Bug 84510 - [SECURITY UPDATE]: Update for www/mambo - Security Patch for 4.5.2.2 to 4.5.2.3
Summary: [SECURITY UPDATE]: Update for www/mambo - Security Patch for 4.5.2.2 to 4.5.2.3
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Sam Lawrance
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-08-03 10:50 UTC by Francisco Alves Cabrita
Modified: 2005-08-04 06:30 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Francisco Alves Cabrita 2005-08-03 10:50:16 UTC
The 4.5.2.3 patch is available that fixes an over-zealous filter on the main content fields and well as plugging a security hole in the voting form submission. It also includes a slight revision to the database class that will give you a small boost in performance.

The Makefile

--- Makefile_SAFE       Wed Aug  3 10:31:46 2005
+++ Makefile    Wed Aug  3 10:24:25 2005
@@ -5,14 +5,12 @@
 # $FreeBSD: ports/www/mambo/Makefile,v 1.4 2005/06/13 14:02:54 pav Exp $

 PORTNAME=      mambo
-PORTVERSION=   4.5.2.2
+PORTVERSION=   4.5.2.3
 CATEGORIES=    www
 MASTER_SITES=  http://mamboforge.net/frs/download.php/4004/:source1 \
-               http://mamboforge.net/frs/download.php/4043/:source2 \
-               http://mamboforge.net/frs/download.php/5886/:source3
+               http://mamboforge.net/frs/download.php/6159/:source2
 DISTFILES=     ${MAMBO_SRC}:source1 \
-               ${MAMBO_PATCH1}:source2 \
-               ${MAMBO_PATCH2}:source3
+               ${MAMBO_PATCH1}:source2

 MAINTAINER=    include@npf.pt.freebsd.org
 COMMENT=       A dynamic web content management system (CMS)
@@ -32,14 +30,12 @@
 DIST_SUBDIR=   ${PORTNAME}

 MAMBO_SRC=     MamboV4.5.2-Stable.tar.gz
-MAMBO_PATCH1=  Patch_4.5.2_to_4.5.2.1.zip
-MAMBO_PATCH2=  Patch_4.5.2_to_4.5.2.2.zip
+MAMBO_PATCH1=  Patch_4.5.2_to_4.5.2.3.zip

 do-extract:
                @${MKDIR} ${WRKSRC}
                @${TAR} -zxf ${DISTDIR}/${DIST_SUBDIR}/${MAMBO_SRC} -C ${WRKSRC}
                @${UNZIP_CMD} -qo ${DISTDIR}/${DIST_SUBDIR}/${MAMBO_PATCH1} -d ${WRKSRC}
-               @${UNZIP_CMD} -qo ${DISTDIR}/${DIST_SUBDIR}/${MAMBO_PATCH2} -d ${WRKSRC}
                @${RM} -rf ${WRKSRC}/templates/rhuk_solarflare # remove empty

 do-install:

The distinfo:

--- distinfo_SAFE       Wed Aug  3 10:41:47 2005
+++ distinfo    Wed Aug  3 10:24:25 2005
@@ -1,6 +1,4 @@
 MD5 (mambo/MamboV4.5.2-Stable.tar.gz) = 6f4f934bc26ceed05137a23a1dcf8a54
 SIZE (mambo/MamboV4.5.2-Stable.tar.gz) = 1561319
-MD5 (mambo/Patch_4.5.2_to_4.5.2.1.zip) = 0dc49db1cf7a5c0ff11d69f05cfae69f
-SIZE (mambo/Patch_4.5.2_to_4.5.2.1.zip) = 32429
-MD5 (mambo/Patch_4.5.2_to_4.5.2.2.zip) = ce66ecab53e6af3215d664a6b24b7ab0
-SIZE (mambo/Patch_4.5.2_to_4.5.2.2.zip) = 88100
+MD5 (mambo/Patch_4.5.2_to_4.5.2.3.zip) = 3202877a1f03b2ff723bf5a2c1f07869
+SIZE (mambo/Patch_4.5.2_to_4.5.2.3.zip) = 88505

The pkg-plist:
--- pkg-plist_SAFE      Wed Aug  3 10:41:50 2005
+++ pkg-plist   Wed Aug  3 10:24:25 2005
@@ -1,7 +1,6 @@
 @exec mkdir -p %D/%%MAMBO_DIR%%/cache/com_banners
 %%MAMBO_DIR%%/CHANGELOG
 %%MAMBO_DIR%%/INSTALL
-%%MAMBO_DIR%%/README
 %%MAMBO_DIR%%/LICENSE
 %%MAMBO_DIR%%/administrator/backups/index.html
 %%MAMBO_DIR%%/administrator/components/com_admin/admin.admin.html.php
@@ -831,6 +830,8 @@
 %%MAMBO_DIR%%/includes/patTemplate/tmpl/page.html
 %%MAMBO_DIR%%/includes/pathway.php
 %%MAMBO_DIR%%/includes/pdf.php
+%%MAMBO_DIR%%/includes/phpInputFilter/index.html
+%%MAMBO_DIR%%/includes/phpInputFilter/class.inputfilter.php
 %%MAMBO_DIR%%/includes/phpmailer/LICENSE
 %%MAMBO_DIR%%/includes/phpmailer/class.phpmailer.php
 %%MAMBO_DIR%%/includes/phpmailer/class.smtp.php
@@ -1194,6 +1195,7 @@
 @dirrm %%MAMBO_DIR%%/language
 @dirrm %%MAMBO_DIR%%/installation/sql
 @dirrm %%MAMBO_DIR%%/installation
+@dirrm %%MAMBO_DIR%%/includes/phpInputFilter/
 @dirrm %%MAMBO_DIR%%/includes/phpmailer/language
 @dirrm %%MAMBO_DIR%%/includes/phpmailer
 @dirrm %%MAMBO_DIR%%/includes/patTemplate/tmpl


and thats all

Francisco Cabrita aka include
 
 --
 Nucleo Portugues de FreeBSD - Core Member
 http://npf.pt.freebsd.org
 http://npf.pt.freebsd.org/~include/
Comment 1 Ceri Davies freebsd_committer freebsd_triage 2005-08-03 11:04:16 UTC
Class Changed
From-To: update->maintainer-update

This is a maintainer security update. 


Comment 2 Ceri Davies freebsd_committer freebsd_triage 2005-08-03 11:04:16 UTC
Responsible Changed
From-To: freebsd-www->freebsd-port-bugs

Reassign to ports team.
Comment 3 Sam Lawrance freebsd_committer freebsd_triage 2005-08-03 15:51:30 UTC
Responsible Changed
From-To: freebsd-port-bugs->lawrance

I'll take this
Comment 4 Sam Lawrance freebsd_committer freebsd_triage 2005-08-04 06:25:01 UTC
State Changed
From-To: open->closed

Committed, thanks!