Bug 56706 - [maintainer]fix BBCode vulnerability & pgsql problem in phpbb
Summary: [maintainer]fix BBCode vulnerability & pgsql problem in phpbb
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-ports-bugs (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-09-11 17:00 UTC by Kang Liu
Modified: 2003-09-17 19:20 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Kang Liu 2003-09-11 17:00:32 UTC 
Ivanchenko V. I. [webmaster@asiamusic.ru] and  send me a patch that can fix BBCode vulnerability & pgsql problem in phpbb.
Reference: Vulnerability in BBCode - serious http://www.phpbb.com/phpBB/viewtopic.php?t=135116

When I try to fetch "the latest phpbb2.0.6" from sourceforge, .
it seems that the developers have updated their files but didn't change the version number.

Fix: Thank Ivanchenko V. I. for sending me the patch, as the phpbb developers have applied that patch,
What I should do now is just dump the PORTREVISION and update the distinfo.
Here is my patch:



PORTNAME=	phpbb
 PORTVERSION=	2.0.6
-PORTREVISION=	1
+PORTREVISION=	2
 CATEGORIES=	www
 MASTER_SITES=	${MASTER_SITE_SOURCEFORGE}
 MASTER_SITE_SUBDIR=	${PORTNAME}--xd8D1mrEdu0LRQ3B1jo0d0jdgogp0SlFzUvrwIzsv4mPVgsK
Content-Type: text/plain; name="file.diff"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="file.diff"

Index: distinfo
===================================================================
RCS file: /home/ncvs/ports/www/phpbb/distinfo,v
retrieving revision 1.5
diff -u -r1.5 distinfo
--- distinfo	24 Aug 2003 11:37:24 -0000	1.5
+++ distinfo	11 Sep 2003 15:39:11 -0000
@@ -1 +1 @@
-MD5 (phpBB-2.0.6.tar.bz2) = 28f20c82fce9ad6329b937c967eb1c72
+MD5 (phpBB-2.0.6.tar.bz2) = ee73baaac8f2f72c2a1d879ea811bd07
Index: Makefile
===================================================================
RCS file: /home/ncvs/ports/www/phpbb/Makefile,v
retrieving revision 1.12
diff -u -r1.12 Makefile
--- Makefile	30 Aug 2003 17:24:14 -0000	1.12
+++ Makefile	11 Sep 2003 15:39:11 -0000
@@ -7,7 +7,7 @@
How-To-Repeat: n/a
Comment 1 Kang Liu 2003-09-15 11:37:52 UTC 
It is a security update. 
In addition the phpbb is broken(checksum) now.
Comment 2 Joe Marcus Clarke 2003-09-15 20:17:28 UTC 
On Mon, 15 Sep 2003, Kang Liu wrote:

> It is a security update.
> In addition the phpbb is broken(checksum) now.
>

All build fixes do not need portmgr approval.

Joe


>
>

PGP Key : http://www.marcuscom.com/pgp.asc
Comment 3 Kirill Ponomarev freebsd_committer freebsd_triage 2003-09-17 19:20:35 UTC 
State Changed
From-To: open->closed

Committed, thanks!