08:59 Po-Chuan Hsieh (sunpoet) 

textproc/xerces-c3: Update to 3.2.5

- Update WWW

Changes:	https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10510&version=12352411
Security:	CVE-2018-1311

    b21c065

17:03 Palle Girgensohn (girgen) 

security/shibboleth-sp: update to 3.4.0

This is a minor update containing a new setting suggested by a
contributor (thus the unplanned minor version change) controlling
retries when TCP connections to shibd are used. The other changes are
minimal in nature.

Update the toolchain as well:

devel/xmltooling
textproc/xerces-c3

and bump PORTREVISION for security/opensaml due to dependencies'
updates.

Release notes:	https://wiki.shibboleth.net/confluence/display/SP3/ReleaseNotes

    b4e7dc9

19:48 sunpoet 

Update to 3.2.3

Changes:	https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10510&version=12344135
PR:		245576
Submitted by:	Roger Leigh <rleigh@codelibre.net>

 

22:14 sunpoet 

Update to 3.2.2

- Silence patch message

Changes:	https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10510&version=12341423
		https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10510&version=12342890
PR:		231481
Submitted by:	Roger Leigh <rleigh@codelibre.net>

 

14:23 sunpoet 

Update to 3.2.0

Changes:	https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10510&version=12314395

 

16:05 feld 

textproc/xerces-c3: Update to 3.1.4

Changelog:	https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10510&version=12336069

PR:		211023
MFH:		2016Q3

 

18:55 girgen 

Update xerces-c3 and shibboleth to latest versions

The update in xerces fixes a buffer overflow security problem that exposes the
possibility of a denial of service attack, and could conceivably result in
remote code execution.

Users of Shibboleth or any other service usingi the xerces-c3 xml library are
recommended to upgrade promptly.

URL:	http://xerces.apache.org/xerces-c/secadv/CVE-2016-0729.txt
Security:	CVE-2016-0729

 

13:29 sunpoet 

- Update to 3.1.2

Changes:	https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10510&version=12315014

 

17:13 gahr 

- New port: textproc/xerces-c3
  This is a port of the 3.x series of the Apache Xerces-C++ library.

  Xerces-C++ is a validating XML parser written in a portable subset of C++.
  Xerces-C++ makes it easy to give your application the ability to read and
  write XML data. A shared library is provided for parsing, generating,
  manipulating, and validating XML documents using the DOM, SAX, and SAX2 APIs.