From owner-svn-ports-all@freebsd.org Wed Mar 2 22:33:33 2016 Return-Path: Delivered-To: svn-ports-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 901FEAC24C8; Wed, 2 Mar 2016 22:33:33 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5E98110D3; Wed, 2 Mar 2016 22:33:33 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id u22MXWST079351; Wed, 2 Mar 2016 22:33:32 GMT (envelope-from feld@FreeBSD.org) Received: (from feld@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id u22MXWIS079350; Wed, 2 Mar 2016 22:33:32 GMT (envelope-from feld@FreeBSD.org) Message-Id: <201603022233.u22MXWIS079350@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: feld set sender to feld@FreeBSD.org using -f From: Mark Felder Date: Wed, 2 Mar 2016 22:33:32 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org Subject: svn commit: r409968 - branches/2016Q1/security/openssl X-SVN-Group: ports-branches MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 22:33:33 -0000 Author: feld Date: Wed Mar 2 22:33:32 2016 New Revision: 409968 URL: https://svnweb.freebsd.org/changeset/ports/409968 Log: MFH: r409967 security/openssl: Disable SSLv2 and MD2 SSLv2 is being disabled due to DROWN. MD2 is being disabled as it should not have been enabled by default. This was disabled by upstream back in 2009. PR: 195796 Approved by: delphij, eadler Security: CVE-2009-2409 Security: CVE-2016-0800 Approved by: ports-secteam (with hat) Modified: branches/2016Q1/security/openssl/Makefile Directory Properties: branches/2016Q1/ (props changed) Modified: branches/2016Q1/security/openssl/Makefile ============================================================================== --- branches/2016Q1/security/openssl/Makefile Wed Mar 2 22:31:29 2016 (r409967) +++ branches/2016Q1/security/openssl/Makefile Wed Mar 2 22:33:32 2016 (r409968) @@ -4,7 +4,7 @@ PORTNAME= openssl PORTVERSION= 1.0.2 DISTVERSIONSUFFIX= g -PORTREVISION= 9 +PORTREVISION= 10 CATEGORIES= security devel MASTER_SITES= http://www.openssl.org/source/ \ ftp://ftp.openssl.org/source/ \ @@ -23,7 +23,7 @@ LICENSE= OpenSSL LICENSE_FILE= ${WRKSRC}/LICENSE OPTIONS_DEFINE= SHARED THREADS I386 SSE2 ASM PADLOCK ZLIB GMP SCTP SSL2 SSL3 RFC3779 MD2 RC5 EXPCIPHERS DOCS MAN3 -OPTIONS_DEFAULT=SHARED THREADS SSE2 SCTP SSL2 SSL3 MD2 MAN3 +OPTIONS_DEFAULT=SHARED THREADS SSE2 SCTP SSL3 MAN3 .for a in amd64 ia64 OPTIONS_DEFINE_${a}= EC OPTIONS_DEFAULT_${a}= EC