From owner-svn-ports-all@freebsd.org Mon Aug 31 15:12:35 2020 Return-Path: Delivered-To: svn-ports-all@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id D2F2F3C40F0; Mon, 31 Aug 2020 15:12:35 +0000 (UTC) (envelope-from grembo@freebsd.org) Received: from mail.evolve.de (mail.evolve.de [213.239.217.29]) (using TLSv1.2 with cipher ECDHE-RSA-CHACHA20-POLY1305 (256/256 bits)) (Client CN "mail.evolve.de", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4BgDGB6pNlz4dWC; Mon, 31 Aug 2020 15:12:34 +0000 (UTC) (envelope-from grembo@freebsd.org) Received: by mail.evolve.de (OpenSMTPD) with ESMTP id 974a7dee; Mon, 31 Aug 2020 15:12:31 +0000 (UTC) Received: by mail.evolve.de (OpenSMTPD) with ESMTPSA id a818377b (TLSv1.2:ECDHE-RSA-CHACHA20-POLY1305:256:NO); Mon, 31 Aug 2020 15:12:29 +0000 (UTC) Mime-Version: 1.0 (1.0) Subject: Re: svn commit: r547191 - in head/www/squid: . files From: Michael Gmelin In-Reply-To: <202008311507.07VF734V097834@repo.freebsd.org> Date: Mon, 31 Aug 2020 17:12:27 +0200 Cc: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Message-Id: <727687A3-9A7E-4938-BA57-9FB7ABEFB060@freebsd.org> References: <202008311507.07VF734V097834@repo.freebsd.org> To: Kurt Jaeger X-Mailer: iPhone Mail (17G80) X-Rspamd-Queue-Id: 4BgDGB6pNlz4dWC X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [-4.00 / 15.00]; ASN(0.00)[asn:24940, ipnet:213.239.192.0/18, country:DE]; REPLY(-4.00)[] Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.33 X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Aug 2020 15:12:35 -0000 I think this should be: CVE-2020-15810 and CVE-2020-15811 https://access.redhat.com/security/cve/cve-2020-15810 https://access.redhat.com/security/cve/cve-2020-15811 > On 31. Aug 2020, at 17:07, Kurt Jaeger wrote: >=20 > =EF=BB=BFAuthor: pi > Date: Mon Aug 31 15:07:03 2020 > New Revision: 547191 > URL: https://svnweb.freebsd.org/changeset/ports/547191 >=20 > Log: > www/squid: update 4.12 -> 4.13 >=20 > - https://lists.freebsd.org/pipermail/freebsd-ports/2020-August/119290.ht= ml > mentions security issues, but no CVEs >=20 > PR: 248856 > Submitted by: Pavel Timofeev (maintainer) > MFH: 2020Q3 > Relnotes: http://www.squid-cache.org/Versions/v4/changesets/ > Security: probably >=20 > Deleted: > head/www/squid/files/patch-src_security_Handshake.cc > Modified: > head/www/squid/Makefile > head/www/squid/distinfo >=20 > Modified: head/www/squid/Makefile > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D > --- head/www/squid/Makefile Mon Aug 31 15:06:46 2020 (r547190) > +++ head/www/squid/Makefile Mon Aug 31 15:07:03 2020 (r547191) > @@ -1,20 +1,23 @@ > # $FreeBSD$ >=20 > PORTNAME=3D squid > -PORTVERSION=3D 4.12 > +PORTVERSION=3D 4.13 > CATEGORIES=3D www > -MASTER_SITES=3D http://www.squid-cache.org/Versions/v4/ \ > - http://www2.us.squid-cache.org/Versions/v4/ \ > - http://www1.at.squid-cache.org/Versions/v4/ \ > - http://www.eu.squid-cache.org/Versions/v4/ \ > - http://www1.jp.squid-cache.org/Versions/v4/ > +MASTER_SITES=3D http://www2.pl.squid-cache.org/Versions/v4/ \ > + http://ca.squid-cache.org/Versions/v4/ \ > + http://www1.il.squid-cache.org/Versions/v4/ \ > + http://www1.jp.squid-cache.org/Versions/v4/ \ > + http://www2.gr.squid-cache.org/Versions/v4/ \ > + http://ca2.squid-cache.org/Versions/v4/ \ > + http://www.squid-cache.org/Versions/v4/ >=20 > -PATCH_SITES=3D http://www.squid-cache.org/%SUBDIR%/ \ > - http://www2.us.squid-cache.org/%SUBDIR%/ \ > - http://www1.at.squid-cache.org/%SUBDIR%/ \ > - http://www.eu.squid-cache.org/%SUBDIR%/ \ > +PATCH_SITES=3D http://www2.pl.squid-cache.org/%SUBDIR%/ \ > + http://ca.squid-cache.org/%SUBDIR%/ \ > + http://www1.il.squid-cache.org/%SUBDIR%/ \ > http://www1.jp.squid-cache.org/%SUBDIR%/ \ > - http://master.squid-cache.org/~amosjeffries/patches/:nosid > + http://www2.gr.squid-cache.org/%SUBDIR%/ \ > + http://ca2.squid-cache.org/%SUBDIR%/ \ > + http://www.squid-cache.org/%SUBDIR%/ > PATCH_SITE_SUBDIR=3D Versions/v4/changesets >=20 > MAINTAINER=3D timp87@gmail.com >=20 > Modified: head/www/squid/distinfo > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D > --- head/www/squid/distinfo Mon Aug 31 15:06:46 2020 (r547190) > +++ head/www/squid/distinfo Mon Aug 31 15:07:03 2020 (r547191) > @@ -1,3 +1,3 @@ > -TIMESTAMP =3D 1592288810 > -SHA256 (squid-4.12.tar.xz) =3D f42a03c8b3dc020722c88bf1a87da8cb0c087b2f66= b41d8256c77ee1b527e317 > -SIZE (squid-4.12.tar.xz) =3D 2450564 > +TIMESTAMP =3D 1598206369 > +SHA256 (squid-4.13.tar.xz) =3D 6891a0f540e60779b4f24f1802a302f813c6f473ec= 7336a474ed68c3e2e53ee0 > +SIZE (squid-4.13.tar.xz) =3D 2452752