Re: www/dotproject out of date and vulnerable

2006-09-20 Thread Fred Cox
PR sent. Thanks very much for all of your advice, Fred --- Alex Dupre <[EMAIL PROTECTED]> wrote: > Fred Cox ha scritto: > > So how about this: > > > > Update the version to 2.0.4 to avoid the > > vulnerability. > > > > Modify Makefil

Re: www/dotproject out of date and vulnerable

2006-09-20 Thread Fred Cox
So how about this: Update the version to 2.0.4 to avoid the vulnerability. Modify Makefile to require PHP4: DEFAULT_PHP_VER=4 WANT_PHP_WEB= yes IGNORE_WITH_PHP=5 Add to the files/pkg-message.in to inform the user that they must have a remote or jailed mysql 3.23 or make the published patches.

Re: www/dotproject out of date and vulnerable

2006-09-19 Thread Fred Cox
--- Kris Kennaway <[EMAIL PROTECTED]> wrote: > On Tue, Sep 19, 2006 at 06:25:50PM -0700, Fred Cox > wrote: > > > > > It's still better than the current situation. > > > > > > Publishing packages that will not run because > > > they&#x

Re: www/dotproject out of date and vulnerable

2006-09-19 Thread Fred Cox
--- Kris Kennaway <[EMAIL PROTECTED]> wrote: > On Tue, Sep 19, 2006 at 06:02:52PM -0700, Fred Cox > wrote: > > --- Kris Kennaway <[EMAIL PROTECTED]> wrote: > > > > > On Tue, Sep 19, 2006 at 05:15:45PM -0700, Fred > Cox > > > wrote: >

Re: www/dotproject out of date and vulnerable

2006-09-19 Thread Fred Cox
--- Kris Kennaway <[EMAIL PROTECTED]> wrote: > On Tue, Sep 19, 2006 at 05:15:45PM -0700, Fred Cox > wrote: > > > Actually, it doesn't. It goes ahead and installs > it, > > even though I specified these: > > > > WITH_MYSQL= yes

Re: www/dotproject out of date and vulnerable

2006-09-19 Thread Fred Cox
--- Kris Kennaway <[EMAIL PROTECTED]> wrote: > On Tue, Sep 19, 2006 at 04:19:23PM -0700, Fred Cox > wrote: > > > > No, I guess you've still misunderstood. I don't > > > know how many times I > > > can say this, but let me try to explain on

Re: www/dotproject out of date and vulnerable

2006-09-19 Thread Fred Cox
--- Kris Kennaway <[EMAIL PROTECTED]> wrote: > On Tue, Sep 19, 2006 at 04:00:14PM -0700, Fred Cox > wrote: > > --- Kris Kennaway <[EMAIL PROTECTED]> wrote: > > > > > On Tue, Sep 19, 2006 at 03:25:45PM -0700, Fred > Cox > > > wrote: > >

Re: www/dotproject out of date and vulnerable

2006-09-19 Thread Fred Cox
--- Kris Kennaway <[EMAIL PROTECTED]> wrote: > On Tue, Sep 19, 2006 at 03:25:45PM -0700, Fred Cox > wrote: > > > > > > --- Kris Kennaway <[EMAIL PROTECTED]> wrote: > > > > > "Will fail to package" is pretty far from > perfection

Re: www/dotproject out of date and vulnerable

2006-09-19 Thread Fred Cox
--- Kris Kennaway <[EMAIL PROTECTED]> wrote: > "Will fail to package" is pretty far from perfection > in my book :) > I don't believe I ever said that. It builds fine and even runs, it just has lots of bugs. Can you let me know what I said that gave you that impression? Fred > Mark the por

Re: www/dotproject out of date and vulnerable

2006-09-19 Thread Fred Cox
en if that might take a while. Thanks, Fred --- Kris Kennaway <[EMAIL PROTECTED]> wrote: > On Tue, Sep 19, 2006 at 02:42:37PM -0700, Fred Cox > wrote: > > Would you recommend doing the partial job of > updating > > the port for the vulnerability and requiring PHP4 >

Re: www/dotproject out of date and vulnerable

2006-09-19 Thread Fred Cox
Would you recommend doing the partial job of updating the port for the vulnerability and requiring PHP4 while I work on the ultimate solution? Thanks, Fred --- Kris Kennaway <[EMAIL PROTECTED]> wrote: > On Tue, Sep 19, 2006 at 02:15:53PM -0700, Fred Cox > wrote: > > For my s

Re: www/dotproject out of date and vulnerable

2006-09-19 Thread Fred Cox
t, I think it will break. Is there any way of getting the dotproject dependency on MySQL 3.23 to be stronger than the php4-mysql default dependency on mysql5-client? Thanks, Fred --- Kris Kennaway <[EMAIL PROTECTED]> wrote: > On Tue, Sep 19, 2006 at 12:23:55PM -0700, Fred Cox >

Re: www/dotproject out of date and vulnerable

2006-09-19 Thread Fred Cox
--- Simon Barner <[EMAIL PROTECTED]> wrote: > Hi Fred, > > thanks for your work on this port. Could you please > resubmit the update > as a unified diff and send it as a problem report > (PR). I'm on my way towards doing that, but I want to get it right beforehand. I want to be able to require

Re: www/dotproject out of date and vulnerable

2006-09-19 Thread Fred Cox
what I think is right for the Makefile and distinfo. Any hints? Also, where do I go to get www/dotproject-2.0.2 marked as vulnerable in the portaudit database? Thanks, Fred --- Kris Kennaway <[EMAIL PROTECTED]> wrote: > On Mon, Sep 18, 2006 at 07:00:02PM -0700, Fred Cox > wrote: >

www/dotproject out of date and vulnerable

2006-09-18 Thread Fred Cox
t any problem with dotproject. What's the next step? Fred Cox __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ___ freebsd-ports@freebsd.org ma

Re: RFC: Merging X11BASE to LOCALBASE

2006-07-12 Thread Fred Cox
on <[EMAIL PROTECTED]> wrote: > On 7/12/06, Fred Cox <[EMAIL PROTECTED]> wrote: > > > > What about duplicated file names? > > > > On my desktop: > > > > [EMAIL PROTECTED] ~]$ ls -l > /usr/{X11R6,local}/man/whatis > > -rw-r--r-- 1 root

Re: RFC: Merging X11BASE to LOCALBASE

2006-07-12 Thread Fred Cox
What about duplicated file names? On my desktop: [EMAIL PROTECTED] ~]$ ls -l /usr/{X11R6,local}/man/whatis -rw-r--r-- 1 root wheel 162506 Jul 8 04:15 /usr/X11R6/man/whatis -rw-r--r-- 1 root wheel 48606 Jul 8 04:15 /usr/local/man/whatis [EMAIL PROTECTED] ~]$ ls -l /usr/{X11R6,local}/shar