svn commit: r341450 - head/www/rt42
Matthew Seaman
matthew at FreeBSD.org
Mon Jan 27 20:52:52 UTC 2014
Author: matthew
Date: Mon Jan 27 20:52:51 2014
New Revision: 341450
URL: http://svnweb.freebsd.org/changeset/ports/341450
QAT: https://qat.redports.org/buildarchive/r341450/
Log:
Due to a denial-of-service vulnerability in www/rt42 versions 4.2.0 --
4.2.2 inclusive, require at least version 0.03 of
mail/p5-Email-Address-List.
It's this port which is vulnerable, but the essential fix is to update
p5-Email-Address-List.
MFH: 2014Q1
Security: d1dfc4c7-8791-11e3-a371-6805ca0b3d42
Modified:
head/www/rt42/Makefile
head/www/rt42/Makefile.cpan
Modified: head/www/rt42/Makefile
==============================================================================
--- head/www/rt42/Makefile Mon Jan 27 20:48:13 2014 (r341449)
+++ head/www/rt42/Makefile Mon Jan 27 20:52:51 2014 (r341450)
@@ -2,7 +2,7 @@
PORTNAME= rt
DISTVERSION= 4.2.2
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= www
MASTER_SITES= http://download.bestpractical.com/pub/rt/release/
PKGNAMESUFFIX= 42
Modified: head/www/rt42/Makefile.cpan
==============================================================================
--- head/www/rt42/Makefile.cpan Mon Jan 27 20:48:13 2014 (r341449)
+++ head/www/rt42/Makefile.cpan Mon Jan 27 20:52:51 2014 (r341450)
@@ -91,7 +91,7 @@ CORE_DEPS= p5-Apache-Session>=1.53:${POR
p5-Devel-GlobalDestruction>0:${PORTSDIR}/devel/p5-Devel-GlobalDestruction \
p5-Devel-StackTrace>=1.30:${PORTSDIR}/devel/p5-Devel-StackTrace \
p5-Email-Address>=1.89.7:${PORTSDIR}/mail/p5-Email-Address \
- p5-Email-Address-List>0:${PORTSDIR}/mail/p5-Email-Address-List \
+ p5-Email-Address-List>=0.03:${PORTSDIR}/mail/p5-Email-Address-List \
p5-File-ShareDir>0:${PORTSDIR}/devel/p5-File-ShareDir \
p5-HTML-FormatText-WithLinks-AndTables>0:${PORTSDIR}/textproc/p5-HTML-FormatText-WithLinks-AndTables \
p5-HTML-FormatText-WithLinks>=0.14:${PORTSDIR}/textproc/p5-HTML-FormatText-WithLinks \
More information about the svn-ports-all
mailing list