Re: pkg/46519: [Patch]sysutils/ups-nut: a security patch for CVE-2012-2944

[wen heping <wenheping%gmail.com@localhost>]

The following reply was made to PR pkg/46519; it has been noted by GNATS.

From: wen heping <wenheping%gmail.com@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: pkg-manager%netbsd.org@localhost, gnats-admin%netbsd.org@localhost, 
pkgsrc-bugs%netbsd.org@localhost
Subject: Re: pkg/46519: [Patch]sysutils/ups-nut: a security patch for 
CVE-2012-2944
Date: Sun, 3 Jun 2012 21:13:24 +0800

 --20cf3071cc4ab50fc004c1912ec0
 Content-Type: text/plain; charset=UTF-8
 
 2012/6/3 OBATA Akio <obache%netbsd.org@localhost>
 
 > The following reply was made to PR pkg/46519; it has been noted by GNATS.
 >
 > From: "OBATA Akio" <obache%netbsd.org@localhost>
 > To: gnats-bugs%netbsd.org@localhost
 > Cc:
 > Subject: Re: pkg/46519: [Patch]sysutils/ups-nut: a security patch for
 >  CVE-2012-2944
 > Date: Sun, 03 Jun 2012 21:48:06 +0900
 >
 >  On Sun, 03 Jun 2012 00:20:01 +0900, <wenheping%gmail.com@localhost> wrote:
 >
 >  > Index: Makefile.common
 >  > ===================================================================
 >  > RCS file: /cvsroot/pkgsrc/sysutils/ups-nut/Makefile.common,v
 >  > retrieving revision 1.3
 >  > diff -u -p -r1.3 Makefile.common
 >  > --- Makefile.common  29 Jul 2011 15:11:40 -0000      1.3
 >  > +++ Makefile.common  2 Jun 2012 15:09:46 -0000
 >  > @@ -6,6 +6,7 @@
 >  >  # used by sysutils/p5-ups-nut/Makefile
 >  > DISTNAME=            nut-2.6.1
 >  > +PKGREVISION=                1
 >  >  CATEGORIES=         sysutils
 >  >  MASTER_SITES=               http://www.networkupstools.org/source/2.6/
 >
 >  Please not put PKGREVISION in Makefile.common.
 >  It may be bumped separately for each sub packages.
 >
 >  > RCS file: patches/patch-ad
 >  > diff -N patches/patch-ad
 >  > --- /dev/null        1 Jan 1970 00:00:00 -0000
 >  > +++ patches/patch-ad 2 Jun 2012 15:09:46 -0000
 >
 >  Please use new patch name scheme (patch-common_parseconf.c).
 >
 >  For PKGREVISION, patched files is common file, I don't know which sub
 >  packages are using the code.
 >  How about simply update to 2.6.4, it contains the fix?
 >
 
 Update to 2.6.4 is a better way but it need more work.
 I would try it later.
 
 wen
 
 
 >
 >  --
 >  OBATA Akio / obache%NetBSD.org@localhost
 >
 >
 
 --20cf3071cc4ab50fc004c1912ec0
 Content-Type: text/html; charset=UTF-8
 Content-Transfer-Encoding: quoted-printable
 
 <br><br><div class=3D"gmail_quote">2012/6/3 OBATA Akio <span dir=3D"ltr">&l=
 t;<a href=3D"mailto:obache%netbsd.org@localhost"; 
target=3D"_blank">obache%netbsd.org@localhost<=
 /a>&gt;</span><br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .=
 8ex;border-left:1px #ccc solid;padding-left:1ex">
 The following reply was made to PR pkg/46519; it has been noted by GNATS.<b=
 r>
 <br>
 From: &quot;OBATA Akio&quot; &lt;<a 
href=3D"mailto:obache%netbsd.org@localhost";>obach=
 e%netbsd.org@localhost</a>&gt;<br>
 To: <a 
href=3D"mailto:gnats-bugs%netbsd.org@localhost";>gnats-bugs%netbsd.org@localhost</a><br>
 Cc:<br>
 Subject: Re: pkg/46519: [Patch]sysutils/ups-nut: a security patch for<br>
 =C2=A0CVE-2012-2944<br>
 Date: Sun, 03 Jun 2012 21:48:06 +0900<br>
 <div class=3D"im"><br>
 =C2=A0On Sun, 03 Jun 2012 00:20:01 +0900, &lt;<a href=3D"mailto:wenheping@g=
 mail.com">wenheping%gmail.com@localhost</a>&gt; wrote:<br>
 <br>
 =C2=A0&gt; Index: Makefile.common<br>
 =C2=A0&gt; =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<br>
 =C2=A0&gt; RCS file: /cvsroot/pkgsrc/sysutils/ups-nut/Makefile.common,v<br>
 =C2=A0&gt; retrieving revision 1.3<br>
 =C2=A0&gt; diff -u -p -r1.3 Makefile.common<br>
 =C2=A0&gt; --- Makefile.common =C2=A029 Jul 2011 15:11:40 -0000 =C2=A0 =C2=
 =A0 =C2=A01.3<br>
 =C2=A0&gt; +++ Makefile.common =C2=A02 Jun 2012 15:09:46 -0000<br>
 =C2=A0&gt; @@ -6,6 +6,7 @@<br>
 =C2=A0&gt; =C2=A0# used by sysutils/p5-ups-nut/Makefile<br>
 =C2=A0&gt; DISTNAME=3D =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0nut-2.6.1<b=
 r>
 =C2=A0&gt; +PKGREVISION=3D =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=
  =C2=A01<br>
 =C2=A0&gt; =C2=A0CATEGORIES=3D =C2=A0 =C2=A0 =C2=A0 =C2=A0 sysutils<br>
 =C2=A0&gt; =C2=A0MASTER_SITES=3D =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
 =C2=A0 <a href=3D"http://www.networkupstools.org/source/2.6/"; target=3D"_bl=
 ank">http://www.networkupstools.org/source/2.6/</a><br>
 <br>
 </div>=C2=A0Please not put PKGREVISION in Makefile.common.<br>
 =C2=A0It may be bumped separately for each sub packages.<br>
 <div class=3D"im"><br>
 =C2=A0&gt; RCS file: patches/patch-ad<br>
 =C2=A0&gt; diff -N patches/patch-ad<br>
 =C2=A0&gt; --- /dev/null =C2=A0 =C2=A0 =C2=A0 =C2=A01 Jan 1970 00:00:00 -00=
 00<br>
 =C2=A0&gt; +++ patches/patch-ad 2 Jun 2012 15:09:46 -0000<br>
 <br>
 </div>=C2=A0Please use new patch name scheme (patch-common_parseconf.c).<br=
 >
 <br>
 =C2=A0For PKGREVISION, patched files is common file, I don&#39;t know which=
  sub<br>
 =C2=A0packages are using the code.<br>
 =C2=A0How about simply update to 2.6.4, it contains the fix?<br></blockquot=
 e><div><br></div><div>Update to 2.6.4 is a better way but it need more work=
 .</div><div>I would try it later.</div><div><br></div><div>wen</div><div>=
 =C2=A0</div>
 <blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
 x #ccc solid;padding-left:1ex">
 <br>
 =C2=A0--<br>
 =C2=A0OBATA Akio / obache%NetBSD.org@localhost<br>
 <br>
 </blockquote></div><br>
 
 --20cf3071cc4ab50fc004c1912ec0--