Date: Fri, 24 Nov 2017 12:53:59 +0000 (UTC) From: Palle Girgensohn <girgen@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org Subject: svn commit: r454820 - in branches/2017Q4: devel/xmltooling security/opensaml2 security/shibboleth2-sp Message-ID: <201711241253.vAOCrxYi010746@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: girgen Date: Fri Nov 24 12:53:58 2017 New Revision: 454820 URL: https://svnweb.freebsd.org/changeset/ports/454820 Log: MFH: r454256 r454371 Shibboleth Service Provider Security Advisory [15 November 2017] An updated version of the Shibboleth Service Provider software is available which corrects a critical security issue in the "Dynamic" metadata provider plugin. Deployers making use of the affected feature should apply the relevant update at the soonest possible moment. This also includes the fix to xmltooling security/apache-xml-security-c that was introduced with the first version of the security patch. Security: b4b7ec7d-ca27-11e7-a12d-6cc21735f730 Approved by: portmgr Modified: branches/2017Q4/devel/xmltooling/Makefile branches/2017Q4/devel/xmltooling/distinfo branches/2017Q4/devel/xmltooling/pkg-plist branches/2017Q4/security/opensaml2/Makefile branches/2017Q4/security/opensaml2/distinfo branches/2017Q4/security/opensaml2/pkg-plist branches/2017Q4/security/shibboleth2-sp/Makefile branches/2017Q4/security/shibboleth2-sp/distinfo branches/2017Q4/security/shibboleth2-sp/pkg-plist Directory Properties: branches/2017Q4/ (props changed) Modified: branches/2017Q4/devel/xmltooling/Makefile ============================================================================== --- branches/2017Q4/devel/xmltooling/Makefile Fri Nov 24 11:42:13 2017 (r454819) +++ branches/2017Q4/devel/xmltooling/Makefile Fri Nov 24 12:53:58 2017 (r454820) @@ -2,10 +2,9 @@ # $FreeBSD$ PORTNAME= xmltooling -PORTVERSION= 1.6.0 -PORTREVISION= 5 +PORTVERSION= 1.6.2 CATEGORIES= devel security -MASTER_SITES= http://shibboleth.net/downloads/c++-opensaml/2.6.0/ +MASTER_SITES= http://shibboleth.net/downloads/c++-opensaml/2.6.1/ MAINTAINER= girgen@FreeBSD.org COMMENT= Low level XML support for SAML Modified: branches/2017Q4/devel/xmltooling/distinfo ============================================================================== --- branches/2017Q4/devel/xmltooling/distinfo Fri Nov 24 11:42:13 2017 (r454819) +++ branches/2017Q4/devel/xmltooling/distinfo Fri Nov 24 12:53:58 2017 (r454820) @@ -1,3 +1,3 @@ -TIMESTAMP = 1473630647 -SHA256 (xmltooling-1.6.0.tar.bz2) = e26a66cb10d767743c6af9a663fa3c7cb4dace55ec79cc91f9d8d528994af0b6 -SIZE (xmltooling-1.6.0.tar.bz2) = 553346 +TIMESTAMP = 1510878752 +SHA256 (xmltooling-1.6.2.tar.bz2) = 9fa592b2c000f6775e34c6898a4cc21d0a0b9af3fc26a16cc327a426f9caae3c +SIZE (xmltooling-1.6.2.tar.bz2) = 580621 Modified: branches/2017Q4/devel/xmltooling/pkg-plist ============================================================================== --- branches/2017Q4/devel/xmltooling/pkg-plist Fri Nov 24 11:42:13 2017 (r454819) +++ branches/2017Q4/devel/xmltooling/pkg-plist Fri Nov 24 12:53:58 2017 (r454820) @@ -83,10 +83,10 @@ include/xmltooling/validation/ValidatorSuite.h include/xmltooling/version.h lib/libxmltooling-lite.so lib/libxmltooling-lite.so.7 -lib/libxmltooling-lite.so.7.0.0 +lib/libxmltooling-lite.so.7.0.2 lib/libxmltooling.so lib/libxmltooling.so.7 -lib/libxmltooling.so.7.0.0 +lib/libxmltooling.so.7.0.2 libdata/pkgconfig/xmltooling.pc share/xml/xmltooling/catalog.xml share/xml/xmltooling/soap-envelope.xsd Modified: branches/2017Q4/security/opensaml2/Makefile ============================================================================== --- branches/2017Q4/security/opensaml2/Makefile Fri Nov 24 11:42:13 2017 (r454819) +++ branches/2017Q4/security/opensaml2/Makefile Fri Nov 24 12:53:58 2017 (r454820) @@ -2,8 +2,7 @@ # $FreeBSD$ PORTNAME= opensaml2 -PORTVERSION= 2.6.0 -PORTREVISION= 5 +PORTVERSION= 2.6.1 CATEGORIES= security MASTER_SITES= http://shibboleth.net/downloads/c++-opensaml/${PORTVERSION}/ DISTNAME= opensaml-${PORTVERSION} @@ -11,13 +10,14 @@ DISTNAME= opensaml-${PORTVERSION} MAINTAINER= girgen@FreeBSD.org COMMENT= Open source implementation of SAML2 +LICENSE= APACHE20 + +BUILD_DEPENDS= boost-libs>=0:devel/boost-libs LIB_DEPENDS= libcurl.so:ftp/curl \ liblog4shib.so:devel/log4shib \ libxml-security-c.so:security/apache-xml-security-c \ libxerces-c.so:textproc/xerces-c3 \ libxmltooling.so:devel/xmltooling - -BUILD_DEPENDS= boost-libs>=0:devel/boost-libs GNU_CONFIGURE= yes CONFIGURE_ARGS+=--with-log4shib=${LOCALBASE} --with-openssl=${OPENSSLBASE} \ Modified: branches/2017Q4/security/opensaml2/distinfo ============================================================================== --- branches/2017Q4/security/opensaml2/distinfo Fri Nov 24 11:42:13 2017 (r454819) +++ branches/2017Q4/security/opensaml2/distinfo Fri Nov 24 12:53:58 2017 (r454820) @@ -1,3 +1,3 @@ -TIMESTAMP = 1473589706 -SHA256 (opensaml-2.6.0.tar.bz2) = 8bd2a7521dc372bcb92f8bc3fec301fb2ccecfad8bfb99052d6eb76b576250fd -SIZE (opensaml-2.6.0.tar.bz2) = 557977 +TIMESTAMP = 1510765173 +SHA256 (opensaml-2.6.1.tar.bz2) = 69516b165858d381fcf1d8ce809c101246824d383aa635a3676648c88b242a83 +SIZE (opensaml-2.6.1.tar.bz2) = 575533 Modified: branches/2017Q4/security/opensaml2/pkg-plist ============================================================================== --- branches/2017Q4/security/opensaml2/pkg-plist Fri Nov 24 11:42:13 2017 (r454819) +++ branches/2017Q4/security/opensaml2/pkg-plist Fri Nov 24 12:53:58 2017 (r454820) @@ -49,7 +49,7 @@ include/saml/util/CommonDomainCookie.h include/saml/util/SAMLConstants.h lib/libsaml.so lib/libsaml.so.9 -lib/libsaml.so.9.0.0 +lib/libsaml.so.9.0.1 libdata/pkgconfig/opensaml.pc %%PORTDOCS%%%%DOCSDIR%%/README.txt %%PORTDOCS%%%%DOCSDIR%%/LICENSE.txt Modified: branches/2017Q4/security/shibboleth2-sp/Makefile ============================================================================== --- branches/2017Q4/security/shibboleth2-sp/Makefile Fri Nov 24 11:42:13 2017 (r454819) +++ branches/2017Q4/security/shibboleth2-sp/Makefile Fri Nov 24 12:53:58 2017 (r454820) @@ -2,8 +2,7 @@ # $FreeBSD$ PORTNAME= shibboleth-sp -PORTVERSION= 2.6.0 -PORTREVISION= 6 +PORTVERSION= 2.6.1 CATEGORIES= security www MASTER_SITES= http://shibboleth.net/downloads/service-provider/${PORTVERSION}/ Modified: branches/2017Q4/security/shibboleth2-sp/distinfo ============================================================================== --- branches/2017Q4/security/shibboleth2-sp/distinfo Fri Nov 24 11:42:13 2017 (r454819) +++ branches/2017Q4/security/shibboleth2-sp/distinfo Fri Nov 24 12:53:58 2017 (r454820) @@ -1,3 +1,3 @@ -TIMESTAMP = 1473589186 -SHA256 (shibboleth-sp-2.6.0.tar.bz2) = cb084f09c406257c7a8cb41464dc5d3e82803c3829e79288fc813e997f6f9b34 -SIZE (shibboleth-sp-2.6.0.tar.bz2) = 721245 +TIMESTAMP = 1510743416 +SHA256 (shibboleth-sp-2.6.1.tar.bz2) = 1121e3b726b844d829ad86f2047be62da4284ce965ac184de2f81903f16b98e4 +SIZE (shibboleth-sp-2.6.1.tar.bz2) = 758031 Modified: branches/2017Q4/security/shibboleth2-sp/pkg-plist ============================================================================== --- branches/2017Q4/security/shibboleth2-sp/pkg-plist Fri Nov 24 11:42:13 2017 (r454819) +++ branches/2017Q4/security/shibboleth2-sp/pkg-plist Fri Nov 24 12:53:58 2017 (r454820) @@ -92,8 +92,9 @@ include/shibsp/util/PropertySet.h include/shibsp/util/SPConstants.h include/shibsp/util/TemplateParameters.h include/shibsp/version.h -lib/libshibsp.so.7 lib/libshibsp.so +lib/libshibsp.so.7 +lib/libshibsp.so.7.0.1 lib/shibboleth/adfs.so lib/shibboleth/adfs-lite.so %%MEMCACHED%%lib/shibboleth/memcache-store.so @@ -104,8 +105,9 @@ lib/shibboleth/plugins.so %%WITH_APACHE_24%%lib/shibboleth/mod_shib_24.so %%FASTCGI%%lib/shibboleth/shibauthorizer %%FASTCGI%%lib/shibboleth/shibresponder -lib/libshibsp-lite.so.7 lib/libshibsp-lite.so +lib/libshibsp-lite.so.7 +lib/libshibsp-lite.so.7.0.1 sbin/shibd share/xml/shibboleth/catalog.xml share/xml/shibboleth/shibboleth-2.0-afp-mf-basic.xsd
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201711241253.vAOCrxYi010746>