19:37 dbaio 

www/libwww: Fix build with OpenSSL 1.1.x

PR:		228943
Submitted by:	Nathan <ndowens@yahoo.com> (based on)
Reported by:	brnrd
Obtained from:	NetBSD pkgsrc

 

11:32 dbaio 

www/libwww: Update to 5.4.2, Fix security vulnerabilities

This a security release for libwww to take into account security advisories
CVE-2016-9063 and CVE-2017-9233.

In order to take into account current and future expat security advisories,
the expat source code was removed from the libwww tree. The makefiles were
modified so that libwww dynamically links against the system's expat library.

Patches removed were incorporated upstream.

Bump PORTREVISION of dependent ports due shlib change.

Changes:	libwww/5.4.2/ChangeLog">https://raw.githubusercontent.com/w3c/libwww/5.4.2/ChangeLog

MFH:		2018Q3
Security:	e375ff3f-7fec-11e8-8088-28d244aee256

 

22:59 junovitch 

www/libwww: address 3 security vulnerabilities; cleanup

- Add three patches from NetBSD pkgsrc for fix CVE's:
  CVE-2005-3183 (files/patch-Library_src_HTBound.c)
  CVE-2009-3560 (files/patch-modules_expat_xmlparse_xmlparse.c)
  CVE-2009-3720 (files/patch-modules_expat_xmltok_xmltok__impl.c)
- Add License
- Add USES=ssl
- Strip .so files (Q/A warnings)
- Regenerate old patches
- Pass MAINTAINER to submitter

PR:		214546
Submitted by:	Danilo G. Baio <dbaio@bsd.com.br>
Approved by:	marius@nuenneri.ch (maintainer)
Security:	CVE-2009-3720
Security:	CVE-2009-3560
Security:	CVE-2005-3183
Security:	https://vuxml.FreeBSD.org/freebsd/18449f92-ab39-11e6-8011-005056925db4.html
MFH:		2016Q4

 

21:01 pav 

- Patch the braindead configure script and make the OpenSSL part really work

Fixes:          ports/109728
Reported by:    bf <bf2006a@yahoo.com>