Bug 137965 - ports/squirrelmail: Wrong version/hashs
Summary: ports/squirrelmail: Wrong version/hashs
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Thomas Abthorpe
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-08-19 16:30 UTC by Martin Schweizer
Modified: 2009-08-27 05:40 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Martin Schweizer 2009-08-19 16:30:01 UTC 
As described under http://www.squirrelmail.org/ there was some security issues. Please update the port. The hashs and file version aren't correct.

Fix: 

Change the file and the hashs
How-To-Repeat: make / make install
Comment 1 Martin Wilke freebsd_committer freebsd_triage 2009-08-20 21:50:05 UTC 
Responsible Changed
From-To: freebsd-ports-bugs->tabthorpe

Over to maintainer.
Comment 2 Thomas Abthorpe freebsd_committer freebsd_triage 2009-08-21 14:23:04 UTC 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It is not an exploit, just a bad mirror on garr.

In the meantime, I will host the distfiles on FreeBSD ftp servers, as the next 
version will be out soon.


Thomas
- -- 
Thomas Abthorpe		| FreeBSD Committer
tabthorpe@FreeBSD.org	| http://people.freebsd.org/~tabthorpe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (FreeBSD)

iEYEARECAAYFAkqOn8cACgkQ5Gm/jNBp8qCsowCcD3mNT8UZOB4gfOYCsVI+F9xW
xrMAnj1ucIUHHde2AP1JTLv2Ll1/fSGc
=91zE
-----END PGP SIGNATURE-----
Comment 3 dfilter service freebsd_committer freebsd_triage 2009-08-21 14:45:09 UTC 
tabthorpe    2009-08-21 13:44:56 UTC

  FreeBSD ports repository

  Modified files:
    mail/squirrelmail    Makefile 
  Log:
  - Host distfiles on FreeBSD ftp servers
  
  PR:             ports/137965 (based on)
  Submitted by:   Martin Schweizer <schweizer.martin gmail.com>
  
  Revision  Changes    Path
  1.59      +2 -1      ports/mail/squirrelmail/Makefile
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
Comment 4 Thomas Abthorpe freebsd_committer freebsd_triage 2009-08-21 14:45:28 UTC 
State Changed
From-To: open->closed

Committed. Thanks!
Comment 5 Martin Schweizer 2009-08-25 05:28:41 UTC 
Hello

As you can see still not working. Why?

===>  Vulnerability check disabled, database not found
=> squirrelmail-1.4.19.tar.bz2 doesn't seem to exist in 
/usr/ports/distfiles/squirrelmail.
=> Attempting to fetch from 
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/tabthorpe/.
fetch: squirrelmail-1.4.19.tar.bz2: local modification time does not 
match remote
=> Attempting to fetch from 
ftp://ftp.se.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/tabthorpe/.
fetch: 
ftp://ftp.se.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/tabthorpe/squirrelmail-1.4.19.tar.bz2: 
File unavailable (e.g., file not found, no access)
=> Attempting to fetch from 
ftp://ftp.uk.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/tabthorpe/.
fetch: 
ftp://ftp.uk.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/tabthorpe/squirrelmail-1.4.19.tar.bz2: 
File unavailable (e.g., file not found, no access)
=> Attempting to fetch from 
ftp://ftp.ru.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/tabthorpe/.
fetch: 
ftp://ftp.ru.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/tabthorpe/squirrelmail-1.4.19.tar.bz2: 
Protocol error
=> Attempting to fetch from 
ftp://ftp.jp.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/tabthorpe/.
fetch: squirrelmail-1.4.19.tar.bz2: local modification time does not 
match remote
=> Attempting to fetch from 
ftp://ftp.tw.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/tabthorpe/.
fetch: 
ftp://ftp.tw.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/tabthorpe/squirrelmail-1.4.19.tar.bz2: 
File unavailable (e.g., file not found, no access)
=> Attempting to fetch from 
ftp://ftp.cn.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/tabthorpe/.
fetch: squirrelmail-1.4.19.tar.bz2: local modification time does not 
match remote
=> Attempting to fetch from 
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/squirrelmail/.
SquirrelMail is installed into /usr/local/www/squirrelmail
To use the old location /usr/local/squirrelmail define
WITHOUT_WWWDIR when patching or installing

Use WITH_LDAP to ensure PHP LDAP support is installed
Use WITH_DATABASE to ensure PEAR framework for database support is installed
    (note that this does not install the database specific PEAR support, 
e.g. MySQL)

===>  Vulnerability check disabled, database not found
=> MD5 Checksum mismatch for squirrelmail/squirrelmail-1.4.19.tar.bz2.
=> SHA256 Checksum mismatch for squirrelmail/squirrelmail-1.4.19.tar.bz2.
=> MD5 Checksum OK for squirrelmail/all_locales-1.4.13-20071220.tar.bz2.
=> SHA256 Checksum OK for squirrelmail/all_locales-1.4.13-20071220.tar.bz2.
===>  Giving up on fetching files: 
squirrelmail/squirrelmail-1.4.19.tar.bz2 
squirrelmail/squirrelmail-1.4.19.tar.bz2
Make sure the Makefile and distinfo file 
(/usr/ports/mail/squirrelmail/distinfo)
are up to date.  If you are absolutely sure you want to override this
check, type "make NO_CHECKSUM=yes [other args]".
*** Error code 1

Stop in /usr/ports/mail/squirrelmail.
*** Error code 1

Stop in /usr/ports/mail/squirrelmail.


Regards,

-- 
Martin Schweizer

PC-Service M. Schweizer GmbH; Bannholzstrasse 6; Postfach 132;
CH-8608 Bubikon; Tel. +41 55 243 30 00; Fax: +41 55 243 33 22;
http://www.pc-service.ch
Comment 6 Martin Schweizer 2009-08-27 05:35:50 UTC 
Hello Thomas

I did not work ether. If you download the squirrelmail tar by hand and 
move it to /usr/ports/distfiles/squirrelmail, then it works.

Regards,

-- 
Martin Schweizer

PC-Service M. Schweizer GmbH; Bannholzstrasse 6; Postfach 132;
CH-8608 Bubikon; Tel. +41 55 243 30 00; Fax: +41 55 243 33 22;
http://www.pc-service.ch