From nobody Wed Jan 11 14:47:02 2023 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4NsVrR09ynz2p5VP; Wed, 11 Jan 2023 14:47:03 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4NsVrQ6tShz4H0C; Wed, 11 Jan 2023 14:47:02 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1673448423; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=6+qFQf8ZxG8w8V/wZUjld918KF4AmRbgChb45DXWUyw=; b=kQvMLoHQSst1odSGWH5Cu+GyUXKC21qIrjmWgd+YfrsLkE4qPC5g9grx1x5jvl67z5TSMf Y5G+6atO+q7W6F77vXO8shafQYhoZJ5kKt4ck2S+SbvmROz3KsfWFCRgo69pDL8hyWMndP bPC9AfjggWuVQfE8lbwOB7TY5snQ8+WWZiaYsMViR3lLMKZlaAWDKAXwzCstiyyKaALgGL BJC9Ihtx8IAG0pKz673VxW1WGZM4nO/mXzXSBmqHDOadziv3tzOMq1qnugOGthdJuRmfGt QaX5CJS8cGEf2sLa18CoKXM+aJfUcweb15qIJKKK7WqCXZDCrraNI7VLzIBpDg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1673448423; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=6+qFQf8ZxG8w8V/wZUjld918KF4AmRbgChb45DXWUyw=; b=bFxqZzs/M6JHVDxqzGVt/orM3NpqNOvXfIWzn5LXppjqztyodhYXZPnLvmsLacoXOg1N2d UgfPEfWgK17Rvtp3swZDOfPdt2C/PZuWweNh9CzR7bHPzgOtVkIesgZ2KfjQZD6wiL+aYm eKpNYzHraTJPzzSNKd6Ar9CDo7/rqMDHPlk4QDurjIET6VWpY9ysfEY8JEVU704RqW7uTn WJIXcXgariowqFC4q2S0O2SSGKxZhnoRxHUb9fRdBeXqsGR+sSL+N6lnS9TK+TUwtXUetZ gtSUmo/ipF5XzS20laeO9lCoi2gpVbI7nGv4+q/sZezrlt8t27xQ3Dpe4VsAGw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1673448423; a=rsa-sha256; cv=none; b=iKF1ImFDtpYbKWIfya/+IwWPOgqsGX3Y9U9AsyLGcfrmR+dtEEDzvq42QSpDy+HEpo4+Mk 4PugiczuYfqzbelXM+UxcUW5Vfhr+jG+x2Ul4+nkQIfcDFdmG2TkYxV/1gzdNII7wQYbwZ 2QEpu1N/h0nSUfYPNLRzFX4FfgOWLsHFkhj48FNNYsKfPR0Q1Xjf+lMCC4sSHMcJqF52l9 udVyGvebssCfY77Ny7WLt8jgbyEq9NK1873GcRBsHZAeV+NfMbCkUWJuzWcyCMTWVoiFlv ai0x/09R6dFbiRA7gxIi6hETfk3Efb03IpAOZ8TLvr/iff40Pp8ZvQrwg0d65Q== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4NsVrQ5wQvzs4R; Wed, 11 Jan 2023 14:47:02 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 30BEl2xW026470; Wed, 11 Jan 2023 14:47:02 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 30BEl2Ui026469; Wed, 11 Jan 2023 14:47:02 GMT (envelope-from git) Date: Wed, 11 Jan 2023 14:47:02 GMT Message-Id: <202301111447.30BEl2Ui026469@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Palle Girgensohn Subject: git: a9e71595d933 - main - shibboleth-sp: Update to 3.4.1 List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-all@freebsd.org X-BeenThere: dev-commits-ports-all@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: girgen X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: a9e71595d93377de9af87a999cd128f3f43069e5 Auto-Submitted: auto-generated X-ThisMailContainsUnwantedMimeParts: N The branch main has been updated by girgen: URL: https://cgit.FreeBSD.org/ports/commit/?id=a9e71595d93377de9af87a999cd128f3f43069e5 commit a9e71595d93377de9af87a999cd128f3f43069e5 Author: Palle Girgensohn AuthorDate: 2023-01-11 14:42:47 +0000 Commit: Palle Girgensohn CommitDate: 2023-01-11 14:46:40 +0000 shibboleth-sp: Update to 3.4.1 A patch release of the Service Provider, V3.4.1, is now available. This release fixes a couple of small bugs and adds a warning requested by one of our member organizations in the absence of the redirectLimit setting, which leads to SPs being abused as open redirectors. Notably, this release includes an update to the xmltooling library that hardens the code base against the sorts of attacks reported against the IdP in the recent advisory. The SP is, as far as can be determined, not impacted directly by that vulnerability, but this is a precautionary change. Release notes: https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065335693/ReleaseNotes --- devel/xmltooling/Makefile | 4 ++-- devel/xmltooling/distinfo | 6 +++--- devel/xmltooling/pkg-plist | 4 ++-- security/shibboleth-sp/Makefile | 2 +- security/shibboleth-sp/distinfo | 6 +++--- security/shibboleth-sp/pkg-plist | 4 ++-- 6 files changed, 13 insertions(+), 13 deletions(-) diff --git a/devel/xmltooling/Makefile b/devel/xmltooling/Makefile index 806c868c887b..c720e11ea982 100644 --- a/devel/xmltooling/Makefile +++ b/devel/xmltooling/Makefile @@ -1,7 +1,7 @@ PORTNAME= xmltooling -PORTVERSION= 3.2.2 +PORTVERSION= 3.2.3 CATEGORIES= devel security -MASTER_SITES= http://shibboleth.net/downloads/c++-opensaml/3.2.1/ +MASTER_SITES= http://shibboleth.net/downloads/c++-opensaml/latest/ MAINTAINER= girgen@FreeBSD.org COMMENT= Low level XML support for SAML diff --git a/devel/xmltooling/distinfo b/devel/xmltooling/distinfo index ba07463117ea..b1eca39b21a7 100644 --- a/devel/xmltooling/distinfo +++ b/devel/xmltooling/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1667482615 -SHA256 (xmltooling-3.2.2.tar.bz2) = d31bebd5f783464c541f9bca8656a8730e1de8574ff77e92c72aae3dc8ee4174 -SIZE (xmltooling-3.2.2.tar.bz2) = 618792 +TIMESTAMP = 1673425920 +SHA256 (xmltooling-3.2.3.tar.bz2) = 95b8296ffb1facd86eaa9f24d4a895a7c55a3cd838450b4d20bc1651fdf45132 +SIZE (xmltooling-3.2.3.tar.bz2) = 620767 diff --git a/devel/xmltooling/pkg-plist b/devel/xmltooling/pkg-plist index be1e12dc70aa..1fa90ff93e2a 100644 --- a/devel/xmltooling/pkg-plist +++ b/devel/xmltooling/pkg-plist @@ -87,10 +87,10 @@ include/xmltooling/validation/ValidatorSuite.h include/xmltooling/version.h lib/libxmltooling-lite.so lib/libxmltooling-lite.so.10 -lib/libxmltooling-lite.so.10.0.2 +lib/libxmltooling-lite.so.10.0.3 lib/libxmltooling.so lib/libxmltooling.so.10 -lib/libxmltooling.so.10.0.2 +lib/libxmltooling.so.10.0.3 libdata/pkgconfig/xmltooling-lite.pc libdata/pkgconfig/xmltooling.pc share/xml/xmltooling/catalog.xml diff --git a/security/shibboleth-sp/Makefile b/security/shibboleth-sp/Makefile index 6887e84a5fb2..dd23c4060629 100644 --- a/security/shibboleth-sp/Makefile +++ b/security/shibboleth-sp/Makefile @@ -1,5 +1,5 @@ PORTNAME= shibboleth-sp -PORTVERSION= 3.4.0 +PORTVERSION= 3.4.1 CATEGORIES= security www MASTER_SITES= http://shibboleth.net/downloads/service-provider/${PORTVERSION}/ diff --git a/security/shibboleth-sp/distinfo b/security/shibboleth-sp/distinfo index 8dd9afdaf7dc..f1246fb3c0ca 100644 --- a/security/shibboleth-sp/distinfo +++ b/security/shibboleth-sp/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1667481817 -SHA256 (shibboleth-sp-3.4.0.tar.bz2) = e7994be1105bc8683949fd11030a685fffc64cd6fa6d3e80c41bd078b05d5909 -SIZE (shibboleth-sp-3.4.0.tar.bz2) = 830634 +TIMESTAMP = 1673426052 +SHA256 (shibboleth-sp-3.4.1.tar.bz2) = bffe3e62e46d86cc75db1093b77fa1456b30da7c930a13708afa0139c8a8acc1 +SIZE (shibboleth-sp-3.4.1.tar.bz2) = 830667 diff --git a/security/shibboleth-sp/pkg-plist b/security/shibboleth-sp/pkg-plist index 82f18664b086..5bf84912185c 100644 --- a/security/shibboleth-sp/pkg-plist +++ b/security/shibboleth-sp/pkg-plist @@ -92,7 +92,7 @@ include/shibsp/util/TemplateParameters.h include/shibsp/version.h lib/libshibsp.so lib/libshibsp.so.11 -lib/libshibsp.so.11.0.0 +lib/libshibsp.so.11.0.1 lib/shibboleth/adfs.so lib/shibboleth/adfs-lite.so @comment %%MEMCACHED%%lib/shibboleth/memcache-store.so @@ -104,7 +104,7 @@ lib/shibboleth/plugins.so %%FASTCGI%%lib/shibboleth/shibresponder lib/libshibsp-lite.so lib/libshibsp-lite.so.11 -lib/libshibsp-lite.so.11.0.0 +lib/libshibsp-lite.so.11.0.1 libdata/pkgconfig/shibsp-lite.pc libdata/pkgconfig/shibsp.pc sbin/shibd