Bump to apply security fix (bug #281956).

Package-Manager: portage-2.2_rc61/cvs/Linux i686

4 files changed, 146 insertions, 3 deletions

diff --git a/net-analyzer/ntop/ChangeLog b/net-analyzer/ntop/ChangeLog
index 843a905f0f31..c553e21a62f3 100644
--- a/net-analyzer/ntop/ChangeLog
+++ b/net-analyzer/ntop/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for net-analyzer/ntop
-# Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/ntop/ChangeLog,v 1.87 2009/09/27 14:33:55 ranger Exp $
+# Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/net-analyzer/ntop/ChangeLog,v 1.88 2010/01/18 12:53:30 jer Exp $
+
+*ntop-3.3.10-r2 (18 Jan 2010)
+
+  18 Jan 2010; Jeroen Roovers <jer@gentoo.org> +ntop-3.3.10-r2.ebuild,
+  +files/ntop-3.3.10-CVE-2009-2732.patch:
+  Bump to apply security fix (bug #281956).
 
   27 Sep 2009; Brent Baude <ranger@gentoo.org> ntop-3.3.10-r1.ebuild:
   Marking ntop-3.3.10-r1 ppc64 for bug 282063
diff --git a/net-analyzer/ntop/Manifest b/net-analyzer/ntop/Manifest
index 65b3b24b6887..f1975c8b34b6 100644
--- a/net-analyzer/ntop/Manifest
+++ b/net-analyzer/ntop/Manifest
@@ -1,3 +1,4 @@
+AUX ntop-3.3.10-CVE-2009-2732.patch 365 RMD160 586d8951420ae8161e0e12a767cf29621c04b3d9 SHA1 16a9b4baf44a56d78a5ec689b203e632d95021cc SHA256 0c4caa99bd08a8c1655c1304244be3e5efbe0a770980d31c653716a10c808703
 AUX ntop-3.3.10-gentoo.patch 5717 RMD160 c3f7479b28ed42f0790f268b0edec048fef8ab1f SHA1 80dff7120c17388d775d6bd95f952996bc2f70ac SHA256 e271b8f6db43809d24785fadddb3bf8fa30de140df618b78d461e071608b900a
 AUX ntop-3.3.9-accesslog-umask.patch 496 RMD160 2b943d82b978f750b1c6f2cea7554c03fa60f439 SHA1 58ffbe0ab35e65adc363902e13cfa004492c5a8f SHA256 c27abc8d0564acf41daae0b0a7e94958597512f6dc0f566cb722efa08c769687
 AUX ntop-3.3.9-external-geoip.patch 3427 RMD160 58487133eafa4c8990eb5960c1f363cdafc34e38 SHA1 f4b77eb17fed29df005a4fcd9b9111ea71c00bba SHA256 462a1f4c4d4260b47f23e63ab008bc7e9ba1c030847fe5f021d27cd51490809a
@@ -8,6 +9,7 @@ AUX ntop-update-geoip-db 492 RMD160 5999a24fb5868593d37746fc46f3536e727e7645 SHA
 DIST ntop-3.3.10.tar.gz 3235500 RMD160 85e73de0d7db041d12ae8d77a832b6ed199b6f4b SHA1 8c6b5024a99e73241abd1c831f5ea241b67d0dbf SHA256 aa18ba3acb564d707521deaa2655f61f5b617d98d4fb5a014553f3fa123f123a
 DIST ntop-3.3.9.tar.gz 4955257 RMD160 3d7b14bff99a6652ae83fb86a2cda3206cc3392c SHA1 77c1976d096709c6e45dcfe4befc2045cf83774b SHA256 606c027d02cdaab7de87475bef8be168e9f18329c2215ac21a518766aa8a331f
 EBUILD ntop-3.3.10-r1.ebuild 3386 RMD160 9c92f92a1c4d356f4a64291a4f24a431b7abf35d SHA1 1ca1c130ffccc04ad564773466f23979f66ffe7e SHA256 7e672a7399b7a8d7ac88e1767456974da3f9fdad0f748d93d1c97ad0889b2aa2
+EBUILD ntop-3.3.10-r2.ebuild 3441 RMD160 8924758a9dd29c0ce0a0d13e6d00b69b9c4450a1 SHA1 76888efcc44c726bf3260cea85a2d1b805f59065 SHA256 4098d1033b89a8d2a03ae79c458c1f7cce3dbd450c457c5170fe813563f04d61
 EBUILD ntop-3.3.9-r2.ebuild 3441 RMD160 6c5766595a9c919c189129c47563fc9551a046ab SHA1 828bbe8bcf857c6a9d34b78dc628a0eca82b694f SHA256 3a72db0cf40a22c343982b7d7272cf39ecd1634cd8f85d7f5c29c3ead317d5b9
-MISC ChangeLog 12195 RMD160 a6315f72a263737173db5251fd85fb2bb6c9cccb SHA1 2d6b0886480c76e45da41b5091ca354a0ad8b7d7 SHA256 c2160b6d0b708002f21a0838bcae9370658cc2f6dda74a716bbaa84ebdb1ff81
+MISC ChangeLog 12381 RMD160 106949e493cc6d007a6012be5dd85ffbbb6fefc7 SHA1 acae02c802a8b8a7bb8e2df216aa0f386c670f62 SHA256 06d4ce863971b799be9db2dbc0b10e6c9d846086cc41a8962f0c820317cceab0
 MISC metadata.xml 824 RMD160 a154081a070f768b186bfb77031dd77b1cf5aaea SHA1 bb97f483589129a9ed66374359cf367e266d1d5d SHA256 b256de7da036de4fe73823e20e25da4bac70c9f50f58a326dad39f6619f7a624
diff --git a/net-analyzer/ntop/files/ntop-3.3.10-CVE-2009-2732.patch b/net-analyzer/ntop/files/ntop-3.3.10-CVE-2009-2732.patch
new file mode 100644
index 000000000000..c8a74a58e444
--- /dev/null
+++ b/net-analyzer/ntop/files/ntop-3.3.10-CVE-2009-2732.patch
@@ -0,0 +1,12 @@
+--- http.c~	2007-06-09 16:33:45.000000000 +0200
++++ http.c	2009-09-27 09:50:56.420394637 +0200
+@@ -3377,8 +3377,8 @@ static int checkHTTPpassword(char *theRe
+ 
+   i = decodeString(thePw, (unsigned char*)outBuffer, sizeof(outBuffer));
+ 
+-  if(i == 0) {
+     user = "", thePw[0] = '\0';
++  if(i == 0) {
+     outBuffer[0] = '\0';
+   } else {
+     outBuffer[i] = '\0';
diff --git a/net-analyzer/ntop/ntop-3.3.10-r2.ebuild b/net-analyzer/ntop/ntop-3.3.10-r2.ebuild
new file mode 100644
index 000000000000..f210df0fc6bb
--- /dev/null
+++ b/net-analyzer/ntop/ntop-3.3.10-r2.ebuild
@@ -0,0 +1,123 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-analyzer/ntop/ntop-3.3.10-r2.ebuild,v 1.1 2010/01/18 12:53:30 jer Exp $
+
+EAPI="2"
+
+inherit eutils autotools
+
+DESCRIPTION="Network traffic analyzer with web interface"
+HOMEPAGE="http://www.ntop.org/ntop.html"
+SRC_URI="mirror://sourceforge/ntop/${P}.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
+IUSE="ipv6 ssl tcpd"
+#snmp support is disabled
+
+#snmp? ( net-analyzer/net-snmp )
+COMMON_DEPEND="sys-apps/gawk
+	dev-lang/perl
+	sys-libs/gdbm
+	dev-libs/libevent
+	net-libs/libpcap
+	media-libs/gd
+	media-libs/libpng
+	net-analyzer/rrdtool
+	ssl? ( dev-libs/openssl )
+	tcpd? ( sys-apps/tcp-wrappers )
+	sys-libs/zlib
+	>=dev-libs/geoip-1.4.5
+	>=dev-lang/lua-5.1.4"
+DEPEND="${COMMON_DEPEND}
+	>=sys-devel/libtool-1.4"
+
+# Needed by xmldumpPlugin - couldn't get it to work
+#	dev-libs/gdome2
+#	>=dev-libs/glib-2"
+RDEPEND="${COMMON_DEPEND}
+	media-fonts/corefonts
+	media-gfx/graphviz
+	net-misc/wget
+	app-arch/gzip"
+
+pkg_setup() {
+	# snmp doesn't compile in this release, disabled for now
+	#if use snmp ; then
+	#	ewarn "snmp plugin is under development and upstream does not recommend"
+	#	ewarn "it for usage in production environment."
+	#	if ! use ipv6 ; then
+	#		echo
+	#		eerror "snmp plugin has compilation problems without ipv6 support."
+	#		eerror "For additional information see bug #121497."
+	#		die "snmp without ipv6 is broken"
+	#	else
+	#		if ! built_with_use net-analyzer/net-snmp ipv6 ; then
+	#			echo
+	#			eerror "You have both ipv6 and snmp enabled."
+	#			eerror "This require ipv6 support in net-analyzer/net-snmp."
+	#			eerror "However, net-analyzer/net-snmp was compiled with ipv6 flag disabled."
+	#			eerror "Please, re-emerge net-analyzer/net-snmp with USE=\"ipv6\"."
+	#			die "net-analyzer/net-snmp was build without ipv6."
+	#		fi
+	#	fi
+	#fi
+
+	enewgroup ntop
+	enewuser ntop -1 -1 /var/lib/ntop ntop
+}
+
+src_prepare() {
+	epatch "${FILESDIR}"/${P}-gentoo.patch
+	cat acinclude.m4.in acinclude.m4.ntop > acinclude.m4
+	eautoreconf
+
+	epatch "${FILESDIR}"/${P}-CVE-2009-2732.patch
+}
+
+src_configure() {
+	# force disable xmldumpPlugin
+	export \
+		ac_cv_header_glib_h=no \
+		ac_cv_header_glibconfig_h=no \
+		ac_cv_header_gdome_h=no \
+		ac_cv_lib_glib_g_date_julian=no \
+		ac_cv_lib_xml2_xmlCheckVersion=no \
+		ac_cv_lib_gdome_gdome_di_saveDocToFile=no
+
+	econf \
+		$(use_enable ipv6) \
+		$(use_with ssl) $(use_enable ssl sslwatchdog) \
+		$(use_with tcpd tcpwrap) \
+		--with-rrd-home=/usr/lib \
+		--disable-snmp \
+		|| die "configure problem"
+		# $(use_enable snmp)
+}
+
+src_install() {
+	LC_ALL=C # apparently doesn't work with some locales (#191576 and #205382)
+	emake DESTDIR="${D}" install || die "install problem"
+
+	keepdir /var/lib/ntop &&
+		fowners ntop:ntop /var/lib/ntop &&
+		fperms 750 /var/lib/ntop ||
+		die "failed to prepare /var/lib/ntop dir"
+
+	dodoc AUTHORS CONTENTS ChangeLog MANIFESTO NEWS
+	dodoc PORTING README SUPPORT_NTOP.txt THANKS $(find docs -type f)
+
+	newinitd "${FILESDIR}"/ntop-initd ntop
+	newconfd "${FILESDIR}"/ntop-confd ntop
+
+	exeinto /etc/cron.monthly
+	doexe "${FILESDIR}"/ntop-update-geoip-db
+}
+
+pkg_postinst() {
+	elog "If this is the first time you install ntop, you need to run"
+	elog "following commands before starting ntop service:"
+	elog "   ntop --set-admin-password"
+	elog "   /etc/cron.monthly/ntop-update-geoip-db"
+}