>Number:         22518
>Category:       pkg
>Synopsis:       ap-auth-postgresql 1.2b2 - 1.4 update
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Sun Aug 17 18:52:00 UTC 2003
>Closed-Date:
>Last-Modified:
>Originator:     Min Sik Kim
>Release:        NetBSD 1.6W
>Organization:
>Environment:
System: NetBSD mike.infnis.com 1.6W NetBSD 1.6W (MIKE) #14: Sat Aug 9 18:37:30 CDT 2003 root@mike.infnis.com:/usr/src/sys/arch/i386/compile/MIKE i386
Architecture: i386
Machine: i386
>Description:
AuthPG-1.2b2 has a vulnerability, which was fixed in 1.3.
>How-To-Repeat:
See http://cert.uni-stuttgart.de/advisories/apache_auth.php for the
vulnerability.
>Fix:
Index: Makefile
===================================================================
RCS file: /cvsroot/pkgsrc/www/ap-auth-postgresql/Makefile,v
retrieving revision 1.18
diff -u -r1.18 Makefile
--- Makefile	2003/07/31 19:24:39	1.18
+++ Makefile	2003/08/17 18:49:30
@@ -1,13 +1,12 @@
 # $NetBSD: Makefile,v 1.18 2003/07/31 19:24:39 wiz Exp $
 
-DISTNAME=	AuthPG-1.2b2
-PKGNAME=	ap-auth-postgresql-1.2b2
-PKGREVISION=	1
+DISTNAME=	AuthPG-1.4
+PKGNAME=	ap-auth-postgresql-1.4
 CATEGORIES=	www databases
-MASTER_SITES=	http://home.bawi.org/~minskim/authpg/
+MASTER_SITES=	${MASTER_SITE_SOURCEFORGE:=authpg/}
 
 MAINTAINER=	jwise@NetBSD.org
-HOMEPAGE=	http://home.bawi.org/~minskim/authpg/
+HOMEPAGE=	http://authpg.sourceforge.net/
 COMMENT=	Module to allow apache authentication against a Postgresql database
 
 CONFLICTS=	ap-auth-pgsql-[0-9]*
@@ -26,6 +25,7 @@
 	${INSTALL_DATA} ${WRKSRC}/README ${PREFIX}/share/doc/mod_auth_pg
 	${INSTALL_DATA} ${WRKSRC}/README.ko ${PREFIX}/share/doc/mod_auth_pg
 	${INSTALL_DATA} ${WRKSRC}/sample.htaccess ${PREFIX}/share/examples/mod_auth_pg.htaccess
+	${INSTALL_DATA} ${WRKSRC}/sample.sql ${PREFIX}/share/examples/mod_auth_pg.sql
 
 .include "../../databases/postgresql-lib/buildlink2.mk"
 .include "../../www/apache/module.mk"
Index: PLIST
===================================================================
RCS file: /cvsroot/pkgsrc/www/ap-auth-postgresql/PLIST,v
retrieving revision 1.1
diff -u -r1.1 PLIST
--- PLIST	2001/11/01 02:15:37	1.1
+++ PLIST	2003/08/17 18:49:30
@@ -5,4 +5,5 @@
 share/doc/mod_auth_pg/mod_auth_pg.html
 share/doc/mod_auth_pg/mod_auth_pg.ko.html
 share/examples/mod_auth_pg.htaccess
+share/examples/mod_auth_pg.sql
 @dirrm share/doc/mod_auth_pg
Index: distinfo
===================================================================
RCS file: /cvsroot/pkgsrc/www/ap-auth-postgresql/distinfo,v
retrieving revision 1.2
diff -u -r1.2 distinfo
--- distinfo	2001/04/20 12:02:31	1.2
+++ distinfo	2003/08/17 18:49:30
@@ -1,4 +1,4 @@
 $NetBSD: distinfo,v 1.2 2001/04/20 12:02:31 skrll Exp $
 
-SHA1 (AuthPG-1.2b2.tar.gz) = 1e288967899ac87d68b44fddd70e8eb867c7cde8
-Size (AuthPG-1.2b2.tar.gz) = 11781 bytes
+SHA1 (AuthPG-1.4.tar.gz) = 06c73b8ea8b5e6145e351d5575d26eef4527532e
+Size (AuthPG-1.4.tar.gz) = 12681 bytes
>Release-Note:
>Audit-Trail:
>Unformatted: