From nobody Mon Nov 1 12:54:58 2021 X-Original-To: office@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 9257D183290E for ; Mon, 1 Nov 2021 12:54:58 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HjY0L3Z22z3sFY for ; Mon, 1 Nov 2021 12:54:58 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 5B42A12006 for ; Mon, 1 Nov 2021 12:54:58 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 1A1CswMX058591 for ; Mon, 1 Nov 2021 12:54:58 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 1A1CswEx058590 for office@FreeBSD.org; Mon, 1 Nov 2021 12:54:58 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" From: bugzilla-noreply@freebsd.org To: office@FreeBSD.org Subject: maintainer-approval requested: [Bug 259590] graphics/libemf: update to 1.0.13 : [Attachment 229190] graphics/libemf: update to 1.0.13 Date: Mon, 01 Nov 2021 12:54:58 +0000 X-Bugzilla-Type: request X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: security X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: office@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? Message-ID: In-Reply-To: References: X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Office applications on FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-office List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-office@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N Robert Clausecker has asked FreeBSD Office Team for maintainer-approval: Bug 259590: graphics/libemf: update to 1.0.13 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D259590 Attachment 229190: graphics/libemf: update to 1.0.13 https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D229190&action=3Dedit --- Description --- This update fixes a number of vulnerabilities: CVE-2020-13999 (fixed in 1.0.13) CVE-2020-11863 (fixed in 1.0.12) CVE-2020-11864 (fixed in 1.0.12) CVE-2020-11865 (fixed in 1.0.12) CVE-2020-11866 (fixed in 1.0.12) While there, hooked up the test suite and took maintainership of this unmaintained port. Tested with Poudriere on armv6 arm64 i386 amd64 FreeBSD 13. Tested that the dependent ports still build (except for science/chemtool-devel which is marked as BROKEN). Please MFH as this is a security update.