Created attachment 208255 [details] patch testbuilds are fine. CVE-2019-2389, CVE-2019-2390, CVE-2019-2386 similar to the fixes for -34 and 36. TODO: check if vuxml entry needs to include 40
A commit references this bug: Author: pi Date: Sat Oct 12 10:33:00 UTC 2019 New revision: 514327 URL: https://svnweb.freebsd.org/changeset/ports/514327 Log: databases/mongodb40: upgrade 4.0.8 -> 4.0.12 PR: 241210 Approved by: Andrew Shevchuk <dev.ashevchuk@gmail.com> (maintainer) MFH: 2019Q4 Relnotes: https://docs.mongodb.com/manual/release-notes/4.0/ Security: CVE-2019-2386, CVE-2019-2389, CVE-2019-2390 Changes: head/databases/mongodb40/Makefile head/databases/mongodb40/distinfo head/databases/mongodb40/files/patch-boost-1.67
A commit references this bug: Author: pi Date: Sat Oct 12 10:34:45 UTC 2019 New revision: 514328 URL: https://svnweb.freebsd.org/changeset/ports/514328 Log: MFH: r514327 databases/mongodb40: upgrade 4.0.8 -> 4.0.12 PR: 241210 Approved by: Andrew Shevchuk <dev.ashevchuk@gmail.com> (maintainer) Relnotes: https://docs.mongodb.com/manual/release-notes/4.0/ Security: CVE-2019-2386, CVE-2019-2389, CVE-2019-2390 Approved by: ports-secteam (miwi, implicit) Changes: _U branches/2019Q4/ branches/2019Q4/databases/mongodb40/Makefile branches/2019Q4/databases/mongodb40/distinfo branches/2019Q4/databases/mongodb40/files/patch-boost-1.67
Thanks!
(checked: vuxml is fine)