Security issues with www/minio

From: Tom Hukins <tom_at_freebsd.org>
Date: Sat, 18 Feb 2023 16:02:23 UTC
Hi,

The www/minio port provides an outdated, insecure version of MinIO.

This issue was raised on 2022-12-30 in
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=268656 and five days
ago I provided a VuXML patch at
https://github.com/freebsd/freebsd-ports/pull/158 which I have updated
several times as security/vuxml/vuln/2023.xml has changed.

I note that the www/minio maintainer, swills@, has not committed to the
ports tree since 2022-03-13 so someone else might need to update the
port.  However, it would help to apply the VuXML patch soon so that the
port's users know of its security problems.

Tom