summaryrefslogtreecommitdiff
path: root/www
diff options
context:
space:
mode:
authorjwise <jwise@pkgsrc.org>2002-04-09 18:24:51 +0000
committerjwise <jwise@pkgsrc.org>2002-04-09 18:24:51 +0000
commitd0399ba78c5153ef6fe0feb9b925ef46ef5b6d65 (patch)
tree3cb23dab7e6a975d08070e683876a3921b5f5311 /www
parenta9d16c9a6ec7be1e64cd7c083e774730d99fb6bf (diff)
downloadpkgsrc-d0399ba78c5153ef6fe0feb9b925ef46ef5b6d65.tar.gz
Quick fix for apache.org security advisory -- example webapps as present
have a cross-site scripting vulnerability. For now, we remove them, but we will update to a newer version when one is available.
Diffstat (limited to 'www')
-rw-r--r--www/jakarta-tomcat/Makefile6
-rw-r--r--www/jakarta-tomcat/PLIST5
2 files changed, 7 insertions, 4 deletions
diff --git a/www/jakarta-tomcat/Makefile b/www/jakarta-tomcat/Makefile
index ef1641cdcf9..ee88aaea18a 100644
--- a/www/jakarta-tomcat/Makefile
+++ b/www/jakarta-tomcat/Makefile
@@ -1,7 +1,8 @@
-# $NetBSD: Makefile,v 1.26 2002/03/26 16:37:26 abs Exp $
+# $NetBSD: Makefile,v 1.27 2002/04/09 18:24:51 jwise Exp $
-DISTNAME= ${PKGNAME}-src
+DISTNAME= jakarta-tomcat-3.2.3-src
PKGNAME= jakarta-tomcat-3.2.3
+PKGREVISION= 1
CATEGORIES= www
MASTER_SITES= http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.2.3/src/
@@ -43,6 +44,7 @@ pre-install:
${PKGDIR}/INSTALL > ${INSTALL_FILE}
post-install:
+ ${RM} ${PREFIX}/tomcat/webapps/examples.war
${INSTALL_SCRIPT} ${WRKDIR}/tomcat.sh ${PREFIX}/etc/rc.d/tomcat
PKG_PREFIX=${PREFIX} ${SH} ${INSTALL_FILE} ${PKGNAME} POST-INSTALL
diff --git a/www/jakarta-tomcat/PLIST b/www/jakarta-tomcat/PLIST
index a61d93b0524..0bd32c40816 100644
--- a/www/jakarta-tomcat/PLIST
+++ b/www/jakarta-tomcat/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2002/02/15 10:13:03 skrll Exp $
+@comment $NetBSD: PLIST,v 1.3 2002/04/09 18:24:51 jwise Exp $
etc/rc.d/tomcat
tomcat/KEYS
tomcat/LICENSE
@@ -361,7 +361,8 @@ tomcat/src/org/apache/tomcat/util/xml/XmlMapper.java
tomcat/src/org/apache/tomcat/util/xml/XmlMatch.java
tomcat/webapps/ROOT.war
tomcat/webapps/admin.war
-tomcat/webapps/examples.war
+@comment currently has a cross-site-scripting vulnerability
+@comment tomcat/webapps/examples.war
tomcat/webapps/test.war
@comment must explicitly remove webapp working files, but not any user files in webapps
@unexec ${RM} -rf tomcat/webapps/ROOT