It seems all versions of radsecproxy before version 1.6.2 are affected by CVE-2012-4566 and CVE-2012-4523 1.6.2 Bug fixes (security): Fix the issue with verification of clients when using multiple 'tls' config blocks for DTLS too (RADSECPROXY-43, CVE-2012-4566). 1.6.1 Bug fixes (security): When verifying clients, don't consider config blocks with CA settings ('tls') which differ from the one used for verifying the certificate chain (RADSECPROXY-43, CVE-2012-4523). Reported by Ralf Paffrath. The patch updates the port to version 1.6.5 PS: I don't use radsecproxy, so I have no testcase for the new version ...
Maintainer of net/radsecproxy, Please note that PR ports/185288 has just been submitted. If it contains a patch for an upgrade, an enhancement or a bug fix you agree on, reply to this email stating that you approve the patch and a committer will take care of it. The full text of the PR can be found at: http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/185288 -- Edwin Groothuis via the GNATS Auto Assign Tool edwin@FreeBSD.org
State Changed From-To: open->feedback Awaiting maintainers feedback (via the GNATS Auto Assign Tool)
Responsible Changed From-To: freebsd-ports-bugs->ohauer I'll take my PR
Approved, Thanks! -- Mikhail
Author: ohauer Date: Tue Jan 7 20:52:30 2014 New Revision: 339034 URL: http://svnweb.freebsd.org/changeset/ports/339034 Log: - update to version 1.6.5 - add stage support PR: ports/185288 Submitted by: ohauer Approved by: Mikhail Tsatsenko <m.tsatsenko@gmail.com> (maintainer) Modified: head/net/radsecproxy/Makefile head/net/radsecproxy/distinfo head/net/radsecproxy/pkg-plist Modified: head/net/radsecproxy/Makefile ============================================================================== --- head/net/radsecproxy/Makefile Tue Jan 7 20:42:47 2014 (r339033) +++ head/net/radsecproxy/Makefile Tue Jan 7 20:52:30 2014 (r339034) @@ -2,7 +2,7 @@ # $FreeBSD$ PORTNAME= radsecproxy -PORTVERSION= 1.4.2 +PORTVERSION= 1.6.5 CATEGORIES= net MASTER_SITES= http://software.uninett.no/radsecproxy/ @@ -12,20 +12,14 @@ COMMENT= Radsecproxy is a generic RADIUS LICENSE= GPLv2 BSD LICENSE_COMB= dual -MAN1= radsecproxy.1 -MAN5= radsecproxy.conf.5 - GNU_CONFIGURE= yes USE_RC_SUBR= ${PORTNAME} USE_OPENSSL= yes CONFIGURE_ARGS= --with-ssl=${OPENSSLBASE} -NO_STAGE= yes -do-install: - ${INSTALL_PROGRAM} ${WRKSRC}/radsecproxy ${PREFIX}/bin/catgconf - ${INSTALL_PROGRAM} ${WRKSRC}/radsecproxy ${PREFIX}/sbin/radsecproxy - ${INSTALL_DATA} ${WRKSRC}/radsecproxy.conf-example ${PREFIX}/etc/radsecproxy.conf-example - ${INSTALL_MAN} ${WRKSRC}/radsecproxy.1 ${PREFIX}/man/man1/radsecproxy.1 - ${INSTALL_MAN} ${WRKSRC}/radsecproxy.conf.5 ${PREFIX}/man/man5/radsecproxy.conf.5 - ${INSTALL_DATA} ${WRKSRC}/radsecproxy.conf-example ${PREFIX}/etc/radsecproxy.conf-example +post-install: + ${MAKE} install-man -C ${WRKSRC} ${MAKE_ARGS} + ${INSTALL_DATA} ${WRKSRC}/radsecproxy.conf-example \ + ${STAGEDIR}${PREFIX}/etc + .include <bsd.port.mk> Modified: head/net/radsecproxy/distinfo ============================================================================== --- head/net/radsecproxy/distinfo Tue Jan 7 20:42:47 2014 (r339033) +++ head/net/radsecproxy/distinfo Tue Jan 7 20:52:30 2014 (r339034) @@ -1,2 +1,2 @@ -SHA256 (radsecproxy-1.4.2.tar.gz) = 76f2db133c22883bd87bd0c6f2c258c14d7c01751845d425abb4a1599401757e -SIZE (radsecproxy-1.4.2.tar.gz) = 188224 +SHA256 (radsecproxy-1.6.5.tar.gz) = b0b7718c84a73ee2af48684cb5c9f3d76369c7e3a4ad3258b919769b4dc65e5f +SIZE (radsecproxy-1.6.5.tar.gz) = 206053 Modified: head/net/radsecproxy/pkg-plist ============================================================================== --- head/net/radsecproxy/pkg-plist Tue Jan 7 20:42:47 2014 (r339033) +++ head/net/radsecproxy/pkg-plist Tue Jan 7 20:52:30 2014 (r339034) @@ -1,3 +1,5 @@ -bin/catgconf -sbin/radsecproxy +bin/radsecproxy-conf etc/radsecproxy.conf-example +man/man1/radsecproxy-hash.1.gz +man/man1/radsecproxy.1.gz +sbin/radsecproxy _______________________________________________ svn-ports-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/svn-ports-all To unsubscribe, send any mail to "svn-ports-all-unsubscribe@freebsd.org"
State Changed From-To: feedback->closed Commited!