svn commit: r364460 - head/www/nginx

René Ladan rene at freebsd.org
Sun Aug 10 00:14:37 UTC 2014


On 09-08-2014 20:36, Sergey A. Osokin wrote:
> Author: osa
> Date: Sat Aug  9 18:36:56 2014
> New Revision: 364460
> URL: http://svnweb.freebsd.org/changeset/ports/364460
> QAT: https://qat.redports.org/buildarchive/r364460/
>
> Log:
>   Update from 1.6.0 to 1.6.1.
>   
>   <ChangeLog>
>   
>   *) Security: pipelined commands were not discarded after STARTTLS
>      command in SMTP proxy (CVE-2014-3556); the bug had appeared in 1.5.6.
>      Thanks to Chris Boulton.
The vuxml file says < 1.6.4,2 is vulnerable, I assume that is a typo?
Also, can you add CPE information to the Makefile (see
https://wiki.freebsd.org/Ports/CPE ) ?

Rene



More information about the svn-ports-head mailing list