Created attachment 165973 [details] www/privoxy: Update to 3.0.24 stable Privoxy 3.0.24 is a bug-fix release, two of the fixed bugs are security issues (CVE-2016-1982, CVE-2016-1983). For details see: http://www.privoxy.org/3.0.24/user-manual/whatsnew.html Port-specific changes: - Use Uses=autoreconf. - Unbreak installation with DOCS=off. - Add PRIVOXY_TOOLS to the default options. - Remove BROKEN_STRPTIME from the default options. FreeBSD bug #173421 is fixed in all supported releases.
A commit references this bug: Author: pi Date: Fri Jan 22 21:03:12 UTC 2016 New revision: 406944 URL: https://svnweb.freebsd.org/changeset/ports/406944 Log: www/privoxy: 3.0.23 -> 3.0.24 Changes: http://www.privoxy.org/3.0.24/user-manual/whatsnew.html - Use Uses=autoreconf. - Unbreak installation with DOCS=off. - Add PRIVOXY_TOOLS to the default options. - Remove BROKEN_STRPTIME from the default options. FreeBSD bug #173421 is fixed in all supported releases. PR: 206504 Submitted by: Fabian Keil <fk@fabiankeil.de> (maintainer) Changes: head/www/privoxy/Makefile head/www/privoxy/distinfo
Committed, thanks.
A commit references this bug: Author: junovitch Date: Tue Jan 26 03:13:32 UTC 2016 New revision: 407256 URL: https://svnweb.freebsd.org/changeset/ports/407256 Log: Document recent privoxy security vulnerabilities While here, catch up on the prior release's advisories for completeness PR: 206504 Security: CVE-2016-1982 Security: CVE-2016-1983 Security: https://vuxml.FreeBSD.org/freebsd/a763a0e7-c3d9-11e5-b5fe-002590263bf5.html Changes: head/security/vuxml/vuln.xml
Fix keywords and flags with a merge-quarterly?. I just requested approval to MFH the security update. Re-open PR until that is done.
A commit references this bug: Author: junovitch Date: Tue Jan 26 03:32:53 UTC 2016 New revision: 407257 URL: https://svnweb.freebsd.org/changeset/ports/407257 Log: MFH: r406944 www/privoxy: 3.0.23 -> 3.0.24 Changes: http://www.privoxy.org/3.0.24/user-manual/whatsnew.html - Use Uses=autoreconf. - Unbreak installation with DOCS=off. - Add PRIVOXY_TOOLS to the default options. - Remove BROKEN_STRPTIME from the default options. FreeBSD bug #173421 is fixed in all supported releases. PR: 206504 Submitted by: Fabian Keil <fk@fabiankeil.de> (maintainer) Approved by: ports-secteam (feld) Security: CVE-2016-1982 Security: CVE-2016-1983 Security: https://vuxml.FreeBSD.org/freebsd/a763a0e7-c3d9-11e5-b5fe-002590263bf5.html Changes: _U branches/2016Q1/ branches/2016Q1/www/privoxy/Makefile branches/2016Q1/www/privoxy/distinfo
Close PR. Set merge-quarterly+ (approved by feld@) and merged.