Bug 226001 - irc/irssi: Update to 1.1.1 (security fixes)
Summary: irc/irssi: Update to 1.1.1 (security fixes)
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Many People
Assignee: Danilo G. Baio
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-02-18 15:07 UTC by David O'Rourke
Modified: 2018-02-19 20:48 UTC (History)
1 user (show)

See Also:
dor.bsd: maintainer-feedback+


Attachments
irc/irssi: 1.1.1 diff (816 bytes, patch)
2018-02-18 15:07 UTC, David O'Rourke
dor.bsd: maintainer-approval+
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description David O'Rourke 2018-02-18 15:07:25 UTC
Created attachment 190746 [details]
irc/irssi: 1.1.1 diff

This patch updates irssi to 1.1.1 fixing CVEs: CVE-2018-7054, CVE-2018-7053, CVE-2018-7050, CVE-2018-7052, CVE-2018-7051.

Details of these CVEs can be found at https://irssi.org/security/html/irssi_sa_2018_02/

Patch was submitted by tj@mrsk.me and tested in `poudriere testport`.
Comment 1 commit-hook freebsd_committer freebsd_triage 2018-02-19 12:25:49 UTC
A commit references this bug:

Author: dbaio
Date: Mon Feb 19 12:24:51 UTC 2018
New revision: 462310
URL: https://svnweb.freebsd.org/changeset/ports/462310

Log:
  security/vuxml: Document multiple vulnerabilities in irc/irssi

  Security:	CVE-2018-7054
  Security:	CVE-2018-7053
  Security:	CVE-2018-7052
  Security:	CVE-2018-7051
  Security:	CVE-2018-7050

  PR:		226001
  Reported by:	tj@mrsk.me (email)
  Reported by:	David O'Rourke <dor.bsd@xm0.uk>

Changes:
  head/security/vuxml/vuln.xml
Comment 2 commit-hook freebsd_committer freebsd_triage 2018-02-19 12:29:54 UTC
A commit references this bug:

Author: dbaio
Date: Mon Feb 19 12:28:55 UTC 2018
New revision: 462311
URL: https://svnweb.freebsd.org/changeset/ports/462311

Log:
  irc/irssi: Update to 1.1.1, Fixes multiple vulnerabilities

  Changes:	https://irssi.org/NEWS/#v1-1-1

  PR:		226001
  Submitted by:	David O'Rourke <dor.bsd@xm0.uk> (maintainer)
  Reported by:	tj@mrsk.me (email)
  MFH:		2018Q1
  Security:	7afc5e56-156d-11e8-95f2-005056925db4

Changes:
  head/irc/irssi/Makefile
  head/irc/irssi/distinfo
Comment 3 commit-hook freebsd_committer freebsd_triage 2018-02-19 20:46:52 UTC
A commit references this bug:

Author: dbaio
Date: Mon Feb 19 20:45:57 UTC 2018
New revision: 462348
URL: https://svnweb.freebsd.org/changeset/ports/462348

Log:
  MFH: r460549 r462311

  Update irc/irssi to 1.1.0

  PR:		225196
  Submitted by:	David O'Rourke <dor.bsd@xm0.uk>

  irc/irssi: Update to 1.1.1, Fixes multiple vulnerabilities

  Changes:	https://irssi.org/NEWS/#v1-1-1

  PR:		226001
  Submitted by:	David O'Rourke <dor.bsd@xm0.uk> (maintainer)
  Reported by:	tj@mrsk.me (email)
  Security:	7afc5e56-156d-11e8-95f2-005056925db4

  Approved by:	ports-secteam (swills)

Changes:
_U  branches/2018Q1/
  branches/2018Q1/irc/irssi/Makefile
  branches/2018Q1/irc/irssi/distinfo
  branches/2018Q1/irc/irssi/files/patch-Makefile.in
  branches/2018Q1/irc/irssi/pkg-plist
Comment 4 Danilo G. Baio freebsd_committer freebsd_triage 2018-02-19 20:48:41 UTC
Committed, thanks!