Security bump. Yes, again. Not a typo. Bug #139273

Package-Manager: portage-2.1.1_pre4-r4

4 files changed, 266 insertions, 5 deletions

diff --git a/mail-client/squirrelmail/ChangeLog b/mail-client/squirrelmail/ChangeLog
index 2d36393e83b0..e81cb4ec234a 100644
--- a/mail-client/squirrelmail/ChangeLog
+++ b/mail-client/squirrelmail/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for mail-client/squirrelmail
 # Copyright 2002-2006 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/mail-client/squirrelmail/ChangeLog,v 1.62 2006/08/11 12:59:31 corsair Exp $
+# $Header: /var/cvsroot/gentoo-x86/mail-client/squirrelmail/ChangeLog,v 1.63 2006/08/11 16:19:09 langthang Exp $
+
+*squirrelmail-1.4.8 (11 Aug 2006)
+
+  11 Aug 2006; Tuấn Văn <langthang@gentoo.org>
+  +squirrelmail-1.4.8.ebuild:
+  Security bump. Yes, again. It's not a typo. Bug #139273.
 
   11 Aug 2006; Markus Rothe <corsair@gentoo.org> squirrelmail-1.4.7.ebuild:
   Stable on ppc64; bug #139273
diff --git a/mail-client/squirrelmail/Manifest b/mail-client/squirrelmail/Manifest
index f7a178e840e4..78c2d9f96d64 100644
--- a/mail-client/squirrelmail/Manifest
+++ b/mail-client/squirrelmail/Manifest
@@ -1,3 +1,6 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
 AUX ldapuserdata-0.4-gentoo.patch 709 RMD160 a7b5fe1aba60530c193919ecb6b213cdd57dddf8 SHA1 99f5dd6f4e9666d6d3915c3e52c2694d1dc06a9e SHA256 bff9cf8e7518df983b03b3f4e7f10fcf31fb75f6d73afb21c8923f2a8312b4a3
 MD5 1ebd5ce3ff0ce02fa62f3890b6a8f255 files/ldapuserdata-0.4-gentoo.patch 709
 RMD160 a7b5fe1aba60530c193919ecb6b213cdd57dddf8 files/ldapuserdata-0.4-gentoo.patch 709
@@ -27,6 +30,7 @@ DIST secure_login-1.2-1.2.8.tar.gz 6361 RMD160 e3e35d7acf5f427592915d541ca2aaad7
 DIST show_ssl_link-2.1-1.2.8.tar.gz 5950 RMD160 58f202d7febcde55efdf8a6f312caebf3d4e0d45 SHA1 e5cc13c41c2059eade1af17f39e2b20b77083b73 SHA256 a5eb5c1eade9fb6fda5f0f9279a8bb186e9d249cae67a98eaf125845f4d177d2
 DIST squirrelmail-1.4.6.tar.bz2 484099 RMD160 3cee894b392620af3e35ef1d00e35775559dd4f7 SHA1 b813aa9f736b4b6c41d1afd35bcbd01604e85cf7 SHA256 8694412708eeb1f4029a4850e69f4a6891b0959e6315572013f4db9d3addc9d3
 DIST squirrelmail-1.4.7.tar.bz2 496925 RMD160 65bc9492429006dd9fb75291990e8692f6f05ba0 SHA1 746080b2c536487ea7cfc5031668cd8092413b51 SHA256 b3d241ab9cee852b92881a7bc9857e63e0b3d04be0a01b4280aa108aa0c8d6da
+DIST squirrelmail-1.4.8.tar.bz2 474528 RMD160 7ef716a1b34d477a77157b56a71feb7e0a1c41cb SHA1 45bab996b68b60647e668070466c15a20e991d52 SHA256 120459b92a804deaf7aaa064ee12e986adc0289af506bb4b296a45a7aba4456d
 DIST squirrelmail-1.5.1.tar.bz2 904370 RMD160 a59df6a73e5694b54d2791d4c139941ef220d2d1 SHA256 3e7f370dd869fb57ed5b3c159d7450c1180309fffeda9dbf168b2d456f477909
 DIST virus_scan.0.5-1.4.0.tar.gz 25179 RMD160 4c4563c421c5b864b231b2a3163d58862ffbc3c6 SHA1 3b43104dc2ff5ab9a35dc77a7aec1d6b7b245732 SHA256 637bbcef80bd1bfbc04a22daa7af0855155261a4f00bd2566aca3d391cb4fa47
 EBUILD squirrelmail-1.4.6-r2.ebuild 5657 RMD160 4e0c21570c704c302b8b41e7c10b9856f1107708 SHA1 3b8bac55200a4e01e5d9e04a28fbde5ac33c1fb7 SHA256 2b2cf9e00aad4d62f7388402690628f7b88230d955b5a3ecbe607ac2215b7e2a
@@ -45,14 +49,18 @@ EBUILD squirrelmail-1.4.7.ebuild 5657 RMD160 82a5f22d54e93f136adf94ca8acb3cbc78a
 MD5 171302d5f892015e4bab1c48749704ea squirrelmail-1.4.7.ebuild 5657
 RMD160 82a5f22d54e93f136adf94ca8acb3cbc78a8caae squirrelmail-1.4.7.ebuild 5657
 SHA256 691b5dc52f2c6784131782a3c175ccd6c6c8af1967cbb72d74920a3cf5380a8e squirrelmail-1.4.7.ebuild 5657
+EBUILD squirrelmail-1.4.8.ebuild 5661 RMD160 3b8f61756ff7a318f6af4d64f30c20ae0b636b0f SHA1 b07ee94fe75d386d7d51e9b64e16fe2969f380f1 SHA256 d3fcba7f86f9b9f3a93d615299b85d1205dfa5c359af4aba5ed3a978cb44d934
+MD5 cdeab604102a2393b5dbd95d1664372a squirrelmail-1.4.8.ebuild 5661
+RMD160 3b8f61756ff7a318f6af4d64f30c20ae0b636b0f squirrelmail-1.4.8.ebuild 5661
+SHA256 d3fcba7f86f9b9f3a93d615299b85d1205dfa5c359af4aba5ed3a978cb44d934 squirrelmail-1.4.8.ebuild 5661
 EBUILD squirrelmail-1.5.1-r1.ebuild 4933 RMD160 3f9640895823780b313786eb297d410a63cb2114 SHA1 6e756c8c3e88da9f1fcee87b60cd7aba7e874194 SHA256 6dbcf5daedc849d9df6cb35d9843ddbbd586e5000a240d40701a36daced58687
 MD5 928387d90667f9bd44a82832f98b46cc squirrelmail-1.5.1-r1.ebuild 4933
 RMD160 3f9640895823780b313786eb297d410a63cb2114 squirrelmail-1.5.1-r1.ebuild 4933
 SHA256 6dbcf5daedc849d9df6cb35d9843ddbbd586e5000a240d40701a36daced58687 squirrelmail-1.5.1-r1.ebuild 4933
-MISC ChangeLog 17282 RMD160 9e6b41bcb48bd70b8b4959f69b9b7be185c47889 SHA1 d9f2f39f72bbc5963b5eb1c76273fb9af81ad876 SHA256 800cf28edcf708fca8e72909c73fd89cdb0cca6ee62a03469c731135d2570be0
-MD5 69cd8f16a0c794a18653382aeadafef2 ChangeLog 17282
-RMD160 9e6b41bcb48bd70b8b4959f69b9b7be185c47889 ChangeLog 17282
-SHA256 800cf28edcf708fca8e72909c73fd89cdb0cca6ee62a03469c731135d2570be0 ChangeLog 17282
+MISC ChangeLog 17459 RMD160 4a1bef5ca5ed24875c789f7f04e2508a63099cab SHA1 f7af614895dd84cd60196357cb808427d0e4d9de SHA256 79b1177824a40da0d41798c2932e3d381792228fb5e365b82ca2b0464f9154f2
+MD5 06b5aaab6a49f684718897db96a78ad0 ChangeLog 17459
+RMD160 4a1bef5ca5ed24875c789f7f04e2508a63099cab ChangeLog 17459
+SHA256 79b1177824a40da0d41798c2932e3d381792228fb5e365b82ca2b0464f9154f2 ChangeLog 17459
 MISC metadata.xml 258 RMD160 d2eb817fc980ecb7e48b90373e39e38538ddc060 SHA1 f969f9d21f42c6347a0509bacb7382b390c10ce8 SHA256 0c209e720f028e6e9b098d29eab884753668aea3f47b56e44f3271ae60750680
 MD5 08cd5d6f4b8f101029a526ea0a1ea4b1 metadata.xml 258
 RMD160 d2eb817fc980ecb7e48b90373e39e38538ddc060 metadata.xml 258
@@ -69,6 +77,16 @@ SHA256 4fc42d52adfcd59d91b6f343f8b01efd81a78a0ed22c68b41ae25efaa02c65e0 files/di
 MD5 b22c099780cf866d6398e7b4cc1a5cb4 files/digest-squirrelmail-1.4.7 2620
 RMD160 5be2a13ff6d5a164baa51684ce4ffef3a200d959 files/digest-squirrelmail-1.4.7 2620
 SHA256 a67d92485f8223e2bbd60f9ef7347c17af13bfba38f2b58fe2f4065b7de4f930 files/digest-squirrelmail-1.4.7 2620
+MD5 00572fcdd0835c11d783c2d0334172be files/digest-squirrelmail-1.4.8 2620
+RMD160 61eae2979931320988f0f6da57067da8d9150a04 files/digest-squirrelmail-1.4.8 2620
+SHA256 4f9d0448591b6239bf8e8ad929c359d6c580c68a92abb589c9362a9bb9917326 files/digest-squirrelmail-1.4.8 2620
 MD5 10158f243a971cc8a428d8cf28277d6e files/digest-squirrelmail-1.5.1-r1 2620
 RMD160 9554715d0ebf965895727b5a18cb57b092e65376 files/digest-squirrelmail-1.5.1-r1 2620
 SHA256 cffb974aa68e0f7c611ea500a3664b6c781dc3682c645821f0b987a06fbcc20d files/digest-squirrelmail-1.5.1-r1 2620
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.5 (GNU/Linux)
+
+iD8DBQFE3K4O5FrxP71izLARAtEJAKC8UDEg1ELloIw2gHNelMF6lBOOVACgjl3D
+e3LXGog7TOfnFelSt4WnI/4=
+=BzIW
+-----END PGP SIGNATURE-----
diff --git a/mail-client/squirrelmail/files/digest-squirrelmail-1.4.8 b/mail-client/squirrelmail/files/digest-squirrelmail-1.4.8
new file mode 100644
index 000000000000..5a7b083ef0b1
--- /dev/null
+++ b/mail-client/squirrelmail/files/digest-squirrelmail-1.4.8
@@ -0,0 +1,30 @@
+MD5 c321d0f7efa624f6bc3f3a4d1bf08782 admin_add.0.1-1.4.0.tar.gz 2388
+RMD160 6847934c59ae73119a796c6fef251de26a2ea531 admin_add.0.1-1.4.0.tar.gz 2388
+SHA256 25ec999eea098a509f7d49cfe368b0557b64c698f86b2a2c951617f67735dabc admin_add.0.1-1.4.0.tar.gz 2388
+MD5 29dfec2e0f71fba368a89c36c51881c2 all_locales-1.4.6-20060221.tar.bz2 2448102
+RMD160 c108485b090ffc8ea96b1384c9cf588adade7ed2 all_locales-1.4.6-20060221.tar.bz2 2448102
+SHA256 e29b017deb84e7a3656ed846b2387911e4c7275e88fd3d6761528dbaa7510ac4 all_locales-1.4.6-20060221.tar.bz2 2448102
+MD5 4766f5f6706e086d5c9370bef9e7629f amavisnewsql-0.8.0-1.4.tar.gz 101008
+RMD160 72b796565f128354c51e8a04384e49621371cf16 amavisnewsql-0.8.0-1.4.tar.gz 101008
+SHA256 f9ef453f80e0a44a22c695712b44af935f6d1a505239bd0cb6470fc27608041c amavisnewsql-0.8.0-1.4.tar.gz 101008
+MD5 cfc3279a613b917fcba8200c596dadb0 compatibility-2.0.4.tar.gz 18703
+RMD160 f5b272fb1598c28be70e16ed4251eefa57f46f8e compatibility-2.0.4.tar.gz 18703
+SHA256 5aa1bbf871a131eeb3d64e9c89b239231927ebc9aee81a272a31d014ccae667e compatibility-2.0.4.tar.gz 18703
+MD5 88f80922e2a060f5277fd2192404efab gpg.2.0.1-1.4.2.tar.gz 383592
+RMD160 f8e53570494b84d61bb467e1fcb368decb9bbd2a gpg.2.0.1-1.4.2.tar.gz 383592
+SHA256 b4fa8f4112ef8b69d9b79fbc43c8bde3523de5487e1447445deee67b6c66091b gpg.2.0.1-1.4.2.tar.gz 383592
+MD5 c836661e8360358b94df4e153e449b2c ldapuserdata-0.4.tar.gz 67439
+RMD160 6f7fa3eab6eb2877057fc4d9d360da2e10858ba6 ldapuserdata-0.4.tar.gz 67439
+SHA256 ee10b97e99c35b0656e7e87f60785408f3d26a53ee2a0107d8aa04f7947c3ff7 ldapuserdata-0.4.tar.gz 67439
+MD5 dfe469f7ab473fd2292b30800e3141d5 retrieveuserdata.0.9-1.4.0.tar.gz 10448
+RMD160 942d073f86947295ed069ed04e4fc268857932af retrieveuserdata.0.9-1.4.0.tar.gz 10448
+SHA256 086796d858e781c518b538b37e9ec011d51a2aebd6d14aeba1aa330b58626b8d retrieveuserdata.0.9-1.4.0.tar.gz 10448
+MD5 73d2c111579e2fad17c289f62e0be855 secure_login-1.2-1.2.8.tar.gz 6361
+RMD160 e3e35d7acf5f427592915d541ca2aaad79d37b1d secure_login-1.2-1.2.8.tar.gz 6361
+SHA256 b3cf5fbf15206ca9f0e00b573408fc78b287fbb2e0d5fcbba93fe6e75ceb4a0b secure_login-1.2-1.2.8.tar.gz 6361
+MD5 a14a46388ed710a81c356d69276844c1 show_ssl_link-2.1-1.2.8.tar.gz 5950
+RMD160 58f202d7febcde55efdf8a6f312caebf3d4e0d45 show_ssl_link-2.1-1.2.8.tar.gz 5950
+SHA256 a5eb5c1eade9fb6fda5f0f9279a8bb186e9d249cae67a98eaf125845f4d177d2 show_ssl_link-2.1-1.2.8.tar.gz 5950
+MD5 ba3306e4790bbdb10eaccb00195f5107 squirrelmail-1.4.8.tar.bz2 474528
+RMD160 7ef716a1b34d477a77157b56a71feb7e0a1c41cb squirrelmail-1.4.8.tar.bz2 474528
+SHA256 120459b92a804deaf7aaa064ee12e986adc0289af506bb4b296a45a7aba4456d squirrelmail-1.4.8.tar.bz2 474528
diff --git a/mail-client/squirrelmail/squirrelmail-1.4.8.ebuild b/mail-client/squirrelmail/squirrelmail-1.4.8.ebuild
new file mode 100644
index 000000000000..1c5752464cd1
--- /dev/null
+++ b/mail-client/squirrelmail/squirrelmail-1.4.8.ebuild
@@ -0,0 +1,207 @@
+# Copyright 1999-2006 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/mail-client/squirrelmail/squirrelmail-1.4.8.ebuild,v 1.1 2006/08/11 16:19:09 langthang Exp $
+
+IUSE="crypt ldap spell ssl filter mysql postgres nls"
+
+inherit webapp eutils
+
+DESCRIPTION="Webmail for nuts!"
+
+# Plugin Versions
+COMPATIBILITY_VER=2.0.4
+USERDATA_VER=0.9-1.4.0
+ADMINADD_VER=0.1-1.4.0
+AMAVIS_VER=0.8.0-1.4
+GPG_VER=2.0.1-1.4.2
+LDAP_USERDATA_VER=0.4
+SECURELOGIN_VER=1.2-1.2.8
+SHOWSSL_VER=2.1-1.2.8
+LOCALES_VER=1.4.6-20060221
+
+MY_P=${P/_rc/-RC}
+S="${WORKDIR}/${MY_P}"
+
+PLUGINS_LOC="http://www.squirrelmail.org/plugins"
+SRC_URI="mirror://sourceforge/${PN}/${MY_P}.tar.bz2
+	mirror://sourceforge/retruserdata/retrieveuserdata.${USERDATA_VER}.tar.gz
+	${PLUGINS_LOC}/compatibility-${COMPATIBILITY_VER}.tar.gz
+	ssl? ( ${PLUGINS_LOC}/secure_login-${SECURELOGIN_VER}.tar.gz )
+	ssl? ( ${PLUGINS_LOC}/show_ssl_link-${SHOWSSL_VER}.tar.gz )
+	${PLUGINS_LOC}/admin_add.${ADMINADD_VER}.tar.gz
+	filter? ( ${PLUGINS_LOC}/amavisnewsql-0.8.0-1.4.tar.gz )
+	crypt? ( ${PLUGINS_LOC}/gpg.${GPG_VER}.tar.gz )
+	ldap? ( ${PLUGINS_LOC}/ldapuserdata-${LDAP_USERDATA_VER}.tar.gz )
+	nls? ( mirror://sourceforge/${PN}/all_locales-${LOCALES_VER}.tar.bz2 )"
+
+HOMEPAGE="http://www.squirrelmail.org/"
+
+LICENSE="GPL-2"
+KEYWORDS="~alpha ~amd64 ~ppc ~ppc64 ~sparc ~x86"
+
+DEPEND=""
+
+RDEPEND="virtual/php
+	perl-core/DB_File
+	crypt? ( app-crypt/gnupg )
+	ldap? ( net-nds/openldap )
+	spell? ( || ( app-text/aspell app-text/ispell ) )
+	filter? ( mail-filter/amavisd-new dev-php/PEAR-Log dev-php/PEAR-DB dev-php/PEAR-Net_SMTP )
+	postgres? ( dev-php/PEAR-DB )
+	mysql? ( dev-php/PEAR-DB )"
+
+src_unpack() {
+	unpack ${MY_P}.tar.bz2
+
+	cd ${S}
+
+	mv config/config_default.php config/config.php
+
+	# Now do the plugins
+	cd ${S}/plugins
+
+	sed -i 's:/usr/games/fortune:/usr/bin/fortune:g' fortune/setup.php || die "Unable to fix fortunes plugin."
+
+	unpack compatibility-${COMPATIBILITY_VER}.tar.gz
+
+	unpack admin_add.${ADMINADD_VER}.tar.gz
+
+	unpack retrieveuserdata.${USERDATA_VER}.tar.gz
+
+	use filter &&
+		unpack amavisnewsql-${AMAVIS_VER}.tar.gz &&
+		mv amavisnewsql/config.php.dist amavisnewsql/config.php
+
+	use crypt &&
+		unpack gpg.${GPG_VER}.tar.gz
+
+	use ldap &&
+		unpack ldapuserdata-${LDAP_USERDATA_VER}.tar.gz &&
+		epatch ${FILESDIR}/ldapuserdata-${LDAP_USERDATA_VER}-gentoo.patch &&
+		mv ldapuserdata/config_sample.php ldapuserdata/config.php
+
+	use ssl &&
+		unpack secure_login-${SECURELOGIN_VER}.tar.gz &&
+		mv secure_login/config.php.sample secure_login/config.php &&
+		unpack show_ssl_link-${SHOWSSL_VER}.tar.gz &&
+		mv show_ssl_link/config.php.sample show_ssl_link/config.php
+
+	use nls &&
+		cd ${S} &&
+		unpack all_locales-${LOCALES_VER}.tar.bz2
+}
+
+src_compile() {
+	#we need to have this empty function ... default compile hangs
+	echo "Nothing to compile"
+}
+
+src_install() {
+	webapp_src_preinst
+
+	# handle documentation files
+	#
+	# NOTE that doc files go into /usr/share/doc as normal; they do NOT
+	# get installed per vhost!
+
+	for doc in AUTHORS COPYING ChangeLog INSTALL README ReleaseNotes UPGRADE; do
+		dodoc ${doc}
+		rm -f ${doc}
+	done
+
+	docinto compatibility
+	for doc in plugins/compatibility/INSTALL plugins/compatibility/README; do
+		dodoc ${doc}
+		rm -f ${doc}
+	done
+
+	docinto admin_add
+	for doc in plugins/admin_add/README; do
+		dodoc ${doc}
+		rm -f ${doc}
+	done
+
+	docinto retrieveuserdata
+	for doc in plugins/retrieveuserdata/INSTALL plugins/retrieveuserdata/changelog plugins/retrieveuserdata/users_example.txt; do
+		dodoc ${doc}
+		rm -f ${doc}
+	done
+
+	if use filter; then
+		docinto amavisnewsql
+		for doc in plugins/amavisnewsql/{CHANGELOG,README,UPGRADE}; do
+			dodoc ${doc}
+			rm -f ${doc}
+		done
+	fi
+
+	if use crypt; then
+		docinto gpg
+		for doc in plugins/gpg/README plugins/gpg/README.txt plugins/gpg/INSTALL plugins/gpg/INSTALL.txt plugins/gpg/TODO; do
+			dodoc ${doc}
+			rm -f ${doc}
+		done
+	fi
+
+	if use ldap; then
+		rm plugins/ldapuserdata/README
+		docinto ldapuserdata
+		for doc in plugins/ldapuserdata/doc/README; do
+			dodoc ${doc}
+			rm -f ${doc}
+		done
+	fi
+
+	if use ssl; then
+		docinto secure_login
+		for doc in plugins/secure_login/INSTALL plugins/secure_login/README; do
+			dodoc ${doc}
+			rm -f ${doc}
+		done
+
+		docinto show_ssl_link
+		for doc in plugins/show_ssl_link/INSTALL plugins/show_ssl_link/README; do
+			dodoc ${doc}
+			rm -f ${doc}
+		done
+	fi
+
+	# Copy the app's main files
+	einfo "Installing squirrelmail files."
+	cp -r . ${D}${MY_HTDOCSDIR}
+
+	# Identify the configuration files that this app uses
+	local configs="config/config.php config/config_local.php plugins/retrieveuserdata/config.php"
+	use filter && configs="${configs} plugins/amavisnewsql/config.php"
+	use crypt && configs="${configs} plugins/gpg/gpg_local_prefs.txt"
+	use ldap && configs="${configs} plugins/ldapuserdata/config.php"
+	use ssl && configs="${configs} plugins/show_ssl_link/config.php plugins/secure_login/config.php"
+
+	for file in ${configs}; do
+		webapp_configfile ${MY_HTDOCSDIR}/${file}
+	done
+
+	# Identify any script files that need #! headers adding to run under
+	# a CGI script (such as PHP/CGI)
+	#
+	# for phpmyadmin, we *assume* that all .php files that don't end in
+	# .inc.php need to have CGI/BIN support added
+
+	#for x in `find . -name '*.php' -print | grep -v 'inc.php'` ; do
+	#	webapp_runbycgibin php ${MY_HTDOCSDIR}/$x
+	#done
+
+	local server_owned="data index.php"
+	for file in ${server_owned}; do
+		webapp_serverowned ${MY_HTDOCSDIR}/${file}
+	done
+
+	# add the post-installation instructions
+	webapp_postinst_txt en ${FILESDIR}/postinstall-en.txt
+
+	# all done
+	#
+	# now we let the eclass strut its stuff ;-)
+
+	webapp_src_install
+}