Bug 275073 - www/typo3-11: Update to 11.5.33
Summary: www/typo3-11: Update to 11.5.33
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Many People
Assignee: Fernando Apesteguía
URL: https://typo3.org/article/typo3-1248-...
Keywords:
Depends on:
Blocks:
 
Reported: 2023-11-14 11:48 UTC by Helmut Ritter
Modified: 2023-11-15 15:26 UTC (History)
2 users (show)

See Also:
fernape: merge-quarterly+


Attachments
Update to 11.5.33 (838 bytes, patch)
2023-11-14 11:48 UTC, Helmut Ritter
freebsd-ports: maintainer-approval+
Details | Diff
Poudriere Log (24.29 KB, text/plain)
2023-11-14 11:48 UTC, Helmut Ritter
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Helmut Ritter 2023-11-14 11:48:16 UTC
All versions are security releases and contain important security fixes - read the corresponding security advisories here:

https://typo3.org/security/advisory/typo3-core-sa-2023-005
https://typo3.org/security/advisory/typo3-core-sa-2023-006
https://typo3.org/security/advisory/typo3-core-sa-2023-007

For details about the releases, please see:

https://typo3.org/article/typo3-1248-and-11533-security-releases-published
Comment 1 Helmut Ritter 2023-11-14 11:48:23 UTC
Created attachment 246300 [details]
Update to 11.5.33
Comment 2 Helmut Ritter 2023-11-14 11:48:27 UTC
Created attachment 246301 [details]
Poudriere Log
Comment 3 commit-hook freebsd_committer freebsd_triage 2023-11-15 14:46:09 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=9f2b97cf900250ac7f00b93fdd9a0904e9ecffaf

commit 9f2b97cf900250ac7f00b93fdd9a0904e9ecffaf
Author:     Fernando Apesteguía <fernape@FreeBSD.org>
AuthorDate: 2023-11-15 13:22:57 +0000
Commit:     Fernando Apesteguía <fernape@FreeBSD.org>
CommitDate: 2023-11-15 14:44:30 +0000

    security/vuxml: Record typo3-1{12} vulnerabilities

    PR: 275073 275074

 security/vuxml/vuln/2023.xml | 56 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 56 insertions(+)
Comment 4 commit-hook freebsd_committer freebsd_triage 2023-11-15 14:47:10 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=9fffabc6ab8c8573fa4b2cb91dc58804ff16cccd

commit 9fffabc6ab8c8573fa4b2cb91dc58804ff16cccd
Author:     Helmut Ritter <freebsd-ports@charlieroot.de>
AuthorDate: 2023-11-15 09:04:07 +0000
Commit:     Fernando Apesteguía <fernape@FreeBSD.org>
CommitDate: 2023-11-15 14:45:51 +0000

    www/typo3-11: Update to 11.5.33

    ChangeLog:
    https://typo3.org/article/typo3-1248-and-11533-security-releases-published

    Fixes three security issues:

    * CVE-2023-47125
            * Base Score:   4.7 MEDIUM
            * Vector:       CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
    * CVE-2023-47126
            * Base Score:   3.7 LOW
            * Vector:       CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
    * CVE-2023-47127
            * Base Score:   4.2 MEDIUM
            * Vector:       CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

    PR:             275073
    Reported by:    freebsd-ports@charlieroot.de (maintainer)
    MFH:            2023Q4 (Security fixes)
    Security:       CVE-2023-47125 CVE-2023-47126 CVE-2023-47127

 www/typo3-11/Makefile | 2 +-
 www/typo3-11/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 5 commit-hook freebsd_committer freebsd_triage 2023-11-15 14:51:11 UTC
A commit in branch 2023Q4 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=ee7a56ffed71ca16b800fe217d0841cb13fb48b3

commit ee7a56ffed71ca16b800fe217d0841cb13fb48b3
Author:     Helmut Ritter <freebsd-ports@charlieroot.de>
AuthorDate: 2023-11-15 09:04:07 +0000
Commit:     Fernando Apesteguía <fernape@FreeBSD.org>
CommitDate: 2023-11-15 14:49:54 +0000

    www/typo3-11: Update to 11.5.33

    ChangeLog:
    https://typo3.org/article/typo3-1248-and-11533-security-releases-published

    Fixes three security issues:

    * CVE-2023-47125
            * Base Score:   4.7 MEDIUM
            * Vector:       CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
    * CVE-2023-47126
            * Base Score:   3.7 LOW
            * Vector:       CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
    * CVE-2023-47127
            * Base Score:   4.2 MEDIUM
            * Vector:       CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

    PR:             275073
    Reported by:    freebsd-ports@charlieroot.de (maintainer)
    MFH:            2023Q4 (Security fixes)
    Security:       CVE-2023-47125 CVE-2023-47126 CVE-2023-47127

    (cherry picked from commit 9fffabc6ab8c8573fa4b2cb91dc58804ff16cccd)

 www/typo3-11/Makefile | 2 +-
 www/typo3-11/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 6 Fernando Apesteguía freebsd_committer freebsd_triage 2023-11-15 15:26:31 UTC
Committed,

Thanks!