11:32 dbaio 

www/libwww: Update to 5.4.2, Fix security vulnerabilities

This a security release for libwww to take into account security advisories
CVE-2016-9063 and CVE-2017-9233.

In order to take into account current and future expat security advisories,
the expat source code was removed from the libwww tree. The makefiles were
modified so that libwww dynamically links against the system's expat library.

Patches removed were incorporated upstream.

Bump PORTREVISION of dependent ports due shlib change.

Changes:	libwww/5.4.2/ChangeLog">https://raw.githubusercontent.com/w3c/libwww/5.4.2/ChangeLog

MFH:		2018Q3
Security:	e375ff3f-7fec-11e8-8088-28d244aee256

 

22:59 junovitch 

www/libwww: address 3 security vulnerabilities; cleanup

- Add three patches from NetBSD pkgsrc for fix CVE's:
  CVE-2005-3183 (files/patch-Library_src_HTBound.c)
  CVE-2009-3560 (files/patch-modules_expat_xmlparse_xmlparse.c)
  CVE-2009-3720 (files/patch-modules_expat_xmltok_xmltok__impl.c)
- Add License
- Add USES=ssl
- Strip .so files (Q/A warnings)
- Regenerate old patches
- Pass MAINTAINER to submitter

PR:		214546
Submitted by:	Danilo G. Baio <dbaio@bsd.com.br>
Approved by:	marius@nuenneri.ch (maintainer)
Security:	CVE-2009-3720
Security:	CVE-2009-3560
Security:	CVE-2005-3183
Security:	https://vuxml.FreeBSD.org/freebsd/18449f92-ab39-11e6-8011-005056925db4.html
MFH:		2016Q4

 

12:59 vd 

Add wwwssl to the list of libraries to link with

PR:             ports/99863
Submitted by:   Julian Elischer <julian@pan.ironport.com>