svn commit: r494571 - head/www/mybb

[Tobias Kortkamp]

On Mon, Mar 04, 2019 at 10:02:38AM +0000, Jochen Neumeister wrote:
> Author: joneum
> Date: Mon Mar  4 10:02:38 2019
> New Revision: 494571
> URL: https://svnweb.freebsd.org/changeset/ports/494571
> 
> Log:
>   in r494382, et to update GH_TAGNAME. This fixes it
>   
>   MFH:		2019Q1
>   Security:	395ed9d5-3cca-11e9-9ba0-4c72b94353b5
>   Sponsored by:	Netzkommune GmbH
> 
> Modified:
>   head/www/mybb/Makefile
>   head/www/mybb/distinfo
>   head/www/mybb/pkg-plist
> 
> Modified: head/www/mybb/Makefile
> ==============================================================================
> --- head/www/mybb/Makefile	Mon Mar  4 09:45:56 2019	(r494570)
> +++ head/www/mybb/Makefile	Mon Mar  4 10:02:38 2019	(r494571)
> @@ -11,7 +11,7 @@ COMMENT=	PHP-based bulletin board / discussion forum s
>  LICENSE=	GPLv3
>  
>  USE_GITHUB=	yes
> -GH_TAGNAME=	${PORTNAME}_1819
> +GH_TAGNAME=	${PORTNAME}_1820

Do you plan to update vuxml too?  Our mybb-1.8.20 is mybb-1.8.19
in reality which is still vulnerable, but is not marked as such by
pkg audit.

$ pkg audit mybb-1.8.19
mybb-1.8.19 is vulnerable:
mybb -- vulnerabilities
WWW: https://vuxml.FreeBSD.org/freebsd/395ed9d5-3cca-11e9-9ba0-4c72b94353b5.html

1 problem(s) in the installed packages found.

$ pkg audit mybb-1.8.20 
0 problem(s) in the installed packages found.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 618 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/svn-ports-all/attachments/20190304/7c2a03e8/attachment.sig>