" off +OPTIONS= MYSQL "MySQL dependency to run on RC start" off \ + PGSQL "PgSQL dependency to run on RC start" off .include <bsd.port.pre.mk> @@ -47,8 +48,7 @@ post-install: @${MKDIR} ${PREFIX}/etc/fcgi_spawn @${INSTALL_DATA} ${WRKSRC}/fcgi_spawn.conf.sample ${PREFIX}/etc/fcgi_spawn @${MKDIR} ${PREFIX}/share/doc/${PKGNAMEPREFIX}${PORTNAME} - @${INSTALL_DATA} ${WRKSRC}/README ${WRKSRC}/Bugzilla.CGI.pm.fcgi.spawn.patch ${WRKSRC}/CGI.pm.fcgi.spawn.patch \ - ${PREFIX}/share/doc/${PKGNAMEPREFIX}${PORTNAME} + @${INSTALL_DATA} ${WRKSRC}/README ${PREFIX}/share/doc/${PKGNAMEPREFIX}${PORTNAME} @${CAT} ${PKGMESSAGE} .include <bsd.port.post.mk> Modified: head/www/p5-FCGI-Spawn/distinfo ============================================================================== --- head/www/p5-FCGI-Spawn/distinfo Wed Feb 27 09:43:32 2013 (r313042) +++ head/www/p5-FCGI-Spawn/distinfo Wed Feb 27 10:22:10 2013 (r313043) @@ -1,2 +1,2 @@ -SHA256 (FCGI-Spawn-0.16.1.tar.gz) = 8163dd5d78e6c29197ef6f97f6429cbf4e5a800b668b6162fa18b9da6c330d49 -SIZE (FCGI-Spawn-0.16.1.tar.gz) = 27199 +SHA256 (FCGI-Spawn-0.16.7.tar.gz) = 22ea38ecf0ff21ad811f1c3c14a4dcd3f628752db03542ca094b58e8cc6003c5 +SIZE (FCGI-Spawn-0.16.7.tar.gz) = 30436 Modified: head/www/p5-FCGI-Spawn/pkg-plist ============================================================================== --- head/www/p5-FCGI-Spawn/pkg-plist Wed Feb 27 09:43:32 2013 (r313042) +++ head/www/p5-FCGI-Spawn/pkg-plist Wed Feb 27 10:22:10 2013 (r313043) @@ -1,12 +1,12 @@ %%SITE_PERL%%/FCGI/Spawn.pm +%%SITE_PERL%%/FCGI/Spawn/BinUtils.pm %%SITE_PERL%%/%%PERL_ARCH%%/auto/FCGI/Spawn/.packlist bin/fcgi_spawn etc/fcgi_spawn/fcgi_spawn.conf.sample -share/doc/p5-FCGI-Spawn/CGI.pm.fcgi.spawn.patch share/doc/p5-FCGI-Spawn/README -share/doc/p5-FCGI-Spawn/Bugzilla.CGI.pm.fcgi.spawn.patch @dirrmtry %%SITE_PERL%%/%%PERL_ARCH%%/auto/FCGI/Spawn @dirrmtry %%SITE_PERL%%/%%PERL_ARCH%%/auto/FCGI +@dirrmtry %%SITE_PERL%%/FCGI/Spawn @dirrmtry %%SITE_PERL%%/FCGI @dirrmtry share/doc/p5-FCGI-Spawn @dirrmtry etc/fcgi_spawn _______________________________________________ svn-ports-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/svn-ports-all To unsubscribe, send any mail to "svn-ports-all-unsubscribe@freebsd.org"
State Changed From-To: open->closed I updated the port to 0.16.7 based on your submissions. Thanks and sorry for the (long) delay in handling your PR.