From owner-freebsd-ports-bugs@FreeBSD.ORG  Tue Jan 27 09:27:22 2015
Return-Path: <owner-freebsd-ports-bugs@FreeBSD.ORG>
Delivered-To: freebsd-ports-bugs@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 8521EE67
 for <freebsd-ports-bugs@FreeBSD.org>; Tue, 27 Jan 2015 09:27:22 +0000 (UTC)
Received: from kenobi.freebsd.org (kenobi.freebsd.org
 [IPv6:2001:1900:2254:206a::16:76])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 51C7EA76
 for <freebsd-ports-bugs@FreeBSD.org>; Tue, 27 Jan 2015 09:27:22 +0000 (UTC)
Received: from bugs.freebsd.org ([127.0.1.118])
 by kenobi.freebsd.org (8.14.9/8.14.9) with ESMTP id t0R9RM5M056201
 for <freebsd-ports-bugs@FreeBSD.org>; Tue, 27 Jan 2015 09:27:22 GMT
 (envelope-from bugzilla-noreply@freebsd.org)
From: bugzilla-noreply@freebsd.org
To: freebsd-ports-bugs@FreeBSD.org
Subject: [Bug 197107] [MAINTAINER] security/bro, security/broccoli: Update to
 2.3.2 (includes two CVE fixes)
Date: Tue, 27 Jan 2015 09:27:22 +0000
X-Bugzilla-Reason: AssignedTo
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: Ports & Packages
X-Bugzilla-Component: Individual Port(s)
X-Bugzilla-Version: Latest
X-Bugzilla-Keywords: patch, patch-ready
X-Bugzilla-Severity: Affects Many People
X-Bugzilla-Who: koobs@FreeBSD.org
X-Bugzilla-Status: Open
X-Bugzilla-Priority: ---
X-Bugzilla-Assigned-To: freebsd-ports-bugs@FreeBSD.org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags: 
X-Bugzilla-Changed-Fields: bug_status short_desc keywords
Message-ID: <bug-197107-13-qZnBPQAOH3@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-197107-13@https.bugs.freebsd.org/bugzilla/>
References: <bug-197107-13@https.bugs.freebsd.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-BeenThere: freebsd-ports-bugs@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: Ports bug reports <freebsd-ports-bugs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-ports-bugs>, 
 <mailto:freebsd-ports-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports-bugs/>
List-Post: <mailto:freebsd-ports-bugs@freebsd.org>
List-Help: <mailto:freebsd-ports-bugs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ports-bugs>, 
 <mailto:freebsd-ports-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Jan 2015 09:27:22 -0000

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=197107

Kubilay Kocak <koobs@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|New                         |Open
            Summary|[PATCH MAINTAINER]          |[MAINTAINER] security/bro,
                   |security/bro,               |security/broccoli: Update
                   |security/broccoli: Update   |to 2.3.2 (includes two CVE
                   |to 2.3.2 (includes two CVE  |fixes)
                   |fixes)                      |
           Keywords|                            |patch, patch-ready

--- Comment #3 from Kubilay Kocak <koobs@FreeBSD.org> ---
Q: Where does bug 193231 fit into this? Does this supersede the former?

Please update this or bug 193231 accordingly.

Q: Must security/bro and security/broccoli be updated in a single commit
atomically?

If not please separate the patches (per port) and indicate which one must be
committed first if required.

Given you are the maintainer for both, and both seem related to the same
update, individual PR's ought not be necessary this time around.

For Bonus Points:

Write a VuXML entry [1] and add CPE information [2]

[1]
https://www.freebsd.org/doc/en_US.ISO8859-1/books/porters-handbook/book.html#security-notify
[2]
https://www.freebsd.org/doc/en_US.ISO8859-1/books/porters-handbook/book.html#uses

Otherwise a good issue report, good stuff!

-- 
You are receiving this mail because:
You are the assignee for the bug.