Bug 226859 - [UPDATE] dns/bird-devel: update to 2.0.2 - security release
Summary: [UPDATE] dns/bird-devel: update to 2.0.2 - security release
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: Olivier Cochard
URL: http://trubka.network.cz/pipermail/bi...
Keywords:
Depends on:
Blocks:
 
Reported: 2018-03-23 00:06 UTC by Leo Vandewoestijne
Modified: 2018-03-28 08:25 UTC (History)
2 users (show)

See Also:


Attachments
upgrade to 2.0.2 (2.80 KB, patch)
2018-03-23 00:06 UTC, Leo Vandewoestijne
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Leo Vandewoestijne 2018-03-23 00:06:45 UTC
Created attachment 191745 [details]
upgrade to 2.0.2

NIC.CZ released a security release of Bird 1.6.x and Bird 2.0.x
It's to tackle a DoS issue with birdc in restricted mode, so only in some cases urgent.

Attached patch will:

* update to new version - due to security release.

* babel patch was removed - it was OK'ish but not perfect, and now is solved uptream

* splitted the @sample line - for clearity

* added keyword @shell to birdc

* added pkg-message - with additional instructions/hints


- I don't know why the previously maintainer (melifaro) is less active (while he used to be very involved with Bird, also in the newsgroup), but if this going to be more permanent, then -if desired- feel free to transfer maintainership to me.

- https://dns.company/www/downloads/bird/ could anyway be additional in MASTER_SITES

Patch is manually tested succesfully, and tested OK in Poudriere, for all current releases, both i386 and ams64.
Comment 1 Felix Annen 2018-03-23 23:08:50 UTC
(In reply to Leo Vandewoestijne from comment #0)
>- https://dns.company/www/downloads/bird/ could anyway be additional in MASTER_SITES
I get a 404 error from your webserver, can you check this?
Comment 2 Leo Vandewoestijne 2018-03-24 01:45:14 UTC
Ai, that www part is superfluos; it's just:
https://dns.company/downloads/bird/
So
https://dns.company/downloads/bird/bird-2.0.2.tar.gz
works well.
Comment 3 commit-hook freebsd_committer freebsd_triage 2018-03-28 08:17:46 UTC
A commit references this bug:

Author: olivier
Date: Wed Mar 28 08:17:35 UTC 2018
New revision: 465782
URL: https://svnweb.freebsd.org/changeset/ports/465782

Log:
  Update to 2.0.2

  PR:		226859
  Submitted by:	Leo Vandewoestijne <freebsd@dns.company>

Changes:
  head/net/bird-devel/Makefile
  head/net/bird-devel/distinfo
  head/net/bird-devel/files/patch-proto_babel_config.Y
  head/net/bird-devel/files/pkg-message.in
  head/net/bird-devel/pkg-plist
Comment 4 Olivier Cochard freebsd_committer freebsd_triage 2018-03-28 08:25:50 UTC
Committed with small changes:
1. Removed the no more needed USE_CSTD
2. Renamed the sample extenstion .example to .sample as instruted into the FreeBSD porter handbook.

Now I can start to rename net/bird into net/bird-legacy, then net/bird-devel to net/bird.