Bug 155027 - [UPDATE] www/hiawatha
Summary: [UPDATE] www/hiawatha
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Greg Larkin
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-02-25 13:40 UTC by Carlo Strub
Modified: 2011-03-17 17:50 UTC (History)
0 users

See Also:

Attachments
file.diff (1.16 KB, patch)
2011-02-25 13:40 UTC, Carlo Strub 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Carlo Strub freebsd_committer freebsd_triage 2011-02-25 13:40:09 UTC 
There has been a serious bug found in the current version of hiawatha. The following patch fixes that:

http://www.hiawatha-webserver.org/weblog/16

Fix: Patch attached with submission follows:
Comment 1 Edwin Groothuis freebsd_committer freebsd_triage 2011-02-25 13:40:16 UTC 
Responsible Changed
From-To: freebsd-ports-bugs->glarkin

glarkin@ wants his PRs (via the GNATS Auto Assign Tool)
Comment 2 dfilter service freebsd_committer freebsd_triage 2011-03-17 17:45:49 UTC 
glarkin     2011-03-17 17:45:41 UTC

  FreeBSD ports repository

  Modified files:
    www/hiawatha         Makefile 
  Added files:
    www/hiawatha/files   patch-hiawatha.c 
  Log:
  - Added patch to circumvent integer overflow in Content-Length header
    parsing, until new upstream package is released.
  
  PR:             ports/155027
  Submitted by:   C-S <c-s@c-s.li>
  Security:       b13414c9-50ba-11e0-975a-000c29cc39d3
  Security:       http://www.hiawatha-webserver.org/weblog/16
  Security:       http://secunia.com/advisories/43660/
  
  Revision  Changes    Path
  1.29      +1 -0      ports/www/hiawatha/Makefile
  1.1       +19 -0     ports/www/hiawatha/files/patch-hiawatha.c (new)
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
Comment 3 Greg Larkin freebsd_committer freebsd_triage 2011-03-17 17:45:54 UTC 
State Changed
From-To: open->closed

Committed along with new entry in VuXML database, thank you!