[pkgsrc/pkgsrc-2007Q3]: pkgsrc/www/drupal Pullup ticket 2203 - requested by a...

[ghen <ghen%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/3422a48db2a9
branches:  pkgsrc-2007Q3
changeset: 534018:3422a48db2a9
user:      ghen <ghen%pkgsrc.org@localhost>
date:      Mon Oct 22 11:37:28 2007 +0000

description:
Pullup ticket 2203 - requested by adrianp
security update for drupal

- pkgsrc/www/drupal/Makefile                            1.24
- pkgsrc/www/drupal/distinfo                            1.17

   Module Name: pkgsrc
   Committed By:        adrianp
   Date:                Thu Oct 18 13:01:36 UTC 2007

   Modified Files:
           pkgsrc/www/drupal: Makefile distinfo

   Log Message:
   Update to 5.3

   Fix a number of security issues:
   SA-2007-024 - Drupal Core - HTTP response splitting
   SA-2007-025 - Drupal Core - Arbitrary code execution via installer.
   SA-2007-026 - Drupal Core - Cross site scripting via uploads
   SA-2007-029 - Drupal Core - User deletion cross site request forgery
   SA-2007-030 - Drupal Core - API handling of unpublished comment

   Bugs:
   Redirect to home page after user registration requiring admin approval.
   More correct wording since some modules will actually work despite warning.
   variable search_cron_limit was not removed on search uninstall
   Append to instead of overwrite #suffix.
   hide administration pages links on module help pages if there are no
   admin links for the module

   See http://drupal.org/node/184395 for all the details

diffstat:

 www/drupal/Makefile |  14 ++++++++++++--
 www/drupal/distinfo |   8 ++++----
 2 files changed, 16 insertions(+), 6 deletions(-)

diffs (49 lines):

diff -r a98ce961012a -r 3422a48db2a9 www/drupal/Makefile
--- a/www/drupal/Makefile       Mon Oct 22 11:23:32 2007 +0000
+++ b/www/drupal/Makefile       Mon Oct 22 11:37:28 2007 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.23 2007/07/27 21:44:32 adrianp Exp $
+# $NetBSD: Makefile,v 1.23.2.1 2007/10/22 11:37:28 ghen Exp $
 
-DISTNAME=      drupal-5.2
+DISTNAME=      drupal-5.3
 CATEGORIES=    www
 MASTER_SITES=  http://drupal.org/files/projects/
 
@@ -18,6 +18,8 @@
 PKG_GROUPS_VARS+=      APACHE_GROUP
 PKG_USERS_VARS+=       APACHE_USER
 
+BUILD_DEFS+=           APACHE_USER APACHE_GROUP
+
 OWN_DIRS+=             ${DRUPAL}/sites/default
 OWN_DIRS_PERMS+=       ${DRUPAL}/files ${APACHE_USER} ${APACHE_GROUP} 0750
 
@@ -39,6 +41,14 @@
 .include "../../mk/apachever.mk"
 .include "../../lang/php/phpversion.mk"
 
+.if ${PKG_PHP_VERSION} == "4"
+DEPENDS+=      php>=4.4.7:../../www/php4
+.endif
+
+.if ${PKG_PHP_VERSION} == "5"
+DEPENDS+=      php>=5.2.4:../../lang/php5
+.endif
+
 .include "options.mk"
 
 post-extract:
diff -r a98ce961012a -r 3422a48db2a9 www/drupal/distinfo
--- a/www/drupal/distinfo       Mon Oct 22 11:23:32 2007 +0000
+++ b/www/drupal/distinfo       Mon Oct 22 11:37:28 2007 +0000
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.16 2007/07/27 21:44:32 adrianp Exp $
+$NetBSD: distinfo,v 1.16.2.1 2007/10/22 11:37:28 ghen Exp $
 
-SHA1 (drupal-5.2.tar.gz) = d6460630b5c946c0fff152da5a83ff638fb8b097
-RMD160 (drupal-5.2.tar.gz) = 6a42700b90f046dabbb12dbf8381e3641c595847
-Size (drupal-5.2.tar.gz) = 751205 bytes
+SHA1 (drupal-5.3.tar.gz) = 71aaf830b65ec3c1029855b6ae95b6493ca17ae5
+RMD160 (drupal-5.3.tar.gz) = d6eaa0a3ebe860857a9f212302206db967e2478a
+Size (drupal-5.3.tar.gz) = 753427 bytes