CVS commit: pkgsrc/www/passenger

["Filip Hajny" <fhajny%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   fhajny
Date:           Wed Jun 13 12:57:47 UTC 2018

Modified Files:
        pkgsrc/www/passenger: Makefile Makefile.common PLIST distinfo

Log Message:
www/passenger: Update to 5.3.2.

- [Nginx] Fixes CVE-2018-12029, a local privilege escalation
  vulnerability in the Nginx module that occurs when
  `passenger_instance_registry_dir` is configured to a directory
  with insufficiently strict permissions.
- Fixes CVE-2018-12026, 12027, and 12028. These are local denial of
  service, local information disclosure and local privilege escalation
  vulnerabilities that could be exploited by malicious applications or
  malicious users on the system.
- Fixes Meteor support in non-bundled mode (regression from 5.3.0).
- Fixes the fact that the error page (which is shown when an app fails
  to spawn) sometimes contains unsufficient analysis details about the
  app.
- [Apache] Fixes PassengerMaxInstancesPerApp not being respected
  (regression from config refactor in 5.2.0).
- [Enterprise, Apache] Fixes PassengerMaxInstances not being respected
  (regression from config refactor in 5.2.0).
- [Enterprise] Fixes passenger-irb being unable to connect to an app
  process (regression from 5.3.0).


To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.3 pkgsrc/www/passenger/Makefile \
    pkgsrc/www/passenger/PLIST
cvs rdiff -u -r1.6 -r1.7 pkgsrc/www/passenger/Makefile.common
cvs rdiff -u -r1.7 -r1.8 pkgsrc/www/passenger/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/passenger/Makefile
diff -u pkgsrc/www/passenger/Makefile:1.2 pkgsrc/www/passenger/Makefile:1.3
--- pkgsrc/www/passenger/Makefile:1.2   Sun Apr 29 21:32:08 2018
+++ pkgsrc/www/passenger/Makefile       Wed Jun 13 12:57:47 2018
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.2 2018/04/29 21:32:08 adam Exp $
+# $NetBSD: Makefile,v 1.3 2018/06/13 12:57:47 fhajny Exp $
 
 COMMENT=               Web and application server for Ruby, Python and Node.js
-PKGREVISION=           1
 
 .include "Makefile.common"
 
Index: pkgsrc/www/passenger/PLIST
diff -u pkgsrc/www/passenger/PLIST:1.2 pkgsrc/www/passenger/PLIST:1.3
--- pkgsrc/www/passenger/PLIST:1.2      Tue May 15 14:13:57 2018
+++ pkgsrc/www/passenger/PLIST  Wed Jun 13 12:57:47 2018
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2018/05/15 14:13:57 fhajny Exp $
+@comment $NetBSD: PLIST,v 1.3 2018/06/13 12:57:47 fhajny Exp $
 bin/passenger
 bin/passenger-config
 bin/passenger-install-apache2-module
@@ -11,6 +11,7 @@ lib/passenger/common/libpassenger_common
 lib/passenger/common/libpassenger_common/FileTools/FileManip.o
 lib/passenger/common/libpassenger_common/FileTools/PathManip.o
 lib/passenger/common/libpassenger_common/FileTools/PathManipCBindings.o
+lib/passenger/common/libpassenger_common/FileTools/PathSecurityCheck.o
 lib/passenger/common/libpassenger_common/JsonTools/CBindings.o
 lib/passenger/common/libpassenger_common/LoggingKit.o
 lib/passenger/common/libpassenger_common/MemoryKit/mbuf.o
@@ -37,6 +38,7 @@ lib/passenger/nginx_dynamic/module_libpa
 lib/passenger/nginx_dynamic/module_libpassenger_common/FileTools/FileManip.o
 lib/passenger/nginx_dynamic/module_libpassenger_common/FileTools/PathManip.o
 lib/passenger/nginx_dynamic/module_libpassenger_common/FileTools/PathManipCBindings.o
+lib/passenger/nginx_dynamic/module_libpassenger_common/FileTools/PathSecurityCheck.o
 lib/passenger/nginx_dynamic/module_libpassenger_common/JsonTools/CBindings.o
 lib/passenger/nginx_dynamic/module_libpassenger_common/LoggingKit.o
 lib/passenger/nginx_dynamic/module_libpassenger_common/ProcessManagement/Spawn.o

Index: pkgsrc/www/passenger/Makefile.common
diff -u pkgsrc/www/passenger/Makefile.common:1.6 pkgsrc/www/passenger/Makefile.common:1.7
--- pkgsrc/www/passenger/Makefile.common:1.6    Tue May 15 14:13:57 2018
+++ pkgsrc/www/passenger/Makefile.common        Wed Jun 13 12:57:47 2018
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile.common,v 1.6 2018/05/15 14:13:57 fhajny Exp $
+# $NetBSD: Makefile.common,v 1.7 2018/06/13 12:57:47 fhajny Exp $
 # used by www/ap2-passenger/Makefile
 # used by www/passenger/Makefile
 
-DISTNAME=              passenger-5.3.1
+DISTNAME=              passenger-5.3.2
 CATEGORIES=            www
 
 MASTER_SITES=          http://s3.amazonaws.com/phusion-passenger/releases/

Index: pkgsrc/www/passenger/distinfo
diff -u pkgsrc/www/passenger/distinfo:1.7 pkgsrc/www/passenger/distinfo:1.8
--- pkgsrc/www/passenger/distinfo:1.7   Tue May 15 14:13:57 2018
+++ pkgsrc/www/passenger/distinfo       Wed Jun 13 12:57:47 2018
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.7 2018/05/15 14:13:57 fhajny Exp $
+$NetBSD: distinfo,v 1.8 2018/06/13 12:57:47 fhajny Exp $
 
-SHA1 (passenger-5.3.1.tar.gz) = f4b1d7f0c3755b8f34d9dd92b1f9300ee58f7d6c
-RMD160 (passenger-5.3.1.tar.gz) = 0012372c5d48157216eccbfa212fa3ba6eb2f8ef
-SHA512 (passenger-5.3.1.tar.gz) = 973338f934a1fc484058cf15748695129ab7ddb8c0d4d8527100fefd111a0b794d60b2e59f8f494c4ef5703c72c7ebfeef5539ed9b4a6e736114e2077e83ccdd
-Size (passenger-5.3.1.tar.gz) = 7033258 bytes
+SHA1 (passenger-5.3.2.tar.gz) = 18af22f590629e56e325c3b02272a5ff32c176c8
+RMD160 (passenger-5.3.2.tar.gz) = 8c2884ec6a1964822d644838fdd370fab2508b70
+SHA512 (passenger-5.3.2.tar.gz) = 97900a0e0de67cc3c3770c291c85c6fe937fceab5632c9832bc5c461d3b4e586a47c9733a1a50a805834f591e5af90651789ed74bf74e0eed4d6ce8084c51967
+Size (passenger-5.3.2.tar.gz) = 7039759 bytes
 SHA1 (patch-build_common__library.rb) = fc019cb2774245400e74741d34b43b87b4b8b0c8
 SHA1 (patch-build_packaging.rb) = b50c291c8e3989bbd8d128dab98c06f5e6a30e51
 SHA1 (patch-src_cxx__supportlib_LoggingKit_Context.h) = ff8dd506a6f5cd110c8e4317ecceab480a8f90c4