notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
All times are UTC
Ukraine
We just patched an SQL injection. There is no evidence it was exploited. That doesn’t mean it wasn’t. Please change your password. You might want to hold off on that change. We have a few more to fix.
Commits from the 2016Q2 branch

FreshPorts has everything you want to know about FreeBSD software, ports, packages, applications, whatever term you want to use.

Thu, 30 Jun 2016
[ 22:36 Mark Felder (feld) search for other commits by this committer ]    commit hash:859c6d655ba8ec51549be3d8f52a302e7023d4ad  commit hash:859c6d655ba8ec51549be3d8f52a302e7023d4ad  commit hash:859c6d655ba8ec51549be3d8f52a302e7023d4ad  859c6d6  2016Q2
MFH: r417847

textproc/expat2: Patch vulnerability

This patch resolves a vulnerability that may still exist due to
compiler optimizations. The previous patches for CVE-2015-1283 and
CVE-2015-2716 may not work as intended in some situations.

Security:	CVE-2016-4472

Approved by:	ports-secteam (with hat)
Tue, 28 Jun 2016
[ 19:19 Jan Beich (jbeich) search for other commits by this committer ]    commit hash:f5c962a210247420f0354bbcfbc1efa4644241f0  commit hash:f5c962a210247420f0354bbcfbc1efa4644241f0  commit hash:f5c962a210247420f0354bbcfbc1efa4644241f0  f5c962a  2016Q2
  • firefox 47.0.1,1 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Web browser based on the browser portion of Mozilla
  • firefox-i18n 47.0.1 www files touched by this commit pkg-fallout Localized interface for Firefox
MFH: r417698

www/firefox: update to 47.0.1

Changes:	https://www.mozilla.org/firefox/47.0.1/releasenotes/
Approved by:	ports-secteam (junovitch)
Sun, 26 Jun 2016
[ 18:14 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:510ea0a5f18b9bfce7b426e7eeb7cca41003130f  commit hash:510ea0a5f18b9bfce7b426e7eeb7cca41003130f  commit hash:510ea0a5f18b9bfce7b426e7eeb7cca41003130f  510ea0a  2016Q2
  • tomcat-native 1.2.7 www files touched by this commit pkg-fallout Tomcat native library
  • tomcat7 7.0.70 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Open-source Java web server by Apache, 7.x branch
  • tomcat8 8.0.36 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Open-source Java web server by Apache, 8.x branch
MFH: r417360

- Update tomcat-native to 1.2.7 release.
- Update tomcat7 to 7.0.70 release.
- Update tomcat8 to 8.0.36 release.

PR:		209669
Submitted by:	geoffroy desvernay <dgeo@centrale-marseille.fr>
Approved by:	ports-secteam (with hat)
Security:	CVE-2016-3092
Security:	https://vuxml.FreeBSD.org/freebsd/cbceeb49-3bc7-11e6-8e82-002590263bf5.html
Sat, 25 Jun 2016
[ 23:27 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:1b8a59171ac0cc7138b62b9fc24a959a0b28258b  commit hash:1b8a59171ac0cc7138b62b9fc24a959a0b28258b  commit hash:1b8a59171ac0cc7138b62b9fc24a959a0b28258b  1b8a591  2016Q2
  • wordpress 4.5.3 japanese files touched by this commit  This port version is marked as vulnerable. pkg-fallout State-of-the-art semantic personal publishing platform
MFH: r417505

japanese/wordpress: update 4.5.2 -> 4.5.3

Approved by:	ports-secteam (with hat)
Security:	CVE-2016-5832
Security:	CVE-2016-5833
Security:	CVE-2016-5834
Security:	CVE-2016-5835
Security:	CVE-2016-5836
Security:	CVE-2016-5837
Security:	CVE-2016-5838
Security:	CVE-2016-5839
Security:	https://vuxml.FreeBSD.org/freebsd/bfcc23b6-3b27-11e6-8e82-002590263bf5.html
[ 23:22 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:620af080723d8c00ffd41f0120640e5261aa5ae4  commit hash:620af080723d8c00ffd41f0120640e5261aa5ae4  commit hash:620af080723d8c00ffd41f0120640e5261aa5ae4  620af08  2016Q2
  • wordpress 4.5.3 german files touched by this commit  This port version is marked as vulnerable. pkg-fallout State-of-the-art semantic personal publishing platform
MFH: r417503

german/wordpress: update 4.5.2 -> 4.5.3

Approved by:	ports-secteam (with hat)
Security:	CVE-2016-5832
Security:	CVE-2016-5833
Security:	CVE-2016-5834
Security:	CVE-2016-5835
Security:	CVE-2016-5836
Security:	CVE-2016-5837
Security:	CVE-2016-5838
Security:	CVE-2016-5839
Security:	https://vuxml.FreeBSD.org/freebsd/bfcc23b6-3b27-11e6-8e82-002590263bf5.html
[ 23:21 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:4e0f7d8e154d1f1c07d50230595982776795b7d3  commit hash:4e0f7d8e154d1f1c07d50230595982776795b7d3  commit hash:4e0f7d8e154d1f1c07d50230595982776795b7d3  4e0f7d8  2016Q2
  • wordpress 4.5.3 russian files touched by this commit  This port version is marked as vulnerable. pkg-fallout State-of-the-art semantic personal publishing platform
MFH: r417369

- Update to 4.5.3 [1]
- While here: [2]
  - Fix LICENSE
  - Switch to options helpers and fix some minor style nits (silence mkdirs)

PR:		210480 [1]
Submitted by:	9267096@gmail.com (maintainer) [1]
Approved by:	portmgr blanket [2]
Security:	CVE-2016-5832
Security:	CVE-2016-5833
Security:	CVE-2016-5834
Security:	CVE-2016-5835
Security:	CVE-2016-5836
Security:	CVE-2016-5837
Security:	CVE-2016-5838
Security:	CVE-2016-5839
Security:	https://vuxml.FreeBSD.org/freebsd/bfcc23b6-3b27-11e6-8e82-002590263bf5.html

Approved by:	ports-secteam (with hat)
[ 23:18 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:acf12235bee38c7f494d6958ff23214965028cec  commit hash:acf12235bee38c7f494d6958ff23214965028cec  commit hash:acf12235bee38c7f494d6958ff23214965028cec  acf1223  2016Q2
  • wordpress 4.5.3,1 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout State-of-the-art semantic personal publishing platform
MFH: r417500

www/wordpress: update 4.5.2 -> 4.5.3

Approved by:	ports-secteam (with hat)
Security:	CVE-2016-5832
Security:	CVE-2016-5833
Security:	CVE-2016-5834
Security:	CVE-2016-5835
Security:	CVE-2016-5836
Security:	CVE-2016-5837
Security:	CVE-2016-5838
Security:	CVE-2016-5839
Security:	https://vuxml.FreeBSD.org/freebsd/bfcc23b6-3b27-11e6-8e82-002590263bf5.html
[ 22:20 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:69afc1130ffd39afcb85fb7d0090014f083f0542  commit hash:69afc1130ffd39afcb85fb7d0090014f083f0542  commit hash:69afc1130ffd39afcb85fb7d0090014f083f0542  69afc11  2016Q2
  • php70 7.0.8 lang files touched by this commit  This port version is marked as vulnerable. pkg-fallout PHP Scripting Language
MFH: r417495

lang/php70: update 7.0.7 -> 7.0.8

PR:		210491
Reported by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
Submitted by:	Philip Jocks <freebsdbugs@filis.org>
Approved by:	ports-secteam (with hat)
Security:	CVE-2015-8874
Security:	CVE-2016-5766
Security:	CVE-2016-5767
Security:	CVE-2016-5768
Security:	CVE-2016-5769
Security:	CVE-2016-5770
Security:	CVE-2016-5771
Security:	CVE-2016-5772
Security:	CVE-2016-5773
Security:	https://vuxml.FreeBSD.org/freebsd/66d77c58-3b1d-11e6-8e82-002590263bf5.html
[ 22:20 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:32ce8b4ce0512f218a29f6ffe6c7fffae4ba9e09  commit hash:32ce8b4ce0512f218a29f6ffe6c7fffae4ba9e09  commit hash:32ce8b4ce0512f218a29f6ffe6c7fffae4ba9e09  32ce8b4  2016Q2
  • php56 5.6.23 lang files touched by this commit  This port version is marked as vulnerable. pkg-fallout PHP Scripting Language
MFH: r417493

lang/php56: update 5.6.22 -> 5.6.23

PR:		210502
Submitted by:	Philip Jocks <freebsdbugs@filis.org>
Approved by:	ports-secteam (with hat)
Security:	CVE-2015-8874
Security:	CVE-2016-5766
Security:	CVE-2016-5767
Security:	CVE-2016-5768
Security:	CVE-2016-5769
Security:	CVE-2016-5770
Security:	CVE-2016-5771
Security:	CVE-2016-5772
Security:	CVE-2016-5773
Security:	https://vuxml.FreeBSD.org/freebsd/66d77c58-3b1d-11e6-8e82-002590263bf5.html
[ 22:19 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:ce5ee066a9beff8b2e6008a494a5dc1651f4c818  commit hash:ce5ee066a9beff8b2e6008a494a5dc1651f4c818  commit hash:ce5ee066a9beff8b2e6008a494a5dc1651f4c818  ce5ee06  2016Q2
  • php55 5.5.37 lang files touched by this commit  This port version is marked as vulnerable. pkg-fallout PHP Scripting Language
MFH: r417491

lang/php55: update 5.5.36 -> 5.5.37

Approved by:	ports-secteam (with hat)
Security:	CVE-2015-8874
Security:	CVE-2016-5766
Security:	CVE-2016-5767
Security:	CVE-2016-5768
Security:	CVE-2016-5769
Security:	CVE-2016-5770
Security:	CVE-2016-5771
Security:	CVE-2016-5772
Security:	CVE-2016-5773
Security:	https://vuxml.FreeBSD.org/freebsd/66d77c58-3b1d-11e6-8e82-002590263bf5.html
Fri, 24 Jun 2016
[ 17:08 Vasil Dimov (vd) search for other commits by this committer ]    commit hash:f3b1f4ef3d5f565f9bce19ca1ab4e57ebeef9d18  commit hash:f3b1f4ef3d5f565f9bce19ca1ab4e57ebeef9d18  commit hash:f3b1f4ef3d5f565f9bce19ca1ab4e57ebeef9d18  f3b1f4e  2016Q2
  • wget 1.18 ftp files touched by this commit  This port version is marked as vulnerable. pkg-fallout Retrieve files from the Net via HTTP(S) and FTP
MFH: r417188 r417282 r417417

ftp/wget: Upgrade from 1.16.3_1 to 1.18

PR:		210421 [1], 210512
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com> [1]
Security:	CVE-2016-4971

ftp/wget: fix compilation when IDN and NLS are disabled

PR:		210441
Submitted by:	Helge Oldach <freebsd@oldach.net>

Change AUTHOR: entry in UPDATING to committer

Suggested by:	koobs@

Approved by:	ports-secteam
Thu, 23 Jun 2016
[ 21:14 Mark Felder (feld) search for other commits by this committer ]    commit hash:e20ec0bfa808ef8065d185ccc656eff11c969c19  commit hash:e20ec0bfa808ef8065d185ccc656eff11c969c19  commit hash:e20ec0bfa808ef8065d185ccc656eff11c969c19  e20ec0b  2016Q2
  • libarchive 3.2.1,1 archivers files touched by this commit  An older version of this port was marked as vulnerable. pkg-fallout Library to create and read several streaming archive formats
MFH: r417400

archivers/libarchive: Update to 3.2.1

This release resolves several vulnerabilities.

PR:		210493
Security:	CVE-2015-8934
Security:	CVE-2016-4300
Security:	CVE-2016-4301
Security:	CVE-2016-4302

Approved by:	ports-secteam (with hat)
[ 15:44 Mark Felder (feld) search for other commits by this committer ]    commit hash:b5ce8bf9b98d7224a75e701fd53287e2d5af6a70  commit hash:b5ce8bf9b98d7224a75e701fd53287e2d5af6a70  commit hash:b5ce8bf9b98d7224a75e701fd53287e2d5af6a70  b5ce8bf  2016Q2
  • piwik 2.16.1 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Open Source Web Analytics Software Program
MFH: r416928 r417366

www/piwik: Upgrade from 2.16.0 to 2.16.1

- Add missing depends
- The update also contains security fixes.

Changes: http://piwik.org/changelog/piwik-2-16-1/

PR:          210458
Approved by: pi (mentor)

Approved by:	ports-secteam (with hat)
[ 12:22 Matthew Seaman (matthew) search for other commits by this committer ]    commit hash:4deb07dc783deeb2cafe6774830e2ce9676a7040  commit hash:4deb07dc783deeb2cafe6774830e2ce9676a7040  commit hash:4deb07dc783deeb2cafe6774830e2ce9676a7040  4deb07d  2016Q2
MFH: r417350

Security update to 4.6.3

See:  PMSA-2016-19 -- PMSA-2016-28 inclusive
https://www.phpmyadmin.net/security/

vuXML to follow

Approved by:	ports-secteam (junovitch)
[ 10:44 Torsten Zuehlsdorff (tz) search for other commits by this committer ]    commit hash:6351e66126f25e6207f9e4c31dcb05f320a2db80  commit hash:6351e66126f25e6207f9e4c31dcb05f320a2db80  commit hash:6351e66126f25e6207f9e4c31dcb05f320a2db80  6351e66  2016Q2
  • gitlab 8.5.13 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Web GUI for managing git repositories
www/gitlab: Update from 8.5.12 to 8.5.13

- Prevent unauthorized access to other projects build traces
- Forbid scripting for wiki files

Approved by: ports-secteam (junovitch), junovitch (mentor)
[ 10:15 Renato Botelho (garga) search for other commits by this committer ]    commit hash:d815f534eb712efe072533ac1d0dda7fd353c00d  commit hash:d815f534eb712efe072533ac1d0dda7fd353c00d  commit hash:d815f534eb712efe072533ac1d0dda7fd353c00d  d815f53  2016Q2
  • sudo 1.8.17p1 security files touched by this commit  This port version is marked as vulnerable. pkg-fallout Allow others to run commands as root
MFH: r417338

Update security/sudo to 1.8.17p1

Sponsored by:	Rubicon Communications (Netgate)
Approved by:	ports-secteam (junovitch)
Wed, 22 Jun 2016
[ 16:41 Mark Felder (feld) search for other commits by this committer ]    commit hash:1388d68b333514ff0e87308dd46abd56b1e955b5  commit hash:1388d68b333514ff0e87308dd46abd56b1e955b5  commit hash:1388d68b333514ff0e87308dd46abd56b1e955b5  1388d68  2016Q2
MFH: r417321

accessibility/redshift: Fix warnings

USE_XORG is required for proper dependency declaration

Differential Revision:	https://reviews.freebsd.org/D6883

Approved by:	ports-secteam (with hat)
Tue, 21 Jun 2016
[ 17:13 Rene Ladan (rene) search for other commits by this committer ]    commit hash:259c036bdaf3ca239d0d9e43208a49e694d949f0  commit hash:259c036bdaf3ca239d0d9e43208a49e694d949f0  commit hash:259c036bdaf3ca239d0d9e43208a49e694d949f0  259c036  2016Q2
  • chromium 51.0.2704.103 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Google web browser based on WebKit
MFH: r416869 r417184

www/chromium: fix build on 9.3-amd64

www/chromium: update to 51.0.2704.103

X-MFH-with:	r416869
Security:	http://vuxml.freebsd.org/freebsd/d59ebed4-34be-11e6-be25-3065ec8fd3ec.html

Approved by:	ports-secteam (feld)
[ 06:13 Dirk Meyer (dinoex) search for other commits by this committer ]    commit hash:41886e4ac0121236cd685bb2aee9e498e16f353e  commit hash:41886e4ac0121236cd685bb2aee9e498e16f353e  commit hash:41886e4ac0121236cd685bb2aee9e498e16f353e  41886e4  2016Q2
MFH: r417176

- fix possible integer overflow and application crash
Security: CVE-2016-2177

Approved by:	portmgr (Mark Felder)
Mon, 20 Jun 2016
[ 19:53 Cy Schubert (cy) search for other commits by this committer ]    commit hash:b087e32112bd239a38bab83c3cd6a7fbf2e68021  commit hash:b087e32112bd239a38bab83c3cd6a7fbf2e68021  commit hash:b087e32112bd239a38bab83c3cd6a7fbf2e68021  b087e32  2016Q2
  • sudo 1.8.17 security files touched by this commit  This port version is marked as vulnerable. pkg-fallout Allow others to run commands as root
MFH: r417158

Update 1.8.16 --> 1.8.17

PR:		210407
Submitted by:	cy@
Approved by:	garga@

Approved by:	ports-secteam@ (feld@)
[ 19:14 Mark Felder (feld) search for other commits by this committer ]    commit hash:3ff87421c93b360de1cd815790ea93671d2e3dd5  commit hash:3ff87421c93b360de1cd815790ea93671d2e3dd5  commit hash:3ff87421c93b360de1cd815790ea93671d2e3dd5  3ff8742  2016Q2
MFH: r417174

textproc/libxslt: Update to 1.1.29

Changelog:
https://git.gnome.org/browse/libxslt/commit/NEWS?id=9a1b3ddf6034aa2f6a30b4b7ea4bfc3c4037cd58

Absent from the Changelog are the CVEs Google discovered, CVE-2016-1683
and CVE-2016-1684. This library needs to be updated to ensure
www/chromium is no longer vulnerable to these CVEs. Additionally the
changelog notes a fix for CVE-2015-7995, but we solved that previously
with a patch to the port.

PR:		210298
Security:	CVE-2016-1683
Security:	CVE-2016-1684

Approved by:	ports-secteam (with hat)
[ 18:04 Mark Felder (feld) search for other commits by this committer ]    commit hash:8de7baef3a94279880962e8db7a42df514be9849  commit hash:8de7baef3a94279880962e8db7a42df514be9849  commit hash:8de7baef3a94279880962e8db7a42df514be9849  8de7bae  2016Q2
MFH: r413802

. Update to 8u92

Approved by:	ports-secteam (with hat)
PR:		209984
[ 18:03 Mark Felder (feld) search for other commits by this committer ]    commit hash:fe988c11655c35f6cac4ea65124532a2dce6368b  commit hash:fe988c11655c35f6cac4ea65124532a2dce6368b  commit hash:fe988c11655c35f6cac4ea65124532a2dce6368b  fe988c1  2016Q2
MFH: r413801

. Update to 8u92

Approved by:	ports-secteam (with hat)
PR:		209984
[ 11:11 Carlos J. Puga Medina (cpm) search for other commits by this committer ]    commit hash:7517f204abf3e7b85236d11666da68504314f4ee  commit hash:7517f204abf3e7b85236d11666da68504314f4ee  commit hash:7517f204abf3e7b85236d11666da68504314f4ee  7517f20  2016Q2
  • libgcrypt 1.7.1 security files touched by this commit  This port version is marked as vulnerable. pkg-fallout General purpose crypto library based on code used in GnuPG
MFH: r413860 r417040

- Update to 1.7.0
- Remove unneeded patches (applied upstream)
- Fix inline assembler error on 9.x
- Fix pkg-plist

Changelog: https://lists.gnupg.org/pipermail/gnupg-announce/2016q2/000386.html

PR:		208907
Approved by:	junovitch (mentor)
Exp-run:	antoine
Differential Revision:	D5989

- Update to 1.7.1
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Sun, 19 Jun 2016
[ 10:52 Carlos J. Puga Medina (cpm) search for other commits by this committer ]    commit hash:69bcc4ee7653ea77ebc53eb358d209b9892474ad  commit hash:69bcc4ee7653ea77ebc53eb358d209b9892474ad  commit hash:69bcc4ee7653ea77ebc53eb358d209b9892474ad  69bcc4e  2016Q2
MFH: r416650

- Update MASTER_SITES
- Update MAINTAINER to my @FreeBSD.org address

Reviewed by:	amdmi3, junovitch (mentors)
Approved by:	junovitch (mentor)
Differential Revision:	D6774

Approved by:	ports-secteam (junovitch)
[ 06:42 Ruslan Makhmatkhanov (rm) search for other commits by this committer ]    commit hash:b81a3f94d3ef5a74099495ade114a5ea64b3b6c5  commit hash:b81a3f94d3ef5a74099495ade114a5ea64b3b6c5  commit hash:b81a3f94d3ef5a74099495ade114a5ea64b3b6c5  b81a3f9  2016Q2
  • python27 2.7.11_3 lang files touched by this commit  This port version is marked as vulnerable. pkg-fallout Interpreted object-oriented programming language
  • python33 3.3.6_5 lang  Deprecated Expired files touched by this commit  This port version is marked as vulnerable. pkg-fallout Interpreted object-oriented programming language
  • python34 3.4.4_3 lang files touched by this commit  This port version is marked as vulnerable. pkg-fallout Interpreted object-oriented programming language
  • python35 3.5.1_3 lang files touched by this commit  This port version is marked as vulnerable. pkg-fallout Interpreted object-oriented programming language
MFH: r417019

lang/python[xx]: backport upstream fix for CVE-2016-5636

Add patch for integer overflow in zipimport module to all our python ports.

While I'm here, get rid of -f flag in ${RM} invocation, because ${RM} already
expands to rm -f, so in result we are getting something like:

/bin/rm -f -f
/wrkdirs/usr/ports/lang/python35/work/stage/usr/local/lib/libpython3.so

PR:		210325
Submitted by:	 Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
Security:	1d0f6852-33d8-11e6-a671-60a44ce6887b
With hat:	python

Approved by:	ports-secteam (junovitch)
[ 02:58 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:f48a79dcc2bd9ee0c36162144801d363ae013e5e  commit hash:f48a79dcc2bd9ee0c36162144801d363ae013e5e  commit hash:f48a79dcc2bd9ee0c36162144801d363ae013e5e  f48a79d  2016Q2
MFH: r417098

www/linux-*-flashplugin: update 11.2r202.577 -> 11.2r202.626

PR:		209592
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
Approved by:	ports-secteam (with hat)
Security:	CVE-2016-1006, CVE-2016-1011, CVE-2016-1012, CVE-2016-1013,
		CVE-2016-1014, CVE-2016-1015, CVE-2016-1016, CVE-2016-1017,
		CVE-2016-1018, CVE-2016-1019, CVE-2016-1020, CVE-2016-1021,
		CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025,
		CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029,
		CVE-2016-1030, CVE-2016-1031, CVE-2016-1032, CVE-2016-1033,
		CVE-2016-1096, CVE-2016-1097, CVE-2016-1098, CVE-2016-1099,
		CVE-2016-1100, CVE-2016-1101, CVE-2016-1102, CVE-2016-1103,
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Sat, 18 Jun 2016
[ 14:39 Jan Beich (jbeich) search for other commits by this committer ]    commit hash:ab747c55a6f4760f4d68415bfd1dd40761d86260  commit hash:ab747c55a6f4760f4d68415bfd1dd40761d86260  commit hash:ab747c55a6f4760f4d68415bfd1dd40761d86260  ab747c5  2016Q2
  • blitz++ 0.9_8 math files touched by this commit pkg-fallout C++ class library for scientific computing
MFH: r416999

math/blitz++: unbreak build on 11.0 and dragonfly

./arrays-expr.texi:718: unknown command `erf'

PR:		199527
Reported by:	pkg-fallout
Approved by:	maintainer timeout (1 year)
Approved by:	ports-secteam (feld)
[ 14:39 jbeich search for other commits by this committer ] Original commit   Revision:417065 2016Q2
  • blitz++ 0.9_8 math files touched by this commit pkg-fallout C++ class library for scientific computing
MFH: r416999

math/blitz++: unbreak build on 11.0 and dragonfly

./arrays-expr.texi:718: unknown command `erf'

PR:		199527
Reported by:	pkg-fallout
Approved by:	maintainer timeout (1 year)
Approved by:	ports-secteam (feld)
[ 05:00 Thomas Zander (riggs) search for other commits by this committer ]    commit hash:a3257cfb158631d9307a8537eef2aeac5adc738d  commit hash:a3257cfb158631d9307a8537eef2aeac5adc738d  commit hash:a3257cfb158631d9307a8537eef2aeac5adc738d  a3257cf  2016Q2
MFH: r417045

Unbreak build, distfile is available at different location

PR:		210034
Submitted by:	lightside@gmx.com

Approved by:	ports-secteam (build fix blanket)
Fri, 17 Jun 2016
[ 01:33 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:0dccd3cda16531ad15fe7d9ca0fca30f7fea7de2  commit hash:0dccd3cda16531ad15fe7d9ca0fca30f7fea7de2  commit hash:0dccd3cda16531ad15fe7d9ca0fca30f7fea7de2  0dccd3c  2016Q2
  • drupal7 7.44 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Database driven web content management system (CMS)
MFH: r416328 r416557 (partial, leave out USES=mysql conversion) r416989

www/drupal7: update 7.43 -> 7.44 [1]

- Reset maintainer by his own request [2]
- Fix license
- Pet portlint

PR:		210317 [1]
PR:		209998 [2]
Approved by:	ports-secteam (with hat)
Submitted by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com> [1]
Submitted by:	simon.wright@gmx.net (maintainer) [2]
Security:	https://vuxml.FreeBSD.org/freebsd/7932548e-3427-11e6-8e82-002590263bf5.html
Wed, 15 Jun 2016
[ 11:10 Bernard Spil (brnrd) search for other commits by this committer ]    commit hash:3b4d1f346d8e56cfdf20f3cb615fbac480f78496  commit hash:3b4d1f346d8e56cfdf20f3cb615fbac480f78496  commit hash:3b4d1f346d8e56cfdf20f3cb615fbac480f78496  3b4d1f3  2016Q2
security/libressl-devel: Update to 2.3.6

Approved by:	ports-secteam (feld)
Security:	6f0529e2-2e82-11e6-b2ec-b499baebfeaf
Security:	01d729ca-1143-11e6-b55e-b499baebfeaf
[ 11:08 Bernard Spil (brnrd) search for other commits by this committer ]    commit hash:655faa17d3a05e724838d9a479884c43b247d268  commit hash:655faa17d3a05e724838d9a479884c43b247d268  commit hash:655faa17d3a05e724838d9a479884c43b247d268  655faa1  2016Q2
  • libressl 2.2.9 security files touched by this commit  This port version is marked as vulnerable. pkg-fallout Free version of the SSL/TLS protocol forked from OpenSSL
security/libressl: Update to 2.2.9

Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl>
Reviewed by:	brnrd
Approved by:	ports-secteam (feld)
Security:	6f0529e2-2e82-11e6-b2ec-b499baebfeaf
Security:	CVE-2016-2178
Tue, 14 Jun 2016
[ 23:07 Mathieu Arnold (mat) search for other commits by this committer ]    commit hash:64d3a14f18cf29d325b3120ca1cc1e3b9b0e1170  commit hash:64d3a14f18cf29d325b3120ca1cc1e3b9b0e1170  commit hash:64d3a14f18cf29d325b3120ca1cc1e3b9b0e1170  64d3a14  2016Q2
  • bind910 9.10.4P1 dns files touched by this commit  This port version is marked as vulnerable. pkg-fallout BIND DNS suite with updated DNSSEC and DNS64
  • bind99 9.9.9P1 dns files touched by this commit  This port version is marked as vulnerable. pkg-fallout BIND DNS suite with updated DNSSEC and DNS64
MFH: r412619 r412619 r415831 r415882

Mainly: update to 9.9.9-P1 and 9.10.4-P1.

There are bug fixes and small security issues that need addressing.

Sponsored by:	Absolight
[ 01:50 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:2b65c8f54ac66486cf12433f0f1b55b948a073dd  commit hash:2b65c8f54ac66486cf12433f0f1b55b948a073dd  commit hash:2b65c8f54ac66486cf12433f0f1b55b948a073dd  2b65c8f  2016Q2
  • botan110 1.10.13 security files touched by this commit pkg-fallout Portable, easy to use, and efficient C++ crypto library
MFH: r416873

security/botan110: update 1.10.12 -> 1.10.13

PR:		209594
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
Submitted by:	Lapo Luchini <lapo@lapo.it> (maintainer)
Approved by:	ports-secteam (with hat)
Security:	CVE-2015-7827
Security:	CVE-2016-2849
Security:	https://vuxml.FreeBSD.org/freebsd/ac0900df-31d0-11e6-8e82-002590263bf5.html
Mon, 13 Jun 2016
[ 19:24 Mark Felder (feld) search for other commits by this committer ]    commit hash:aeac49695dbae2fb6868a460d51276efdc6ddcb8  commit hash:aeac49695dbae2fb6868a460d51276efdc6ddcb8  commit hash:aeac49695dbae2fb6868a460d51276efdc6ddcb8  aeac496  2016Q2
MFH: r416823

- Fix DSA, preserve BN_FLG_CONSTTIME
Security: CVE-2016-2178

Approved by:	ports-secteam (with hat)
[ 15:43 Jason Helfman (jgh) search for other commits by this committer ]    commit hash:2ccdb9b2a033154fa87e6cedfbb8f8c02cf10cc5  commit hash:2ccdb9b2a033154fa87e6cedfbb8f8c02cf10cc5  commit hash:2ccdb9b2a033154fa87e6cedfbb8f8c02cf10cc5  2ccdb9b  2016Q2
  • xlockmore 5.46_1 x11 files touched by this commit pkg-fallout Like XLock session locker/screen saver, but just more
MFH: r416638 r416686

- add/enable xinerama support (default)

- fix for MESAGL
/usr/local/include/FTGL/ftgl.h:32:10: fatal error: 'ft2build.h' file not found
Reported by:	dhw

Approved by:	ports-secteam (with hat)
Sun, 12 Jun 2016
[ 13:21 Renato Botelho (garga) search for other commits by this committer ]    commit hash:8f8af74a04eda98cd58e47012aec1160371724a2  commit hash:8f8af74a04eda98cd58e47012aec1160371724a2  commit hash:8f8af74a04eda98cd58e47012aec1160371724a2  8f8af74  2016Q2
  • sudo 1.8.16_1 security files touched by this commit  This port version is marked as vulnerable. pkg-fallout Allow others to run commands as root
MFH: r416751

Add a patch to fix sudo bug #743 that causes a bug where it dereference
a NULL pointer when it looks up a negative cached entry which is stored
as a NULL passwd or group struct pointer

PR:		208198
Submitted by:	Fredrik Eriksson <fredrik.eriksson@loopia.se>
Obtained from:	https://www.sudo.ws/repos/sudo/rev/1d13341d53ec
Sponsored by:	Rubicon Communications (Netgate)
Approved by:	ports-secteam (feld)
Sat, 11 Jun 2016
[ 18:01 Jan Beich (jbeich) search for other commits by this committer ]    commit hash:5a3ac8d67f3285655e87fa8d7329ecf055e0f034  commit hash:5a3ac8d67f3285655e87fa8d7329ecf055e0f034  commit hash:5a3ac8d67f3285655e87fa8d7329ecf055e0f034  5a3ac8d  2016Q2
  • mpop 1.2.5 mail files touched by this commit pkg-fallout Small and fast POP3 client
MFH: r416734

mail/mpop: update to 1.2.5

Changes:	https://sourceforge.net/p/mpop/code/ci/6b5d23
Approved by:	ports-secteam (junovitch)
[ 16:22 Thomas Zander (riggs) search for other commits by this committer ]    commit hash:65a154db1484ea5fe26a0d2e6ee26f7fc772eeac  commit hash:65a154db1484ea5fe26a0d2e6ee26f7fc772eeac  commit hash:65a154db1484ea5fe26a0d2e6ee26f7fc772eeac  65a154d  2016Q2
  • vlc 2.2.4,4 multimedia files touched by this commit  This port version is marked as vulnerable. pkg-fallout Qt based multimedia player and streaming server
MFH: r415944 r416225 r416711

Update to upstream version 2.2.3

Differential Revision:	https://reviews.freebsd.org/D6373

Fix build with libc++ 3.8.0

VLC brings its own header for atomic operations which defines a whole
bunch of atomic macros, conflicting with the ones in the C++ standard
<atomic> header. This changeset works around those.

PR:		209722
Submitted by:	dim
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Fri, 10 Jun 2016
[ 01:17 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:0f7982a4fde339171ac73804d8b30ec82b04fff4  commit hash:0f7982a4fde339171ac73804d8b30ec82b04fff4  commit hash:0f7982a4fde339171ac73804d8b30ec82b04fff4  0f7982a  2016Q2
  • roundcube 1.1.5_1,1 mail files touched by this commit  This port version is marked as vulnerable. pkg-fallout Fully skinnable XHTML/CSS webmail written in PHP
MFH: r414979 r416648

Update to 1.1.5 release.

Apply patch from upstream for cross-site scripting vulnerability

PR:		209841
Reported by:	Vladimir Krstulja <vlad-fbsd@acheronmedia.com>
Approved by:	maintainer timeout (2 weeks)
Security:	CVE-2016-5103
Security:	https://vuxml.FreeBSD.org/freebsd/97e86d10-2ea7-11e6-ae88-002590263bf5.html

Approved by:	ports-secteam (with hat)
Thu, 9 Jun 2016
[ 15:57 Bartek Rutkowski (robak) search for other commits by this committer ]    commit hash:9d25bb61490c00216a11c9eacec28001612f3e1f  commit hash:9d25bb61490c00216a11c9eacec28001612f3e1f  commit hash:9d25bb61490c00216a11c9eacec28001612f3e1f  9d25bb6  2016Q2
MFH: r416547

sysutils/vm-bhyve: update 1.0.2 -> 1.0.4

- Bugfix release

PR:		210128
Submitted by:	<churchers@gmail.com> (maintainer)

Approved by:	ports-secteam
[ 03:44 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:bc2a3d627117e2e629563ba9ff36f5413d794c03  commit hash:bc2a3d627117e2e629563ba9ff36f5413d794c03  commit hash:bc2a3d627117e2e629563ba9ff36f5413d794c03  bc2a3d6  2016Q2
MFH: r416564

Update to iperf3, which addresses a buffer overflow vulnerability
on the iperf3 control channel.

Security:	CVE-2016-4303
Security:	https://vuxml.FreeBSD.org/freebsd/d6bbf2d8-2cfc-11e6-800b-080027468580.html
Sponsored by:	ESnet
Approved by:	ports-secteam (with hat)
[ 03:28 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:9badfeaabd0a1c26af4eed57fb9a19529c6dc9a4  commit hash:9badfeaabd0a1c26af4eed57fb9a19529c6dc9a4  commit hash:9badfeaabd0a1c26af4eed57fb9a19529c6dc9a4  9badfea  2016Q2
MFH: r416579

textproc/expat2: address two CVEs reported by upstream

PR:		210155
Reported by:	Sebastian Pipping <sebastian@pipping.org>
Approved by:	ports-secteam (with hat)
Security:	CVE-2012-6702
Security:	CVE-2016-5300
Security:	https://vuxml.FreeBSD.org/freebsd/c9c252f5-2def-11e6-ae88-002590263bf5.html
Wed, 8 Jun 2016
[ 19:12 Rene Ladan (rene) search for other commits by this committer ]    commit hash:0cd069cb769fcd977eb10f2f34438ea178d20f0f  commit hash:0cd069cb769fcd977eb10f2f34438ea178d20f0f  commit hash:0cd069cb769fcd977eb10f2f34438ea178d20f0f  0cd069c  2016Q2
  • chromium 51.0.2704.84_1 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Google web browser based on WebKit
MFH: r416561

www/chromium: restore WebRTC audio via ALSA which got lost in last commit.

PR:		206480
Submitted by:	betso.net@gmail.com

Approved by:	ports-secteam (feld)
[ 05:31 Rene Ladan (rene) search for other commits by this committer ]    commit hash:b2ee829ac493ae48d918522366fe69f5a90ce096  commit hash:b2ee829ac493ae48d918522366fe69f5a90ce096  commit hash:b2ee829ac493ae48d918522366fe69f5a90ce096  b2ee829  2016Q2
  • chromium 51.0.2704.84 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Google web browser based on WebKit
MFH: r416521

www/chromium: update to 51.0.2704.84

A lot of patch files are renamed in this update.

Submitted by:	Timothy Vaccarelli
Obtained from:	https://github.com/LeFroid/
Security:	http://vuxml.freebsd.org/freebsd/c039a761-2c29-11e6-8912-3065ec8fd3ec.html
Security:	http://vuxml.freebsd.org/freebsd/1a6bbb95-24b8-11e6-bd31-3065ec8fd3ec.html
Security:	http://vuxml.freebsd.org/freebsd/4dfafa16-24ba-11e6-bd31-3065ec8fd3ec.html
Security:	http://vuxml.freebsd.org/freebsd/7da1da96-24bb-11e6-bd31-3065ec8fd3ec.html
Security:	http://vuxml.freebsd.org/freebsd/6d8505f0-0614-11e6-b39c-00262d5ed8ee.html

Approved by:	ports-secteam (junovitch)
Mon, 6 Jun 2016
[ 20:34 Guido Falsi (madpilot) search for other commits by this committer ]    commit hash:1c633af674ae4fa910414d8a08f485b6947aaedd  commit hash:1c633af674ae4fa910414d8a08f485b6947aaedd  commit hash:1c633af674ae4fa910414d8a08f485b6947aaedd  1c633af  2016Q2
  • asterisk11 11.22.0 net files touched by this commit  This port version is marked as vulnerable. pkg-fallout Open Source PBX and telephony toolkit
  • asterisk13 13.8.1 net files touched by this commit  This port version is marked as vulnerable. pkg-fallout Open Source PBX and telephony toolkit
MFH: r416484

Force asterisk to use it's internal iLBC implementation.

This prevents asterisk configure script from being confused by
net/libilbc (which is not compatible) if installed on the system.

PR:		210074
Submitted by:	Nikolay <technotrance at list.ru>

Approved by:	ports-secteam (feld)
[ 20:33 Christoph Moench-Tegeder (cmt) search for other commits by this committer ]    commit hash:9fdb0a14568016257085fcc5bbda700bdfb57ef7  commit hash:9fdb0a14568016257085fcc5bbda700bdfb57ef7  commit hash:9fdb0a14568016257085fcc5bbda700bdfb57ef7  9fdb0a1  2016Q2
MFH: r416485

Update thunderbird to 45.1.1, enigmail to 1.9.3

PR:		210061
Approved by:	jbeich (maintainer)
Approved by:	rene (mentor)

Approved by:	ports-secteam (feld@)
[ 18:29 Kurt Jaeger (pi) search for other commits by this committer ]    commit hash:11043d463265a967ad3f6eab5a6047fd016f32f6  commit hash:11043d463265a967ad3f6eab5a6047fd016f32f6  commit hash:11043d463265a967ad3f6eab5a6047fd016f32f6  11043d4  2016Q2
  • cacti 0.8.8h_1 net-mgmt files touched by this commit  This port version is marked as vulnerable. pkg-fallout Web-driven graphing interface for RRDTool
net-mgmt/cacti: fix version number in Makefile

PR:		209809
Submitted by:	Daniel Austin <freebsd-ports@dan.me.uk> (maintainer)
Approved by:	ports-secteam (junovitch)
MFH:		2016Q2
[ 12:04 Bartek Rutkowski (robak) search for other commits by this committer ]    commit hash:c2572f5c18e24cf214511e7c18b429faa8e26572  commit hash:c2572f5c18e24cf214511e7c18b429faa8e26572  commit hash:c2572f5c18e24cf214511e7c18b429faa8e26572  c2572f5  2016Q2
MFH: r416320

mail/milter-greylist-devel: update 4.6a1 -> 4.6

- Fix runtime dependencies

PR:		209979
Submitted by:	Daniel Austin <freebsd-ports@dan.me.uk> (maintainer)

Approved by:	ports-secteam
Sun, 5 Jun 2016
[ 20:25 Jan Beich (jbeich) search for other commits by this committer ]    commit hash:44bfa884069d03ab70e2aba7e87f30e27910f448  commit hash:44bfa884069d03ab70e2aba7e87f30e27910f448  commit hash:44bfa884069d03ab70e2aba7e87f30e27910f448  44bfa88  2016Q2
  • firefox 47.0_1,1 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Web browser based on the browser portion of Mozilla
  • firefox-esr 45.2.0,1 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Web browser based on the browser portion of Mozilla
  • firefox-esr-i18n 45.2.0 www files touched by this commit pkg-fallout Localized interface for Firefox
  • firefox-i18n 47.0 www files touched by this commit pkg-fallout Localized interface for Firefox
  • libxul 45.2.0 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Mozilla runtime package that can be used to bootstrap XUL+XPCOM apps
  • linux-firefox 45.2.0,2 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Web browser based on the browser portion of Mozilla
MFH: r416309 r416312 r416394

www/firefox: update to 47.0 (rc3) / 45.2esr

- Adjust firefox-esr-i18n for linux-firefox after r414580
- Unbreak DTRACE=on + DEBUG=on [1]
- Unbreak FFMPEG=off [2]

Changes:	https://www.mozilla.org/firefox/47.0/releasenotes/
Changes:	https://www.mozilla.org/firefox/45.2.0/releasenotes/
Security:	8065d37b-8e7c-4707-a608-1b0a2b8509c3
PR:		200845, 209952 [1], 209308 [2]
Approved by:	ports-secteam (feld, junovitch)
[ 19:57 Thomas Zander (riggs) search for other commits by this committer ]    commit hash:7b4da9c95a287095bb5c9aa18bb0854a73b42c05  commit hash:7b4da9c95a287095bb5c9aa18bb0854a73b42c05  commit hash:7b4da9c95a287095bb5c9aa18bb0854a73b42c05  7b4da9c  2016Q2
  • gdb 7.11.1 devel files touched by this commit pkg-fallout GNU GDB of newer version than comes with the system
  • gdb66 6.6_3 devel files touched by this commit pkg-fallout GNU GDB of newer version than comes with the system
MFH: r416247 r416392

Make GDB build when basename() is POSIX compliant.

GDB's libiberty.h has a prototype of the basename() function it which
does not match the one that is part of POSIX, declared in libgen.h. This
is normally never visible, as GDB never includes libgen.h. On FreeBSD,
it unfortunately is, as our locally added copy of kgdb includes both.

Fix up libiberty.h to just include libgen.h. I'm currently discussing
with upstream how a clean fix should be done, but I guess that
requires more refactoring to the existing code. We'd better not bother
importing that and stick to this compact workaround.

Reviewed by:	bapt@, mi@, Luca Pizzamiglio
(Only the first 15 lines of the commit message are shown above View all of this commit message)
[ 19:43 Thomas Zander (riggs) search for other commits by this committer ]    commit hash:bd3a95ba8f7cee044fbf7a2bd9cd20ce84157104  commit hash:bd3a95ba8f7cee044fbf7a2bd9cd20ce84157104  commit hash:bd3a95ba8f7cee044fbf7a2bd9cd20ce84157104  bd3a95b  2016Q2
MFH: r416371

Update to upstream version 4.11.0

Extensive changelog on http://code.call-cc.org/releases/4.11.0/NEWS-4.11.0
including security fixes for Specialisation rules for string-{ref,set!},
bit-set?
and move-memory no longer use unchecked C functions which could
result in undefined behaviour, including buffer overruns.

While on it: Pet portlint

PR:		209810
Submitted by:	vmagerya@gmail.com (maintainer)
Reported by:	philneaton95@gmail.com

Approved by:	ports-secteam (junovitch)
[ 18:05 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:9ff34f336b5a0c60e6e687f815162922aae7c66e  commit hash:9ff34f336b5a0c60e6e687f815162922aae7c66e  commit hash:9ff34f336b5a0c60e6e687f815162922aae7c66e  9ff34f3  2016Q2
  • openafs 1.6.18.20160101 net  Ignore files touched by this commit pkg-fallout AFS implementation from openafs.org
MFH: r415920

Update net/openafs to upstream 1.6.18

This includes the changes in 1.6.17, a security release.

PR:		209534
Reported by:	Sevan Janiyan <venture37@geeklan.co.uk>
Security:	CVE-2015-8312
Security:	CVE-2016-2860
Security:	CVE-2016-4536
Security:	https://vuxml.FreeBSD.org/freebsd/2e8fe57e-2b46-11e6-ae88-002590263bf5.html
Security:	https://vuxml.FreeBSD.org/freebsd/bcbd3fe0-2b46-11e6-ae88-002590263bf5.html
Approved by:	ports-secteam (with hat)
[ 17:44 Jason Unovitch (junovitch) search for other commits by this committer ]   Sanity Test Failure  commit hash:e1dc306573ce309e91319eef1ea4b6331cccb32d  commit hash:e1dc306573ce309e91319eef1ea4b6331cccb32d  commit hash:e1dc306573ce309e91319eef1ea4b6331cccb32d  e1dc306  2016Q2
  • nginx 1.8.1_3,2 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Robust and small WWW server
  • nginx-devel 1.9.15_1 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Robust and small WWW server
MFH: r412446 r412447 r412449 r412450 r412534 r412535 r412555 r412588 r412645
     r412858 r412862 r413165 r413379 r413380 r413662

Apply CVE-2016-4450 patches to www/nginx and www/nginx-devel following a sync
with r413662 from head before the major release updates to 1.10.x and 1.11.x
and configuration change requirement brought about by dynamic module support.

- Enable several vendor's modules to be in sync with vendor's
  original packages for some linux distros, please see
  http://nginx.org/en/linux_packages.html for details.
- Upgrade nginx-devel from 1.9.12 to 1.9.15; remove needless vendor patches.

Add/upgrade third-party modules:
o) Upgrade third-party brotli module from 86998c6 to 2fc6f12.
o) Add AWS proxy third-party module.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
[ 16:38 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:1978708148a940092cf99f28f5c92e15609b81d6  commit hash:1978708148a940092cf99f28f5c92e15609b81d6  commit hash:1978708148a940092cf99f28f5c92e15609b81d6  1978708  2016Q2
MFH: r415432

Update to 3.20160509.

PR:		209593
Reported by:	Sevan Janiyan
Security:	CVE-2016-4561
Sponsored by:	Absolight

Approved by:	ports-secteam (with hat)
Fri, 3 Jun 2016
[ 06:51 Cy Schubert (cy) search for other commits by this committer ]    commit hash:d942abf61e16a54cb6e28887ca00d4bf1a22bf68  commit hash:d942abf61e16a54cb6e28887ca00d4bf1a22bf68  commit hash:d942abf61e16a54cb6e28887ca00d4bf1a22bf68  d942abf  2016Q2
  • ntp-devel 4.3.93 net files touched by this commit  This port version is marked as vulnerable. pkg-fallout The Network Time Protocol Distribution
MFH: r416299

Update 4.3.91 --> 4.3.93

Approved by:	ports-secteam@ (delphij)
[ 06:50 Cy Schubert (cy) search for other commits by this committer ]    commit hash:8eef06b8c149a1d3dd604dda5cee31fff956957f  commit hash:8eef06b8c149a1d3dd604dda5cee31fff956957f  commit hash:8eef06b8c149a1d3dd604dda5cee31fff956957f  8eef06b  2016Q2
  • ntp 4.2.8p8 net files touched by this commit  This port version is marked as vulnerable. pkg-fallout The Network Time Protocol Distribution
MFH: r416298

Update 4.2.8p7 --> 4.2.8p8

Approved by:	ports-secteam@ (delphij)
Wed, 1 Jun 2016
[ 22:55 Ryan Steinmetz (zi) search for other commits by this committer ]    commit hash:30d2fd7386be946976fcea02b57191dd6cfc582a  commit hash:30d2fd7386be946976fcea02b57191dd6cfc582a  commit hash:30d2fd7386be946976fcea02b57191dd6cfc582a  30d2fd7  2016Q2
  • h2o 1.7.3 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Optimized HTTP2 server with support for HTTP/1.x
MFH: r416261

- Update to 1.7.3

PR:		209926
Submitted by:	Dave Cottlehuber
Security:	65bb1858-27de-11e6-b714-74d02b9a84d5
Approved by:	ports-secteam (me)
[ 22:54 Ryan Steinmetz (zi) search for other commits by this committer ]    commit hash:3c454dfb8892d074588840e104fd2721b3ae6658  commit hash:3c454dfb8892d074588840e104fd2721b3ae6658  commit hash:3c454dfb8892d074588840e104fd2721b3ae6658  3c454df  2016Q2
  • vuxml 1.1_2 security files touched by this commit pkg-fallout Vulnerability and eXposure Markup Language DTD
MFH: r416260

- Get vuln.xml in sync with head

Approved by:	ports-secteam (me)
Tue, 31 May 2016
[ 16:22 Kurt Jaeger (pi) search for other commits by this committer ]    commit hash:33b1fa978a9f29f7a5d0ac7344dcfb7076059608  commit hash:33b1fa978a9f29f7a5d0ac7344dcfb7076059608  commit hash:33b1fa978a9f29f7a5d0ac7344dcfb7076059608  33b1fa9  2016Q2
MFH: r412687 r415739

- Update to version 0.2.0 to unbreak

PR:		209836
Reported by:	Fabian Keil <fk@fabiankeil.de>
Approved by:	Sascha Holzleiter <sascha@root-login.org> (maintainer)
Approved by:	ports-secteam (delphij, junovitch)
[ 16:12 Kurt Jaeger (pi) search for other commits by this committer ]    commit hash:83bbd196c55d5b2e7b9592903f5376f4f72774a5  commit hash:83bbd196c55d5b2e7b9592903f5376f4f72774a5  commit hash:83bbd196c55d5b2e7b9592903f5376f4f72774a5  83bbd19  2016Q2
  • cacti 0.8.8g_1 net-mgmt files touched by this commit  This port version is marked as vulnerable. pkg-fallout Web-driven graphing interface for RRDTool
net-mgmt/cacti: fix INDEX in quarterly branch

- no USES=mysql allowed in the quarterly branch

PR:		209809
Submitted by:	antoine
Approved by:	ports-secteam (feld)
Mon, 30 May 2016
[ 13:30 Jan Beich (jbeich) search for other commits by this committer ]    commit hash:123232f3f62b8a3c0d80b5cb430282d2c7b3474f  commit hash:123232f3f62b8a3c0d80b5cb430282d2c7b3474f  commit hash:123232f3f62b8a3c0d80b5cb430282d2c7b3474f  123232f  2016Q2
MFH: r416147

games/burrtools: switch back to clang on 10+

Fix undefined behavior on startup when parsing (embedded) config file
written in Lua.

Approved by:	ports-secteam (junovitch)
Sun, 29 May 2016
[ 22:08 Xin LI (delphij) search for other commits by this committer ]    commit hash:367f0407af86bae3bbc7389ed39efaf4d387f67b  commit hash:367f0407af86bae3bbc7389ed39efaf4d387f67b  commit hash:367f0407af86bae3bbc7389ed39efaf4d387f67b  367f040  2016Q2
  • clamav 0.99.2 security files touched by this commit  This port version is marked as vulnerable. pkg-fallout Command line virus scanner written entirely in C
MFH: r416126

Update to 0.99.2.

PR:		ports/209384
Submitted by:	Leonid Nevecherya <nevecherya gmail com>
Approved by:	ports-secteam
[ 19:12 Kurt Jaeger (pi) search for other commits by this committer ]   Sanity Test Failure  commit hash:76549baf53873fd20fac182fc6c97ecc140ae743  commit hash:76549baf53873fd20fac182fc6c97ecc140ae743  commit hash:76549baf53873fd20fac182fc6c97ecc140ae743  76549ba  2016Q2
  • cacti 0.8.8h_1 net-mgmt  Refresh files touched by this commit  This port version is marked as vulnerable. pkg-fallout Web-driven graphing interface for RRDTool
MFH: r416066

net-mgmt/cacti: 0.8.8g -> 0.8.8h

This is a security update for cacti to resolve SQL exploits.
- upgrade to 0.8.8h codebase from vendor
- fix SQL vulnerabilities including CVE-2016-3659
- fix USE_MYSQL -> USES:mysql
- fix deprecated mysql php module requirement (use mysqli instead)
- fix overwriting of failure/recovery dates after outages

PR:		209809
Submitted by:	Daniel Austin <freebsd-ports@dan.me.uk> (maintainer)
Security:	CVE-2016-3659
Approved by:	ports-secteam (junovitch)
Sat, 28 May 2016
[ 01:48 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:4084889e6e5fe10e76ea648258aba87c75e3ce3d  commit hash:4084889e6e5fe10e76ea648258aba87c75e3ce3d  commit hash:4084889e6e5fe10e76ea648258aba87c75e3ce3d  4084889  2016Q2
  • php55 5.5.36 lang files touched by this commit  This port version is marked as vulnerable. pkg-fallout PHP Scripting Language
  • php56 5.6.22 lang files touched by this commit  This port version is marked as vulnerable. pkg-fallout PHP Scripting Language
  • php70 7.0.7 lang files touched by this commit  This port version is marked as vulnerable. pkg-fallout PHP Scripting Language
MFH: r415304 r415818 r415970 r415971 r415972

- Really fix ZTS build with pthreads, required by threaded apache24
- Bump PORTREVISION due to dependency on thread library

Approved by:	miwi (mentor)

Simplify plist by using @sample

lang/php70: update 7.0.6 -> 7.0.7

Approved by:	ports-secteam (with hat)
Security:	CVE-2013-7456
Security:	CVE-2016-5093
Security:	https://vuxml.FreeBSD.org/freebsd/6b110175-246d-11e6-8dd3-002590263bf5.html
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Fri, 27 May 2016
[ 11:32 Bartek Rutkowski (robak) search for other commits by this committer ]    commit hash:85a935666268c6e2c3f0e11b1ae91fc6344d8ea5  commit hash:85a935666268c6e2c3f0e11b1ae91fc6344d8ea5  commit hash:85a935666268c6e2c3f0e11b1ae91fc6344d8ea5  85a9356  2016Q2
  • node4 4.4.5 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout V8 JavaScript for client and server (4.x LTS)
MFH: r415933

www/node4: update 4.4.4 -> 4.4.5

- Bugfix release

PR:		209781
Submitted by:	Bradley T. Hughes <bradleythughes@fastmail.fm> (maintainer)

Approved by:	ports-secteam
Wed, 25 May 2016
[ 22:31 Matthew Seaman (matthew) search for other commits by this committer ]    commit hash:414a865f05d3b1173d01215d14acc0e0076a4b8f  commit hash:414a865f05d3b1173d01215d14acc0e0076a4b8f  commit hash:414a865f05d3b1173d01215d14acc0e0076a4b8f  414a865  2016Q2
MFH: r415866

Security update to 4.6.2

ChangeLog:	https://www.phpmyadmin.net/files/4.6.2/

Security:	00ec1be1-22bb-11e6-9ead-6805ca0b3d42

Approved by:	ports-secteam (junovitch)
Tue, 24 May 2016
[ 13:11 Bartek Rutkowski (robak) search for other commits by this committer ]    commit hash:124034ca5f70456ad163b61c20366767ee87a876  commit hash:124034ca5f70456ad163b61c20366767ee87a876  commit hash:124034ca5f70456ad163b61c20366767ee87a876  124034c  2016Q2
  • sympa 6.2.15 mail files touched by this commit  This port version is marked as vulnerable. pkg-fallout Sympa is an electronic mailing list manager
MFH: r415714

mail/sympa: update 6.2.14 -> 6.2.15

- Bugfix release

PR:		209667
Submitted by:	Geoffroy Desvernay <dgeo@centrale-marseille.fr> (maintainer)

Approved by:	ports-secteam
[ 02:08 Wen Heping (wen) search for other commits by this committer ]    commit hash:169c5af7c4794598f2b998c67d055279a9b4579f  commit hash:169c5af7c4794598f2b998c67d055279a9b4579f  commit hash:169c5af7c4794598f2b998c67d055279a9b4579f  169c5af  2016Q2
MFH: r415702

- Update mediawiki to 1.26.3, 1.25.6 and 1.23.14
 (security update)

Approved by:	 ports-secteam( junovitch@)
Mon, 23 May 2016
[ 12:08 Bartek Rutkowski (robak) search for other commits by this committer ]    commit hash:b7df68d209daa5be3d154f63eaf307d1c34e75a4  commit hash:b7df68d209daa5be3d154f63eaf307d1c34e75a4  commit hash:b7df68d209daa5be3d154f63eaf307d1c34e75a4  b7df68d  2016Q2
  • powerdns 3.4.9 dns files touched by this commit  This port version is marked as vulnerable. pkg-fallout Advanced DNS server with multiple backends including SQL
MFH: r415648

dns/powerdns: update 3.4.8 -> 3.4.9

- Bugfix release

PR:		209677
Submitted by:	Ralf van der Enden <tremere@cainites.net> (maintainer)

Approved by:	ports-secteam
Sun, 22 May 2016
[ 01:14 Jan Beich (jbeich) search for other commits by this committer ]    commit hash:1af726888655ad89da6d22adde4823c3e2a40f68  commit hash:1af726888655ad89da6d22adde4823c3e2a40f68  commit hash:1af726888655ad89da6d22adde4823c3e2a40f68  1af7268  2016Q2
  • fb-adb 1.4.4.124 devel files touched by this commit pkg-fallout Better shell for Android devices
MFH: r415618

devel/fb-adb: unbreak c6_64 build after r411857

===>  Extracting for fb-adb-1.4.4.124
=> SHA256 Checksum OK for android-ndk-r10e-linux-x86_64.bin.
=> SHA256 Checksum OK for facebook-fb-adb-1.4.4-124-gb230619_GH0.tar.gz.
tar: Error opening archive: Unrecognized archive format
*** Error code 1

Approved by:	ports-secteam blanket
Sat, 21 May 2016
[ 19:42 Olli Hauer (ohauer) search for other commits by this committer ]    commit hash:b7e5438b177d77c8d6cbe510bcc34e0e57978205  commit hash:b7e5438b177d77c8d6cbe510bcc34e0e57978205  commit hash:b7e5438b177d77c8d6cbe510bcc34e0e57978205  b7e5438  2016Q2
MFH: r415287

- update to 3.2-20160515

Changelog:

20160330
        The collate.pl script by Viktor Dukhovni for grouping Postfix
        logfile records into "sessions" based on queue ID and process
        ID information. Files: auxiliary/collate/*.

20160407
        Treat SASL_FAIL and SASL_NOMEM as temporary errors.
        Markus Benning. File: xsasl/xsasl_cyrus_server.c.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
Fri, 20 May 2016
[ 20:58 Jan Beich (jbeich) search for other commits by this committer ]    commit hash:a6127e1e5fcace9434b780badfa9cfc8e858e356  commit hash:a6127e1e5fcace9434b780badfa9cfc8e858e356  commit hash:a6127e1e5fcace9434b780badfa9cfc8e858e356  a6127e1  2016Q2
  • chromium 49.0.2623.112 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout Google web browser based on WebKit
MFH: r415570

www/chromium: unbreak WebRTC microphone selection with PULSEAUDIO=off

Similar to r414386. No kernel ALSA is available to enumerate soundcards,
so assume sound(4) can always be used via ALSA plugins like "oss".
This partially reverts https://codereview.chromium.org/7888011/

PR:		206480
Reported by:	Betso <betso.net@gmail.com>
Reviewed by:	cem, cmt (briefly)
Approved by:	maintainer timeout (2 weeks)
Approved by:	ports-secteam (feld)
[ 01:49 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:54684c1c5402754f5760776155644828dabf6bfc  commit hash:54684c1c5402754f5760776155644828dabf6bfc  commit hash:54684c1c5402754f5760776155644828dabf6bfc  54684c1  2016Q2
MFH: r415539

chinese/wordpress-zh_CN: update 4.4.2 -> 4.5.2

PR:		209409
Approved by:	ports-secteam (with hat)
Security:	CVE-2016-4566
Security:	CVE-2016-4567
Security:	https://vuxml.FreeBSD.org/freebsd/3686917b-164d-11e6-94fa-002590263bf5.html
[ 01:39 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:cdf35b1c1c04c8ff83f925aa02a94015aa4cc18e  commit hash:cdf35b1c1c04c8ff83f925aa02a94015aa4cc18e  commit hash:cdf35b1c1c04c8ff83f925aa02a94015aa4cc18e  cdf35b1  2016Q2
  • jansson 2.7_3 devel files touched by this commit pkg-fallout C library for encoding, decoding, and manipulating JSON data
MFH: r415303

Fix issue to parse large flat json files.

PR:		209492
Reported by:	yuri@rawbw.com

Approved by:	ports-secteam (with hat)
[ 01:23 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:0376d4805e629991f2e40ea5df62ce7fcf25186a  commit hash:0376d4805e629991f2e40ea5df62ce7fcf25186a  commit hash:0376d4805e629991f2e40ea5df62ce7fcf25186a  0376d48  2016Q2
MFH: r415527

security/wpa_supplicant: Add security patch set 2016-1

A vulnerability was found in how hostapd and wpa_supplicant writes the
configuration file update for the WPA/WPA2 passphrase parameter. If this
parameter has been updated to include control characters either through
a WPS operation (CVE-2016-4476) or through local configuration change
over the wpa_supplicant control interface (CVE-2016-4477), the resulting
configuration file may prevent the hostapd and wpa_supplicant from
starting when the updated file is used. In addition for wpa_supplicant,
it may be possible to load a local library file and execute code from
there with the same privileges under which the wpa_supplicant process
runs.

These patches were developed upstream and published as a response
to the security advisories CVE-2016-4476 and CVE-2016-4477.

PR:		209564
Requested by:	Sevan Janiyan
Security:	CVE-2016-4477
Security:	CVE-2016-4476
Security:	https://vuxml.FreeBSD.org/freebsd/967b852b-1e28-11e6-8dd3-002590263bf5.html
Approved by:	ports-secteam (with hat)
[ 01:08 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:e001d14ad609dc24cfc55ce0fb135264d20c151a  commit hash:e001d14ad609dc24cfc55ce0fb135264d20c151a  commit hash:e001d14ad609dc24cfc55ce0fb135264d20c151a  e001d14  2016Q2
MFH: r415534

textproc/expat2: update 2.1.0 -> 2.1.1

- Update USES for new release format
- Drop CVE-2015-1283 patch now included in this release
- Add patch for CVE-2016-0718

PR:		209360
Submitted by:	tijl
Approved by:	ports-secteam (with hat)
Security:	CVE-2016-0718
Security:	https://vuxml.FreeBSD.org/freebsd/57b3aba7-1e25-11e6-8dd3-002590263bf5.html
Wed, 18 May 2016
[ 22:34 Thomas Zander (riggs) search for other commits by this committer ]    commit hash:ccaafeb73ddeea682764bd12f25b2cdd06c4e5e0  commit hash:ccaafeb73ddeea682764bd12f25b2cdd06c4e5e0  commit hash:ccaafeb73ddeea682764bd12f25b2cdd06c4e5e0  ccaafeb  2016Q2
  • ffmpeg 2.8.6_3,1 multimedia files touched by this commit  This port version is marked as vulnerable. pkg-fallout Realtime audio/video encoder/converter and streaming server
MFH: r415463

Fix runtime issue: libvdpau must be LIB_DEPENDS

PR:		209619
Submitted by:	walter@lifeforms.nl

Approved by:	ports-secteam (feld)
Tue, 17 May 2016
[ 06:06 Olli Hauer (ohauer) search for other commits by this committer ]    commit hash:855d748d9d1653e8cb62fd3f41809947d680d858  commit hash:855d748d9d1653e8cb62fd3f41809947d680d858  commit hash:855d748d9d1653e8cb62fd3f41809947d680d858  855d748  2016Q2
  • postfix211 2.11.8,1 mail files touched by this commit Is Interactive pkg-fallout Secure alternative to widely-used Sendmail
MFH: r415321

- update to 2.11.8

Changelog:
20160310
        Bugfix (introduced: Postfix 2.6): the Milter SMFIR_CHGFROM
        (replace sender) request lost the sender_bcc_maps address.
        Fixed by moving some record keeping to the sender output
        function.  Files: cleanup/cleanup_envelope.c,
        cleanup/cleanup_addr.c, cleanup/cleanup_milter.c,
        cleanup/cleanup.h, regression tests.

20160410
        Bugfix (introduced: Postfix 2.6): the "bad filetype"
        header_checks pattern falsely rejected Content-Mumble headers
        with ``name="example"; x-apple-part-url="example.com"''.
        Fixed by respecting the ";" separator between content
        attribute values.  Reported by Cedric Knight.  File:
        proto/header_checks.

20160515
        Portability: OpenBSD 6.0. Files: makedefs, util/sys_defs.h.

Approved by:	ports-secteam (junovitch@)
[ 02:04 Jan Beich (jbeich) search for other commits by this committer ]    commit hash:8d5fa801114c8efb8e9906fe06ca8f2f39c625af  commit hash:8d5fa801114c8efb8e9906fe06ca8f2f39c625af  commit hash:8d5fa801114c8efb8e9906fe06ca8f2f39c625af  8d5fa80  2016Q2
  • openra 20160508 games files touched by this commit pkg-fallout Multiplayer re-envisioning of early RTS games by Westwood Studios
MFH: r414854

games/openra: update to 20160403

Changes:	https://github.com/OpenRA/OpenRA/wiki/Changelog#release-20160508
Approved by:	ports-secteam (junovitch)
Mon, 16 May 2016
[ 12:34 Olli Hauer (ohauer) search for other commits by this committer ]    commit hash:b63d9f7e074dd28ddf78e6408b8e03f43ecb5d76  commit hash:b63d9f7e074dd28ddf78e6408b8e03f43ecb5d76  commit hash:b63d9f7e074dd28ddf78e6408b8e03f43ecb5d76  b63d9f7  2016Q2
  • postfix 3.1.1,1 mail files touched by this commit pkg-fallout Secure alternative to widely-used Sendmail
MFH: r415286

- update to 3.1.1

Changelog:

20160228
       Documentation: typos in postfix-tls-script(1) manpage.

20160327
       Documentation: line wrapping in postconf(1) manpage.

20160310
       Bugfix (introduced: Postfix 2.6): the Milter SMFIR_CHGFROM
       (replace sender) request lost the sender_bcc_maps address.
(Only the first 15 lines of the commit message are shown above View all of this commit message)
[ 05:07 Li-Wen Hsu (lwhsu) search for other commits by this committer ]    commit hash:8e093e15eace319d32e22015e4da73a177548c18  commit hash:8e093e15eace319d32e22015e4da73a177548c18  commit hash:8e093e15eace319d32e22015e4da73a177548c18  8e093e1  2016Q2
  • jenkins 2.3 devel files touched by this commit  This port version is marked as vulnerable. pkg-fallout Open-source continuous integration server
MFH: r415046

- Update to 2.3

Security:	e387834a-17ef-11e6-9947-7054d2909b71

Approved by:	ports-secteam (junovitch)
[ 05:05 Li-Wen Hsu (lwhsu) search for other commits by this committer ]    commit hash:a3cd088eb49564440504b3e592971096d823cf59  commit hash:a3cd088eb49564440504b3e592971096d823cf59  commit hash:a3cd088eb49564440504b3e592971096d823cf59  a3cd088  2016Q2
  • jenkins2 2.3 devel files touched by this commit pkg-fallout Open-source continuous integration server
MFH: r415047

- Update to 2.3

Security:	e387834a-17ef-11e6-9947-7054d2909b71

Approved by:	ports-secteam (junovitch)
[ 05:03 Li-Wen Hsu (lwhsu) search for other commits by this committer ]    commit hash:7335d409263c6d4fc49d49b7cfa38613dda1ffdc  commit hash:7335d409263c6d4fc49d49b7cfa38613dda1ffdc  commit hash:7335d409263c6d4fc49d49b7cfa38613dda1ffdc  7335d40  2016Q2
MFH: r415048

- Update to 1.651.2

Security:	e387834a-17ef-11e6-9947-7054d2909b71
Approved by:	swills (implicitly)

Approved by:	ports-secteam (junovitch)
Sun, 15 May 2016
[ 23:09 Bernard Spil (brnrd) search for other commits by this committer ]    commit hash:86e4e71dc8dab7ae917fbe8a82381b1ba7d4b351  commit hash:86e4e71dc8dab7ae917fbe8a82381b1ba7d4b351  commit hash:86e4e71dc8dab7ae917fbe8a82381b1ba7d4b351  86e4e71  2016Q2
  • squid 3.5.19 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout HTTP Caching Proxy
MFH: r415227

www/squid: Fix configure errors for libssl

  - Fix building with ports' OpenSSL/LibreSSL
  - Use GSSAPI descriptions from Mk/Uses/gssapi.mk
  - Use more OPTIONS features

PR:		208584
Submitted by:	timp87@gmail.com (maintainer)

Approved by:	portmgr (feld)
[ 19:14 Koop Mast (kwm) search for other commits by this committer ]    commit hash:9386bbfbdf11c3a69b45c4be74197a28f08c9e3c  commit hash:9386bbfbdf11c3a69b45c4be74197a28f08c9e3c  commit hash:9386bbfbdf11c3a69b45c4be74197a28f08c9e3c  9386bbf  2016Q2
MFH: r415108

Update ImageMagick7 to 7.0.1.3.

Remove the delegate patch since it done in IM now.

Security:	82b702e0-1907-11e6-857b-00221503d280

Approved by:	ports-secteam (feld@)
[ 19:12 Koop Mast (kwm) search for other commits by this committer ]    commit hash:8fd78c868d6e9cc13377cd5a5f1d5739af3c014e  commit hash:8fd78c868d6e9cc13377cd5a5f1d5739af3c014e  commit hash:8fd78c868d6e9cc13377cd5a5f1d5739af3c014e  8fd78c8  2016Q2
MFH: r415107

Update ImageMagick to 6.9.4.1.

Remove the delegate patch since it done in IM now.

Security:	82b702e0-1907-11e6-857b-00221503d280

Approved by:	ports-secteam (feld@)
[ 14:08 Gerald Pfeifer (gerald) search for other commits by this committer ]    commit hash:b021961f1fa650d26e19f662ff44be02b0fda578  commit hash:b021961f1fa650d26e19f662ff44be02b0fda578  commit hash:b021961f1fa650d26e19f662ff44be02b0fda578  b021961  2016Q2
  • wine 1.8.1_3,1 emulators files touched by this commit pkg-fallout Microsoft Windows compatibility environment
Fix the build on FreeBSD 9.x by backporting r413495 and r413496 from
mainline after a month:

  Force the use of GCC where it is the system compiler since
  COMPILER_VERSION will be 42 (the GCC version) even if clang
  is CHOSEN_COMPILER_TYPE in that case.

PR:		206527
Approved by:	portmgr (blanket for build fixes)
Sat, 14 May 2016
[ 13:33 Matthias Andree (mandree) search for other commits by this committer ]    commit hash:2263fd2b03a2b747b07a4fb8bcec854c1cc379b8  commit hash:2263fd2b03a2b747b07a4fb8bcec854c1cc379b8  commit hash:2263fd2b03a2b747b07a4fb8bcec854c1cc379b8  2263fd2  2016Q2
MFH: r412540 r412541 r415093 r415116

Work around 10.3-RELEASE's service(8) shortcomings (r412540)
and to fix /usr/sbin/service -R (r412541).

PR:		208534
Reported by:	allan@saddi.com

r415093 (2.3.11 upgrade) and r415116 (the polarssl fix-up) together:

Security upgrade to OpenVPN 2.3.11.

Quoting upstream maintainers' release notes:
"This release fixes two vulnerabilities: a port-share bug with DoS
potential and a buffer overflow by user supplied data when using pam
(Only the first 15 lines of the commit message are shown above View all of this commit message)
[ 07:54 Thomas Zander (riggs) search for other commits by this committer ]    commit hash:31934f7867b195ca875b49009c36090eedc96f89  commit hash:31934f7867b195ca875b49009c36090eedc96f89  commit hash:31934f7867b195ca875b49009c36090eedc96f89  31934f7  2016Q2
  • gdb 7.11_2 devel files touched by this commit pkg-fallout GNU GDB of newer version than comes with the system
MFH: r415176

Fix build with libreadline from base system (via BASE_READLINE OPTION)

PR:		209431
Submitted by:	luca.pizzamiglio@gmail.com (maintainer)
Approved by:	ports-secteam (build fix blanket)
Thu, 12 May 2016
[ 19:25 Bernard Spil (brnrd) search for other commits by this committer ]    commit hash:c81ce95cf2d14eca88481aeace45239015ca638d  commit hash:c81ce95cf2d14eca88481aeace45239015ca638d  commit hash:c81ce95cf2d14eca88481aeace45239015ca638d  c81ce95  2016Q2
MFH: r415024

databases/mariadb100-server: Fix package builder failures

  - Add dependency on OpenSSL from ports
  - As per PR206998 this fixes the relocation error [1]

[1] https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=206998#c102

PR:		209419

Approved by:	ports-secteam (junovitch)
[ 17:51 Bernard Spil (brnrd) search for other commits by this committer ]    commit hash:32aeb14e1633e2ec31a6164c823ec7f30750867e  commit hash:32aeb14e1633e2ec31a6164c823ec7f30750867e  commit hash:32aeb14e1633e2ec31a6164c823ec7f30750867e  32aeb14e  2016Q2
  • libressl 2.2.7 security files touched by this commit  This port version is marked as vulnerable. pkg-fallout Free version of the SSL/TLS protocol forked from OpenSSL
security/libressl: Update to 2.2.7

  - Update fixing recent vulnerabilities

Security:	01d729ca-1143-11e6-b55e-b499baebfeaf
Approved by:	ports-secteam (feld)
Wed, 11 May 2016
[ 15:07 Matthew Seaman (matthew) search for other commits by this committer ]    commit hash:123dae31b264912e29bcb71f90b2cc2e15be98cd  commit hash:123dae31b264912e29bcb71f90b2cc2e15be98cd  commit hash:123dae31b264912e29bcb71f90b2cc2e15be98cd  123dae3  2016Q2
  • squid 3.5.19 www files touched by this commit  This port version is marked as vulnerable. pkg-fallout HTTP Caching Proxy
MFH: r414987

Security update to 3.5.19

PR:		209334
Submitted by:	timp87@gmail.com (maintainer)
Security:	25e5205b-1447-11e6-9ead-6805ca0b3d42

Approved by:	ports-secteam (junovitch)
Tue, 10 May 2016
[ 17:46 Gordon Tetlow (gordon) search for other commits by this committer ]    commit hash:2e8d10c8e0422f161ba41fe888126699a71cf513  commit hash:2e8d10c8e0422f161ba41fe888126699a71cf513  commit hash:2e8d10c8e0422f161ba41fe888126699a71cf513  2e8d10c  2016Q2
  • p4 2015.1.1384697 devel files touched by this commit Restricted pkg-fallout Perforce client
  • p4api 2015.1.1384697 devel files touched by this commit Restricted pkg-fallout Perforce API (static libraries and header files)
  • p4d 2015.1.1384697 devel files touched by this commit Restricted pkg-fallout Perforce server
  • p4ftpd 2015.1.1384697 devel files touched by this commit Restricted pkg-fallout Perforce server
  • p4p 2015.1.1384697 devel files touched by this commit Restricted pkg-fallout Perforce server
MFH: r414920

Update various Perforce ports to 2015.1/1384697 due to micropatching.

Approved by:	mat (mentor, implicit)
Approved by:	ports-secteam (feld)
[ 11:02 Bartek Rutkowski (robak) search for other commits by this committer ]    commit hash:8ef0df2b31072d91b6abd4220c2b153d8c9b8a4a  commit hash:8ef0df2b31072d91b6abd4220c2b153d8c9b8a4a  commit hash:8ef0df2b31072d91b6abd4220c2b153d8c9b8a4a  8ef0df2  2016Q2
  • wordpress 4.5.2 russian files touched by this commit  This port version is marked as vulnerable. pkg-fallout State-of-the-art semantic personal publishing platform
MFH: r414809

russian/wordpress: update 4.5.1 -> 4.5.2

- Bugfix update

PR:		209378
Submitted by:	Mihail Timofeev <9267096@gmail.com> (maintainer)

Approved by:	ports-secteam
[ 03:10 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:ecd4371a247c7393fd42076a0c19f95827068554  commit hash:ecd4371a247c7393fd42076a0c19f95827068554  commit hash:ecd4371a247c7393fd42076a0c19f95827068554  ecd4371  2016Q2
  • perl5-devel 5.23.9.85_2 lang files touched by this commit  This port version is marked as vulnerable. pkg-fallout Practical Extraction and Report Language
  • perl5.18 5.18.4_21 lang  Deprecated Expired files touched by this commit  This port version is marked as vulnerable. pkg-fallout Practical Extraction and Report Language
  • perl5.20 5.20.3_12 lang files touched by this commit  This port version is marked as vulnerable. pkg-fallout Practical Extraction and Report Language
  • perl5.22 5.22.1_8 lang files touched by this commit  This port version is marked as vulnerable. pkg-fallout Practical Extraction and Report Language
MFH r412502 r412503 r413010 r413019 r413036 r413249 r413567:

Apply batch of Perl updates up to security issue fix.

Fix a Perl security issue.

PR:		208879
Reported by:	Sevan Janiyan
Security:	CVE-2016-2381
Sponsored by:	Absolight

Approved by:	ports-secteam (with hat)
[ 02:12 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:aaf5a48763f7292b6ab381d6afecae03d0eb79d5  commit hash:aaf5a48763f7292b6ab381d6afecae03d0eb79d5  commit hash:aaf5a48763f7292b6ab381d6afecae03d0eb79d5  aaf5a48  2016Q2
MFH: r413653

Update to 5.6.30 release.

PR:		209344
Reported by:	Fabiano Sidler <fabianosidler@swissonline.ch>
Approved by:	ports-secteam (with hat)
Security:	https://vuxml.FreeBSD.org/freebsd/8c2b2f11-0ebe-11e6-b55e-b499baebfeaf.html
[ 01:53 Jason Unovitch (junovitch) search for other commits by this committer ]    commit hash:4f13ff07298153e675fb4f2f05b12fe1eb46679d  commit hash:4f13ff07298153e675fb4f2f05b12fe1eb46679d  commit hash:4f13ff07298153e675fb4f2f05b12fe1eb46679d  4f13ff0  2016Q2
  • wordpress 4.5.2 japanese files touched by this commit  This port version is marked as vulnerable. pkg-fallout State-of-the-art semantic personal publishing platform
MFH: r414906

japanese/wordpress: update 4.4.2 -> 4.5.2

Approved by:	ports-secteam (with hat)
Security:	CVE-2016-4566
Security:	CVE-2016-4567
Security:	https://vuxml.FreeBSD.org/freebsd/3686917b-164d-11e6-94fa-002590263bf5.html

< Yesterday's Commits >