From owner-svn-ports-all@FreeBSD.ORG Sun Aug 10 00:14:36 2014 Return-Path: Delivered-To: svn-ports-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E42134E0; Sun, 10 Aug 2014 00:14:36 +0000 (UTC) Received: from mail-wi0-x22b.google.com (mail-wi0-x22b.google.com [IPv6:2a00:1450:400c:c05::22b]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 0E93A2A64; Sun, 10 Aug 2014 00:14:35 +0000 (UTC) Received: by mail-wi0-f171.google.com with SMTP id hi2so2642080wib.10 for ; Sat, 09 Aug 2014 17:14:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:message-id:date:from:user-agent:mime-version:to:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=9C2+w7Fof/6yTlSIygss8HVfn3nsg/aVpfdAqrG3xYE=; b=MGJxrr7KTeHGtthidNJv7W5T6t+IqZmsOFAWW2Of9dkPvHjVUag22lkCBIUiZC9Myh 53j+ZDBfh026I8jPNyqXCBiwAxBGM6qiq1fo6ysyTbZMzswfXcBAxrcmFMDUQqv63OsB WKFX/13j0cfx2bkrUEYBpYjCwBCMVV/b/b3ln3/PkvFG5f5KLI4nkNNpTheHPZ9FY9WA F+Xa3bx19txJjbxIZjLDgXjJji1RSlnwH4D+8viXYVpZismusWKjken+iA1vv6hOyj+U w7oComvsEU57bpNmB1H6L/+IuPNNopnViWWmu+289nU6NobTVzk8+pk990ljB2mbNQuM ZoIg== X-Received: by 10.195.13.102 with SMTP id ex6mr40824369wjd.48.1407629674208; Sat, 09 Aug 2014 17:14:34 -0700 (PDT) Received: from ?IPv6:2001:980:d7ed:1:9040:62cb:8403:e844? ([2001:980:d7ed:1:9040:62cb:8403:e844]) by mx.google.com with ESMTPSA id e3sm28056376wjp.4.2014.08.09.17.14.32 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 09 Aug 2014 17:14:33 -0700 (PDT) Sender: =?UTF-8?Q?Ren=C3=A9_Ladan?= Message-ID: <53E6B967.1030608@freebsd.org> Date: Sun, 10 Aug 2014 02:14:31 +0200 From: =?UTF-8?B?UmVuw6kgTGFkYW4=?= User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.0 MIME-Version: 1.0 To: "Sergey A. Osokin" , ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: Re: svn commit: r364460 - head/www/nginx References: <53e66a49.2ebf.35c2c6fd@svn.freebsd.org> In-Reply-To: <53e66a49.2ebf.35c2c6fd@svn.freebsd.org> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Aug 2014 00:14:37 -0000 On 09-08-2014 20:36, Sergey A. Osokin wrote: > Author: osa > Date: Sat Aug 9 18:36:56 2014 > New Revision: 364460 > URL: http://svnweb.freebsd.org/changeset/ports/364460 > QAT: https://qat.redports.org/buildarchive/r364460/ > > Log: > Update from 1.6.0 to 1.6.1. > > > > *) Security: pipelined commands were not discarded after STARTTLS > command in SMTP proxy (CVE-2014-3556); the bug had appeared in 1.5.6. > Thanks to Chris Boulton. The vuxml file says < 1.6.4,2 is vulnerable, I assume that is a typo? Also, can you add CPE information to the Makefile (see https://wiki.freebsd.org/Ports/CPE ) ? Rene