ports/65631: [PATCH] Update www/neon to 0.24.5 can close PR 65613

"John Merryweather Cooper,Home Office,,(509) 338-9391 " <John Merryweather Cooper coop9211 at uidaho.edu
Fri Apr 16 16:20:19 UTC 2004


>Number:         65631
>Category:       ports
>Synopsis:       [PATCH] Update www/neon to 0.24.5 can close PR 65613
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Fri Apr 16 09:20:18 PDT 2004
>Closed-Date:
>Last-Modified:
>Originator:     John Merryweather Cooper,Home Office,,(509) 338-9391
>Release:        FreeBSD 4.10-BETA i386
>Organization:
>Environment:


System: FreeBSD 4.10-BETA #7: Sat Apr 10 13:03:04 PDT 2004
    root at borgdemon.losaca.adelphia.net:/usr/obj/usr/src/sys/K6-2



>Description:


Versions of www/neon older than 0.24.5 are marked as forbidden because of a security bug.  The one in the tree is 0.24.3.  This has been noted in PR 65613, but no patch has been provided.  This PR rememdies that situation.


>How-To-Repeat:


See security advisory.


>Fix:


--- update-neon-0.24.5 begins here ---
# This is a patch for neon to update it to neon-0.24.5
# 
# To apply this patch:
# STEP 1: Chdir to the source directory.
# STEP 2: Run the 'applypatch' program with this patch file as input.
#
# If you do not have 'applypatch', it is part of the 'makepatch' package
# that you can fetch from the Comprehensive Perl Archive Network:
# http://www.perl.com/CPAN/authors/Johan_Vromans/makepatch-x.y.tar.gz
# In the above URL, 'x' should be 2 or higher.
#
# To apply this patch without the use of 'applypatch':
# STEP 1: Chdir to the source directory.
# STEP 2: Run the 'patch' program with this file as input.
#
#### End of Preamble ####

#### Patch data follows ####
diff -u 'neon/Makefile' 'neon-0.24.5/Makefile'
Index: ./Makefile
--- ./Makefile	Thu Apr 15 19:42:41 2004
+++ ./Makefile	Fri Apr 16 09:02:14 2004
@@ -2,19 +2,16 @@
 # Date created:		13 October 2000
 # Whom:			Mikhail Teterin <mi at aldan.algebra.com>
 #
-# $FreeBSD: ports/www/neon/Makefile,v 1.27 2004/04/16 00:27:02 nectar Exp $
+# $FreeBSD$
 #
 
 PORTNAME=	neon
-PORTVERSION=	0.24.3
-PORTREVISION=	2
+PORTVERSION=	0.24.5
 CATEGORIES=	www
 MASTER_SITES=	http://www.webdav.org/neon/
 
 MAINTAINER=	lev at FreeBSD.org
 COMMENT=	An HTTP and WebDAV client library for Unix systems
-
-FORBIDDEN=	http://vuxml.freebsd.org/84237895-8f39-11d8-8b29-0020ed76ef5a.html
 
 LIB_DEPENDS=	expat.5:${PORTSDIR}/textproc/expat2
 
diff -u 'neon/distinfo' 'neon-0.24.5/distinfo'
Index: ./distinfo
--- ./distinfo	Wed Mar 31 02:55:35 2004
+++ ./distinfo	Fri Apr 16 09:02:28 2004
@@ -1,2 +1,2 @@
-MD5 (neon-0.24.3.tar.gz) = 4cce6d468ffa22d47160874c8920de91
-SIZE (neon-0.24.3.tar.gz) = 575864
+MD5 (neon-0.24.5.tar.gz) = 69c2a079ea0ab01c6c39e8e01a58c665
+SIZE (neon-0.24.5.tar.gz) = 599383
#### End of Patch data ####

#### ApplyPatch data follows ####
# Data version        : 1.0
# Date generated      : Fri Apr 16 09:08:11 2004
# Generated by        : makepatch 2.00
# Recurse directories : Yes
# p 'Makefile' 2620 1082131334 0100644
# p 'distinfo' 95 1082131348 0100644
#### End of ApplyPatch data ####

#### End of Patch kit [created: Fri Apr 16 09:08:11 2004] ####
#### Checksum: 65 2107 25868 ####
--- update-neon-0.24.5 ends here ---



>Release-Note:
>Audit-Trail:
>Unformatted:



More information about the freebsd-ports-bugs mailing list