Bug 249473 - www/tt-rss: Update to g20200919 (Fixes several security vulnerabilities)
Summary: www/tt-rss: Update to g20200919 (Fixes several security vulnerabilities)
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Many People
Assignee: freebsd-ports-bugs (Nobody)
URL:
Keywords: buildisok, needs-qa, security
Depends on: 249472
Blocks:
  Show dependency tree / graph
 
Reported: 2020-09-20 04:07 UTC by Derek Schrock
Modified: 2020-09-30 20:33 UTC (History)
2 users (show)

See Also:
dereks: merge-quarterly?

Attachments
Update to g20200919 05ef9aac2 (4.23 KB, patch)
2020-09-20 04:07 UTC, Derek Schrock 		dereks: maintainer-approval+
Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Derek Schrock 2020-09-20 04:07:29 UTC 
Created attachment 218101 [details]
Update to g20200919 05ef9aac2

- Update to g20200919 05ef9aac2
- Require filter module
- Security fixes [1][2]:
  - CVE-2020-25789 da5af2fae09
  - CVE-2020-25788 c3d14e1fa54
  - CVE-2020-25787 c3d14e1fa54
  - CVE-2016-6175 3588d5186e


portlint: ok. 2 expected warnings.
testport: ok. 12amd64.

vuxml created https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=249472
Comment 1 Automation User 2020-09-20 04:35:42 UTC 
Build info is available at https://gitlab.com/swills/freebsd-ports/pipelines/192092619
Comment 2 Thierry Thomas freebsd_committer freebsd_triage 2020-09-30 20:32:45 UTC 
Committed, thanks!
Comment 3 commit-hook freebsd_committer freebsd_triage 2020-09-30 20:33:11 UTC 
A commit references this bug:

Author: thierry
Date: Wed Sep 30 20:32:34 UTC 2020
New revision: 550748
URL: https://svnweb.freebsd.org/changeset/ports/550748

Log:
  - Update to g20200919 05ef9aac2
  - Require filter module
  - Security fixes [1][2]:
    - CVE-2020-25789 da5af2fae09
    - CVE-2020-25788 c3d14e1fa54
    - CVE-2020-25787 c3d14e1fa54
    - CVE-2016-6175 3588d5186e

  PR:		249473
  Submitted by:	Derek Schrock (maintainer)
  MFH:		1 day
  Security:	Several CVE.

Changes:
  head/www/tt-rss/Makefile
  head/www/tt-rss/distinfo
  head/www/tt-rss/pkg-plist