svn commit: r550160 - branches/2020Q3/textproc/libxml2
Tobias C. Berner
tcberner at FreeBSD.org
Sat Sep 26 10:50:41 UTC 2020
Author: tcberner
Date: Sat Sep 26 10:50:40 2020
New Revision: 550160
URL: https://svnweb.freebsd.org/changeset/ports/550160
Log:
MFH: r550081
textproc/libxml2: Multiple vulnerabilities
Includes upstreams fixes for
* CVE-2019-20388
* CVE-2020-7595
* CVE-2020-24977
PR: 249386
Submitted by: daniel.engberg.lists at pyret.net
Approved by: ports-secteam (fluffy)
Modified:
branches/2020Q3/textproc/libxml2/Makefile
branches/2020Q3/textproc/libxml2/distinfo
Directory Properties:
branches/2020Q3/ (props changed)
Modified: branches/2020Q3/textproc/libxml2/Makefile
==============================================================================
--- branches/2020Q3/textproc/libxml2/Makefile Sat Sep 26 10:49:42 2020 (r550159)
+++ branches/2020Q3/textproc/libxml2/Makefile Sat Sep 26 10:50:40 2020 (r550160)
@@ -3,10 +3,16 @@
PORTNAME= libxml2
DISTVERSION= 2.9.10
-PORTREVISION?= 0
+PORTREVISION?= 1
CATEGORIES?= textproc gnome
MASTER_SITES= http://xmlsoft.org/sources/
DIST_SUBDIR= gnome2
+
+# CVE-2019-20388, CVE-2020-7595, CVE-2020-24977
+PATCH_SITES= https://gitlab.gnome.org/GNOME/libxml2/commit/
+PATCHFILES= 7ffcd44d7e6c46704f8af0321d9314cd26e0e18a.patch:-p1 \
+ 0e1a49c8907645d2e155f0d89d4d9895ac5112b5.patch:-p1 \
+ 50f06b3efb638efb0abd95dc62dca05ae67882c2.patch:-p1
MAINTAINER?= desktop at FreeBSD.org
COMMENT?= XML parser library for GNOME
Modified: branches/2020Q3/textproc/libxml2/distinfo
==============================================================================
--- branches/2020Q3/textproc/libxml2/distinfo Sat Sep 26 10:49:42 2020 (r550159)
+++ branches/2020Q3/textproc/libxml2/distinfo Sat Sep 26 10:50:40 2020 (r550160)
@@ -1,3 +1,9 @@
-TIMESTAMP = 1573915139
+TIMESTAMP = 1600322449
SHA256 (gnome2/libxml2-2.9.10.tar.gz) = aafee193ffb8fe0c82d4afef6ef91972cbaf5feea100edc2f262750611b4be1f
SIZE (gnome2/libxml2-2.9.10.tar.gz) = 5624761
+SHA256 (gnome2/7ffcd44d7e6c46704f8af0321d9314cd26e0e18a.patch) = 8bab1a7fcc22a8f9a3f89648660bbca424196d82967e213bd27c1dcc9a9544a5
+SIZE (gnome2/7ffcd44d7e6c46704f8af0321d9314cd26e0e18a.patch) = 1015
+SHA256 (gnome2/0e1a49c8907645d2e155f0d89d4d9895ac5112b5.patch) = 4a1dca36e762a0e2affb0779918fbf1665a00d984ffbd3efa45d3d202f87ea8c
+SIZE (gnome2/0e1a49c8907645d2e155f0d89d4d9895ac5112b5.patch) = 996
+SHA256 (gnome2/50f06b3efb638efb0abd95dc62dca05ae67882c2.patch) = 701048e726e2f3f7f2a71a7054030fc154b5edace72e23c5934ecd9ee09ad811
+SIZE (gnome2/50f06b3efb638efb0abd95dc62dca05ae67882c2.patch) = 1052
More information about the svn-ports-all
mailing list