ports/76735: NON-MAINTAINER UPDATE: www/awstats to 6.3 (includes critical security fix)

Thu Jan 27 02:10:08 UTC 2005

>Number:         76735
>Category:       ports
>Synopsis:       NON-MAINTAINER UPDATE: www/awstats to 6.3 (includes critical security fix)
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Thu Jan 27 02:10:07 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Andrew J. Caines
>Release:        FreeBSD 5.3-STABLE i386
>Organization:
H.A.L. Plant 
>Environment:


System: hal9000.halplant.com 4.10-STABLE FreeBSD 4.10-STABLE #0: Thu Nov 11 11:29:19 EST 2004     root at hal9000.halplant.com:/data/obj/data/src/sys/HAL9000  i386



>Description:


Update awstats 6.2 to 6.3, including a fix for an active remote exploit[1].

Patch includes additional pkg-plist changes.

[1] See eg. http://xforce.iss.net/xforce/xfdb/18910


>How-To-Repeat:


Apply the patch[1].

[1] http://halplant.com:88/software/FreeBSD/ports/awstats-6.3.patch


>Fix:

--- awstats-6.3.patch begins here ---
diff -ruN awstats/Makefile awstats-6.3/Makefile
--- awstats/Makefile	Tue Jan 18 07:38:13 2005
+++ awstats-6.3/Makefile	Tue Jan 25 23:33:10 2005
@@ -6,7 +6,7 @@
 #
 
 PORTNAME=	awstats
-PORTVERSION=	6.2
+PORTVERSION=	6.3
 CATEGORIES=	www
 MASTER_SITES=	${MASTER_SITE_SOURCEFORGE}
 MASTER_SITE_SUBDIR=	${PORTNAME}
@@ -15,8 +15,6 @@
 MAINTAINER=	webmaster at lightningfire.net
 COMMENT=	Free real-time logfile analyzer to get advanced web statistics
 
-FORBIDDEN=	http://vuxml.FreeBSD.org/0f5a2b4d-694b-11d9-a9e7-0001020eed82.html
-
 RUN_DEPENDS=	${SITE_PERL}/Net/XWhois.pm:${PORTSDIR}/net/p5-Net-XWhois
 
 NO_BUILD=	yes
@@ -51,7 +49,7 @@
 	${INSTALL_SCRIPT} ${WRKSRC}/tools/logresolvemerge.pl ${PREFIX}/www/awstats/tools
 	${INSTALL_SCRIPT} ${WRKSRC}/tools/maillogconvert.pl ${PREFIX}/www/awstats/tools
 	${INSTALL_SCRIPT} ${WRKSRC}/tools/urlaliasbuilder.pl ${PREFIX}/www/awstats/tools
-	${INSTALL_SCRIPT} ${WRKSRC}/tools/webmin/awstats-1.4.wbm ${PREFIX}/www/awstats/tools/webmin
+	${INSTALL_SCRIPT} ${WRKSRC}/tools/webmin/awstats-1.5.wbm ${PREFIX}/www/awstats/tools/webmin
 	${INSTALL_SCRIPT} ${WRKSRC}/wwwroot/cgi-bin/awredir.pl ${PREFIX}/www/awstats/cgi-bin
 	${INSTALL_DATA} ${WRKSRC}/wwwroot/cgi-bin/awstats.model.conf ${PREFIX}/www/awstats/cgi-bin
 	${INSTALL_SCRIPT} ${WRKSRC}/wwwroot/cgi-bin/awstats.pl ${PREFIX}/www/awstats/cgi-bin
diff -ruN awstats/distinfo awstats-6.3/distinfo
--- awstats/distinfo	Fri Dec 31 06:35:09 2004
+++ awstats-6.3/distinfo	Tue Jan 25 23:38:16 2005
@@ -1,2 +1,2 @@
-MD5 (awstats-6.2.tgz) = ee3096899d40e23ecdc897d752b79ac8
-SIZE (awstats-6.2.tgz) = 860606
+MD5 (awstats-6.3.tgz) = 4335067362c3033ca2c03e08abc67d73
+SIZE (awstats-6.3.tgz) = 936817
diff -ruN awstats/pkg-plist awstats-6.3/pkg-plist
--- awstats/pkg-plist	Fri Dec 31 06:35:09 2004
+++ awstats-6.3/pkg-plist	Wed Jan 26 02:33:28 2005
@@ -1,3 +1,11 @@
+www/awstats/tools/awstats_buildstaticpages.pl
+www/awstats/tools/awstats_configure.pl
+www/awstats/tools/awstats_exportlib.pl
+www/awstats/tools/awstats_updateall.pl
+www/awstats/tools/logresolvemerge.pl
+www/awstats/tools/maillogconvert.pl
+www/awstats/tools/urlaliasbuilder.pl
+www/awstats/tools/webmin/awstats-1.5.wbm
 %%PORTDOCS%%%%DOCSDIR%%/COPYING.TXT
 %%PORTDOCS%%%%DOCSDIR%%/LICENSE.TXT
 %%PORTDOCS%%%%DOCSDIR%%/awstats.pdf
@@ -29,12 +37,18 @@
 %%PORTDOCS%%%%DOCSDIR%%/images/awstats_logo5.png
 %%PORTDOCS%%%%DOCSDIR%%/images/awstats_logo6.png
 %%PORTDOCS%%%%DOCSDIR%%/images/license_chart.png
+%%PORTDOCS%%%%DOCSDIR%%/images/screen_shot_1.gif
 %%PORTDOCS%%%%DOCSDIR%%/images/screen_shot_1.jpg
 %%PORTDOCS%%%%DOCSDIR%%/images/screen_shot_1.png
 %%PORTDOCS%%%%DOCSDIR%%/images/screen_shot_2.png
-%%PORTDOCS%%%%DOCSDIR%%/images/screen_shot_3.gif
 %%PORTDOCS%%%%DOCSDIR%%/images/screen_shot_3.png
 %%PORTDOCS%%%%DOCSDIR%%/images/screen_shot_4.png
+%%PORTDOCS%%%%DOCSDIR%%/images/screen_shot_5.png
+%%PORTDOCS%%%%DOCSDIR%%/images/screen_shot_large_1.jpg
+%%PORTDOCS%%%%DOCSDIR%%/images/screen_shot_large_2.jpg
+%%PORTDOCS%%%%DOCSDIR%%/images/screen_shot_large_3.jpg
+%%PORTDOCS%%%%DOCSDIR%%/images/screen_shot_large_4.jpg
+%%PORTDOCS%%%%DOCSDIR%%/images/screen_shot_large_5.jpg
 %%PORTDOCS%%%%DOCSDIR%%/images/star.png
 %%PORTDOCS%%%%DOCSDIR%%/index.html
 %%PORTDOCS%%%%DOCSDIR%%/pad_awstats.htm
@@ -81,11 +95,11 @@
 www/awstats/cgi-bin/lang/awstats-si.txt
 www/awstats/cgi-bin/lang/awstats-sk.txt
 www/awstats/cgi-bin/lang/awstats-sr.txt
-www/awstats/cgi-bin/lang/awstats-tr.txt
 www/awstats/cgi-bin/lang/awstats-th.txt
-www/awstats/cgi-bin/lang/awstats-tt-br.txt
+www/awstats/cgi-bin/lang/awstats-tr.txt
 www/awstats/cgi-bin/lang/awstats-tw.txt
 www/awstats/cgi-bin/lang/awstats-ua.txt
+www/awstats/cgi-bin/lang/awstats-tt-br.txt
 www/awstats/cgi-bin/lang/tooltips_f/awstats-tt-br.txt
 www/awstats/cgi-bin/lang/tooltips_f/awstats-tt-cz.txt
 www/awstats/cgi-bin/lang/tooltips_f/awstats-tt-en.txt
@@ -568,35 +582,27 @@
 www/awstats/icons/other/vu.png
 www/awstats/icons/other/vv.png
 www/awstats/js/awstats_misc_tracker.js
-www/awstats/tools/awstats_buildstaticpages.pl
-www/awstats/tools/awstats_configure.pl
-www/awstats/tools/awstats_exportlib.pl
-www/awstats/tools/awstats_updateall.pl
-www/awstats/tools/logresolvemerge.pl
-www/awstats/tools/maillogconvert.pl
-www/awstats/tools/urlaliasbuilder.pl
-www/awstats/tools/webmin/awstats-1.4.wbm
- at dirrm www/awstats/tools/webmin
- at dirrm www/awstats/tools
- at dirrm www/awstats/js
- at dirrm www/awstats/icons/other
- at dirrm www/awstats/icons/os
- at dirrm www/awstats/icons/mime
- at dirrm www/awstats/icons/flags
- at dirrm www/awstats/icons/cpu
- at dirrm www/awstats/icons/clock
- at dirrm www/awstats/icons/browser
- at dirrm www/awstats/icons
- at dirrm www/awstats/css
- at dirrm www/awstats/classes
- at dirrm www/awstats/cgi-bin/plugins/example
- at dirrm www/awstats/cgi-bin/plugins
- at dirrm www/awstats/cgi-bin/lib
- at dirrm www/awstats/cgi-bin/lang/tooltips_w
- at dirrm www/awstats/cgi-bin/lang/tooltips_m
 @dirrm www/awstats/cgi-bin/lang/tooltips_f
+ at dirrm www/awstats/cgi-bin/lang/tooltips_m
+ at dirrm www/awstats/cgi-bin/lang/tooltips_w
 @dirrm www/awstats/cgi-bin/lang
+ at dirrm www/awstats/cgi-bin/lib
+ at dirrm www/awstats/cgi-bin/plugins/example
+ at dirrm www/awstats/cgi-bin/plugins
 @dirrm www/awstats/cgi-bin
+ at dirrm www/awstats/classes
+ at dirrm www/awstats/css
+ at dirrm www/awstats/icons/browser
+ at dirrm www/awstats/icons/clock
+ at dirrm www/awstats/icons/cpu
+ at dirrm www/awstats/icons/flags
+ at dirrm www/awstats/icons/mime
+ at dirrm www/awstats/icons/os
+ at dirrm www/awstats/icons/other
+ at dirrm www/awstats/icons
+ at dirrm www/awstats/js
+ at dirrm www/awstats/tools/webmin
+ at dirrm www/awstats/tools
 @dirrm www/awstats
 %%PORTDOCS%%@dirrm %%DOCSDIR%%/images
 %%PORTDOCS%%@dirrm %%DOCSDIR%%
--- awstats-6.3.patch ends here ---



>Release-Note:
>Audit-Trail:
>Unformatted:

