Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 26 Sep 2020 10:50:41 +0000 (UTC)
From:      "Tobias C. Berner" <tcberner@FreeBSD.org>
To:        ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-branches@freebsd.org
Subject:   svn commit: r550160 - branches/2020Q3/textproc/libxml2
Message-ID:  <202009261050.08QAofpe019674@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: tcberner
Date: Sat Sep 26 10:50:40 2020
New Revision: 550160
URL: https://svnweb.freebsd.org/changeset/ports/550160

Log:
  MFH: r550081
  
  textproc/libxml2: Multiple vulnerabilities
  
  Includes upstreams fixes for
  
  	* CVE-2019-20388
  	* CVE-2020-7595
  	* CVE-2020-24977
  
  PR:		249386
  Submitted by:	daniel.engberg.lists@pyret.net
  
  Approved by:	ports-secteam (fluffy)

Modified:
  branches/2020Q3/textproc/libxml2/Makefile
  branches/2020Q3/textproc/libxml2/distinfo
Directory Properties:
  branches/2020Q3/   (props changed)

Modified: branches/2020Q3/textproc/libxml2/Makefile
==============================================================================
--- branches/2020Q3/textproc/libxml2/Makefile	Sat Sep 26 10:49:42 2020	(r550159)
+++ branches/2020Q3/textproc/libxml2/Makefile	Sat Sep 26 10:50:40 2020	(r550160)
@@ -3,10 +3,16 @@
 
 PORTNAME=	libxml2
 DISTVERSION=	2.9.10
-PORTREVISION?=	0
+PORTREVISION?=	1
 CATEGORIES?=	textproc gnome
 MASTER_SITES=	http://xmlsoft.org/sources/
 DIST_SUBDIR=	gnome2
+
+# CVE-2019-20388, CVE-2020-7595, CVE-2020-24977
+PATCH_SITES=	https://gitlab.gnome.org/GNOME/libxml2/commit/
+PATCHFILES=	7ffcd44d7e6c46704f8af0321d9314cd26e0e18a.patch:-p1 \
+		0e1a49c8907645d2e155f0d89d4d9895ac5112b5.patch:-p1 \
+		50f06b3efb638efb0abd95dc62dca05ae67882c2.patch:-p1
 
 MAINTAINER?=	desktop@FreeBSD.org
 COMMENT?=	XML parser library for GNOME

Modified: branches/2020Q3/textproc/libxml2/distinfo
==============================================================================
--- branches/2020Q3/textproc/libxml2/distinfo	Sat Sep 26 10:49:42 2020	(r550159)
+++ branches/2020Q3/textproc/libxml2/distinfo	Sat Sep 26 10:50:40 2020	(r550160)
@@ -1,3 +1,9 @@
-TIMESTAMP = 1573915139
+TIMESTAMP = 1600322449
 SHA256 (gnome2/libxml2-2.9.10.tar.gz) = aafee193ffb8fe0c82d4afef6ef91972cbaf5feea100edc2f262750611b4be1f
 SIZE (gnome2/libxml2-2.9.10.tar.gz) = 5624761
+SHA256 (gnome2/7ffcd44d7e6c46704f8af0321d9314cd26e0e18a.patch) = 8bab1a7fcc22a8f9a3f89648660bbca424196d82967e213bd27c1dcc9a9544a5
+SIZE (gnome2/7ffcd44d7e6c46704f8af0321d9314cd26e0e18a.patch) = 1015
+SHA256 (gnome2/0e1a49c8907645d2e155f0d89d4d9895ac5112b5.patch) = 4a1dca36e762a0e2affb0779918fbf1665a00d984ffbd3efa45d3d202f87ea8c
+SIZE (gnome2/0e1a49c8907645d2e155f0d89d4d9895ac5112b5.patch) = 996
+SHA256 (gnome2/50f06b3efb638efb0abd95dc62dca05ae67882c2.patch) = 701048e726e2f3f7f2a71a7054030fc154b5edace72e23c5934ecd9ee09ad811
+SIZE (gnome2/50f06b3efb638efb0abd95dc62dca05ae67882c2.patch) = 1052



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202009261050.08QAofpe019674>