ports/178331: unpatched security issues in databases/couchdb

[Garrett Wollman]

The following reply was made to PR ports/178331; it has been noted by GNATS.

From: Garrett Wollman <wollman at bimajority.org>
To: freebsd-gnats-submit at freebsd.org
Cc:  
Subject: Re: ports/178331: unpatched security issues in databases/couchdb
Date: Sun, 26 May 2013 02:47:33 -0400

 The following patch updates the port to 1.2.2.  I tried bringing it
 all the way to the current 1.3 release but ended up with a binary that
 hard-crashed the Erlang VM on startup.
 
 Index: databases/couchdb/Makefile
 ===================================================================
 --- databases/couchdb/Makefile	(revision 319091)
 +++ databases/couchdb/Makefile	(working copy)
 @@ -2,19 +2,19 @@
  # $FreeBSD$
  
  PORTNAME=	couchdb
 -PORTVERSION=	1.2.0
 +PORTVERSION=	1.2.2
  PORTEPOCH=	1
 -PORTREVISION=	2
 +#PORTREVISION=	
  CATEGORIES=	databases
  MASTER_SITES=	${MASTER_SITE_APACHE}
 -MASTER_SITE_SUBDIR=	couchdb/releases/${PORTVERSION}
 +MASTER_SITE_SUBDIR=	couchdb/source/${PORTVERSION}
  DISTNAME=	apache-couchdb-${PORTVERSION}
  
  MAINTAINER=	till at php.net
  COMMENT=	A document database server, accessible via a RESTful JSON API
  
  LIB_DEPENDS=	icudata:${PORTSDIR}/devel/icu \
 -		js:${PORTSDIR}/lang/spidermonkey17 \
 +		mozjs185:${PORTSDIR}/lang/spidermonkey185 \
  		curl:${PORTSDIR}/ftp/curl
  BUILD_DEPENDS=	${LOCALBASE}/bin/help2man:${PORTSDIR}/misc/help2man \
  		erlc:${PORTSDIR}/lang/erlang
 @@ -35,6 +35,11 @@
  		--with-js-lib=${LOCALBASE}/lib
  PLIST_SUB+=	PORTVERSION="${PORTVERSION}"
  
 +# Override default value of ${STRIP} because the underlying makefile
 +# erroneously tries to install a shell script with ${STRIP}, causing
 +# an install error.
 +STRIP=""
 +
  MAN1=	couchdb.1 couchjs.1
  
  .include <bsd.port.options.mk>
 Index: databases/couchdb/distinfo
 ===================================================================
 --- databases/couchdb/distinfo	(revision 319091)
 +++ databases/couchdb/distinfo	(working copy)
 @@ -1,2 +1,2 @@
 -SHA256 (apache-couchdb-1.2.0.tar.gz) = 0f254ddea2471dbc4d3c6cd1fa61e4782c75475fb325024e10f68bf1aa8d5c37
 -SIZE (apache-couchdb-1.2.0.tar.gz) = 1326925
 +SHA256 (apache-couchdb-1.2.2.tar.gz) = 6824b9eec0c05d022ef52f663074c67eca5493d848574ff2d73611e92bff8701
 +SIZE (apache-couchdb-1.2.2.tar.gz) = 1408271