svn commit: r392464 - branches/2015Q3/databases/percona55-client

[Mark Felder]

Author: feld
Date: Sat Jul 18 21:39:04 2015
New Revision: 392464
URL: https://svnweb.freebsd.org/changeset/ports/392464

Log:
  MFH: r392457
  
  Bump PORTREVISION of the client and add pkg-message to warn about
  CVE-2015-3152 which will not get patched
  
  Security:	CVE-2015-3152
  Security:	36bd352d-299b-11e5-86ff-14dae9d210b8
  Approved by:	ports-secteam (with hat)

Added:
  branches/2015Q3/databases/percona55-client/pkg-message
     - copied unchanged from r392457, head/databases/percona55-client/pkg-message
Modified:
  branches/2015Q3/databases/percona55-client/Makefile
Directory Properties:
  branches/2015Q3/   (props changed)

Modified: branches/2015Q3/databases/percona55-client/Makefile
==============================================================================
--- branches/2015Q3/databases/percona55-client/Makefile	Sat Jul 18 21:37:42 2015	(r392463)
+++ branches/2015Q3/databases/percona55-client/Makefile	Sat Jul 18 21:39:04 2015	(r392464)
@@ -1,13 +1,14 @@
 # $FreeBSD$
 
 PORTNAME=	percona
+PORTREVISION=	1
 PKGNAMESUFFIX=	55-client
 
 COMMENT=	Multithreaded SQL database (client)
 
 MASTERDIR=	${.CURDIR}/../percona55-server
 
-PKGMESSAGE=	mustnotexist
+PKGMESSAGE=	${.CURDIR}/pkg-message
 PATCHDIR=	${.CURDIR}/files
 PLIST=		${.CURDIR}/pkg-plist
 

Copied: branches/2015Q3/databases/percona55-client/pkg-message (from r392457, head/databases/percona55-client/pkg-message)
==============================================================================
--- /dev/null	00:00:00 1970	(empty, because file is newly added)
+++ branches/2015Q3/databases/percona55-client/pkg-message	Sat Jul 18 21:39:04 2015	(r392464, copy of r392457, head/databases/percona55-client/pkg-message)
@@ -0,0 +1,15 @@
+* * * * * * * * * * * * * * * * * * * * * * * *
+
+Please be aware the database client is vulnerable
+to CVE-2015-3152 - SSL Downgrade aka "BACKRONYM".
+You may find more information at the following URL:
+
+http://www.vuxml.org/freebsd/36bd352d-299b-11e5-86ff-14dae9d210b8.html
+
+Although this database client is not listed as
+"affected", it is vulnerable and will not be 
+receiving a patch. Please take note of this when
+deploying this software.
+
+* * * * * * * * * * * * * * * * * * * * * * * *
+