13:57 jbeich 

devel/boost-*: update to 1.67.0

Changes:	http://www.boost.org/users/history/version_1_67_0.html
PR:		227427
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D15030

 

04:11 jbeich 

devel/boost-*: update to 1.66.0

Changes:	http://www.boost.org/users/history/version_1_66_0.html
PR:		223922
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D13279

 

17:21 girgen 

Shibboleth Service Provider Security Advisory [15 November 2017]

An updated version of the Shibboleth Service Provider software
is available which corrects a critical security issue in the
"Dynamic" metadata provider plugin.

Deployers making use of the affected feature should apply the
relevant update at the soonest possible moment.

Security:	b4b7ec7d-ca27-11e7-a12d-6cc21735f730

 

00:08 jbeich 

devel/boost-*: update to 1.65.1

Changes:	http://www.boost.org/users/history/version_1_65_1.html
PR:		218835
Approved by:	maintainer timeout (1.65.1: 2 weeks; 1.65.0: 1 month)
Tested by:	jhibbits (on powerpc64, earlier version)
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D11582

 

00:05 jbeich 

devel/boost-*: enable C++11 features

PR:		218835
Obtained from:	https://github.com/DragonFlyBSD/DeltaPorts/pull/690
Approved by:	maintainer timeout (2 months)
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D11582

 

06:48 jbeich 

devel/boost-*: update to 1.64.0

Changes:	http://www.boost.org/users/history/version_1_64_0.html
PR:		218835
Approved by:	office (bapt)
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D10472

 

08:45 jbeich 

devel/boost-*: update to 1.63.0

Changes:	http://www.boost.org/users/history/version_1_63_0.html
PR:		215598
Exp-run by:	antoine
Approved by:	office (bapt)
MFH:		2017Q1

 

12:45 jbeich 

devel/boost-*: update to 1.62.0

- Enable `long double` C99 math usage
- Switch 9.x back to building with GCC

Changes:	http://www.boost.org/users/history/
PR:		199601
Submitted by:	Chen Xu, bapt, amdmi3, truckman (based on)
Reviewed by:	rakuco (kde) (earlier version)
Exp-run by:	antoine (3 tries), truckman (consumers only, earlier versions)
Approved by:	bapt (office)

 

21:52 girgen 

Upgrade shibboleth-sp 2.6 and its tool chain

 

14:25 mat 

Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.

With hat:	portmgr
Sponsored by:	Absolight

 

14:09 amdmi3 

- Switch to options helpers
- Add some NO_ARCHes
- Fix and unsilence some installation commands
- Other minor fixes

Approved by:	portmgr blanket

 

13:21 girgen 

Shibboleth SP software crashes on well-formed but invalid XML.

The Service Provider software contains a code path with an uncaught
exception that can be triggered by an unauthenticated attacker by
supplying well-formed but schema-invalid XML in the form of SAML
metadata or SAML protocol messages. The result is a crash and so
causes a denial of service.

You must rebuild opensaml and shibboleth with xmltooling-1.5.5 or later.
The easiest way to do so is to update the whole chain including
shibboleth-2.5.5 an opensaml2.5.5.

URL:    	http://shibboleth.net/community/advisories/secadv_20150721.txt
Security:	CVE-2015-2684

 

22:24 girgen 

Update Shibboleth and opensaml to latest version.

 

16:36 tijl 

Add USES=libtool

 

18:42 bapt 

Modernize LIB_DEPENDS

With hat:	portmgr

 

22:17 adamw 

Remove NOPORTDOCS and NOPORTEXAMPLES.

 

14:39 miwi 

- Stage support

 

22:55 bapt 

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

 

06:20 bapt 

Add an expicit dependency on pkgconf

 

16:26 sunpoet 

- Update to 7.31.0
- Bump PORTREVISION for ftp/curl shlib change
- Add TEST_DEPENDS
- Convert to new options framework
- Adjust options:
  - Add COOKIES
  - Add CYASSL, NSS, POLARSSL, THREADED_RESOLVER, TLS_SRP [1]
  - Add GSSAPI and SPNEGO [2]
  - Remove KERBEROS4
  - Rename LIBIDN to IDN
  - Remove TRACKMEMORY [1]
- Sort option handler
- Add SLAVEDIRS: ftp/curl-hiphop
- Cosmetic change
- Cleanup Makefile header
- While I'm here, fix typo (PORTREVSION) in x11-wm/ede/Makefile

Changes:	http://curl.haxx.se/changes.html
PR:		ports/172325 (-exp run), ports/177369 (based on) [1]
Submitted by:	Hirohisa Yamaguchi <umq@ueo.co.jp> [1], hrs (via email) [2]
Exp run by:	miwi

 

15:15 girgen 

Security update for apache-xml-security-c.
Dependant ports, especially shibboleth2-sp, opensaml2, xmltooling
and log4shib should all be updated.

Security: CVE-2013-2156

 

14:41 girgen 

Add build dependency on boost for shibboleth and opensaml.
PR:	ports/179431

 

17:29 girgen 

Update Shibboleth-sp and its tool chain to 2.5.1.

Note that from 2.5, shibd is run as the user shibd.  The port tries to fix the
key file ownership but if you have changed the file name of the key from the
default sp-key.pem, make sure you chown your key file(s) to user shibd.

Also, take maintainership of the entire tool chain (approved by all previous
maintainers).

Incorporates the ideas suggested by Craig Leres [177668], making sure that the
ssl key is not added to the package.

PR:	177668, 178694

 

19:50 tabthorpe 

- Change MAINTAINER address
- Trim headers while I am here
- Clean up some trailing whitespace

 

09:02 cs 

- Fix typos in COMMENT
- Enforce the now clarified rules from the Porter's Handbook (e.g. no dots, no
  A/An, etc.)

15:31 swills 

- Use xerces-c 3 [1]
- Pass maintainership back to Janos Mohacsi <janos.mohacsi@bsd.hu> [2]

PR:             ports/159715 [1]
Submitted by:   Janos Mohacsi <janos.mohacsi@bsd.hu> [1]
Approved by:    maintainer (me) [2]

11:50 swills 

- Update to 2.4.3 to fix security issue
- Update home page while here
- Take maintainership while here

Approved by:    linimon
Security:       CVE-2011-1411

02:57 swills 

- Update to latest versions

PR:             ports/157822
Submited by:    Palle Girgensohn <girgen@FreeBSD.org>
Approved by:    maintainer timeout

10:44 roam 

Chase the ftp/curl shlib version bump.

14:38 wxs 

- Update to 2.3

PR:             ports/142325
Submitted by:   Steve Wills <steve@mouf.net>
Approved by:    maintainer timeout

18:34 erwin 

Chase xmltooling shared lib

Forgotten by:   pgollucci
Submitted by:   pointyhat

01:16 wxs 

- Update to 2.2

PR:             ports/136032
Submitted by:   Steve Wills <steve@mouf.net>
Approved by:    maintainer

15:43 roam 

Bump the version of the curl shared library after the ftp/curl update
to 7.19.2.
Bump PORTREVISION, even on the ports that do not have a versioned
dependency, since the binaries will most probably still stop working.

15:55 miwi 

- Update to 2.1

PR:             127400
Submitted by:   Janos Mohacsi <janos.mohacsi@bsd.hu>

15:54 miwi 

- Force commit
        Repocopy from security/opensaml to security/opensaml2