These patches address the following vulnerabilities in phpLDAPadmin:
http://securityfocus.com/archive/1/409624/30/0/threaded
I expect there to be a final stable 0.9.7 release in the next couple of
weeks, but this strikes me as something we shouldn't sit on.
Index: Makefile
===================================================================
RCS file: /cvs/ports/www/phpldapadmin/Makefile,v
retrieving revision 1.2
diff -u -r1.2 Makefile
--- Makefile 2005/04/04 19:19:57 1.2
+++ Makefile 2005/08/31 16:55:19
@@ -2,7 +2,7 @@
COMMENT= "web-based LDAP browser to manage LDAP servers"
-VERSION= 0.9.6
+VERSION= 0.9.7-alpha6
DISTNAME= phpldapadmin-${VERSION}
CATEGORIES= www
HOMEPAGE= http://phpldapadmin.sourceforge.net/
Index: pkg/PLIST
===================================================================
RCS file: /cvs/ports/www/phpldapadmin/pkg/PLIST,v
retrieving revision 1.2
diff -u -r1.2 PLIST
--- pkg/PLIST 2005/04/04 19:19:57 1.2
+++ pkg/PLIST 2005/08/31 16:57:29
@@ -17,7 +17,7 @@
phpldapadmin-${VERSION}/compare.php
phpldapadmin-${VERSION}/compare_form.php
phpldapadmin-${VERSION}/config.php.example
[EMAIL PROTECTED] phpldapadmin-${VERSION}/config.php
+phpldapadmin-${VERSION}/config_default.php
phpldapadmin-${VERSION}/copy.php
phpldapadmin-${VERSION}/copy_form.php
phpldapadmin-${VERSION}/create.php
@@ -233,6 +233,7 @@
phpldapadmin-${VERSION}/images/device.png
phpldapadmin-${VERSION}/images/document.png
phpldapadmin-${VERSION}/images/door.png
+phpldapadmin-${VERSION}/images/error.png
phpldapadmin-${VERSION}/images/files.png
phpldapadmin-${VERSION}/images/find.png
phpldapadmin-${VERSION}/images/folder.png
@@ -248,6 +249,7 @@
phpldapadmin-${VERSION}/images/locality.png
phpldapadmin-${VERSION}/images/lock.png
phpldapadmin-${VERSION}/images/logo.jpg
+phpldapadmin-${VERSION}/images/logo_small.jpg
phpldapadmin-${VERSION}/images/mail.png
phpldapadmin-${VERSION}/images/mail_account.png
phpldapadmin-${VERSION}/images/mail_alias.png
@@ -267,6 +269,7 @@
phpldapadmin-${VERSION}/images/process.png
phpldapadmin-${VERSION}/images/refresh.png
phpldapadmin-${VERSION}/images/rename.png
+phpldapadmin-${VERSION}/images/rfc.png
phpldapadmin-${VERSION}/images/save.png
phpldapadmin-${VERSION}/images/server-settings.png
phpldapadmin-${VERSION}/images/server-small.png
@@ -356,7 +359,12 @@
phpldapadmin-${VERSION}/session_functions.php
phpldapadmin-${VERSION}/style.css
phpldapadmin-${VERSION}/syslog.php
+phpldapadmin-${VERSION}/template_engine.php
+phpldapadmin-${VERSION}/template_functions.php
phpldapadmin-${VERSION}/templates/
+phpldapadmin-${VERSION}/templates/alias.xml
+phpldapadmin-${VERSION}/templates/courierMailAccount.xml
+phpldapadmin-${VERSION}/templates/courierMailAlias.xml
phpldapadmin-${VERSION}/templates/creation/
phpldapadmin-${VERSION}/templates/creation/custom.php
phpldapadmin-${VERSION}/templates/creation/new_address_template.php
@@ -382,12 +390,29 @@
phpldapadmin-${VERSION}/templates/creation/new_smbgroup_template.php
phpldapadmin-${VERSION}/templates/creation/new_smbuser_template.php
phpldapadmin-${VERSION}/templates/creation/new_user_template.php
+phpldapadmin-${VERSION}/templates/dNSDomain.xml
+phpldapadmin-${VERSION}/templates/example.xml
+phpldapadmin-${VERSION}/templates/inetOrgPerson.xml
+phpldapadmin-${VERSION}/templates/kolabPerson.xml
phpldapadmin-${VERSION}/templates/modification/
phpldapadmin-${VERSION}/templates/modification/default.php
phpldapadmin-${VERSION}/templates/modification/group_of_names.php
phpldapadmin-${VERSION}/templates/modification/samba_account.php
phpldapadmin-${VERSION}/templates/modification/user.php
+phpldapadmin-${VERSION}/templates/mozillaOrgPerson.xml
+phpldapadmin-${VERSION}/templates/organizationalRole.xml
+phpldapadmin-${VERSION}/templates/ou.xml
+phpldapadmin-${VERSION}/templates/posixAccount.xml
+phpldapadmin-${VERSION}/templates/posixGroup.xml
+phpldapadmin-${VERSION}/templates/sendmailMTAAliasObject.xml
+phpldapadmin-${VERSION}/templates/sendmailMTAClass.xml
+phpldapadmin-${VERSION}/templates/sendmailMTACluster.xml
+phpldapadmin-${VERSION}/templates/sendmailMTAMapObject.xml
+phpldapadmin-${VERSION}/templates/sendmailVirtualDomain.xml
+phpldapadmin-${VERSION}/templates/sendmailVirtualUser.xml
+phpldapadmin-${VERSION}/templates/simpleSecurityObject.xml
phpldapadmin-${VERSION}/templates/template_config.php
+phpldapadmin-${VERSION}/templates/template_header.php
phpldapadmin-${VERSION}/timeout.php
phpldapadmin-${VERSION}/timeout_functions.php
phpldapadmin-${VERSION}/tree.php
Index: distinfo
===================================================================
RCS file: /cvs/ports/www/phpldapadmin/distinfo,v
retrieving revision 1.3
diff -u -r1.3 distinfo
--- distinfo 2005/04/04 19:19:57 1.3
+++ distinfo 2005/08/31 16:56:23
@@ -1,4 +1,4 @@
-MD5 (phpldapadmin-0.9.6.tar.gz) = db5eb502697712ebdaeb34766b6a7760
-RMD160 (phpldapadmin-0.9.6.tar.gz) = 7c98e5f7df5dfd59aae556590655001dbf1890f5
-SHA1 (phpldapadmin-0.9.6.tar.gz) = 4083cf351003c04d118e152e21a4725209f45a33
-SIZE (phpldapadmin-0.9.6.tar.gz) = 706823
+MD5 (phpldapadmin-0.9.7-alpha6.tar.gz) = 08109739708f5b00c197422fb883a7b9
+RMD160 (phpldapadmin-0.9.7-alpha6.tar.gz) =
120b879217611bd5847da5d741eddc7937c8544d
+SHA1 (phpldapadmin-0.9.7-alpha6.tar.gz) =
69d16455b96c63e30a5ee32edfedf5a003c58e09
+SIZE (phpldapadmin-0.9.7-alpha6.tar.gz) = 739882