Number of commits found: 16

www/libwww: Update to 5.4.2, Fix security vulnerabilities

This a security release for libwww to take into account security advisories
CVE-2016-9063 and CVE-2017-9233.

In order to take into account current and future expat security advisories,
the expat source code was removed from the libwww tree. The makefiles were
modified so that libwww dynamically links against the system's expat library.

Patches removed were incorporated upstream.

Bump PORTREVISION of dependent ports due shlib change.

Changes:	https://raw.githubusercontent.com/w3c/libwww/5.4.2/ChangeLog

MFH:		2018Q3
Security:	e375ff3f-7fec-11e8-8088-28d244aee256

Remove libcurl.so.7 compatibility link that was added in r374303 to
prevent massive PORTREVISION bumps.  Bump dependent ports that have not
been bumped since.

${RM} already has -f.

PR:		213570
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight

Remove ${PORTSDIR}/ from dependencies, categories m, n, o, and p.

With hat:	portmgr
Sponsored by:	Absolight

- Switch www/libwww to USES=libtool, drop .la files
- Bump dependent ports as .so version has changed

Approved by:	portmgr blanket

Convert some more USE_BZIP2 to USES=tar:bzip2

Approved by:	portmgr (not really, but touches unstaged ports)

Modernize LIB_DEPENDS

With hat:	portmgr

- Stage support

Add NO_STAGE all over the place in preparation for the staging support (cat:
net-mgmt)

- Update to 7.31.0
- Bump PORTREVISION for ftp/curl shlib change
- Add TEST_DEPENDS
- Convert to new options framework
- Adjust options:
  - Add COOKIES
  - Add CYASSL, NSS, POLARSSL, THREADED_RESOLVER, TLS_SRP [1]
  - Add GSSAPI and SPNEGO [2]
  - Remove KERBEROS4
  - Rename LIBIDN to IDN
  - Remove TRACKMEMORY [1]
- Sort option handler
- Add SLAVEDIRS: ftp/curl-hiphop
- Cosmetic change
- Cleanup Makefile header
- While I'm here, fix typo (PORTREVSION) in x11-wm/ede/Makefile

Changes:	http://curl.haxx.se/changes.html
PR:		ports/172325 (-exp run), ports/177369 (based on) [1]
Submitted by:	Hirohisa Yamaguchi <umq@ueo.co.jp> [1], hrs (via email) [2]
Exp run by:	miwi

- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:             157936
Submitted by:   myself
Exp-runs by:    pav
Approved by:    pav

Chase the ftp/curl shlib version bump.

- Switch SourceForge ports to the new File Release System: categories starting
with N

Upgrade to 1.6.1.

Bump the version of the curl shared library after the ftp/curl update
to 7.19.2.
Bump PORTREVISION, even on the ports that do not have a versioned
dependency, since the binaries will most probably still stop working.

SBLIM (pronounced "sublime"), the Standards Based Linux
Instrumentation for Manageability is an IBM-initiated Open Source
project, intended to enhance the manageability of GNU/Linux
systems. It does so by enabling WBEM, Web Based Enterprise Management.

# I use this for VMware ESXi to obtain CIM info.

Number of commits found: 16

12 vulnerabilities affecting 149 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last updated:
2019-07-20 17:14:51