Created attachment 235177 [details] patch to 0.8.1 Update to the latest version. Includes various bugfixes and secutity fixes. Changelog : https://github.com/LDAPAccountManager/lam/releases/tag/lam_7_9_1 https://github.com/LDAPAccountManager/lam/releases/tag/lam_8_0 https://github.com/LDAPAccountManager/lam/releases/tag/lam_8_0_1 Security advisories: https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-f2fr-cccr-583v https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-r387-grjx-qgvw https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-q8g5-45m4-q95p https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-q9pc-x84w-982x https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-wxf8-9x99-6gp4 https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-6m3q-5c84-6h6j
Hi, 1. formating fix (portfmt): --- +RUN_DEPENDS= p5-perl-ldap>=0:net/p5-perl-ldap \ + p5-Quota>=0:sysutils/p5-Quota -RUN_DEPENDS= p5-Quota>=0:sysutils/p5-Quota p5-perl-ldap>=0:net/p5-perl-ldap USES= perl5 php:web tar:bzip2 +USE_PHP= curl filter gd gettext gmp hash iconv json ldap mbstring \ + openssl pcre session simplexml xml xmlreader xmlwriter zip -USE_PHP= curl gd filter gettext gmp hash iconv json ldap mbstring openssl \ - pcre session simplexml xml xmlreader xmlwriter zip WWWDIR= ${PREFIX}/www/${SHORTNAME} NO_ARCH= yes @@ -20,12 +21,13 @@ NO_BUILD= yes SHORTNAME= lam +PORTDOCS= COPYING HISTORY README copyright docs +LAMDATA= config graphics help lib locale sess style templates tmp \ + VERSION index.html pwa_worker.js .htaccess -PORTDOCS= docs COPYING HISTORY README copyright -LAMDATA= config graphics help lib locale sess style templates tmp VERSION index.html pwa_worker.js .htaccess WRITEABLES= config sess tmp +OPTIONS_DEFINE+= DOCS +OPTIONS_DEFAULT= DOCS -OPTIONS_DEFINE+=DOCS -OPTIONS_DEFAULT=DOCS ---
Created attachment 235199 [details] patch to 0.8.1 (v2) Updated the patch based on @eduardo's remarks. Thanks
A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=c05334ae5e9feea7a2bd2dd32060a6c46c12cfee commit c05334ae5e9feea7a2bd2dd32060a6c46c12cfee Author: Geraud <geraud@gcu.info> AuthorDate: 2022-07-12 07:00:52 +0000 Commit: Nuno Teixeira <eduardo@FreeBSD.org> CommitDate: 2022-07-12 07:00:52 +0000 sysutils/ldap-account-manager: Update to 8.0.1 - switch to DISTVERSION - pet portclippy - pet portfmt Changelog : https://github.com/LDAPAccountManager/lam/releases/tag/lam_7_9_1 https://github.com/LDAPAccountManager/lam/releases/tag/lam_8_0 https://github.com/LDAPAccountManager/lam/releases/tag/lam_8_0_1 Security advisories: https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-f2fr-cccr-583v https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-r387-grjx-qgvw https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-q8g5-45m4-q95p https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-q9pc-x84w-982x https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-wxf8-9x99-6gp4 https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-6m3q-5c84-6h6j PR: 265140 sysutils/ldap-account-manager/Makefile | 18 ++++++++++-------- sysutils/ldap-account-manager/distinfo | 4 ++-- 2 files changed, 12 insertions(+), 10 deletions(-)
I committed without maintainer approval. Waiting for his reply about this commit.
Hello, The vulnerabilities addressed in the 8.0 release have been assigned a CVE id : CVE-2022-31087 Thus, shouldn't the update be pushed to the QUARTERLY branch as well? Sorry if I overstep, but I just wanted to be sure that I didn't forget anything. Thanks,
A commit in branch 2022Q3 references this bug: URL: https://cgit.FreeBSD.org/ports/commit/?id=7da38396585dbc1835f905d3e6a8ee9eb7f05c4e commit 7da38396585dbc1835f905d3e6a8ee9eb7f05c4e Author: Geraud <geraud@gcu.info> AuthorDate: 2022-07-12 07:00:52 +0000 Commit: Nuno Teixeira <eduardo@FreeBSD.org> CommitDate: 2022-07-18 07:34:18 +0000 sysutils/ldap-account-manager: Update to 8.0.1 - switch to DISTVERSION - pet portclippy - pet portfmt Changelog : https://github.com/LDAPAccountManager/lam/releases/tag/lam_7_9_1 https://github.com/LDAPAccountManager/lam/releases/tag/lam_8_0 https://github.com/LDAPAccountManager/lam/releases/tag/lam_8_0_1 Security advisories: https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-f2fr-cccr-583v https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-r387-grjx-qgvw https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-q8g5-45m4-q95p https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-q9pc-x84w-982x https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-wxf8-9x99-6gp4 https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-6m3q-5c84-6h6j PR: 265140 (cherry picked from commit c05334ae5e9feea7a2bd2dd32060a6c46c12cfee) sysutils/ldap-account-manager/Makefile | 18 ++++++++++-------- sysutils/ldap-account-manager/distinfo | 4 ++-- 2 files changed, 12 insertions(+), 10 deletions(-)
Committed, thanks!