From nobody Wed Oct 19 16:50:27 2022 X-Original-To: dev-commits-ports-branches@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4MsxYb3BK1z4gP71; Wed, 19 Oct 2022 16:50:27 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4MsxYb2hZYz3fQd; Wed, 19 Oct 2022 16:50:27 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1666198227; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=wxJDHU88K70Vr/umO9gLDrLJ84C3M+Ukd5RgCqBNb9A=; b=hOGbFOLzNmuskR62LgT+0h+KVnM/Q2hNoX7P2rR3mnEJXzHit5e4qVy4j2yoVraQ+MGagJ ll6ONK1pIJCkXf9+HH4Cut2elvgtp5g5GbM5dQdfkq0Vlz2dl2Sqp2X9p2SMj3fPpuigVQ BEl41KitQh3kbZXK+AC++8KJpU5Wei8IEPElDGbB09WsQ0wuqLzsEmoU8KGEPK+S+L33Di hanY6Gh2NxZJyBPq7UjZd5dod34q9Oina4bfqHw+70r/wHUi5K+W7AxvWRD0e2DDP9O3QM LZEIQ7H3yidD5yvqty5OlCHyeIpX60nN4cCIC9rpwdirrX7gafIJcWmgOGC9yA== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4MsxYb1SPtzb50; Wed, 19 Oct 2022 16:50:27 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 29JGoRMw033211; Wed, 19 Oct 2022 16:50:27 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 29JGoRSH033210; Wed, 19 Oct 2022 16:50:27 GMT (envelope-from git) Date: Wed, 19 Oct 2022 16:50:27 GMT Message-Id: <202210191650.29JGoRSH033210@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-branches@FreeBSD.org From: =?utf-8?Q?Fernando=20Apestegu=C3=ADa?= Subject: git: de86c5fe2678 - 2022Q4 - security/strongswan: update to 5.9.8 List-Id: Commits to the quarterly branches of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-branches List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-branches@freebsd.org X-BeenThere: dev-commits-ports-branches@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: fernape X-Git-Repository: ports X-Git-Refname: refs/heads/2022Q4 X-Git-Reftype: branch X-Git-Commit: de86c5fe2678752cf798a2fc3294fd13202eaae9 Auto-Submitted: auto-generated ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1666198227; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=wxJDHU88K70Vr/umO9gLDrLJ84C3M+Ukd5RgCqBNb9A=; b=f3QhUTjuqDi7fV8e/X9l33PXdbUHisMV3Uww9SRuoyHEpu6K/0HN9AIryyLrdn2ZAc+RkL v7DCfaszrisUgjMBzcmt6w+QRWKf5eyIh5hLohJjv2Qh+IbeK3g8J2Blxt9N1i9bHOYxuC wqbDEPm1QsBJpUjwDkqt2Dg3jMxVwG5yyhM0WlAX5+ijQQPu8Le0VeYe/f7uZID4RcCauS THNPKP2oQ7tQLzpKWjHDUwmeep4Gb7YfD/Qgrw7pa5SFytwwlKTgkqPv4kTHTM24EhXShT RX0AjIly9x2mJAJFdYHGGeHs0VqjtfFIz8qptHHqekB0Un5g8elQxCtZ9ZbcVQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1666198227; a=rsa-sha256; cv=none; b=aIZB/JDrwayVLWbkKp/VRrRuf4aMoXFUcviXXt10EVJH/vXAUHiWeKXZHGF41VyNzs7Ifs jktZY2TBPK6jxqwt0QWzVAnPNi9nNzGNPdQ+rZVBjVHloahEuvpCDYTnidjS3zgWy6SUIa VORLhgbkXmljcffKOdF/HR3g1n/HOBCXg6tG+RHsEswRNTkgAkukRMCnpDnLbDRzVh4u62 IqcKfH0gxl2RIUusogPCmK+gXiNZr5T0njrO6YQI10N3no7ufrsKaA5g/YNOQkHQrb532f Q2S6pDU54tAT8JCJhF+Uacli966hD1caDxd3yYzmJqpjf9RAHzUBGaov7593HQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N The branch 2022Q4 has been updated by fernape: URL: https://cgit.FreeBSD.org/ports/commit/?id=de86c5fe2678752cf798a2fc3294fd13202eaae9 commit de86c5fe2678752cf798a2fc3294fd13202eaae9 Author: Franco Fichtner AuthorDate: 2022-10-17 06:06:35 +0000 Commit: Fernando Apesteguía CommitDate: 2022-10-19 16:46:51 +0000 security/strongswan: update to 5.9.8 ChangeLog: https://github.com/strongswan/strongswan/releases/tag/5.9.8 Fixes CVE-2022-40617. PR: 267037 Reported by: franco@opnsense.org Approved by: strongswan@Nanoteq.com (maintainer, implicit) MFH: 2022Q4 (security update) Security: CVE-2022-40617 DoS attack vulnerability (cherry picked from commit a28166f3b1e22d446f76d5f71f27f082b0e7e19f) --- security/strongswan/Makefile | 3 +-- security/strongswan/distinfo | 6 +++--- security/strongswan/pkg-plist | 5 ++++- 3 files changed, 8 insertions(+), 6 deletions(-) diff --git a/security/strongswan/Makefile b/security/strongswan/Makefile index 9946975337b1..ade37ff9ae0b 100644 --- a/security/strongswan/Makefile +++ b/security/strongswan/Makefile @@ -1,6 +1,5 @@ PORTNAME= strongswan -DISTVERSION= 5.9.6 -PORTREVISION= 2 +DISTVERSION= 5.9.8 CATEGORIES= security net-vpn MASTER_SITES= https://download.strongswan.org/ \ https://download2.strongswan.org/ diff --git a/security/strongswan/distinfo b/security/strongswan/distinfo index 51fef72e5c30..be442b4c8862 100644 --- a/security/strongswan/distinfo +++ b/security/strongswan/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1651559579 -SHA256 (strongswan-5.9.6.tar.bz2) = 91d0978ac448912759b85452d8ff0d578aafd4507aaf4f1c1719f9d0c7318ab7 -SIZE (strongswan-5.9.6.tar.bz2) = 4750894 +TIMESTAMP = 1665472296 +SHA256 (strongswan-5.9.8.tar.bz2) = d3303a43c0bd7b75a12b64855e8edcb53696f06190364f26d1533bde1f2e453c +SIZE (strongswan-5.9.8.tar.bz2) = 4747096 diff --git a/security/strongswan/pkg-plist b/security/strongswan/pkg-plist index b2e8b6cf9f43..cc777e50ee93 100644 --- a/security/strongswan/pkg-plist +++ b/security/strongswan/pkg-plist @@ -272,7 +272,6 @@ lib/ipsec/plugins/libstrongswan-x509.so %%XAUTH%%lib/ipsec/plugins/libstrongswan-xauth-pam.so lib/ipsec/plugins/libstrongswan-xcbc.la lib/ipsec/plugins/libstrongswan-xcbc.so -libexec/ipsec/_copyright libexec/ipsec/_updown libexec/ipsec/charon %%LOADTESTER%%libexec/ipsec/load-tester @@ -283,6 +282,8 @@ libexec/ipsec/stroke libexec/ipsec/whitelist %%PKI%%man/man1/pki---acert.1.gz %%PKI%%man/man1/pki---dn.1.gz +%%PKI%%man/man1/pki---est.1.gz +%%PKI%%man/man1/pki---estca.1.gz %%PKI%%man/man1/pki---gen.1.gz %%PKI%%man/man1/pki---issue.1.gz %%PKI%%man/man1/pki---keyid.1.gz @@ -290,6 +291,8 @@ libexec/ipsec/whitelist %%PKI%%man/man1/pki---print.1.gz %%PKI%%man/man1/pki---pub.1.gz %%PKI%%man/man1/pki---req.1.gz +%%PKI%%man/man1/pki---scep.1.gz +%%PKI%%man/man1/pki---scepca.1.gz %%PKI%%man/man1/pki---self.1.gz %%PKI%%man/man1/pki---signcrl.1.gz %%PKI%%man/man1/pki---verify.1.gz